scan log of virus (smart scuraty)

Scan LogVersion of virus signature database: 5461 (20100919)

Date: 9/19/2010 Time: 10:30:25 PMScanned disks, folders and files: Operating memory;C:\Boot sector;C:\;D:\Boot

sector;D:\;E:\Boot sector;E\:C:\Users\samar\AppData\Local\Temp\svchost.com » AUTOIT » script.au3 - probably

a variant of Win32/AutoRun.Autoit.BU wormC:\Users\samar\AppData\Roaming\Microsoft\Windows\cftmon.exe » AUTOIT »

script.au3 - probably a variant of Win32/AutoRun.Autoit.BU wormC:\hiberfil.sys - error opening [4]

C:\pagefile.sys - error opening [4]C:\HP\BIN\BlockTracker.py » MIME - is OK (internal scanning not performed)

C:\Program Files\Common Files\LightScribe\LS_HSI.msi » MSI » Data1.cab » CAB » getting_started.mht1 » MIME - is OK (internal scanning not performed)
























C:\Program Files\DigitalPersona\Bin\FirefoxExt\chrome.manifest » MIME - is OK (internal scanning not performed)

C:\Program Files\HP\Digital Imaging\smart web printing\MozillaAddOn3\xre\chrome\toolkit.manifest » MIME - is OK (internal scanning not performed)

C:\Program Files\Internet Download Manager\idmmzcc.xpi » ZIP » chrome.manifest » MIME - is OK (internal scanning not performed)

C:\Program Files\Java\jre6\lib\deploy\jqs\ff\chrome.manifest » MIME - is OK (internal scanning not performed)

C:\Program Files\Microsoft Office\Office12\Groove(306)\ToolData\groove.net\GrooveForms\FormsTemplates\Hiring Requisition - Customized.fdt » MIME - is OK

(internal scanning not performed)C:\Program Files\Microsoft Office\Office12\Groove(306)\ToolData\groove.net\GrooveForms\FormsTemplates\Hiring Requisition.fdt » MIME - is OK (internal

scanning not performed)C:\Program Files\Microsoft Office\Office12\Groove(306)\ToolData\groove.net\

GrooveForms\FormsTemplates\POLICIES.FDT » MIME - is OK (internal scanning not performed)

C:\Program Files\Microsoft Office\Office12\Groove(306)\ToolData\groove.net\GrooveForms\FormsTemplates\Process Library.fdt » MIME - is OK (internal

scanning not performed)C:\Program Files\Microsoft Office\Office12\Groove(306)\ToolData\groove.net\

GrooveForms\FormsTemplates\Track Issues.fdt » MIME - is OK (internal scanning not performed)

C:\Program Files\Real\RealArcade\MozillaBrowserPlugin.exe » NSIS - bad archiveC:\Program Files\Real\RealArcade\Plugins\Mozilla\MozillaPluginUninstaller.exe »

NSIS - bad archiveC:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\

497c463c6d0c91c1a68b118e9017f940_7900008c-7e72-4039-8546-1ca087e3e783 - error opening [4]

C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\9e17020976b492f7b38ca14e61cae363_7900008c-7e72-4039-8546-1ca087e3e783 -

error opening [4]C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\

e788fd4e255436a700b78352d398810f_7900008c-7e72-4039-8546-1ca087e3e783 - error opening [4]

C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\edd7fe0eac16818e3a5187122756a8f8_7900008c-7e72-4039-8546-1ca087e3e783 -

error opening [4]C:\ProgramData\Microsoft\Search Enhancement Pack\SeaPort\SeaNote.cab - error

opening [4]

C:\ProgramData\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.cab - error opening [4]

C:\ProgramData\Microsoft\Search Enhancement Pack\SeaPort\SearchBoxExt.cab - error opening [4]

C:\ProgramData\Microsoft\Search Enhancement Pack\SeaPort\SHelper.cab - error opening [4]

C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext\chrome.manifest » MIME - is OK (internal scanning not performed)

C:\ProgramData\WildTangent\134726E5-0682-43C5-8AA2-DD4D6A866DD4-extr.exe » NSIS » eula.txt » MIME - is OK (internal scanning not performed)

C:\ProgramData\WildTangent\A4B598D2-9BFF-456F-A667-D3B8A0849286-extr.exe » NSIS » eula.txt » MIME - is OK (internal scanning not performed)

C:\ProgramData\WildTangent\BC3D43F7-BC64-490D-92B5-D2AABEC7FA85-extr.exe » NSIS » eula.txt » MIME - is OK (internal scanning not performed)

C:\ProgramData\WildTangent\C8DEFEB5-AFE9-48D0-A9E6-355F537F0BAD-extr.exe » NSIS » Slingo Download License.txt » MIME - is OK (internal scanning

not performed)C:\ProgramData\WildTangent\My HP Game Console\Downloads\en\Installers\

bornintodarkness-setup.exe_cache » NSIS - archive damagedC:\ProgramData\{174892B1-CBE7-44F5-86FF-AB555EFD73A3}\Microsoft Office

Activation Assistant.res » 7ZIP » translations.Slovenian - error - unknown compression method

C:\ProgramData\{174892B1-CBE7-44F5-86FF-AB555EFD73A3}\Microsoft Office Activation Assistant.res » 7ZIP » translations.Spanish - error - unknown compression

method C:\ProgramData\{174892B1-CBE7-44F5-86FF-AB555EFD73A3}\Microsoft Office

Activation Assistant.res » 7ZIP » translations.Swedish - error - unknown compression method

