Guest TheAncientWitch Posted December 3, 2012 ID:619476 Share Posted December 3, 2012 Hello, i have this strange problem. Whenever i try to start mbam scan the program just exits after few seconds. When i try to update superantispyware definitions it starts to download the definitions and downloads them for sometime and then just exits. I have tried to install iobit malware fighter and i can see the setup icon or whatever in the taskbar but then it just exits. I think that this might be caused by some error in my computer. Does anyone know what could cause this? Thank you in advance!Heres my escan antivirus toolkit log if that could explain it even though i doubt it...03 joulu 2012 13:40:04 - **********************************************************03 joulu 2012 13:40:04 - MWAV - eScanAV AntiVirus Toolkit.03 joulu 2012 13:40:04 - Copyright © MicroWorld Technologies03 joulu 2012 13:40:04 - **********************************************************03 joulu 2012 13:40:04 - Source: C:\DOCUME~1\Mikko\TYPYT~1\mwav.exe03 joulu 2012 13:40:04 - Version 12.0.245 (C:\DOCUMENTS AND SETTINGS\MIKKO\LOCAL SETTINGS\TEMP\MEXE.COM)03 joulu 2012 13:40:04 - Log File: C:\Documents and Settings\Mikko\Local Settings\Temp\MWAV.LOG03 joulu 2012 13:40:04 - MWAV Registered: TRUE03 joulu 2012 13:40:04 - User Account: Mikko (Administrator Mode)03 joulu 2012 13:40:04 - OS Type: Windows Workstation03 joulu 2012 13:40:04 - OS: Windows XP [OS Install Date: 31 Oct 2012 15:43:13]03 joulu 2012 13:40:04 - Ver: Service Pack 3 (Build 2600)03 joulu 2012 13:40:04 - System Up Time: 15 Minutes, 22 Seconds03 joulu 2012 13:40:04 - Parent Process Name : C:\Documents and Settings\Mikko\Työpöytä\mwav.exe03 joulu 2012 13:40:04 - Windows Root Folder: C:\WINDOWS03 joulu 2012 13:40:04 - Windows Sys32 Folder: C:\WINDOWS\system3203 joulu 2012 13:40:04 - Interface0 NameServer: 62.241.198.245 62.241.198.24603 joulu 2012 13:40:04 - Local Fixed Drives: c:\03 joulu 2012 13:40:04 - MWAV Mode: Scan and Clean files (for viruses, adware and spyware)03 joulu 2012 13:40:04 - [CREATED ZIP FILE: C:\Documents and Settings\Mikko\Local Settings\Temp\pinfect.zip]03 joulu 2012 13:40:04 - ****** Files/Folders created/modified during last fortnight in Windows and ROOT Folder ******03 joulu 2012 13:40:09 - C:\WINDOWS\winstart.bat (2), 01-Dec-2012 [HSR] [Added C:\WINDOWS\winstart.bat to ZIP FILE]03 joulu 2012 13:40:09 - C:\WINDOWS\system32\A1E0D3FBE3.dll (80), 02-Dec-2012 [HSR] [Added C:\WINDOWS\system32\A1E0D3FBE3.dll to ZIP FILE]03 joulu 2012 13:40:09 - C:\WINDOWS\system32\COMDLG32.OCX (152848), 02-Dec-2012, Microsoft Corporation, CMDIALOG03 joulu 2012 13:40:09 - C:\WINDOWS\system32\iprip.dll (34816), 26-Nov-2012, Microsoft Corporation, Microsoft® Windows® -käyttöjärjestelmä03 joulu 2012 13:40:09 - C:\WINDOWS\system32\MSCOMCTL.OCX (1081616), 02-Dec-2012, Microsoft Corporation, MSCOMCTL03 joulu 2012 13:40:09 - C:\WINDOWS\system32\pchsvc.dll (38400), 26-Nov-2012, Microsoft Corporation, Microsoft® Windows® Operating System03 joulu 2012 13:40:10 - C:\WINDOWS\system32\streamhlp.dll (59392), 30-Nov-2012 [Added C:\WINDOWS\system32\streamhlp.dll to ZIP FILE]03 joulu 2012 13:40:10 - C:\WINDOWS\system32\vbar332.dll (368912), 02-Dec-2012, Microsoft Corporation, Microsoft Visual Basic for Applications03 joulu 2012 13:40:10 - C:\WINDOWS\system32\vsdatant.sys (527408), 19-Nov-2012, Check Point Software Technologies LTD, ZoneAlarm Firewalling Driver03 joulu 2012 13:40:10 - C:\WINDOWS\system32\dllcache\iprip.dll (34816), 26-Nov-2012, Microsoft Corporation, Microsoft® Windows® -käyttöjärjestelmä03 joulu 2012 13:40:10 - C:\WINDOWS\system32\dllcache\usbprint.sys (25856), 18-Nov-2012, Microsoft Corporation, Microsoft® Windows® Operating System03 joulu 2012 13:40:10 - C:\WINDOWS\system32\drivers\mbamswissarmy.sys (40776), 02-Dec-2012, Malwarebytes Corporation, Malwarebytes' Anti-Malware03 joulu 2012 13:40:10 - C:\WINDOWS\system32\drivers\rsktdi.sys (21528), 01-Dec-2012, Beijing Rising Information Technology Co., Ltd., ??????03 joulu 2012 13:40:10 - C:\WINDOWS\system32\drivers\sp_rsdrv2.sys (32768), 27-Nov-2012, Crawler.com, Spyware Terminator03 joulu 2012 13:40:10 - C:\WINDOWS\system32\drivers\usbprint.sys (25856), 18-Nov-2012, Microsoft Corporation, Microsoft® Windows® Operating System03 joulu 2012 13:40:10 - C:\DOCUME~1\Mikko\LOCALS~1\Temp\bdc.exe (182792), 03-Dec-2012, BitDefender, BitDefender Console Scanner03 joulu 2012 13:40:10 - C:\DOCUME~1\Mikko\LOCALS~1\Temp\bdfltlib2k.dll (231944), 03-Dec-2012, MicroWorld Technologies Inc., eScan for Windows03 joulu 2012 13:40:10 - C:\DOCUME~1\Mikko\LOCALS~1\Temp\encdec.dll (223528), 03-Dec-2012, MicroWorld Technologies Inc., eScan/MailScan/eConceal03 joulu 2012 13:40:10 - C:\DOCUME~1\Mikko\LOCALS~1\Temp\erootdrv.sys (22920), 03-Dec-2012, MicroWorld Technologies Inc., eScan/MWAV03 joulu 2012 13:40:10 - C:\DOCUME~1\Mikko\LOCALS~1\Temp\mexe.com (760168), 03-Dec-2012, MicroWorld Technologies Inc., MicroWorld AntiVirus Toolkit Utility (MWAV)03 joulu 2012 13:40:10 - C:\DOCUME~1\Mikko\LOCALS~1\Temp\msvclnt.dll (249128), 03-Dec-2012, MicroWorld Technologies Inc., MailScan03 joulu 2012 13:40:10 - C:\DOCUME~1\Mikko\LOCALS~1\Temp\mwavdwnl.exe (931112), 03-Dec-2012, MicroWorld Technologies Inc., eScan03 joulu 2012 13:40:10 - C:\DOCUME~1\Mikko\LOCALS~1\Temp\MWAVSCAN.COM (760168), 03-Dec-2012, MicroWorld Technologies Inc., MicroWorld AntiVirus Toolkit Utility (MWAV)03 joulu 2012 13:40:10 - C:\DOCUME~1\Mikko\LOCALS~1\Temp\red32.dll (11048), 03-Dec-2012, Microsoft