Avira AntiVir Personal Report file date: 5 lutego 2011 17:11 Scanning for 2441017 virus strains and unwanted programs. The program is running as an unrestricted full version. Online services are available: Licensee : Avira AntiVir Personal - FREE Antivirus Serial number : 0000149996-ADJIE-0000001 Platform : Windows XP Windows version : (Dodatek Service Pack 2) [5.1.2600] Boot mode : Normally booted Username : komputer Computer name : IBM-6328ECAA817 Version information: BUILD.DAT : 10.0.0.609 31824 Bytes 2010-12-13 09:43:00 AVSCAN.EXE : 10.0.3.5 435368 Bytes 2010-12-08 17:19:45 AVSCAN.DLL : 10.0.3.0 46440 Bytes 2010-05-14 18:34:59 LUKE.DLL : 10.0.3.2 104296 Bytes 2010-12-08 17:19:47 LUKERES.DLL : 10.0.0.1 12648 Bytes 2010-02-10 21:40:49 VBASE000.VDF : 7.10.0.0 19875328 Bytes 2009-11-06 07:05:36 VBASE001.VDF : 7.11.0.0 13342208 Bytes 2010-12-14 19:19:50 VBASE002.VDF : 7.11.0.1 2048 Bytes 2010-12-14 19:19:50 VBASE003.VDF : 7.11.0.2 2048 Bytes 2010-12-14 19:19:50 VBASE004.VDF : 7.11.0.3 2048 Bytes 2010-12-14 19:19:50 VBASE005.VDF : 7.11.0.4 2048 Bytes 2010-12-14 19:19:50 VBASE006.VDF : 7.11.0.5 2048 Bytes 2010-12-14 19:19:50 VBASE007.VDF : 7.11.0.6 2048 Bytes 2010-12-14 19:19:50 VBASE008.VDF : 7.11.0.7 2048 Bytes 2010-12-14 19:19:50 VBASE009.VDF : 7.11.0.8 2048 Bytes 2010-12-14 19:19:51 VBASE010.VDF : 7.11.0.9 2048 Bytes 2010-12-14 19:19:51 VBASE011.VDF : 7.11.0.10 2048 Bytes 2010-12-14 19:19:51 VBASE012.VDF : 7.11.0.11 2048 Bytes 2010-12-14 19:19:51 VBASE013.VDF : 7.11.0.52 128000 Bytes 2010-12-16 19:19:52 VBASE014.VDF : 7.11.0.91 226816 Bytes 2010-12-20 22:49:16 VBASE015.VDF : 7.11.0.122 136192 Bytes 2010-12-21 22:49:17 VBASE016.VDF : 7.11.0.156 122880 Bytes 2010-12-24 19:17:04 VBASE017.VDF : 7.11.0.185 146944 Bytes 2010-12-27 16:32:39 VBASE018.VDF : 7.11.0.228 132608 Bytes 2010-12-30 13:24:17 VBASE019.VDF : 7.11.1.5 148480 Bytes 2011-01-03 14:44:32 VBASE020.VDF : 7.11.1.37 156672 Bytes 2011-01-07 14:44:33 VBASE021.VDF : 7.11.1.65 140800 Bytes 2011-01-10 10:32:42 VBASE022.VDF : 7.11.1.87 225280 Bytes 2011-01-11 10:32:49 VBASE023.VDF : 7.11.1.124 125440 Bytes 2011-01-14 10:32:51 VBASE024.VDF : 7.11.1.155 132096 Bytes 2011-01-17 21:04:08 VBASE025.VDF : 7.11.1.189 451072 Bytes 2011-01-20 19:49:54 VBASE026.VDF : 7.11.1.230 138752 Bytes 2011-01-24 22:27:29 VBASE027.VDF : 7.11.2.12 164352 Bytes 2011-01-27 18:33:14 VBASE028.VDF : 7.11.2.13 2048 Bytes 2011-01-27 18:33:15 VBASE029.VDF : 7.11.2.14 2048 Bytes 2011-01-27 18:33:15 VBASE030.VDF : 7.11.2.15 2048 Bytes 2011-01-27 18:33:15 VBASE031.VDF : 7.11.2.39 150016 Bytes 2011-01-31 21:46:34 Engineversion : 8.2.4.158 AEVDF.DLL : 8.1.2.1 106868 Bytes 2010-07-29 21:26:19 AESCRIPT.DLL : 8.1.3.53 1282427 Bytes 2011-01-30 20:22:07 AESCN.DLL : 8.1.7.2 127349 Bytes 2010-11-24 20:58:35 AESBX.DLL : 8.1.3.2 254324 Bytes 2010-11-24 20:58:40 AERDL.DLL : 8.1.9.2 635252 Bytes 2010-09-21 21:07:25 AEPACK.DLL : 8.2.4.9 512374 Bytes 2011-01-30 20:22:04 AEOFFICE.DLL : 8.1.1.16 205179 Bytes 2011-01-30 20:22:02 AEHEUR.DLL : 8.1.2.70 