C:\ProgramData\{174892B1-CBE7-44F5-86FF-AB555EFD73A3}\Microsoft Office Activation Assistant.res » 7ZIP » translations.Vietnamese - error - unknown

compression method C:\ProgramData\{174892B1-CBE7-44F5-86FF-AB555EFD73A3}\Microsoft Office

Activation Assistant.res » 7ZIP » welcome.dfm - error - unknown compression method

C:\ProgramData\{174892B1-CBE7-44F5-86FF-AB555EFD73A3}\Microsoft Office Activation Assistant.res » 7ZIP » wizard.dfm - error - unknown compression method C:\ProgramData\{174892B1-CBE7-44F5-86FF-AB555EFD73A3}\Microsoft Office

Activation Assistant.res » 7ZIP » mMSIExec.dll - error - unknown compression method

C:\SwSetup\CyberDVD\Stage1\Suite.msi » MSI » ISSetupFile.SetupFile10 » MIME - is OK (internal scanning not performed)


C:\SwSetup\CyberDVD\Stage1\LPrint\LabelPrint.msi » MSI » ISSetupFile.SetupFile33 » MIME - is OK (internal scanning not performed)


C:\SwSetup\CyberDVD\Stage1\P2Go\Power2Go.msi » MSI » ISSetupFile.SetupFile22 » MIME - is OK (internal scanning not performed)


C:\SwSetup\CyberDVD\Stage1\PDIR\PowerDirector.msi » MSI » ISSetupFile.SetupFile15 » MIME - is OK (internal scanning not performed)


C:\SwSetup\CyberDVD\Stage1\PStarter\PowerStarter.msi » MSI » ISSetupFile.SetupFile7 » MIME - is OK (internal scanning not performed)










C:\SwSetup\CyberDVD\Stage2\PhotoNow\PhotoNow.msi » MSI » ISSetupFile.SetupFile3 » MIME - is OK (internal scanning not performed)

C:\SwSetup\CyberDVD\Stage2\PhotoNow\PhotoNow.msi » MSI » ISSetupFile.SetupFile4 » MIME - is OK (internal scanning not performed)



C:\SwSetup\Drivers\BTooth\Win32\Data1.cab » CAB » _140D830365224D16A6CD07B39AD8D3FD » MIME - is OK (internal scanning not

performed)C:\SwSetup\Drivers\BTooth\Win32\Data1.cab » CAB »

_40939D62D39F4CB6AEDDF9A6A0DDF91A » MIME - is OK (internal scanning not performed)

C:\SwSetup\Drivers\BTooth\Win32\Data1.cab » CAB » _2D784862749D4FFE804422234E4D89F4 » MIME - is OK (internal scanning not

performed)C:\SwSetup\Drivers\BTooth\Win64\Data1.cab » CAB »

_11F225A9664747E7B5E79E125EB16802 » MIME - is OK (internal scanning not performed)

C:\SwSetup\Drivers\BTooth\Win64\Data1.cab » CAB » _432A27864EFC4C5FB2C0516EDBFFD12C » MIME - is OK (internal scanning not

performed)

C:\SwSetup\Drivers\BTooth\Win64\Data1.cab » CAB » _45432DE67AB84789BF5833CE7D823999 » MIME - is OK (internal scanning not

performed)C:\SwSetup\Drivers\Chipset\Lang\CHIP\ESP\license.txt » MIME - is OK (internal

scanning not performed)C:\SwSetup\Drivers\Chipset\Lang\CHIP\ITA\license.txt » MIME - is OK (internal

scanning not performed)C:\SwSetup\Drivers\Chipset\Lang\CHIP\PTB\license.txt » MIME - is OK (internal

scanning not performed)C:\SwSetup\Drivers\Chipset\Lang\CHIP\PTG\license.txt » MIME - is OK (internal

scanning not performed)C:\SwSetup\MSDVD\MediaSmart DVD.msi » MSI » ISSetupFile.SetupFile15 »

MIME - is OK (internal scanning not performed)C:\SwSetup\MSDVD\MediaSmart DVD.msi » MSI » ISSetupFile.SetupFile17 »

MIME - is OK (internal scanning not performed)C:\SwSetup\MSMVP\HP.msi » MSI » ISSetupFile.SetupFile15 » MIME - is OK

(internal scanning not performed)C:\SwSetup\MSMVP\HP.msi » MSI » ISSetupFile.SetupFile17 » MIME - is OK

(internal scanning not performed)C:\SwSetup\MSTV\MediaSmart TV.msi » MSI » ISSetupFile.SetupFile15 » MIME -

is OK (internal scanning not performed)C:\SwSetup\MSTV\MediaSmart TV.msi » MSI » ISSetupFile.SetupFile17 » MIME -

is OK (internal scanning not performed)C:\SwSetup\MSWebcam\HP.msi » MSI » ISSetupFile.SetupFile12 » MIME - is OK

(internal scanning not performed)C:\SwSetup\MSWebcam\HP.msi » MSI » ISSetupFile.SetupFile13 » MIME - is OK

(internal scanning not performed)C:\SwSetup\Off12\US\HSTrialKit07\Microsoft Office Activation Assistant.exe »

7ZIP » data/OFFLINE/IFSECOTH07CRATATNABUDTTAEDFFFF0/hu/tab_2_on.png »