Corporation, Microsoft® Windows® Operating System03 joulu 2012 13:40:10 - C:\DOCUME~1\Mikko\LOCALS~1\Temp\Reload.exe (184104), 03-Dec-2012, MicroWorld Technologies Inc., eScan for Windows03 joulu 2012 13:40:10 - C:\DOCUME~1\Mikko\LOCALS~1\Temp\setpriv.exe (82216), 03-Dec-2012, MicroWorld Technologies Inc., eScan AntiVirus Toolkit Utility03 joulu 2012 13:40:10 - C:\DOCUME~1\Mikko\LOCALS~1\Temp\trufos.dll (353792), 03-Dec-2012, MicroWorld Technologies Inc., eScan for Windows03 joulu 2012 13:40:10 - C:\DOCUME~1\Mikko\LOCALS~1\Temp\unregx.exe (93480), 03-Dec-2012, MicroWorld Technologies Inc., MicroWorld AntiVirus Toolkit Utility03 joulu 2012 13:40:10 - C:\DOCUME~1\Mikko\LOCALS~1\Temp\viewtcp.exe (576296), 03-Dec-2012, MicroWorld Technologies Inc., ViewTCP03 joulu 2012 13:40:10 - C:\DOCUME~1\Mikko\LOCALS~1\Temp\ZemanaAntiMalware.exe (8284520), 01-Dec-2012, Zemana, Zemana AntiMalware03 joulu 2012 13:40:10 - C:\DOCUME~1\Mikko\LOCALS~1\Temp\~DF45C9.tmp (65536), 01-Dec-2012 [Added C:\DOCUME~1\Mikko\LOCALS~1\Temp\~DF45C9.tmp to ZIP FILE]03 joulu 2012 13:40:10 - C:\DOCUME~1\Mikko\LOCALS~1\Temp\~DF549B.tmp (65536), 03-Dec-2012 [unable to Add C:\DOCUME~1\Mikko\LOCALS~1\Temp\~DF549B.tmp to ZIP FILE! ResultCode: 512]03 joulu 2012 13:40:10 - C:\DOCUME~1\Mikko\LOCALS~1\Temp\~DF719.tmp (65536), 02-Dec-2012 [Added C:\DOCUME~1\Mikko\LOCALS~1\Temp\~DF719.tmp to ZIP FILE]03 joulu 2012 13:40:10 - C:\DOCUME~1\Mikko\LOCALS~1\Temp\~DFA938.tmp (65536), 03-Dec-2012 [Added C:\DOCUME~1\Mikko\LOCALS~1\Temp\~DFA938.tmp to ZIP FILE]03 joulu 2012 13:40:10 - C:\WINDOWS\$968930Uinstall_KB968930$, 28-Sep-2011 [H] [Folder]03 joulu 2012 13:40:10 - C:\WINDOWS\$MSI31Uninstall_KB893803v2$, 20-Nov-2006 [H] [Folder]03 joulu 2012 13:40:10 - C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$, 01-May-2008 [H] [Folder]03 joulu 2012 13:40:10 - C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$, 01-May-2008 [H] [Folder]03 joulu 2012 13:40:10 - C:\WINDOWS\$NtUninstallbasecsp$, 28-Sep-2011 [H] [Folder]03 joulu 2012 13:40:10 - C:\WINDOWS\$NtUninstallMSCompPackV1$, 19-Jun-2008 [H] [Folder]03 joulu 2012 13:40:10 - C:\WINDOWS\$NtUninstallQ322011$, 26-May-2004 [H] [Folder]03 joulu 2012 13:40:10 - C:\WINDOWS\$NtUninstallQ327979$, 26-May-2004 [H] [Folder]03 joulu 2012 13:40:10 - C:\WINDOWS\$NtUninstallQ814995$, 26-May-2004 [H] [Folder]03 joulu 2012 13:40:10 - C:\WINDOWS\$NtUninstallQ828026$, 26-May-2004 [H] [Folder]03 joulu 2012 13:40:10 - C:\WINDOWS\$NtUninstallWdf01005$, 15-Feb-2010 [H] [Folder]03 joulu 2012 13:40:10 - C:\WINDOWS\$NtUninstallWdf01009$, 08-Sep-2010 [H] [Folder]03 joulu 2012 13:40:10 - C:\WINDOWS\$NtUninstallWMFDist11$, 19-Jun-2008 [H] [Folder]03 joulu 2012 13:40:10 - C:\WINDOWS\$NtUninstallwmp11$, 19-Jun-2008 [H] [Folder]03 joulu 2012 13:40:10 - C:\WINDOWS\$NtUninstallWudf01000$, 19-Jun-2008 [H] [Folder]03 joulu 2012 13:40:10 - C:\WINDOWS\$NtUninstallWudf01009$, 08-Sep-2010 [H] [Folder]03 joulu 2012 13:40:10 - C:\WINDOWS\Fonts, 26-May-2004 [sR] [Folder]03 joulu 2012 13:40:10 - C:\WINDOWS\ie7, 01-May-2008 [H] [Folder]03 joulu 2012 13:40:10 - C:\WINDOWS\ie8, 21-May-2009 [H] [Folder]03 joulu 2012 13:40:10 - C:\WINDOWS\inf, 31-Oct-2012 [H] [Folder]03 joulu 2012 13:40:10 - C:\WINDOWS\inx, 26-May-2004 [H] [Folder]03 joulu 2012 13:40:10 - C:\WINDOWS\LastGood, 03-Dec-2012 [Folder]03 joulu 2012 13:40:10 - C:\WINDOWS\msdownld.tmp, 11-Sep-2012 [H] [Folder]03 joulu 2012 13:40:10 - C:\WINDOWS\PIF, 10-Jan-2009 [H] [Folder]03 joulu 2012 13:40:10 - C:\WINDOWS\system32\CanonIJ Uninstaller Information, 01-May-2012 [H] [Folder]03 joulu 2012 13:40:10 - C:\WINDOWS\system32\dllcache, 26-May-2004 [HSR] [Folder]03 joulu 2012 13:40:10 - C:\WINDOWS\system32\Microsoft, 26-May-2004 [Folder]03 joulu 2012 13:40:10 - C:\cmdcons, 20-Sep-2011 [HSR] [Folder]03 joulu 2012 13:40:10 - C:\DrWeb Quarantine, 30-Oct-2012 [HS] [Folder]03 joulu 2012 13:40:10 - C:\KRECYCLE, 26-Nov-2012 [HS] [Folder]03 joulu 2012 13:40:10 - C:\KRSHistory, 26-Nov-2012 [HS] [Folder]03 joulu 2012 13:40:10 - C:\RSABIN, 01-Dec-2012 [Folder]03 joulu 2012 13:40:10 - C:\rsleakDownload, 01-Dec-2012 [H] [Folder]03 joulu 2012 13:40:10 - C:\DOCUME~1\Mikko\LOCALS~1\Temp\is-HH6R2.tmp, 01-Dec-2012 [Folder]03 joulu 2012 13:40:10 - C:\DOCUME~1\Mikko\LOCALS~1\Temp\is-KJG07.tmp, 01-Dec-2012 [Folder]03 joulu 2012 13:40:10 - C:\DOCUME~1\Mikko\LOCALS~1\Temp\is-LD2QJ.tmp, 01-Dec-2012 [Folder]03 joulu 2012 13:40:10 - C:\DOCUME~1\Mikko\LOCALS~1\Temp\is-P98US.tmp, 01-Dec-2012 [Folder]03 joulu 2012 13:40:10 - C:\DOCUME~1\Mikko\LOCALS~1\Temp\is-U3R4O.tmp, 01-Dec-2012 [Folder]03 joulu 2012 13:40:10 - C:\DOCUME~1\Mikko\LOCALS~1\Temp\is-UO5G3.tmp, 02-Dec-2012 [Folder]03 joulu 2012 13:40:10 - C:\DOCUME~1\Mikko\LOCALS~1\Temp\IswTmp, 01-Dec-2012 [Folder]03 joulu 2012 13:40:10 - C:\DOCUME~1\Mikko\LOCALS~1\Temp\plugins, 03-Dec-2012 [Folder]03 joulu 2012 13:40:10 - C:\DOCUME~1\Mikko\LOCALS~1\Temp\plugtmp, 03-Dec-2012 [Folder]03 joulu 2012 13:40:10 - C:\DOCUME~1\Mikko\LOCALS~1\Temp\{907A1104-E812-4b5c-959B-E4DAB37A96AB}, 01-Dec-2012 [Folder]03 joulu 2012 13:40:10 - C:\Documents and Settings\Mikko\Application Data\Anvisoft, 27-Nov-2012 [Folder]03 joulu 2012 13:40:10 - C:\Documents and Settings\Mikko\Application Data\CheckPoint, 01-Dec-2012 [Folder]03 joulu 2012 13:40:10 - C:\Documents and Settings\Mikko\Application Data\GlarySoft, 01-Dec-2012 [Folder]03 joulu 2012 13:40:10 - C:\Documents and Settings\Mikko\Application Data\Immunet, 28-Nov-2012 [Folder]03 joulu 2012 13:40:10 - C:\Documents and Settings\Mikko\Application Data\IObit, 01-Dec-2012 [Folder]03 joulu 2012 13:40:10 - C:\Documents and Settings\Mikko\Application Data\Microsoft, 31-Oct-2012 [Folder]03 joulu 2012 13:40:10 - C:\Documents and Settings\Mikko\Application Data\SUPERAntiSpyware.com, 19-Nov-2012 [Folder]03 joulu 2012 13:40:10 - C:\Documents and Settings\Mikko\Application Data\thecleaner, 22-Nov-2012 [Folder]03 joulu 2012 13:40:10 - C:\Documents and Settings\Mikko\Application Data\WinPatrol, 18-Nov-2012 [Folder]03 joulu 2012 13:40:10 - C:\Documents and Settings\Mikko\Application Data\..