also @ TechSpot: Check your bill: AT&T adds new 'administrative fee' to wireless bills

TechSpot

TechSpot News Products Downloads Forums

About
Sign in

Welcome to TechSpot

Why should I register?

Sign up for a new account or log in here:

Forgot your password?

Couldn't sign you in, please try again.

Windows has encountered a critical problem and will restart

Discussion in 'Virus and Malware Removal' started by ajptjd, Sep 30, 2012.

Post New Reply

Page 4 of 5

ajptjd Newcomer, in training Posts: 71

[2009/07/13 21:55:00 | 000,000,227 | RHS- | M] () -- C:\windows\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
"ThreadingModel" = Both
"" = C:\Windows\SysNative\shell32.dll -- [2012/06/08 22:43:10 | 014,172,672 | ---- | M] (Microsoft Corporation)

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
"" = C:\Windows\SysNative\shell32.dll -- [2012/06/08 22:43:10 | 014,172,672 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2012/06/08 21:41:00 | 012,873,728 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009/07/13 18:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2010/11/20 20:24:25 | 000,606,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009/07/13 18:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]

========== LOP Check ==========

[2012/04/11 21:14:37 | 000,000,000 | ---D | M] -- C:\Users\Family\AppData\Roaming\Babylon
[2012/02/16 20:46:33 | 000,000,000 | ---D | M] -- C:\Users\Family\AppData\Roaming\Book Place
[2012/02/10 18:19:04 | 000,000,000 | ---D | M] -- C:\Users\Family\AppData\Roaming\com.w3i.FlipToast
[2012/03/09 16:03:42 | 000,000,000 | ---D | M] -- C:\Users\Family\AppData\Roaming\gtk-2.0
[2012/02/20 10:58:40 | 000,000,000 | ---D | M] -- C:\Users\Family\AppData\Roaming\ooVoo Details
[2012/02/10 17:55:31 | 000,000,000 | ---D | M] -- C:\Users\Family\AppData\Roaming\Opera
[2012/02/16 15:12:52 | 000,000,000 | ---D | M] -- C:\Users\Family\AppData\Roaming\PlayFirst
[2012/08/24 16:14:45 | 000,000,000 | ---D | M] -- C:\Users\Family\AppData\Roaming\SoftGrid Client
[2012/01/31 11:07:31 | 000,000,000 | ---D | M] -- C:\Users\Family\AppData\Roaming\Tific
[2012/01/30 15:22:53 | 000,000,000 | ---D | M] -- C:\Users\Family\AppData\Roaming\Toshiba
[2012/02/16 14:49:24 | 000,000,000 | ---D | M] -- C:\Users\Family\AppData\Roaming\TP
[2012/09/25 05:07:17 | 000,000,000 | ---D | M] -- C:\Users\Family\AppData\Roaming\Unity
[2012/07/05 17:56:03 | 000,000,000 | ---D | M] -- C:\Users\Family\AppData\Roaming\WildTangent
[2012/01/30 17:17:10 | 000,000,000 | ---D | M] -- C:\Users\Family\AppData\Roaming\WinBatch
[2012/02/29 16:34:56 | 000,000,000 | ---D | M] -- C:\Users\Family\AppData\Roaming\WindSolutions
[2012/03/12 21:18:16 | 000,000,000 | ---D | M] -- C:\Users\Guest\AppData\Roaming\IMVU
[2012/03/13 11:42:27 | 000,000,000 | ---D | M] -- C:\Users\Guest\AppData\Roaming\IMVUClient
[2012/03/11 13:36:47 | 000,000,000 | ---D | M] -- C:\Users\Guest\AppData\Roaming\Opera
[2012/03/10 16:42:04 | 000,000,000 | ---D | M] -- C:\Users\Guest\AppData\Roaming\Toshiba
[2012/04/01 11:00:07 | 000,000,000 | ---D | M] -- C:\Users\Guest.FamilyLaptop\AppData\Roaming\Book Place
[2012/09/30 12:06:20 | 000,000,000 | ---D | M] -- C:\Users\Guest.FamilyLaptop\AppData\Roaming\IMVU
[2012/09/23 08:29:03 | 000,000,000 | ---D | M] -- C:\Users\Guest.FamilyLaptop\AppData\Roaming\IMVUClient
[2012/03/14 21:14:37 | 000,000,000 | ---D | M] -- C:\Users\Guest.FamilyLaptop\AppData\Roaming\Opera
[2012/03/13 23:27:00 | 000,000,000 | ---D | M] -- C:\Users\Guest.FamilyLaptop\AppData\Roaming\Toshiba
[2012/08/14 09:34:02 | 000,000,000 | ---D | M] -- C:\Users\Guest.FamilyLaptop\AppData\Roaming\WildTangent
[2012/09/26 08:55:49 | 000,000,000 | ---D | M] -- C:\Users\Guest.FamilyLaptop\AppData\Roaming\WindSolutions