7ZIP » translations.Slovenian - error - unknown compression method C:\SwSetup\Off12\US\HSTrialKit07\Microsoft Office Activation Assistant.exe »


7ZIP » translations.Spanish - error - unknown compression method C:\SwSetup\Off12\US\HSTrialKit07\Microsoft Office Activation Assistant.exe »


7ZIP » translations.Swedish - error - unknown compression method C:\SwSetup\Off12\US\HSTrialKit07\Microsoft Office Activation Assistant.exe »


7ZIP » translations.Vietnamese - error - unknown compression method C:\SwSetup\Off12\US\HSTrialKit07\Microsoft Office Activation Assistant.exe »


7ZIP » welcome.dfm - error - unknown compression method C:\SwSetup\Off12\US\HSTrialKit07\Microsoft Office Activation Assistant.exe »

7ZIP »

data/OFFLINE/IFSECOTH07CRATATNABUDTTAEDFFFF0/hu/tab_2_on.png » 7ZIP » wizard.dfm - error - unknown compression method

C:\SwSetup\Off12\US\HSTrialKit07\Microsoft Office Activation Assistant.exe » 7ZIP »

data/OFFLINE/IFSECOTH07CRATATNABUDTTAEDFFFF0/hu/tab_2_on.png » 7ZIP » mMSIExec.dll - error - unknown compression method

C:\SwSetup\Off12\US\HSTrialKit07\Microsoft Office Activation Assistant.exe » 7ZIP »

data/OFFLINE/IFSECOTH07CRATATNABUDTTAEDFFFF0/el/resources.xml - error - unknown compression method

C:\SwSetup\SunJava\Setup.exe » CAB » core.zip » ZIP » lib/deploy/ffjcext.zip » ZIP » {CAFEEFAC-0016-0000-0012-ABCDEFFEDCBA}/chrome.manifest » MIME - is

OK (internal scanning not performed)C:\SwSetup\SunJava\Setup.exe » CAB » core.zip » ZIP »

lib/deploy/jqs/ff/chrome.manifest » MIME - is OK (internal scanning not performed)C:\SwSetup\SunJava\Setup.exe » CAB » core.zip » ZIP » lib/resources.jar » ZIP »

com/sun/org/apache/xerces/internal/impl/msg/XIncludeMessages.properties » MIME - is OK (internal scanning not performed)

C:\SwSetup\SunJava\Setup.exe » CAB » core.zip » ZIP » lib/resources.jar » ZIP » com/sun/xml/internal/fastinfoset/resources/ResourceBundle.properties » MIME - is

OK (internal scanning not performed)C:\SwSetup\SunJava\Setup.exe » CAB » core.zip » ZIP » lib/resources.jar » ZIP »

javax/xml/bind/Messages.properties » MIME - is OK (internal scanning not performed)

C:\System.sav\Logs\QFEOff\Windows6.0-KB938371-v2-x86.log.txt - error opening [4]

C:\System.sav\Logs\QFEOff\WINDOWS6.0-KB938464-X86.log.txt - error opening [4]



C:\System.sav\Logs\QFEOff\Windows6.0-KB942567-x86.log.txt - error opening [4]C:\System.sav\Logs\QFEOff\Windows6.0-KB946084-x86.log.txt - error opening [4]C:\System.sav\Logs\QFEOff\WINDOWS6.0-KB947562-X86.log.txt - error opening

[4]C:\System.sav\Logs\QFEOff\WINDOWS6.0-KB947864-X86.log.txt - error opening

[4]C:\System.sav\Logs\QFEOff\Windows6.0-KB947880-x86.log.txt - error opening [4]C:\System.sav\Logs\QFEOff\WINDOWS6.0-KB948881-X86.log.txt - error opening





[4]











C:\System.sav\Logs\QFEOff\Windows6.0-KB953026-x86.log.txt - error opening [4]C:\System.sav\Logs\QFEOff\WINDOWS6.0-KB953155-X86.log.txt - error opening

[4]C:\System.sav\Logs\QFEOff\Windows6.0-KB953270-x86.log.txt - error opening [4]C:\System.sav\Logs\QFEOff\Windows6.0-KB953689-x86.log.txt - error opening [4]C:\System.sav\Logs\QFEOff\WINDOWS6.0-KB953733-X86.log.txt - error opening












[4]






C:\System.sav\Logs\QFEOff\Windows6.0-KB957523-x86.log.txt - error opening [4]C:\System.sav\Logs\QFEOff\Windows6.0-KB957526-x86.log.txt - error opening [4]C:\System.sav\Logs\QFEOff\Windows6.0-KB958018-x86.log.txt - error opening [4]C:\System.sav\Logs\QFEOff\Windows6.0-KB958215-x86.log.txt - error opening [4]C:\System.sav\Logs\QFEOff\WINDOWS6.0-KB958623-X86.log.txt - error opening












[4]C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\

497c463c6d0c91c1a68b118e9017f940_7900008c-7e72-4039-8546-1ca087e3e783 - error opening [4]

C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\9e17020976b492f7b38ca14e61cae363_7900008c-7e72-4039-8546-1ca087e3e783 -

error opening [4]C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\

e788fd4e255436a700b78352d398810f_7900008c-7e72-4039-8546-1ca087e3e783 - error opening [4]