\Application Data, 31-Oct-2012 [Folder]03 joulu 2012 13:40:10 - C:\Documents and Settings\Mikko\Application Data\..\Downloads, 02-Dec-2012 [Folder]03 joulu 2012 13:40:10 - C:\Documents and Settings\Mikko\Application Data\..\IETldCache, 31-Oct-2012 [HS] [Folder]03 joulu 2012 13:40:10 - C:\Documents and Settings\Mikko\Application Data\..\Local Settings, 31-Oct-2012 [H] [Folder]03 joulu 2012 13:40:10 - C:\Documents and Settings\Mikko\Application Data\..\Mallit, 31-Oct-2012 [H] [Folder]03 joulu 2012 13:40:10 - C:\Documents and Settings\Mikko\Application Data\..\PrivacIE, 10-Nov-2012 [HS] [Folder]03 joulu 2012 13:40:10 - C:\Documents and Settings\Mikko\Application Data\..\Recent, 02-Dec-2012 [Folder]03 joulu 2012 13:40:10 - C:\Documents and Settings\Mikko\Application Data\..\SendTo, 31-Oct-2012 [Folder]03 joulu 2012 13:40:10 - C:\Documents and Settings\Mikko\Application Data\..\Tulostinympäristö, 31-Oct-2012 [H] [Folder]03 joulu 2012 13:40:10 - C:\Documents and Settings\Mikko\Application Data\..\UserData, 31-Oct-2012 [HS] [Folder]03 joulu 2012 13:40:10 - C:\Documents and Settings\Mikko\Application Data\..\Verkkoympäristö, 31-Oct-2012 [H] [Folder]03 joulu 2012 13:40:10 - C:\Documents and Settings\All Users.WINDOWS\Application Data\Anvisoft, 27-Nov-2012 [Folder]03 joulu 2012 13:40:10 - C:\Documents and Settings\All Users.WINDOWS\Application Data\CheckPoint, 01-Dec-2012 [Folder]03 joulu 2012 13:40:10 - C:\Documents and Settings\All Users.WINDOWS\Application Data\Common Toolkit Suite, 02-Dec-2012 [Folder]03 joulu 2012 13:40:10 - C:\Documents and Settings\All Users.WINDOWS\Application Data\HitmanPro, 22-Nov-2012 [Folder]03 joulu 2012 13:40:10 - C:\Documents and Settings\All Users.WINDOWS\Application Data\InstallMate, 18-Nov-2012 [Folder]03 joulu 2012 13:40:10 - C:\Documents and Settings\All Users.WINDOWS\Application Data\kingsoft, 26-Nov-2012 [Folder]03 joulu 2012 13:40:10 - C:\Documents and Settings\All Users.WINDOWS\Application Data\KRSHistory, 26-Nov-2012 [Folder]03 joulu 2012 13:40:10 - C:\Documents and Settings\All Users.WINDOWS\Application Data\Microsoft, 31-Oct-2012 [Folder]03 joulu 2012 13:40:10 - C:\Documents and Settings\All Users.WINDOWS\Application Data\MicroWorld, 03-Dec-2012 [Folder]03 joulu 2012 13:40:10 - C:\Documents and Settings\All Users.WINDOWS\Application Data\Protexis, 02-Dec-2012 [Folder]03 joulu 2012 13:40:10 - C:\Documents and Settings\All Users.WINDOWS\Application Data\Rising, 01-Dec-2012 [Folder]03 joulu 2012 13:40:10 - C:\Documents and Settings\All Users.WINDOWS\Application Data\Safe, 26-Nov-2012 [Folder]03 joulu 2012 13:40:10 - C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy, 25-Nov-2012 [Folder]03 joulu 2012 13:40:10 - C:\Documents and Settings\All Users.WINDOWS\Application Data\SUPERAntiSpyware.com, 19-Nov-2012 [Folder]03 joulu 2012 13:40:10 - C:\Documents and Settings\All Users.WINDOWS\Application Data\Zemana AntiMalware, 01-Dec-2012 [Folder]03 joulu 2012 13:40:10 - C:\Documents and Settings\All Users.WINDOWS\Application Data\..\Application Data, 31-Oct-2012 [H] [Folder]03 joulu 2012 13:40:10 - C:\Documents and Settings\All Users.WINDOWS\Application Data\..\DRM, 31-Oct-2012 [HS] [Folder]03 joulu 2012 13:40:10 - C:\Documents and Settings\All Users.WINDOWS\Application Data\..\Mallit, 31-Oct-2012 [H] [Folder]03 joulu 2012 13:40:10 - C:\Program Files\Anvisoft, 27-Nov-2012 [Folder]03 joulu 2012 13:40:10 - C:\Program Files\BillP Studios, 18-Nov-2012 [Folder]03 joulu 2012 13:40:10 - C:\Program Files\CanonBJ, 01-May-2012 [H] [Folder]03 joulu 2012 13:40:10 - C:\Program Files\CheckPoint, 01-Dec-2012 [Folder]03 joulu 2012 13:40:10 - C:\Program Files\Emsisoft Anti-Malware, 30-Nov-2012 [Folder]03 joulu 2012 13:40:10 - C:\Program Files\Glary Utilities, 01-Dec-2012 [Folder]03 joulu 2012 13:40:10 - C:\Program Files\Gore, 01-Dec-2012 [Folder]03 joulu 2012 13:40:10 - C:\Program Files\kingsoft, 26-Nov-2012 [Folder]03 joulu 2012 13:40:10 - C:\Program Files\Rising, 01-Dec-2012 [Folder]03 joulu 2012 13:40:10 - C:\Program Files\Spy Cleaner Gold, 02-Dec-2012 [Folder]03 joulu 2012 13:40:10 - C:\Program Files\SUPERAntiSpyware, 19-Nov-2012 [Folder]03 joulu 2012 13:40:10 - C:\Program Files\The Cleaner, 28-Nov-2012 [Folder]03 joulu 2012 13:40:10 - C:\Program Files\TrojanHunter 5.5, 30-Nov-2012 [Folder]03 joulu 2012 13:40:10 - C:\Program Files\WindowsUpdate, 26-May-2004 [H] [Folder]03 joulu 2012 13:40:10 - C:\Program Files\Zemana AntiMalware, 01-Dec-2012 [Folder]03 joulu 2012 13:40:10 - *********************************************************************************************03 joulu 2012 13:40:10 - Latest Date of files inside MWAV: Mon Jun 18 13:59:57 2012.03 joulu 2012 13:40:10 - Plugins FileCount: 916 Sign Version: 7.4264603 joulu 2012 13:40:13 - ** Changed Value of "HKEY_CLASSES_ROOT\.htm" from "FirefoxHTML" to "htmlfile"03 joulu 2012 13:40:13 - ** Changed Value of "HKEY_CLASSES_ROOT\.html" from "FirefoxHTML" to "htmlfile"03 joulu 2012 13:40:24 - Loading/Creating FileScan Database C:\Documents and Settings\All