========== Purity Check ==========

========== Hard Links - Junction Points - Mount Points - Symbolic Links ==========
[C:\windows\system64] -> \systemroot\system32 -> Mount Point

========== Alternate Data Streams ==========

@Alternate Data Stream - 132 bytes -> C:\ProgramData\TEMP:B12D1A7D

< End of report >

ajptjd, Oct 8, 2012

#61
ajptjd Newcomer, in training Posts: 71

OTL Extras logfile created on: 10/8/2012 7:39:28 PM - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Family\Desktop
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

2.60 Gb Total Physical Memory | 1.38 Gb Available Physical Memory | 52.98% Memory free
5.20 Gb Paging File | 3.66 Gb Available in Paging File | 70.41% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 282.92 Gb Total Space | 195.90 Gb Free Space | 69.24% Space Free | Partition Type: NTFS

Computer Name: FAMILYLAPTOP | User Name: Family | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Quick Scan | Include 64bit Scans
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========

========== File Associations ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.html[@ = ChromeHTML] -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.)
.url[@ = InternetShortcut] -- C:\windows\SysNative\rundll32.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\windows\SysWow64\control.exe (Microsoft Corporation)
.html [@ = ChromeHTML] -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.)

[HKEY_USERS\S-1-5-21-836366110-978052858-2386034689-1000\SOFTWARE\Classes\<extension>]
.html [@ = ChromeHTML] -- Reg Error: Key error. File not found

========== Shell Spawning ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- Reg Error: Key error.
htmlfile [print] -- rundll32.exe %SystemRoot%\system32\mshtml.dll,PrintHTML "%1" (Microsoft Corporation)
https [open] -- "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" -- "%1" (Google Inc.)
inffile [install] -- %SystemRoot%\System32\rundll32.exe setupapi,InstallHinfSection DefaultInstall 132 %1 (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- Reg Error: Key error.
https [open] -- "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" -- "%1" (Google Inc.)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
"FirewallDisableNotify" = 0
"AntiVirusDisableNotify" = 0
"UpdatesDisableNotify" = 0

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]

========== System Restore Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0

========== Firewall Settings ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]

========== Vista Active Open Ports Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{0294BB2F-6178-459D-8C46-8D1C40D6AD6B}" = rport=445 | protocol=6 | dir=out | app=system |
"{057550CC-1C7E-4C7B-A2F8-3A8DDC978C8C}" = lport=138 | protocol=17 | dir=in | app=system |
"{08E024BB-596A-4DFF-A430-159062EB67CE}" = lport=10243 | protocol=6 | dir=in | app=system |
"{19A5737B-0BEE-43C8-BCD3-3CC714AA4FD3}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{25B9D31D-64EC-44F5-900B-17177C3E5D3C}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{295EF879-34FC-4A05-A484-51AA1443280E}" = lport=445 | protocol=6 | dir=in | app=system |
"{2FA65B31-3A9D-4C20-AFC6-469495F0EF44}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{4084E937-EAAA-47EE-9520-7BE7CE434C09}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe |
"{4BF5EB07-06A2-40E2-B5B6-244EF5C49A0F}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 |
"{5456EA1E-AF45-48BD-9C96-AB99A6CCF1D9}" = lport=139 | protocol=6 | dir=in | app=system |
"{6364B77A-8796-4078-B3CC-5963A3E70B4F}" = rport=139 | protocol=6 | dir=out | app=system |
"{6EFD3216-D4DB-448C-81DA-E8838C66FFD2}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{7C7BD74E-D59D-40F9-8481-A74C4729E9DD}" = rport=138 | protocol=17 | dir=out | app=system |
"{86444BB3-291D-4D31-A046-BB4AA3243C28}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{AF8150A9-8B4A-4262-900E-D368942052B3}" = lport=2869 | protocol=6 | dir=in | app=system |
"{BE10AB93-C4A6-464B-BE93-069E778BFF99}" = rport=10243 | protocol=6 | dir=out | app=system |
"{C232D951-55E7-4D04-9346-F88A07FC0B22}" = lport=137 | protocol=17 | dir=in | app=system |
"{C428A183-FD79-40B5-990D-895328F43AC8}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{CF0676E6-E2EC-438A-9741-7029DEBD00CE}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{F534D21D-02A4-4E48-A237-A3745ED5E6D3}" = rport=137 | protocol=17 | dir=out | app=system |
"{F9C1EEE5-72B7-40C6-BC7C-64E9DF7DEB39}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |

========== Vista Active Application Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{003C7A18-60D9-4C89-94D8-DE42C1AA1D76}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 |
"{02A4D600-582A-4C14-ADFE-C125CF0CB18F}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{1473D86F-6F04-46A3-9153-CD04272511DC}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"{4849799C-D8E9-4360-8F9A-6B5F2BCC7EA4}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 |
"{56E808A1-BFD0-4B79-B567-B9FA848D697F}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 |
"{61FB8AD2-C831-45AB-9DFB-D685C3A8300D}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{62F27534-2769-4D2F-B42F-E96E62F64F44}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{65901CFC-D156-4C8F-90EA-C26D256CA195}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{68F6992D-6E9D-4F14-88EC-3E0B8BEC7EFF}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{8642AF85-31DC-4BB3-8E9D-1E478C224084}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{A5589677-56C4-46C1-A86B-1F0B5425786F}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{AB3FBA72-52C3-4476-9A38-230DBE05659B}" = protocol=17 | dir=in | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{BC7833D1-AE4B-4CAB-BDD5-6EA587E5C763}" = protocol=6 | dir=out | app=system |
"{CE504808-152F-4073-8BB9-0F8E7C4D30C6}" = protocol=17 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{D3648D1D-2BA3-4973-9B7E-EDC907B6E342}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{E8715BB0-E132-4617-B344-62E03BFE2C1C}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 |
"{E926E57D-011D-4F63-BCC5-FFCFDC28D091}" = protocol=6 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{EFA98652-B437-42AA-B7D3-EFFD71ED4ECD}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{F7DCF881-DB9D-4779-8D1C-CCCBAC7C73FF}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |

========== HKEY_LOCAL_MACHINE Uninstall List ==========

ajptjd, Oct 8, 2012

#62
ajptjd Newcomer, in training Posts: 71

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{027E5FAB-1476-4C59-AAB4-32EF28520399}" = Windows Live Language Selector
"{066CFFF8-12BF-4390-A673-75F95EFF188E}" = TOSHIBA Value Added Package
"{1ACC8FFB-9D84-4C05-A4DE-D28A9BC91698}" = Windows Live ID Sign-in Assistant
"{1C8C049A-145F-4A6E-8290-B5C245EBE39D}" = TOSHIBA Bulletin Board
"{24811C12-F4A9-4D0F-8494-A7B8FE46123C}" = TOSHIBA ReelTime
"{4ACA5AE7-E68C-5A48-F8E6-D67946267506}" = ATI Catalyst Install Manager
"{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148
"{5DA0E02F-970B-424B-BF41-513A5018E4C0}" = TOSHIBA Disc Creator
"{5E11C972-1E76-45FE-8F92-14E0D1140B1B}" = iTunes
"{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161
"{6316805C-2485-2FF5-974C-750E3BE1DF65}" = AMD Media Foundation Decoders
"{65486209-5C54-439C-8383-8AC9BBE25932}" = Atheros Bluetooth Filter Driver Package
"{656DEEDE-F6AC-47CA-A568-A1B4E34B5760}" = Windows Live Remote Service Resources
"{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}" = Bonjour
"{75104836-CAC7-444E-A39E-3F54151942F5}" = Apple Mobile Device Support
"{8220EEFE-38CD-377E-8595-13398D740ACE}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17
"{847B0532-55E3-4AAF-8D7B-E3A1A7CD17E5}" = Windows Live Remote Client Resources
"{90140000-006D-0409-1000-0000000FF1CE}" = Microsoft Office Click-to-Run 2010
"{95120000-00B9-0409-1000-0000000FF1CE}" = Microsoft Application Error Reporting
"{A34D9B7F-8453-DA02-DC98-EEEE085411C6}" = ccc-utility64
"{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{BCA9334F-B6C9-4F65-9A73-AC5A329A4D04}" = PlayReady PC Runtime amd64
"{CEBB6BFB-D708-4F99-A633-BC2600E01EF6}" = Bluetooth Stack for Windows by Toshiba
"{D4322448-B6AF-4316-B859-D8A0E84DCB38}" = TOSHIBA HDD/SSD Alert
"{DA54F80E-261C-41A2-A855-549A144F2F59}" = Windows Live MIME IFilter
"{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}" = Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319
"{DF6D988A-EEA0-4277-AAB8-158E086E439B}" = Windows Live Remote Client
"{E02A6548-6FDE-40E2-8ED9-119D7D7E641F}" = Windows Live Remote Service
"{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile
"{F67FA545-D8E5-4209-86B1-AEE045D1003F}" = TOSHIBA Face Recognition
"CNXT_AUDIO_HDA" = Conexant HD Audio
"Elantech" = ETDWare PS/2-X64 8.0.8.0_R01
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"WinRAR archiver" = WinRAR 4.20 (64-bit)