3191159 Bytes 2011-01-30 20:22:01 AEHELP.DLL : 8.1.16.0 246136 Bytes 2010-12-05 14:44:41 AEGEN.DLL : 8.1.5.2 397683 Bytes 2011-01-20 19:50:21 AEEMU.DLL : 8.1.3.0 393589 Bytes 2010-11-24 20:58:22 AECORE.DLL : 8.1.19.2 196983 Bytes 2011-01-20 19:50:11 AEBB.DLL : 8.1.1.0 53618 Bytes 2010-05-14 18:34:59 AVWINLL.DLL : 10.0.0.0 19304 Bytes 2010-01-14 10:03:38 AVPREF.DLL : 10.0.0.0 44904 Bytes 2010-01-14 10:03:35 AVREP.DLL : 10.0.0.8 62209 Bytes 2010-02-18 14:47:40 AVREG.DLL : 10.0.3.2 53096 Bytes 2010-11-04 21:34:40 AVSCPLR.DLL : 10.0.3.2 84328 Bytes 2010-12-08 17:19:45 AVARKT.DLL : 10.0.22.6 231784 Bytes 2010-12-08 17:19:41 AVEVTLOG.DLL : 10.0.0.8 203112 Bytes 2010-01-26 07:53:30 SQLITE3.DLL : 3.6.19.0 355688 Bytes 2010-01-28 10:57:58 AVSMTP.DLL : 10.0.0.17 63848 Bytes 2010-03-16 13:38:56 NETNT.DLL : 10.0.0.0 11624 Bytes 2010-02-19 12:41:00 RCIMAGE.DLL : 10.0.0.26 2550120 Bytes 2010-01-28 11:10:20 RCTEXT.DLL : 10.0.58.0 97128 Bytes 2010-11-04 21:34:39 Configuration settings for the scan: Jobname.............................: Manual Selection Configuration file..................: C:\Documents and Settings\All Users\Dane aplikacji\Avira\AntiVir Desktop\PROFILES\folder.avp Logging.............................: low Primary action......................: interactive Secondary action....................: ignore Scan master boot sector.............: on Scan boot sector....................: on Boot sectors........................: D:, Process scan........................: on Scan registry.......................: on Search for rootkits.................: off Integrity checking of system files..: off Scan all files......................: Intelligent file selection Scan archives.......................: on Recursion depth.....................: 20 Smart extensions....................: on Macro heuristic.....................: on File heuristic......................: medium Start of the scan: 5 lutego 2011 17:11 The scan of running processes will be started Scan process 'avscan.exe' - '1' Module(s) have been scanned Scan process 'avcenter.exe' - '1' Module(s) have been scanned Scan process 'hh.exe' - '1' Module(s) have been scanned Scan process 'ctlcntrx.exe' - '1' Module(s) have been scanned Scan process 'ctlcntr.exe' - '1' Module(s) have been scanned Scan process 'wuauclt.exe' - '1' Module(s) have been scanned Scan process 'hpqgpc01.exe' - '1' Module(s) have been scanned Scan process 'hpqbam08.exe' - '1' Module(s) have been scanned Scan process 'hpqSTE08.exe' - '1' Module(s) have been scanned Scan process 'WLANUTL.exe' - '1' Module(s) have been scanned Scan process 'hpqtra08.exe' - '1' Module(s) have been scanned Scan process 'BTTray.exe' - '1' Module(s) have been scanned Scan process 'igfxsrvc.exe' - '1' Module(s) have been scanned Scan process 'msmsgs.exe' - '1' Module(s) have been scanned Scan process 'HPWuSchd2.exe' - '1' Module(s) have been scanned Scan process 'igfxpers.exe' - '1' Module(s) have been scanned Scan process 'hkcmd.exe' - '1' Module(s) have been scanned Scan process 'igfxtray.exe' - '1' Module(s) have been scanned Scan process 'avgnt.exe' - '1' Module(s) have been scanned Scan process 'jusched.exe' - '1' Module(s) have been scanned Scan process 'smax4pnp.exe' - '1' Module(s) have been scanned Scan process 'alg.exe' - '1' Module(s) have been scanned Scan process 'Explorer.EXE' - '1' Module(s) have been scanned Scan process 'wmiapsrv.exe' - '1' Module(s) have been scanned Scan process 'btwdins.