C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\edd7fe0eac16818e3a5187122756a8f8_7900008c-7e72-4039-8546-1ca087e3e783 -

error opening [4]C:\Users\All Users\Microsoft\Search Enhancement Pack\SeaPort\SeaNote.cab - error

opening [4]C:\Users\All Users\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.cab - error

opening [4]C:\Users\All Users\Microsoft\Search Enhancement Pack\SeaPort\SearchBoxExt.cab -

error opening [4]C:\Users\All Users\Microsoft\Search Enhancement Pack\SeaPort\SHelper.cab - error

opening [4]C:\Users\All Users\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext\

chrome.manifest » MIME - is OK (internal scanning not performed)C:\Users\All Users\WildTangent\134726E5-0682-43C5-8AA2-DD4D6A866DD4-

extr.exe » NSIS » eula.txt » MIME - is OK (internal scanning not performed)C:\Users\All Users\WildTangent\A4B598D2-9BFF-456F-A667-D3B8A0849286-

extr.exe » NSIS » eula.txt » MIME - is OK (internal scanning not performed)C:\Users\All Users\WildTangent\BC3D43F7-BC64-490D-92B5-D2AABEC7FA85-

extr.exe » NSIS » eula.txt » MIME - is OK (internal scanning not performed)C:\Users\All Users\WildTangent\C8DEFEB5-AFE9-48D0-A9E6-355F537F0BAD-extr.exe » NSIS » Slingo Download License.txt » MIME - is OK (internal scanning

not performed)C:\Users\All Users\WildTangent\My HP Game Console\Downloads\en\Installers\

bornintodarkness-setup.exe_cache » NSIS - archive damagedC:\Users\All Users\{174892B1-CBE7-44F5-86FF-AB555EFD73A3}\Microsoft

Office Activation Assistant.res » 7ZIP » translations.Slovenian - error - unknown compression method

C:\Users\All Users\{174892B1-CBE7-44F5-86FF-AB555EFD73A3}\Microsoft Office Activation Assistant.res » 7ZIP » translations.Spanish - error - unknown

compression method C:\Users\All Users\{174892B1-CBE7-44F5-86FF-AB555EFD73A3}\Microsoft Office Activation Assistant.res » 7ZIP » translations.Swedish - error - unknown

compression method C:\Users\All Users\{174892B1-CBE7-44F5-86FF-AB555EFD73A3}\Microsoft

Office Activation Assistant.res » 7ZIP » translations.Vietnamese - error - unknown compression method

C:\Users\All Users\{174892B1-CBE7-44F5-86FF-AB555EFD73A3}\Microsoft Office Activation Assistant.res » 7ZIP » welcome.dfm - error - unknown compression

method C:\Users\All Users\{174892B1-CBE7-44F5-86FF-AB555EFD73A3}\Microsoft

Office Activation Assistant.res » 7ZIP » wizard.dfm - error - unknown compression method

C:\Users\All Users\{174892B1-CBE7-44F5-86FF-AB555EFD73A3}\Microsoft Office Activation Assistant.res » 7ZIP » mMSIExec.dll - error - unknown

compression method C:\Users\samar\AppData\Local\Microsoft\Windows\Temporary Internet Files\

Low(628)\Content.IE5\4M0SNJWW\MyEgy.Com.Naruto.SH.By.Dr.MiDo.part1[1].rar » RAR »

MyEgy.Com.Naruto.SH.By.Dr.MiDo\MyEgy.Com.Naruto.70.By.Dr.MiDo.rmvb - archive damaged

C:\Users\samar\AppData\Local\Temp\setup.exe » AUTOIT » script.au3 - probably a variant of Win32/AutoRun.Autoit.BU worm

C:\Users\samar\AppData\Local\Temp\svchost.com » AUTOIT » script.au3 - probably a variant of Win32/AutoRun.Autoit.BU worm

C:\Users\samar\AppData\Local\Temp\$RECYCLE(57).BIN\{5F229C11-5039-40E4-8537-6950BB1C9ECC}\crump.dat » AUTOIT » script.au3 - probably a variant of

Win32/AutoRun.Autoit.BU wormC:\Users\samar\AppData\Local\Temp\$RECYCLE.BIN\{5F229C11-5039-40E4-

8537-6950BB1C9ECC}\crump.dat » AUTOIT » script.au3 - probably a variant of Win32/AutoRun.Autoit.BU worm

C:\Users\samar\AppData\Local\Temp\scr\ssBranded.exe » AUTOIT » script.au3 - probably a variant of Win32/AutoRun.Autoit.BU worm

C:\Users\samar\AppData\Local\VirtualStore\Program Files\Mozilla Firefox\extensions\{9CE11043-9A15-4207-A565-0C94C42D590D}\chrome.manifest »

MIME - is OK (internal scanning not performed)C:\Users\samar\AppData\Roaming\Help\cliconf.chm » AUTOIT » script.au3 -

probably a variant of Win32/AutoRun.Autoit.BU wormC:\Users\samar\AppData\Roaming\IDM\idmmzcc3\chrome.manifest » MIME - is OK

(internal scanning not performed)C:\Users\samar\AppData\Roaming\Microsoft\Windows\cftmon.exe » AUTOIT »

script.au3 - probably a variant of Win32/AutoRun.Autoit.BU wormC:\Users\samar\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\

Startup\sndvol32.exe » AUTOIT » script.au3 - probably a variant of Win32/AutoRun.Autoit.BU worm

C:\Users\samar\AppData\Roaming\Microsoft\Windows\Templates\cache\SFCsrvc.pif » AUTOIT » script.au3 - probably a variant of Win32/AutoRun.Autoit.BU worm