Users.WINDOWS\Application Data\MicroWorld\MWAV\ESCANDBX.MDB [Log: C:\Documents and Settings\Mikko\Local Settings\Temp\ESCANDB.LOG]03 joulu 2012 13:40:26 - Loaded/Created FileScan Database...03 joulu 2012 13:40:26 - Loading AV Library [DB]...03 joulu 2012 13:41:00 - ArchiveScan: DISABLED03 joulu 2012 13:41:03 - AV Library Loaded [DB-DIRECT].03 joulu 2012 13:41:03 - MWAV doing self scanning...03 joulu 2012 13:41:03 - MWAV files are clean.03 joulu 2012 13:41:19 - ArchiveScan: DISABLED03 joulu 2012 13:41:19 - Virus Database Date: 18 Jun 201203 joulu 2012 13:41:19 - Virus Database Count: 730529703 joulu 2012 13:41:22 - Downloading AntiVirus and Anti-Spyware Databases...03 joulu 2012 14:05:25 - Update Successful...03 joulu 2012 14:05:44 - Indexed Spyware Databases Successfully Created...03 joulu 2012 14:05:45 - Old Sign Version: 7.42646 New Sign Version: 7.4424403 joulu 2012 14:06:32 - Reload of AntiVirus Signatures successfully done.03 joulu 2012 14:06:32 - Virus Database Date: 03 Dec 201203 joulu 2012 14:06:32 - Virus Database Count: 818056903 joulu 2012 14:13:00 - **********************************************************03 joulu 2012 14:13:00 - MWAV - eScanAV AntiVirus Toolkit.03 joulu 2012 14:13:00 - Copyright © MicroWorld Technologies03 joulu 2012 14:13:00 -03 joulu 2012 14:13:00 - Support: support@escanav.com03 joulu 2012 14:13:00 - Web: http://www.escanav.com03 joulu 2012 14:13:00 - **********************************************************03 joulu 2012 14:13:00 - Version 12.0.245[DB] (C:\DOCUMENTS AND SETTINGS\MIKKO\LOCAL SETTINGS\TEMP\MEXE.COM)03 joulu 2012 14:13:00 - Log File: C:\Documents and Settings\Mikko\Local Settings\Temp\MWAV.LOG03 joulu 2012 14:13:00 - User Account: Mikko (Administrator Mode)03 joulu 2012 14:13:00 - Parent Process Name : C:\Documents and Settings\Mikko\Työpöytä\mwav.exe03 joulu 2012 14:13:00 - Windows Root Folder: C:\WINDOWS03 joulu 2012 14:13:00 - Windows Sys32 Folder: C:\WINDOWS\system3203 joulu 2012 14:13:00 - OS: Windows XP [OS Install Date: 31 Oct 2012 15:43:13]03 joulu 2012 14:13:00 - Ver: Service Pack 3 (Build 2600)03 joulu 2012 14:13:00 - Latest Date of files inside MWAV: Mon Jun 18 13:59:57 2012.03 joulu 2012 14:13:00 - Plugins FileCount: 936 Sign Version: 7.4424403 joulu 2012 14:13:00 - Options Selected by User:03 joulu 2012 14:13:00 - Memory Check: Enabled03 joulu 2012 14:13:00 - Registry Check: Enabled03 joulu 2012 14:13:00 - StartUp Folder Check: Enabled03 joulu 2012 14:13:00 - System Folder Check: Enabled03 joulu 2012 14:13:00 - Services Check: Enabled03 joulu 2012 14:13:00 - Scan Spyware: Enabled03 joulu 2012 14:13:00 - Scan Archives: Disabled03 joulu 2012 14:13:00 - Drive Check Option Disabled03 joulu 2012 14:13:00 - Folder Check: Disabled03 joulu 2012 14:13:00 - SCAN: All_Files03 joulu 2012 14:13:00 - MWAV Mode: Only Scan files (Do Not Clean)03 joulu 2012 14:13:00 - Scanning DNS Records...03 joulu 2012 14:13:01 - Scanning Master Boot Record (Kernel)...03 joulu 2012 14:13:07 - ***** Scanning Memory Files *****03 joulu 2012 14:13:51 - ***** Scanning Registry Files *****03 joulu 2012 14:13:53 - Invalid Entry DllName = appmgmts.dll (in key HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions\{c6dc5466-785a-11d2-84d0-00c04fb169f7}). Action Taken: Deleting Registry Key {c6dc5466-785a-11d2-84d0-00c04fb169f7}.03 joulu 2012 14:14:01 - ***** Scanning StartUp Folders *****03 joulu 2012 14:14:02 - Scanning File C:\Documents and Settings\Mikko\Työpöytä\cbsidlm-tr1_8-Spy_Cleaner_Gold-ORG2-10301484.exe03 joulu 2012 14:14:02 - File C:\Documents and Settings\Mikko\Työpöytä\cbsidlm-tr1_8-Spy_Cleaner_Gold-ORG2-10301484.exe infected by "Win32/DownloadAdmin.E (ES)" Virus! Action Taken: No Action Taken.03 joulu 2012 14:14:28 - ***** Scanning Service Files *****03 joulu 2012 14:14:29 - ERROR(g)!!! Invalid Entry %SystemRoot%\System32\appmgmts.dll in HKLM\SYSTEM\CurrentControlSet\Services\AppMgmt\Parameters. Action Taken: No Action Taken.03 joulu 2012 14:14:30 - ERROR(g)!!! Invalid Entry system32\DRIVERS\avfsfilter.sys in HKLM\SYSTEM\CurrentControlSet\Services\AVFSFilter. Action Taken: No Action Taken.03 joulu 2012 14:14:30 - ERROR(g)!!! Invalid Entry system32\Drivers\BC.sys in HKLM\SYSTEM\CurrentControlSet\Services\BC. Action Taken: No Action Taken.03 joulu 2012 14:14:34 - ERROR(g)!!! Invalid Entry system32\drivers\Partizan.sys in HKLM\SYSTEM\CurrentControlSet\Services\Partizan. Action Taken: No Action Taken.03 joulu 2012 14:14:35 - ERROR(g)!!! Invalid Entry \??\C:\WINDOWS\system32\drivers\SBREdrv.sys in HKLM\SYSTEM\CurrentControlSet\Services\SBRE. Action Taken: No Action Taken.03 joulu 2012 14:14:37 - ***** Scanning Registry and File system for Adware/Spyware *****03 joulu 2012 14:14:37 - Loading Spyware Signatures from new External Database [Name: C:\DOCUME~1\Mikko\LOCALS~1\Temp\spydb.avs, Size: 465231]...03 joulu 2012 14:14:37 - Indexed Spyware Databases Successfully Created...03 joulu 2012 14:14:37 - System found infected with AntiMalware Spyware/Adware (HKEY_CLASSES_ROOT\clsid\{5E2121EE-0300-11D4-8D3B-444553540000})! Action taken: No Action Taken.03 joulu 2012 14:14:38 - Offending file found: C:\WINDOWS\TEMP\IswTmp\WH\003 joulu 2012 14:14:38 - System found infected with Generic Protect Antivirus (0)! Action taken: No Action Taken.03 joulu 2012 14:14:46 - Offending file found: C:\Documents and Settings\Mikko\Local Settings\Temp\IswTmp\WH\003 joulu 2012 14:14:46 - System found infected with Generic Protect Antivirus (0)! Action taken: No Action Taken.03 joulu 2012 14:14:48 - Offending