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{0146E330-EEE7-B924-B347-B399460893ED}" = CCC Help Czech
"{066CFFF8-12BF-4390-A673-75F95EFF188E}" = TOSHIBA Value Added Package
"{09927C92-A652-057A-3A7B-153F23175C58}" = CCC Help Dutch
"{0AF17224-CF88-40B8-BB1A-D179369847B4}" = TOSHIBA Supervisor Password
"{0B0F231F-CE6A-483D-AA23-77B364F75917}" = Windows Live Installer
"{0D795777-9D60-4692-8386-F2B3F2B5E5BF}" = Label@Once 1.0
"{109CBCC5-7151-1CC6-DAD6-6F7DD3162A8A}" = Catalyst Control Center InstallProxy
"{196BB40D-1578-3D01-B289-BEFC77A11A1E}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319
"{19BA08F7-C728-469C-8A35-BFBD3633BE08}" = Windows Live Movie Maker
"{19E40731-8E1A-07FB-DA7D-8A54603F6408}" = CCC Help English
"{1B97813D-74A7-25EB-4837-792413507E82}" = CCC Help Danish
"{1CF94211-A7BB-8151-44B8-6618C5A162F8}" = CCC Help Portuguese
"{1D7FEEAC-6CEE-5B5F-A8B0-9BE7A6BCB7FB}" = CCC Help Chinese Traditional
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}" = Junk Mail filter update
"{200FEC62-3C34-4D60-9CE8-EC372E01C08F}" = Windows Live SOXE Definitions
"{247E03D2-485B-7A70-BF5C-AB9BDF6AFB44}" = CCC Help Polish
"{26A24AE4-039D-4CA4-87B4-2F83217006FF}" = Java 7 Update 6
"{2902F983-B4C1-44BA-B85D-5C6D52E2C441}" = Windows Live Mesh ActiveX Control for Remote Connections
"{2A3FC24C-6EC0-4519-A52B-FDA4EA9B2D24}" = Windows Live Messenger
"{2EEFB3C4-4706-C2B5-DF69-CF914D87BCE4}" = CCC Help Swedish
"{2FA94A64-C84E-49d1-97DD-7BF06C7BBFB2}.WildTangent Games App" = Update Installer for WildTangent Games App
"{3108C217-BE83-42E4-AE9E-A56A2A92E549}" = Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver
"{3135D885-9D9A-4B4D-8D45-9DB05DA115CA}" = Amazon Links
"{3336F667-9049-4D46-98B6-4C743EEBC5B1}" = Windows Live Photo Gallery
"{337FDED7-D27B-E476-E888-3674E1C01C69}" = CCC Help Spanish
"{343666E2-A059-48AC-AD67-230BF74E2DB2}" = Apple Application Support
"{34F4D9A4-42C2-4348-BEF4-E553C84549E7}" = Windows Live Photo Gallery
"{4485C9D0-A742-F1BB-C0B0-58FC61960D99}" = CCC Help Korean
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{579684A4-DDD5-4CA3-9EA8-7BE7D9593DB4}" = Windows Live UX Platform Language Pack
"{5AF550B4-BB67-4E7E-82F1-2C4300279050}" = TOSHIBARegistration
"{612C34C7-5E90-47D8-9B5C-0F717DD82726}" = swMSM
"{666E35A7-A224-E3E9-48C2-C641837535D9}" = Catalyst Control Center Localization All
"{682B3E4F-696A-42DE-A41C-4C07EA1678B4}" = Windows Live SOXE
"{6F3C8901-EBD3-470D-87F8-AC210F6E5E02}" = TOSHIBA Web Camera Application
"{70B446D1-E03B-4ab0-9B3C-0832142C9AA8}.WildTangent Games App-toshiba" = WildTangent Games App (Toshiba Games)
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}" = Apple Software Update
"{8064A378-46F4-4A4E-8AF5-153D0D4018DD}" = Catalyst Control Center - Branding