C:\Users\samar\AppData\Roaming\Microsoft\Windows\Templates\cache\$RECYCLE.BIN\{5F229C11-5039-40E4-8537-6950BB1C9ECC}\crump.dat » AUTOIT » script.au3 - probably a variant of Win32/AutoRun.Autoit.BU worm

C:\Users\samar\AppData\Roaming\SystemProc\lsass.exe » AUTOIT » script.au3 - probably a variant of Win32/AutoRun.Autoit.BU worm

C:\Users\samar\AppData\Roaming\SystemProc\lsass.exe.backup.backup.backup.backup.backup.backup.backup.backup.backup.backu

p.backup.backup » AUTOIT » script.au3 - probably a variant of Win32/AutoRun.Autoit.BU worm

C:\Users\samar\Downloads\Killers.2010.Bluray.MyEgy.CpM.nOOr.part1.rar » RAR » Killers.2010.Bluray.MyEgy.CpM.nOOr.rmvb - next archive volume not found

C:\Users\samar\Downloads\MyEgy.CoM.Alice_In_Wonderland_2010_TS_V2_Near_DvD.part1.rar » RAR »

MyEgy.CoM.Alice In Wonderland 2010 TS V2 Near DvD.rmvb - archive damagedC:\Users\samar\Downloads\MyEgY.CoM.Splice.2010.R5.JustAhum_n.part1.rar »

RAR » [email protected] - next archive volume not found

C:\Users\samar\Downloads\semoor.exe » WISE » DapLang.cab » CAB » chrome.manifest » MIME - is OK (internal scanning not performed)

C:\Users\samar\Downloads\Programs\music_maker_16_172mb_us.exe » ZIP » product\Sey_puoc.cab » CAB » _tsymbolbutton.ini_731xxm_uk1gea7rrierjal »

MIME - is OK (internal scanning not performed)C:\Windows\bthservsdp.dat - error opening [4]

C:\Windows\Installer\266776.msi » MSI » ISSetupFile.SetupFile13 » MIME - is OK (internal scanning not performed)


C:\Windows\Installer\26677a.msi » MSI » ISSetupFile.SetupFile33 » MIME - is OK (internal scanning not performed)

C:\Windows\Installer\26677a.msi » MSI » ISSetupFile.SetupFile37 » MIME - is OK (internal scanning not performed)

C:\Windows\Installer\26677e.msi » MSI » ISSetupFile.SetupFile22 » MIME - is OK (internal scanning not performed)

C:\Windows\Installer\26677e.msi » MSI » ISSetupFile.SetupFile25 » MIME - is OK (internal scanning not performed)





C:\Windows\Installer\2aa2d.msi » MSI » ISSetupFile.SetupFile15 » MIME - is OK (internal scanning not performed)

C:\Windows\Installer\2aa2d.msi » MSI » ISSetupFile.SetupFile17 » MIME - is OK (internal scanning not performed)

C:\Windows\Installer\2aa31.msi » MSI » ISSetupFile.SetupFile15 » MIME - is OK (internal scanning not performed)






C:\Windows\Installer\2aa3c.msi » MSI » ISSetupFile.SetupFile13 » MIME - is OK (internal scanning not performed)

C:\Windows\Installer\2aa3c.msi » MSI » ISSetupFile.SetupFile12 » MIME - is OK (internal scanning not performed)



C:\Windows\Installer\2aa4a.msi » MSI » ISSetupFile.SetupFile33 » MIME - is OK (internal scanning not performed)

C:\Windows\Installer\2aa4a.msi » MSI » ISSetupFile.SetupFile37 » MIME - is OK (internal scanning not performed)

C:\Windows\Installer\2aa4e.msi » MSI » ISSetupFile.SetupFile22 » MIME - is OK (internal scanning not performed)

C:\Windows\Installer\2aa4e.msi » MSI » ISSetupFile.SetupFile25 » MIME - is OK (internal scanning not performed)





C:\Windows\Installer\$PatchCache$\Managed\26DDC2EC4210AC63483DF9D4FCC5B59D\3.5.30729\

Chrome_manifest.3643236F_FC70_11D3_A536_0090278A1BB8 » MIME - is OK (internal scanning not performed)

C:\Windows\Logs\CBS\CBS.log - error opening [4]C:\Windows\Logs\CBS\CBS.persist.log - error opening [4]

C:\Windows\Logs\DPX\setupact.log - error opening [4]C:\Windows\Logs\DPX\setuperr.log - error opening [4]

C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe.config - error opening [4]

C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\chrome.manifest » MIME - is OK (internal scanning not

performed)C:\Windows\panther\diagerr.xml - error opening [4]

C:\Windows\panther\diagwrn.xml - error opening [4]C:\Windows\panther\setupact.log - error opening [4]C:\Windows\panther\setuperr.log - error opening [4]

C:\Windows\panther\UnattendGC\diagerr.xml - error opening [4]C:\Windows\panther\UnattendGC\diagwrn.xml - error opening [4]C:\Windows\panther\UnattendGC\setupact.log - error opening [4]C:\Windows\panther\UnattendGC\setuperr.log - error opening [4]

C:\Windows\security\database\secedit.sdb - error opening [4]C:\Windows\System32\LogFiles\Firewall\pfirewall.log - error opening [4]

C:\Windows\System32\LogFiles\Firewall\pfirewall.log.old - error opening [4]C:\Windows\System32\restore\MachineGuid.txt - error opening [4]