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'wmiprvse.exe' - '1' Module(s) have been scanned Scan process 'RegSrvc.exe' - '1' Module(s) have been scanned Scan process 'unsecapp.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'avshadow.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'jqs.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'EvtEng.exe' - '1' Module(s) have been scanned Scan process 'avguard.exe' - '1' Module(s) have been scanned Scan process 'acs.exe' - '1' Module(s) have been scanned Scan process 'sched.exe' - '1' Module(s) have been scanned Scan process 'spoolsv.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'S24EvMon.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'ibmpmsvc.exe' - '1' Module(s) have been scanned Scan process 'lsass.exe' - '1' Module(s) have been scanned Scan process 'services.exe' - '1' Module(s) have been scanned Scan process 'winlogon.exe' - '1' Module(s) have been scanned Scan process 'csrss.exe' - '1' Module(s) have been scanned Scan process 'smss.exe' - '1' Module(s) have been scanned Starting master boot sector scan: Master boot sector HD0 [INFO] No virus was found! Start scanning boot sectors: Boot sector 'D:\' [INFO] No virus was found! Starting to scan executable files (registry). The registry was scanned ( '402' files ). Starting the file scan: Begin scan in 'D:\' D:\archiwum z dysku c\Administrator\Pulpit\z pena\instalki\amust\amust_registry_cleaner_3.5.exe [DETECTION] Is the TR/ConHook.A.3 Trojan D:\archiwum z dysku c\Administrator\Pulpit\z pena\NOD32 Antivirus System 2.70.39\NOD32.FiX.v2.2.exe [DETECTION] Is the TR/Dropp.D Trojan Beginning disinfection: D:\archiwum z dysku c\Administrator\Pulpit\z pena\NOD32 Antivirus System 2.70.39\NOD32.FiX.v2.2.exe [DETECTION] Is the TR/Dropp.D Trojan [NOTE] The file was moved to the quarantine directory under the name '4774dc9c.qua'. D:\archiwum z dysku c\Administrator\Pulpit\z pena\instalki\amust\amust_registry_cleaner_3.5.exe [DETECTION] Is the TR/ConHook.A.3 Trojan [NOTE] The file was moved to the quarantine directory under the name '5fb0f319.qua'. End of the scan: 5 lutego 2011 17:15 Used time: 03:33 Minute(s) The scan has been done completely. 1271 Scanned directories 40847 Files were scanned 2 Viruses and/or unwanted programs were found 0 Files were classified as suspicious 0 files were deleted 0 Viruses and unwanted programs were repaired 2 Files were moved to quarantine 0 Files were renamed 0 Files cannot be scanned 40845 Files not concerned 1063 Archives were scanned 0 Warnings 2 Notes