file found: C:\Documents and Settings\Mikko\Local Settings\Temp\IswTmp\WH\003 joulu 2012 14:14:48 - System found infected with Generic Protect Antivirus (0)! Action taken: No Action Taken.03 joulu 2012 14:14:49 - Offending Registry Entry found: HKCU\Software\Microsoft\OLE03 joulu 2012 14:14:49 - System found infected with Backdoor (IRCBot) Trojans Spyware/Adware (HKCU\Software\Microsoft\OLE)! Action taken: No Action Taken.03 joulu 2012 14:14:49 - Offending Registry Entry found: HKCU\Software\Microsoft\Windows\CurrentVersion\Drivers03 joulu 2012 14:14:49 - System found infected with AntiSpyware Pro XP Corrupted Adware/Spyware (HKCU\Software\Microsoft\Windows\CurrentVersion\Drivers)! Action taken: No Action Taken.03 joulu 2012 14:14:49 - Offending file found: C:\Documents and Settings\All Users.WINDOWS\Application Data\Protexis\DL03 joulu 2012 14:14:49 - System found infected with Cheat Monitor Commercial KeyLogger (C:\Documents and Settings\All Users.WINDOWS\Application Data\Protexis\DL)! Action taken: No Action Taken.03 joulu 2012 14:14:49 - Offending file found: C:\Documents and Settings\All Users.WINDOWS\Application Data\Protexis\State03 joulu 2012 14:14:49 - System found infected with Cheat Monitor Commercial KeyLogger (C:\Documents and Settings\All Users.WINDOWS\Application Data\Protexis\State)! Action taken: No Action Taken.03 joulu 2012 14:14:49 - ***** Scanning System32 Folders *****03 joulu 2012 14:18:14 - ***** Checking for specific ITW Viruses *****03 joulu 2012 14:18:14 - ***** Scanning complete. *****03 joulu 2012 14:18:14 - Total Objects Scanned: 4925503 joulu 2012 14:18:14 - Total Critical Objects: 903 joulu 2012 14:18:14 - Total Disinfected Objects: 003 joulu 2012 14:18:14 - Total Objects Renamed: 003 joulu 2012 14:18:14 - Total Deleted Objects: 003 joulu 2012 14:18:14 - Total Errors: 603 joulu 2012 14:18:14 - Time Elapsed: 00:05:1303 joulu 2012 14:18:14 - Virus Database Date: 03 Dec 201203 joulu 2012 14:18:14 - Virus Database Count: 818056903 joulu 2012 14:18:14 - Scan Completed.03 joulu 2012 14:23:37 - Virus Database Date: 03 Dec 201203 joulu 2012 14:23:37 - Virus Database Count: 818056903 joulu 2012 14:23:43 - Uninitializing Scanner (3)...03 joulu 2012 14:23:43 - Freeing Libraries (3)...03 joulu 2012 14:47:05 - **********************************************************03 joulu 2012 14:47:05 - MWAV - eScanAV AntiVirus Toolkit.03 joulu 2012 14:47:05 - Copyright © MicroWorld Technologies03 joulu 2012 14:47:05 - **********************************************************03 joulu 2012 14:47:05 - Version 12.0.245 (C:\DOCUMENTS AND SETTINGS\MIKKO\LOCAL SETTINGS\TEMP\MWAVSCAN.EXE)03 joulu 2012 14:47:05 - Log File: C:\Documents and Settings\Mikko\Local Settings\Temp\MWAV.LOG03 joulu 2012 14:47:05 - Last Scan Date and Time: 03.12.2012 14:13:0003 joulu 2012 14:47:05 - MWAV Registered: TRUE03 joulu 2012 14:47:05 - User Account: Mikko (Administrator Mode)03 joulu 2012 14:47:05 - OS Type: Windows Workstation03 joulu 2012 14:47:05 - OS: Windows XP [OS Install Date: 31 Oct 2012 15:43:13]03 joulu 2012 14:47:05 - Ver: Service Pack 3 (Build 2600)03 joulu 2012 14:47:05 - System Up Time: 1 Hour, 22 Minutes, 24 Seconds03 joulu 2012 14:47:05 - Parent Process Name : C:\WINDOWS\Explorer.EXE03 joulu 2012 14:47:05 - Windows Root Folder: C:\WINDOWS03 joulu 2012 14:47:05 - Windows Sys32 Folder: C:\WINDOWS\system3203 joulu 2012 14:47:07 - Interface0 NameServer: 62.241.198.245 62.241.198.24603 joulu 2012 14:47:07 - Local Fixed Drives: c:\03 joulu 2012 14:47:07 - MWAV Mode: Scan and Clean files (for viruses, adware and spyware)03 joulu 2012 14:47:07 - [CREATED ZIP FILE: C:\Documents and Settings\Mikko\Local Settings\Temp\pinfect.zip]03 joulu 2012 14:47:07 - ****** Files/Folders created/modified during last fortnight in Windows and ROOT Folder ******03 joulu 2012 14:47:08 - C:\WINDOWS\R.COM (146944), 03-Dec-2012, Microsoft Corporation, Microsoft® Windows® -käyttöjärjestelmä03 joulu 2012 14:47:10 - C:\WINDOWS\winstart.bat (2), 01-Dec-2012 [HSR] [Added C:\WINDOWS\winstart.bat to ZIP FILE]03 joulu 2012 14:47:10 - C:\WINDOWS\system32\A1E0D3FBE3.dll (80), 02-Dec-2012 [HSR] [Added C:\WINDOWS\system32\A1E0D3FBE3.dll to ZIP FILE]03 joulu 2012 14:47:10 - C:\WINDOWS\system32\COMDLG32.OCX (152848), 02-Dec-2012, Microsoft Corporation, CMDIALOG03 joulu 2012 14:47:10 - C:\WINDOWS\system32\eEmpty.exe (34048), 03-Dec-2012, MicroWorld Technologies Inc., eScan For Windows03 joulu 2012 14:47:10 - C:\WINDOWS\system32\iprip.dll (34816), 26-Nov-2012, Microsoft Corporation, Microsoft® Windows® -käyttöjärjestelmä03 joulu 2012 14:47:10 - C:\WINDOWS\system32\MSCOMCTL.OCX (1081616), 02-Dec-2012, Microsoft Corporation, MSCOMCTL03 joulu 2012 14:47:10 - C:\WINDOWS\system32\msvcp90.dll (572928), 03-Dec-2012, Microsoft Corporation, Microsoft® Visual Studio® 200803 joulu 2012 14:47:10 - C:\WINDOWS\system32\msvcr90.dll (655872), 03-Dec-2012, Microsoft Corporation, Microsoft® Visual Studio® 200803 joulu 2012 14:47:10 - C:\WINDOWS\system32\pchsvc.dll (38400), 26-Nov-2012, Microsoft Corporation, Microsoft® Windows® Operating System03 joulu 2012 14:47:10 - C:\WINDOWS\system32\streamhlp.dll (59392), 30-Nov-2012 [Added C:\WINDOWS\system32\streamhlp.dll to ZIP FILE]03 joulu 2012 14:47:10 - C:\WINDOWS\system32\T.COM (138240), 03-Dec-2012, Microsoft Corporation, Microsoft® Windows® -käyttöjärjestelmä03 joulu 2012 14:47:10 - C:\WINDOWS\system32\TASKMGR.COM (138240), 03-Dec-2012, Microsoft Corporation, Microsoft® Windows® -käyttöjärjestelmä03 joulu 2012 14:47:10 - C:\WINDOWS\system32\vbar332.dll (368912), 02-Dec-2012, Microsoft Corporation, Microsoft Visual Basic for Applications03 joulu 2012 14:47:10 - C:\WINDOWS\system32\vsdatant.sys (527408), 19-Nov-2012, Check Point Software Technologies LTD, ZoneAlarm Firewalling Driver03 joulu 2012 14:47:10 - C:\WINDOWS\system32\dllcache\iprip.dll (34816), 26-Nov-2012, Microsoft Corporation, Microsoft® Windows® -käyttöjärjestelmä03 joulu 2012 14:47:10 - C:\WINDOWS\system32\dllcache\usbprint.sys (25856), 18-Nov-2012, Microsoft Corporation, Microsoft® Windows® Operating System03 joulu 2012 14:47:10 - C:\WINDOWS\system32\drivers\mbamswissarmy.sys (40776), 02-Dec-2012, Malwarebytes Corporation, Malwarebytes' Anti-Malware03 joulu 2012 14:47:10 - C:\WINDOWS\system32\drivers\rsktdi.sys (21528), 01-Dec-2012, Beijing Rising Information Technology Co., Ltd., ??????03 joulu 2012 14:47:10 - C:\WINDOWS\system32\drivers\sp_rsdrv2.sys (32768), 27-Nov-2012, Crawler.com, Spyware Terminator03 joulu 2012 14:47:10 - C:\WINDOWS\system32\drivers\usbprint.sys (25856), 18-Nov-2012, Microsoft Corporation, Microsoft® Windows® Operating System03 joulu 2012 14:47:10 - C:\DOCUME~1\Mikko\LOCALS~1\Temp\bdc.exe (182792), 03-Dec-2012, BitDefender, BitDefender Console Scanner03 joulu 2012 14:47:10 - C:\DOCUME~1\Mikko\LOCALS~1\Temp\bdfltlib2k.dll (231944), 03-Dec-2012, MicroWorld Technologies Inc., eScan for Windows03 joulu 2012 14:47:10 - C:\DOCUME~1\Mikko\LOCALS~1\Temp\DEVCON.EXE (61184), 03-Dec-2012, Microsoft Corporation, Microsoft® Windows® Operating System03 joulu 2012 14:47:10 - C:\DOCUME~1\Mikko\LOCALS~1\Temp\eEmpty.exe (34048), 03-Dec-2012, MicroWorld Technologies Inc., eScan For Windows03 joulu 2012 14:47:10 - C:\DOCUME~1\Mikko\LOCALS~1\Temp\encdec.dll (223528), 03-Dec-2012, MicroWorld Technologies Inc., eScan/MailScan/eConceal03 joulu 2012 14:47:10 - C:\DOCUME~1\Mikko\LOCALS~1\Temp\eRootDrv.sys (23976), 03-Dec-2012, MicroWorld Technologies Inc., eScan/MWAV03 joulu 2012 14:47:10 - C:\DOCUME~1\Mikko\LOCALS~1\Temp\mexe.com (760168), 03-Dec-2012, MicroWorld Technologies Inc., MicroWorld AntiVirus Toolkit Utility (MWAV)03 joulu 2012 14:47:10 - C:\DOCUME~1\Mikko\LOCALS~1\Temp\msvclnt.dll (249128), 03-Dec-2012, MicroWorld Technologies Inc., MailScan03 joulu 2012 14:47:10 - C:\DOCUME~1\Mikko\LOCALS~1\Temp\msvcp90.dll (572928), 03-Dec-2012, Microsoft Corporation, Microsoft® Visual Studio® 200803 joulu 2012 14:47:10 - C:\DOCUME~1\Mikko\LOCALS~1\Temp\msvcr90.dll (655872), 03-Dec-2012, Microsoft Corporation, Microsoft® Visual Studio® 200803 joulu 2012 14:47:10 - C:\DOCUME~1\Mikko\LOCALS~1\Temp\mwavdwnl.exe (931112), 03-Dec-2012, MicroWorld Technologies Inc., eScan03 joulu 2012 14:47:10 - C:\DOCUME~1\Mikko\LOCALS~1\Temp\MWAVSCAN.COM (760168), 03-Dec-2012, MicroWorld Technologies Inc., MicroWorld AntiVirus Toolkit Utility (MWAV)03 joulu 2012 14:47:10 - C:\DOCUME~1\Mikko\LOCALS~1\Temp\red32.dll (11048), 03-Dec-2012, Microsoft Corporation, Microsoft® Windows® Operating System03 joulu 2012 14:47:10 - C:\DOCUME~1\Mikko\LOCALS~1\Temp\Reload.exe (184104), 03-Dec-2012, MicroWorld Technologies Inc., eScan for Windows03 joulu 2012 14:47:10 - C:\DOCUME~1\Mikko\LOCALS~1\Temp\setpriv.exe (82216), 03-Dec-2012, MicroWorld Technologies Inc., eScan AntiVirus Toolkit Utility03 joulu 2012 14:47:10 - C:\DOCUME~1\Mikko\LOCALS~1\Temp\trufos.dll (353792), 03-Dec-2012, MicroWorld Technologies Inc., eScan for Windows03 joulu 2012 14:47:10 - C:\DOCUME~1\Mikko\LOCALS~1\Temp\unregx.exe (93480), 03-Dec-2012, MicroWorld Technologies Inc., MicroWorld AntiVirus Toolkit Utility03 joulu 2012 14:47:10 - C:\DOCUME~1\Mikko\LOCALS~1\Temp\UPDLL10.DLL (1114888), 03-Dec-2012, MicroWorld Technologies Inc., eScan/MailScan/MWAV03 joulu 2012 14:47:10 - C:\DOCUME~1\Mikko\LOCALS~1\Temp\viewtcp.exe (576296), 03-Dec-2012, MicroWorld Technologies Inc., ViewTCP03 joulu 2012 14:47:10 - C:\DOCUME~1\Mikko\LOCALS~1\Temp\ZemanaAntiMalware.exe (8284520), 01-Dec-2012, Zemana, Zemana AntiMalware03 joulu 2012 14:47:10 - C:\DOCUME~1\Mikko\LOCALS~1\Temp\~DF45C9.tmp (65536), 01-Dec-2012 [Added C:\DOCUME~1\Mikko\LOCALS~1\Temp\~DF45C9.tmp to ZIP FILE]03 joulu 2012 14:47:10 - C:\DOCUME~1\Mikko\LOCALS~1\Temp\~DF549B.tmp (65536), 03-Dec-2012 [unable to Add C:\DOCUME~1\Mikko\LOCALS~1\Temp\~DF549B.tmp to ZIP FILE! ResultCode: 512]03 joulu 2012 14:47:10 - C:\DOCUME~1\Mikko\LOCALS~1\Temp\~DF719.tmp (65536), 02-Dec-2012 [Added C:\DOCUME~1\Mikko\LOCALS~1\Temp\~DF719.tmp to ZIP FILE]03 joulu 2012 14:47:10 - C:\DOCUME~1\Mikko\LOCALS~1\Temp\~DFA938.tmp (65536), 03-Dec-2012 [Added C:\DOCUME~1\Mikko\LOCALS~1\Temp\~DFA938.tmp to ZIP FILE]03 joulu 2012 14:47:10 - C:\WINDOWS\$968930Uinstall_KB968930$, 28-Sep-2011 [H] [Folder]03 joulu 2012 14:47:10 - C:\WINDOWS\$MSI31Uninstall_KB893803v2$, 20-Nov-2006 [H] [Folder]03 joulu 2012 14:47:10 - C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$, 01-May-2008 [H] [Folder]03 joulu 2012 14:47:10 - C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$, 01-May-2008 [H] [Folder]03 joulu 2012 14:47:10 - C:\WINDOWS\$NtUninstallbasecsp$, 28-Sep-2011 [H] [Folder]03 joulu 2012 14:47:10 - C:\WINDOWS\$NtUninstallMSCompPackV1$, 19-Jun-2008 [H] [Folder]03 joulu 2012 14:47:10 - C:\WINDOWS\$NtUninstallQ322011$, 26-May-2004 [H] [Folder]03 joulu 2012 14:47:10 - C:\WINDOWS\$NtUninstallQ327979$, 26-May-2004 [H] [Folder]03 joulu 2012 14:47:10 - C:\WINDOWS\$NtUninstallQ814995$, 26-May-2004 [H] [Folder]03 joulu 2012 14:47:10 - C:\WINDOWS\$NtUninstallQ828026$, 26-May-2004 [H] [Folder]03 joulu 2012 14:47:10 - C:\WINDOWS\$NtUninstallWdf01005$, 