C:\Windows\System32\sysprep\Panther\diagerr.xml - error opening [4]C:\Windows\System32\sysprep\Panther\diagwrn.xml - error opening [4]C:\Windows\System32\sysprep\Panther\setupact.log - error opening [4]C:\Windows\System32\sysprep\Panther\setuperr.log - error opening [4]

C:\Windows\System32\wbem\AutoRecover\0332A97878022BD4B34ECC098E57783A.mof - error opening [4]

C:\Windows\System32\wbem\AutoRecover\040270F850D5C3C91057DDDA2DA294D8.mof - error opening [4]

C:\Windows\System32\wbem\AutoRecover\073C87A5E65451B9C103BE54832C90C3.mof - error opening [4]

C:\Windows\System32\wbem\AutoRecover\0FF162C67AD719BB7258CA5874D0E6EC.mof - error opening [4]

C:\Windows\System32\wbem\AutoRecover\1328355F476A6C04BC174C8FEFED6030.mof - error opening [4]

C:\Windows\System32\wbem\AutoRecover\191095FB4864B1AE365957B3B2D28C4F.mof - error opening [4]

C:\Windows\System32\wbem\AutoRecover\1A4E55E3BE96FF394FB5020C4D537AB1.mof - error opening [4]

C:\Windows\System32\wbem\AutoRecover\1F260613E85F3D0BACEC07DCEF35396B.mof - error opening [4]

C:\Windows\System32\wbem\AutoRecover\22A0F05220E6420CA3AA86E34805F752.mof - error opening [4]

C:\Windows\System32\wbem\AutoRecover\241F1954DCD7B0310958D9540754CEC3.mof - error opening [4]

C:\Windows\System32\wbem\AutoRecover\394EF2A769C648E61B41BFAD23BACF0E.mof - error opening [4]

C:\Windows\System32\wbem\AutoRecover\39EF661167099C8B2F81F813871BA3BC.mof - error opening [4]

C:\Windows\System32\wbem\AutoRecover\3CF854648793305D1D2A7AC41F80E9D6.mof - error opening [4]

C:\Windows\System32\wbem\AutoRecover\3DFD050CBBC8EA38EA5F1066285F0F4E.mof - error opening [4]

C:\Windows\System32\wbem\AutoRecover\3FC136B9AA8D71056333AF0137119E93.mof - error opening [4]

C:\Windows\System32\wbem\AutoRecover\422F2CA2C538F8B8C6D7F7D2B92DC785.mof - error opening [4]

C:\Windows\System32\wbem\AutoRecover\4461018BFFC22A809EBE8FA05567B686.mof - error opening [4]

C:\Windows\System32\wbem\AutoRecover\45D86E53E6ADF70035B0034F9D8C42FE.mof - error opening [4]

C:\Windows\System32\wbem\AutoRecover\47DDFF7276CF8C08F181DD23AF67B868.mof - error opening [4]

C:\Windows\System32\wbem\AutoRecover\4B2660072B052959CB2A0C8B6A1E9B6A.mof - error opening [4]

C:\Windows\System32\wbem\AutoRecover\4FFAA3E7CB3131376614E98F756EE7AD.mof - error opening [4]

C:\Windows\System32\wbem\AutoRecover\542DC56D520FDDEDA279A0D2F398203D.mof - error opening [4]

C:\Windows\System32\wbem\AutoRecover\58F6DC94AE063187572E906AE0B9DC24.mof - error opening [4]

C:\Windows\System32\wbem\AutoRecover\5F8AAE81E6AA25DDECD426311EDC3CEA.mof - error opening [4]

C:\Windows\System32\wbem\AutoRecover\6389D91E49CCAF02640B61214A97211F.mof - error opening [4]

C:\Windows\System32\wbem\AutoRecover\66231762529A003735024004DCDE643C.mof - error opening [4]

C:\Windows\System32\wbem\AutoRecover\68C49405800705A386C338BECA8D0719.mof - error opening [4]

C:\Windows\System32\wbem\AutoRecover\6DD1779321E1C86B32D09A35DA5E4ED2.mof - error opening [4]

C:\Windows\System32\wbem\AutoRecover\734834D588DA61453DEA4E0AF499ADCE.mof - error opening [4]

C:\Windows\System32\wbem\AutoRecover\7424188A11F3D829BB76C98170DB45E5.mof - error opening [4]

C:\Windows\System32\wbem\AutoRecover\75054C3771DF289038069A9BB1C1FB6E.mof - error opening [4]

C:\Windows\System32\wbem\AutoRecover\79CD84A83C85E4F4FEED13F704AFD1A6.mof - error opening [4]

C:\Windows\System32\wbem\AutoRecover\7A7E1B1832596F5C49CD70E9755EED39.mof - error opening [4]

C:\Windows\System32\wbem\AutoRecover\7BDE76979585395D59B5DA1D62E63C50.mof - error opening [4]

C:\Windows\System32\wbem\AutoRecover\7C45C8B7490D3AD44A961494C7FBFAFD.mof - error opening [4]

C:\Windows\System32\wbem\AutoRecover\7DFE880F785D5AB82870BFC0C3F814A2.mof - error opening [4]

C:\Windows\System32\wbem\AutoRecover\8608CDBF407B09DF27C3406379384843.mof - error opening [4]

C:\Windows\System32\wbem\AutoRecover\86824C24FDE0A58E4EB1A7918FBEF0C5.mof - error opening [4]