"{83601916-2E71-F1C7-EE5F-A1C985BC9217}" = CCC Help German
"{83C292B7-38A5-440B-A731-07070E81A64F}" = Windows Live PIMT Platform
"{8A34A135-D405-DD03-9B2E-0EB99238A312}" = CCC Help Finnish
"{8C6D6116-B724-4810-8F2D-D047E6B7D68E}" = Mesh Runtime
"{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}" = MSVCRT
"{90140011-0066-0409-0000-0000000FF1CE}" = Microsoft Office Starter 2010 - English
"{92EA4134-10D1-418A-91E1-5A0453131A38}" = Windows Live Movie Maker
"{95140000-0070-0000-0000-0000000FF1CE}" = Microsoft Office 2010
"{9550EA6C-4CBE-C1F3-1E1C-5E87F2C645ED}" = CCC Help French
"{96AE7E41-E34E-47D0-AC07-1091A8127911}" = Realtek USB 2.0 Card Reader
"{970472D0-F5F9-4158-A6E3-1AE49EFEF2D3}" = TOSHIBA Application Installer
"{97965331-BC5D-4D9F-B6DF-5C0A123E4AE0}" = TOSHIBA Hardware Setup
"{97F67013-3076-4261-DC10-808409655042}" = AMD VISION Engine Control Center
"{986BB897-C295-2FED-8DCA-4ADE3AFCEF84}" = CCC Help Russian
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{9D56775A-93F3-44A3-8092-840E3826DE30}" = Windows Live Mail
"{9E4D695B-87A6-49A7-A36C-85F2E63B669D}" = FBDownloader IE Add-on
"{A0C91188-C88F-4E86-93E6-CD7C9A266649}" = Windows Live Mesh
"{A14962A7-2B7D-456E-BFCD-F54E3A88D41F}" = Toshiba Book Place
"{A4FF8F4E-D665-712B-07EE-F03ED360E9BE}" = CCC Help Italian
"{A726AE06-AAA3-43D1-87E3-70F510314F04}" = Windows Live Writer
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{A9BDCA6B-3653-467B-AC83-94367DA3BFE3}" = Windows Live Photo Common
"{AAAFC670-569B-4A2F-82B4-42945E0DE3EF}" = Windows Live Writer
"{AAF454FC-82CA-4F29-AB31-6A109485E76E}" = Windows Live Writer
"{AC6569FA-6919-442A-8552-073BE69E247A}" = TOSHIBA Service Station
"{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" = Adobe Reader X MUI
"{ADB50F70-98FF-067F-DF39-47DD83E32D58}" = CCC Help Chinese Standard
"{B65BBB06-1F8E-48F5-8A54-B024A9E15FDF}" = TOSHIBA Recovery Media Creator
"{B83FCE14-53D5-CBF8-87E9-59B8968ADB4C}" = CCC Help Norwegian
"{C05D8CDB-417D-4335-A38C-A0659EDFD6B8}" = The Sims™ 3
"{C2A276E3-154E-44DC-AAF1-FFDD7FD30E35}" = TOSHIBA Assist
"{C3A32068-8AB1-4327-BB16-BED9C6219DC7}" = Atheros Driver Installation Program
"{C57BCDE1-7CB9-467D-B3BA-7E119916CDC1}" = Toshiba Online Backup
"{C66824E4-CBB3-4851-BB3F-E8CFD6350923}" = Windows Live Mail
"{C78E3449-4F24-839B-5F7A-6911C67A5BE9}" = Catalyst Control Center Graphics Previews Common
"{C7A4F26F-F9B0-41B2-8659-99181108CDE3}" = TOSHIBA Media Controller
"{CCA5EAAD-92F4-4B7A-B5EE-14294C66AB61}" = PlayReady PC Runtime x86
"{CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}" = Windows Live UX Platform
"{D0B44725-3666-492D-BEF6-587A14BD9BD9}" = MSVCRT_amd64
"{D436F577-1695-4D2F-8B44-AC76C99E0002}" = Windows Live Photo Common