15-Feb-2010 [H] [Folder]03 joulu 2012 14:47:10 - C:\WINDOWS\$NtUninstallWdf01009$, 08-Sep-2010 [H] [Folder]03 joulu 2012 14:47:10 - C:\WINDOWS\$NtUninstallWMFDist11$, 19-Jun-2008 [H] [Folder]03 joulu 2012 14:47:10 - C:\WINDOWS\$NtUninstallwmp11$, 19-Jun-2008 [H] [Folder]03 joulu 2012 14:47:10 - C:\WINDOWS\$NtUninstallWudf01000$, 19-Jun-2008 [H] [Folder]03 joulu 2012 14:47:10 - C:\WINDOWS\$NtUninstallWudf01009$, 08-Sep-2010 [H] [Folder]03 joulu 2012 14:47:10 - C:\WINDOWS\Fonts, 26-May-2004 [sR] [Folder]03 joulu 2012 14:47:10 - C:\WINDOWS\ie7, 01-May-2008 [H] [Folder]03 joulu 2012 14:47:10 - C:\WINDOWS\ie8, 21-May-2009 [H] [Folder]03 joulu 2012 14:47:10 - C:\WINDOWS\inf, 31-Oct-2012 [H] [Folder]03 joulu 2012 14:47:10 - C:\WINDOWS\inx, 26-May-2004 [H] [Folder]03 joulu 2012 14:47:10 - C:\WINDOWS\LastGood, 03-Dec-2012 [Folder]03 joulu 2012 14:47:10 - C:\WINDOWS\msdownld.tmp, 11-Sep-2012 [H] [Folder]03 joulu 2012 14:47:10 - C:\WINDOWS\PIF, 10-Jan-2009 [H] [Folder]03 joulu 2012 14:47:10 - C:\WINDOWS\RUNDL132.EXE, 03-Dec-2012 [Folder]03 joulu 2012 14:47:10 - C:\WINDOWS\system32\CanonIJ Uninstaller Information, 01-May-2012 [H] [Folder]03 joulu 2012 14:47:10 - C:\WINDOWS\system32\dllcache, 26-May-2004 [HSR] [Folder]03 joulu 2012 14:47:10 - C:\WINDOWS\system32\Microsoft, 26-May-2004 [Folder]03 joulu 2012 14:47:10 - C:\cmdcons, 20-Sep-2011 [HSR] [Folder]03 joulu 2012 14:47:10 - C:\DrWeb Quarantine, 30-Oct-2012 [HS] [Folder]03 joulu 2012 14:47:10 - C:\KRECYCLE, 26-Nov-2012 [HS] [Folder]03 joulu 2012 14:47:10 - C:\KRSHistory, 26-Nov-2012 [HS] [Folder]03 joulu 2012 14:47:10 - C:\RSABIN, 01-Dec-2012 [Folder]03 joulu 2012 14:47:10 - C:\rsleakDownload, 01-Dec-2012 [H] [Folder]03 joulu 2012 14:47:10 - C:\DOCUME~1\Mikko\LOCALS~1\Temp\AVCBack, 03-Dec-2012 [Folder]03 joulu 2012 14:47:10 - C:\DOCUME~1\Mikko\LOCALS~1\Temp\FtpTemp, 03-Dec-2012 [Folder]03 joulu 2012 14:47:10 - C:\DOCUME~1\Mikko\LOCALS~1\Temp\FtpTempF, 03-Dec-2012 [Folder]03 joulu 2012 14:47:10 - C:\DOCUME~1\Mikko\LOCALS~1\Temp\is-HH6R2.tmp, 01-Dec-2012 [Folder]03 joulu 2012 14:47:10 - C:\DOCUME~1\Mikko\LOCALS~1\Temp\is-KJG07.tmp, 01-Dec-2012 [Folder]03 joulu 2012 14:47:10 - C:\DOCUME~1\Mikko\LOCALS~1\Temp\is-LD2QJ.tmp, 01-Dec-2012 [Folder]03 joulu 2012 14:47:10 - C:\DOCUME~1\Mikko\LOCALS~1\Temp\is-P98US.tmp, 01-Dec-2012 [Folder]03 joulu 2012 14:47:10 - C:\DOCUME~1\Mikko\LOCALS~1\Temp\is-U3R4O.tmp, 01-Dec-2012 [Folder]03 joulu 2012 14:47:10 - C:\DOCUME~1\Mikko\LOCALS~1\Temp\is-UO5G3.tmp, 02-Dec-2012 [Folder]03 joulu 2012 14:47:10 - C:\DOCUME~1\Mikko\LOCALS~1\Temp\IswTmp, 01-Dec-2012 [Folder]03 joulu 2012 14:47:10 - C:\DOCUME~1\Mikko\LOCALS~1\Temp\LOCK, 03-Dec-2012 [Folder]03 joulu 2012 14:47:10 - C:\DOCUME~1\Mikko\LOCALS~1\Temp\Log, 03-Dec-2012 [Folder]03 joulu 2012 14:47:10 - C:\DOCUME~1\Mikko\LOCALS~1\Temp\plugins, 03-Dec-2012 [Folder]03 joulu 2012 14:47:10 - C:\DOCUME~1\Mikko\LOCALS~1\Temp\plugtmp, 03-Dec-2012 [Folder]03 joulu 2012 14:47:10 - C:\DOCUME~1\Mikko\LOCALS~1\Temp\TempBK, 03-Dec-2012 [Folder]03 joulu 2012 14:47:10 - C:\DOCUME~1\Mikko\LOCALS~1\Temp\{907A1104-E812-4b5c-959B-E4DAB37A96AB}, 01-Dec-2012 [Folder]03 joulu 2012 14:47:10 - C:\Documents and Settings\Mikko\Application Data\Anvisoft, 27-Nov-2012 [Folder]03 joulu 2012 14:47:10 - C:\Documents and Settings\Mikko\Application Data\CheckPoint, 01-Dec-2012 [Folder]03 joulu 2012 14:47:10 - C:\Documents and Settings\Mikko\Application Data\GlarySoft, 01-Dec-2012 [Folder]03 joulu 2012 14:47:10 - C:\Documents and Settings\Mikko\Application Data\Immunet, 28-Nov-2012 [Folder]03 joulu 2012 14:47:10 - C:\Documents and Settings\Mikko\Application Data\IObit, 01-Dec-2012 [Folder]03 joulu 2012 14:47:10 - C:\Documents and Settings\Mikko\Application Data\Microsoft, 31-Oct-2012 [Folder]03 joulu 2012 14:47:10 - C:\Documents and Settings\Mikko\Application Data\SUPERAntiSpyware.com, 19-Nov-2012 [Folder]03 joulu 2012 14:47:10 - C:\Documents and Settings\Mikko\Application Data\thecleaner, 22-Nov-2012 [Folder]03 joulu 2012 14:47:10 - C:\Documents and Settings\Mikko\Application Data\WinPatrol, 18-Nov-2012 [Folder]03 joulu 2012 14:47:10 - C:\Documents and Settings\Mikko\Application Data\..\Application Data, 31-Oct-2012 [Folder]03 joulu 2012 14:47:10 - C:\Documents and Settings\Mikko\Application Data\..\Downloads, 02-Dec-2012 [Folder]03 joulu 2012 14:47:10 - C:\Documents and Settings\Mikko\Application Data\..\IETldCache, 31-Oct-2012 [HS] [Folder]03 joulu 2012 14:47:10 - C:\Documents and Settings\Mikko\Application Data\..\Local Settings, 31-Oct-2012 [H] [Folder]03 joulu 2012 14:47:10 - C:\Documents and Settings\Mikko\Application Data\..\Mallit, 31-Oct-2012 [H] [Folder]03 joulu 2012 14:47:10 - C:\Documents and Settings\Mikko\Application Data\..\PrivacIE, 10-Nov-2012 [HS] [Folder]03 joulu 2012 14:47:10 - C:\Documents and Settings\Mikko\Application Data\..\Recent, 02-Dec-2012 [Folder]03 joulu 2012 14:47:10 - C:\Documents and Settings\Mikko\Application Data\..\SendTo, 31-Oct-2012 [Folder]03 joulu 2012 14:47:10 - C:\Documents and Settings\Mikko\Application Data\..\Tulostinympäristö, 31-Oct-2012 [H] [Folder]03 joulu 2012 14:47:10 - C:\Documents and Settings\Mikko\Application Data\..\UserData, 31-Oct-2012 [HS] [Folder]03 joulu 2012 14:47:10 - C:\Documents and Settings\Mikko\Application Data\..