C:\Windows\System32\wbem\AutoRecover\89B278BD994A4232365F0E916C19916C.mof - error opening [4]

C:\Windows\System32\wbem\AutoRecover\902DBFF6F0C3BF7CE18405EF33C5B2C0.mof - error opening [4]

C:\Windows\System32\wbem\AutoRecover\9202D7C90F498A9BFE4E12205CBE26F1.mof - error opening [4]

C:\Windows\System32\wbem\AutoRecover\9B2AE30BDA2ED3E7E1378B8770C99C54.mof - error opening [4]

C:\Windows\System32\wbem\AutoRecover\9FB731EA48C7701EB7978CEB7E0314AD.mof - error opening [4]

C:\Windows\System32\wbem\AutoRecover\A02DB69DBBC4F298AD0CE59F677EBF22.mof - error opening [4]

C:\Windows\System32\wbem\AutoRecover\A851D3BCFCE697C24E7112D24AFBE9E3.mof - error opening [4]

C:\Windows\System32\wbem\AutoRecover\B7890DE53F3A6B3C277523E82A081C04.mof - error opening [4]

C:\Windows\System32\wbem\AutoRecover\B88E8B639804BA063AC1D11AC4C196C1.mof - error opening [4]

C:\Windows\System32\wbem\AutoRecover\BA991ACFF19ADCEED9AFD4DD6559F22A.mof - error opening [4]

C:\Windows\System32\wbem\AutoRecover\BF2ADAFC80AB82D412CD9F0B99A0AD2C.mof - error opening [4]

C:\Windows\System32\wbem\AutoRecover\C3613D92FBA5F820823577D6FC2CE8A9.mof - error opening [4]

C:\Windows\System32\wbem\AutoRecover\C5B3C3C921790F19FCDE9367A797A2EF.mof - error opening [4]

C:\Windows\System32\wbem\AutoRecover\CF881EBD6F50B8BAA9BD57DC3DAC5CB2.mof - error opening [4]

C:\Windows\System32\wbem\AutoRecover\CFD53C8456D58010BA580B1D5CFF68D3.mof - error opening [4]

C:\Windows\System32\wbem\AutoRecover\D4CB64722F050ABEB5F8B6B143A19A6C.mof - error opening [4]

C:\Windows\System32\wbem\AutoRecover\D5B60695D4528B9B368FC0C80DC5129F.mof - error opening [4]

C:\Windows\System32\wbem\AutoRecover\D6149C45B68480CA184F2D9C7CB312A5.mof - error opening [4]

C:\Windows\System32\wbem\AutoRecover\DED51090917AEE019629CE420A50F3C2.mof - error opening [4]

C:\Windows\System32\wbem\AutoRecover\DF2FB1F3C8DCD25B01FDE5A4697177CB.mof - error opening [4]

C:\Windows\System32\wbem\AutoRecover\DFB9AD54AC2D3B8122567AAD3BF3EB7F.mof - error opening [4]

C:\Windows\System32\wbem\AutoRecover\E478A5DB75C9721E744C05D78DBACFD3.mof - error opening [4]

C:\Windows\System32\wbem\AutoRecover\EC4E4D2526C1F24E4D610677CF1EA0E7.mof - error opening [4]

C:\Windows\System32\wbem\AutoRecover\EEDD6F5F4BEDFEA1C780FFC78DCDE051.mof - error opening [4]

C:\Windows\System32\wbem\AutoRecover\F001D607C389EDBCFB1D1F3C9AE0FFC5.mof - error opening [4]

C:\Windows\System32\wbem\AutoRecover\F1E5535EC8A153BF2EB4F202C2704228.mof - error opening [4]

C:\Windows\System32\wbem\AutoRecover\FA01281653BC6D33CB10F9E5C36E4047.mof - error opening [4]

C:\Windows\System32\wbem\AutoRecover\FBD0E57ECE5A9402023443B148D93F98.mof - error opening [4]

C:\Windows\System32\winevt\Logs\Antivirus.evtx - error opening [4]C:\Windows\System32\winevt\Logs\Application.evtx - error opening [4]

C:\Windows\System32\winevt\Logs\DFS Replication.evtx - error opening [4]C:\Windows\System32\winevt\Logs\DigitalPersona Pro.evtx - error opening [4]

C:\Windows\System32\winevt\Logs\HardwareEvents.evtx - error opening [4]C:\Windows\System32\winevt\Logs\Internet Explorer.evtx - error opening [4]

C:\Windows\System32\winevt\Logs\Key Management Service.evtx - error opening [4]

C:\Windows\System32\winevt\Logs\Media Center.evtx - error opening [4]C:\Windows\System32\winevt\Logs\Microsoft-Windows-Bits-Client

%4Operational.evtx - error opening [4]C:\Windows\System32\winevt\Logs\Microsoft-Windows-Bluetooth-MTPEnum

%4Operational.evtx - error opening [4]C:\Windows\System32\winevt\Logs\Microsoft-Windows-CodeIntegrity

%4Operational.evtx - error opening [4]C:\Windows\System32\winevt\Logs\Microsoft-Windows-Diagnosis-DPS

%4Operational.evtx - error opening [4]C:\Windows\System32\winevt\Logs\Microsoft-Windows-Diagnostics-Networking

%4Operational.evtx - error opening [4]C:\Windows\System32\winevt\Logs\Microsoft-Windows-Diagnostics-Performance