\Verkkoympäristö, 31-Oct-2012 [H] [Folder]03 joulu 2012 14:47:10 - C:\Documents and Settings\All Users.WINDOWS\Application Data\Anvisoft, 27-Nov-2012 [Folder]03 joulu 2012 14:47:10 - C:\Documents and Settings\All Users.WINDOWS\Application Data\CheckPoint, 01-Dec-2012 [Folder]03 joulu 2012 14:47:10 - C:\Documents and Settings\All Users.WINDOWS\Application Data\Common Toolkit Suite, 02-Dec-2012 [Folder]03 joulu 2012 14:47:10 - C:\Documents and Settings\All Users.WINDOWS\Application Data\HitmanPro, 22-Nov-2012 [Folder]03 joulu 2012 14:47:10 - C:\Documents and Settings\All Users.WINDOWS\Application Data\InstallMate, 18-Nov-2012 [Folder]03 joulu 2012 14:47:10 - C:\Documents and Settings\All Users.WINDOWS\Application Data\kingsoft, 26-Nov-2012 [Folder]03 joulu 2012 14:47:10 - C:\Documents and Settings\All Users.WINDOWS\Application Data\KRSHistory, 26-Nov-2012 [Folder]03 joulu 2012 14:47:10 - C:\Documents and Settings\All Users.WINDOWS\Application Data\Microsoft, 31-Oct-2012 [Folder]03 joulu 2012 14:47:10 - C:\Documents and Settings\All Users.WINDOWS\Application Data\MicroWorld, 03-Dec-2012 [Folder]03 joulu 2012 14:47:10 - C:\Documents and Settings\All Users.WINDOWS\Application Data\Protexis, 02-Dec-2012 [Folder]03 joulu 2012 14:47:10 - C:\Documents and Settings\All Users.WINDOWS\Application Data\Rising, 01-Dec-2012 [Folder]03 joulu 2012 14:47:10 - C:\Documents and Settings\All Users.WINDOWS\Application Data\Safe, 26-Nov-2012 [Folder]03 joulu 2012 14:47:10 - C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy, 25-Nov-2012 [Folder]03 joulu 2012 14:47:10 - C:\Documents and Settings\All Users.WINDOWS\Application Data\SUPERAntiSpyware.com, 19-Nov-2012 [Folder]03 joulu 2012 14:47:10 - C:\Documents and Settings\All Users.WINDOWS\Application Data\Zemana AntiMalware, 01-Dec-2012 [Folder]03 joulu 2012 14:47:10 - C:\Documents and Settings\All Users.WINDOWS\Application Data\..\Application Data, 31-Oct-2012 [H] [Folder]03 joulu 2012 14:47:10 - C:\Documents and Settings\All Users.WINDOWS\Application Data\..\DRM, 31-Oct-2012 [HS] [Folder]03 joulu 2012 14:47:10 - C:\Documents and Settings\All Users.WINDOWS\Application Data\..\Mallit, 31-Oct-2012 [H] [Folder]03 joulu 2012 14:47:10 - C:\Program Files\Anvisoft, 27-Nov-2012 [Folder]03 joulu 2012 14:47:10 - C:\Program Files\BillP Studios, 18-Nov-2012 [Folder]03 joulu 2012 14:47:10 - C:\Program Files\CanonBJ, 01-May-2012 [H] [Folder]03 joulu 2012 14:47:10 - C:\Program Files\CheckPoint, 01-Dec-2012 [Folder]03 joulu 2012 14:47:10 - C:\Program Files\Emsisoft Anti-Malware, 30-Nov-2012 [Folder]03 joulu 2012 14:47:10 - C:\Program Files\Glary Utilities, 01-Dec-2012 [Folder]03 joulu 2012 14:47:10 - C:\Program Files\Gore, 01-Dec-2012 [Folder]03 joulu 2012 14:47:10 - C:\Program Files\kingsoft, 26-Nov-2012 [Folder]03 joulu 2012 14:47:10 - C:\Program Files\Rising, 01-Dec-2012 [Folder]03 joulu 2012 14:47:10 - C:\Program Files\Spy Cleaner Gold, 02-Dec-2012 [Folder]03 joulu 2012 14:47:10 - C:\Program Files\SUPERAntiSpyware, 19-Nov-2012 [Folder]03 joulu 2012 14:47:10 - C:\Program Files\The Cleaner, 28-Nov-2012 [Folder]03 joulu 2012 14:47:10 - C:\Program Files\TrojanHunter 5.5, 30-Nov-2012 [Folder]03 joulu 2012 14:47:10 - C:\Program Files\WindowsUpdate, 26-May-2004 [H] [Folder]03 joulu 2012 14:47:10 - C:\Program Files\Zemana AntiMalware, 01-Dec-2012 [Folder]03 joulu 2012 14:47:10 - *********************************************************************************************03 joulu 2012 14:48:39 - Latest Date of files inside MWAV: Mon Dec 3 11:41:57 2012.03 joulu 2012 14:48:39 - Plugins FileCount: 937 Sign Version: 7.4424403 joulu 2012 14:48:39 - Loading/Creating FileScan Database C:\Documents and Settings\All Users.WINDOWS\Application Data\MicroWorld\MWAV\ESCANDBX.MDB [Log: C:\Documents and Settings\Mikko\Local Settings\Temp\ESCANDB.LOG]03 joulu 2012 14:48:40 - Loaded/Created FileScan Database...03 joulu 2012 14:48:40 - Loading AV Library [DB]...03 joulu 2012 14:49:06 - ArchiveScan: DISABLED03 joulu 2012 14:49:12 - AV Library Loaded [DB-DIRECT].03 joulu 2012 14:49:12 - MWAV doing self scanning...03 joulu 2012 14:49:12 - MWAV files are clean.03 joulu 2012 14:49:13 - ArchiveScan: DISABLED03 joulu 2012 14:49:13 - Virus Database Date: 03 Dec 201203 joulu 2012 14:49:13 - Virus Database Count: 8180569 Link to post Share on other sites More sharing options...
Maurice Naggar Posted December 3, 2012 ID:619563 Share Posted December 3, 2012 Howdy,Does your system have the correct Date & Time & Month & Day & Year set properly for your location ?Are you located overseas ....outside the US ?Be advised that Iobit is help in low regards. So I'd advise you to not use their "apps".Download DDS and save it to your desktop from http://download.bleepingcomputer.com/sUBs/dds.com here or http://download.bleepingcomputer.com/sUBs/dds.scr or http://www.infospyware.net/sUBs/ddsDisable any script blocker if your antivirus/antimalware has it.Then double click dds.scr to run the tool.DDS will run in a command prompt window and will take 3 to 4 minutes or so.When done, DDS will open two (2) logs: DDS.txt Attach.txtSave both reports to your desktop. Please Copy & Paste contents of the following logs in your next reply:DDS.txtAttach.txtDo NOT "attach" any logs. Always copy & paste into main body of reply.Download Security Check by screen317 from here.Save it to your Desktop.Double click SecurityCheck.exe and follow the onscreen instructions inside of the black box.A Notepad document should open automatically called checkup.txt; please post the contents of that document. Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted December 3, 2012 Root Admin ID:619567 Share Posted December 3, 2012 Account closed Link to post Share on other sites More sharing options...
Recommended Posts