%4Operational.evtx - error opening [4]C:\Windows\System32\winevt\Logs\Microsoft-Windows-DriverFrameworks-

UserMode%4Operational.evtx - error opening [4]C:\Windows\System32\winevt\Logs\Microsoft-Windows-GroupPolicy

%4Operational.evtx - error opening [4]C:\Windows\System32\winevt\Logs\Microsoft-Windows-Help%4Operational.evtx -

error opening [4]

C:\Windows\System32\winevt\Logs\Microsoft-Windows-International%4Operational.evtx - error opening [4]

C:\Windows\System32\winevt\Logs\Microsoft-Windows-Kernel-WDI%4Operational.evtx - error opening [4]

C:\Windows\System32\winevt\Logs\Microsoft-Windows-Kernel-WHEA.evtx - error opening [4]

C:\Windows\System32\winevt\Logs\Microsoft-Windows-LanguagePackSetup%4Operational.evtx - error opening [4]

C:\Windows\System32\winevt\Logs\Microsoft-Windows-MemoryDiagnostics-Results%4Debug.evtx - error opening [4]

C:\Windows\System32\winevt\Logs\Microsoft-Windows-MUI%4Operational.evtx - error opening [4]

C:\Windows\System32\winevt\Logs\Microsoft-Windows-NetworkAccessProtection%4Operational.evtx - error opening [4]

C:\Windows\System32\winevt\Logs\Microsoft-Windows-ParentalControls%4Operational.evtx - error opening [4]

C:\Windows\System32\winevt\Logs\Microsoft-Windows-Program-Compatibility-Assistant%4Operational.evtx - error opening [4]

C:\Windows\System32\winevt\Logs\Microsoft-Windows-ReadyBoost%4Operational.evtx - error opening [4]

C:\Windows\System32\winevt\Logs\Microsoft-Windows-ReliabilityAnalysisComponent%4Metrics.evtx - error opening [4]

C:\Windows\System32\winevt\Logs\Microsoft-Windows-ReliabilityAnalysisComponent%4Operational.evtx - error opening [4]

C:\Windows\System32\winevt\Logs\Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx - error opening [4]

C:\Windows\System32\winevt\Logs\Microsoft-Windows-Resource-Exhaustion-Resolver%4Operational.evtx - error opening [4]

C:\Windows\System32\winevt\Logs\Microsoft-Windows-Resource-Leak-Diagnostic%4Operational.evtx - error opening [4]

C:\Windows\System32\winevt\Logs\Microsoft-Windows-RestartManager%4Operational.evtx - error opening [4]

C:\Windows\System32\winevt\Logs\Microsoft-Windows-TaskScheduler%4Operational.evtx - error opening [4]

C:\Windows\System32\winevt\Logs\Microsoft-Windows-UAC%4Operational.evtx - error opening [4]

C:\Windows\System32\winevt\Logs\Microsoft-Windows-UAC-FileVirtualization%4Operational.evtx - error opening [4]

C:\Windows\System32\winevt\Logs\Microsoft-Windows-WindowsUpdateClient%4Operational.evtx - error opening [4]

C:\Windows\System32\winevt\Logs\Microsoft-Windows-Winsock-WS2HELP%4Operational.evtx - error opening [4]

C:\Windows\System32\winevt\Logs\Microsoft-Windows-WLAN-AutoConfig%4Operational.evtx - error opening [4]

C:\Windows\System32\winevt\Logs\Microsoft-Windows-WPD-ClassInstaller%4Operational.evtx - error opening [4]

C:\Windows\System32\winevt\Logs\Microsoft-Windows-WPD-MTPClassDriver%4Operational.evtx - error opening [4]

C:\Windows\System32\winevt\Logs\ODiag.evtx - error opening [4]C:\Windows\System32\winevt\Logs\OSession.evtx - error opening [4]

C:\Windows\System32\winevt\Logs\Security.evtx - error opening [4]C:\Windows\System32\winevt\Logs\Setup.evtx - error opening [4]

C:\Windows\System32\winevt\Logs\System.evtx - error opening [4]C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job - error opening [4]C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job - error opening [4]

C:\Windows\Tasks\HPCeeScheduleForsamar.job - error opening [4]C:\Windows\winsxs\x86_microsoft-windows-

n..n_service_datastore_31bf3856ad364e35_6.0.6001.18000_none_d12e90ac35ffb753\dnary.xsd - error opening [4]

C:\Windows\winsxs\x86_microsoft-windows-n..n_service_datastore_31bf3856ad364e35_6.0.6001.18226_none_d11ef65c360a818d

\dnary.xsd - error opening [4]C:\Windows\winsxs\x86_microsoft-windows-

n..n_service_datastore_31bf3856ad364e35_6.0.6001.22389_none_d16ab47d4f561502\dnary.xsd - error opening [4]

C:\Windows\winsxs\x86_microsoft-windows-n..n_service_datastore_31bf3856ad364e35_6.0.6002.18005_none_d31a09b83321829

f\dnary.xsd - error opening [4]D:\Thumbs.db » AUTOIT » script.au3 - probably a variant of

Win32/AutoRun.Autoit.BU wormE:\ - error opening [4]

Number of scanned objects: 1030325Number of threats found: 15

Number of cleaned objects: 0Time of completion: 11:46:52 PM Total scanning time: 4587 sec (01:16:27)

Notes:[4 ]Object cannot be opened. It may be in use by another application or operating

system.

scan log of virus (smart scuraty)

Documents