"{D45240D3-B6B3-4FF9-B243-54ECE3E10066}" = Windows Live Communications Platform
"{D6E90970-BA9C-51AA-EFA2-9F80A7AE0956}" = CCC Help Thai
"{D826A52E-0AC9-5A55-61B8-0E088477A1B0}" = CCC Help Greek
"{DA84ECBF-4B79-47F2-B34C-95C38484C058}" = Skype Launcher
"{DDC8BDEE-DCAC-404D-8257-3E8D4B782467}" = Windows Live Writer Resources
"{DECDCB7C-58CC-4865-91AF-627F9798FE48}" = Windows Live Mesh
"{E09C4DB7-630C-4F06-A631-8EA7239923AF}" = D3DX10
"{E3E71D07-CD27-46CB-8448-16D4FB29AA13}" = Microsoft WSE 3.0 Runtime
"{E5B21F11-6933-4E0B-A25C-7963E3C07D11}" = Windows Live Messenger
"{E69540AC-FFC3-5519-F925-5ACC8D20DED5}" = CCC Help Hungarian
"{E69992ED-A7F6-406C-9280-1C156417BC49}" = TOSHIBA Quality Application
"{E9D96BD5-7D33-7ED3-0A8E-229FA2524487}" = CCC Help Turkish
"{ED3CBA78-488F-4E8C-B33F-8E3BF4DDB4D2}" = Toshiba App Place
"{EE7257A2-39A2-4D2F-9DAC-F9F25B8AE1D8}" = Skype™ 5.10
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F931F27F-A967-982A-9226-494787D5FBBB}" = CCC Help Japanese
"{FE044230-9CA5-43F7-9B58-5AC5A28A1F33}" = Windows Live Essentials
"{FE23D063-934D-4829-A0D8-00634CE79B4A}" = Adobe AIR
"Adobe AIR" = Adobe AIR
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"Adobe Shockwave Player" = Adobe Shockwave Player 11.6
"avast" = avast! Free Antivirus
"Google Chrome" = Google Chrome
"InstallShield_{066CFFF8-12BF-4390-A673-75F95EFF188E}" = TOSHIBA Value Added Package
"InstallShield_{1C8C049A-145F-4A6E-8290-B5C245EBE39D}" = TOSHIBA Bulletin Board
"InstallShield_{24811C12-F4A9-4D0F-8494-A7B8FE46123C}" = TOSHIBA ReelTime
"InstallShield_{6F3C8901-EBD3-470D-87F8-AC210F6E5E02}" = TOSHIBA Web Camera Application
"InstallShield_{F67FA545-D8E5-4209-86B1-AEE045D1003F}" = TOSHIBA Face Recognition
"Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware version 1.65.0.1400
"Mozilla Firefox 14.0.1 (x86 en-US)" = Mozilla Firefox 14.0.1 (x86 en-US)
"MozillaMaintenanceService" = Mozilla Maintenance Service
"NIS" = Norton Internet Security
"NortonPCCheckup" = Toshiba Laptop Checkup
"Office14.Click2Run" = Microsoft Office Click-to-Run 2010
"Opera 12.00.1467" = Opera 12.00
"WildTangent toshiba Master Uninstall" = WildTangent Games
"WinGimp-2.0_is1" = GIMP 2.6.11
"WinLiveSuite" = Windows Live Essentials
"WTA-0a5021e4-b943-429a-9154-ac0e2206e3d2" = Zuma's Revenge
"WTA-12f734d2-da85-4e84-8e7d-5782aee2f407" = Letters from Nowhere 2
"WTA-20f97249-6445-46dc-893b-36c11393143e" = Penguins!
"WTA-304be9c7-d101-4b25-9c39-995c6a7a670c" = Polar Bowler
"WTA-457abdce-65f5-4c75-a612-ade75dcb70a4" = Tales of Lagoona
"WTA-4734ea86-69b3-41d9-ae9c-fc1a7ddd1c2a" = Plants vs. Zombies - Game of the Year
"WTA-a7af9594-8359-4531-8da2-ce1104aa53a4" = Bejeweled 3
"WTA-b3dd5b5f-8cb6-45e5-baec-fd3c7c4c59ca" = RollerCoaster Tycoon 3: Platinum
"WTA-e1d0cbec-d9ea-478f-832f-5587bd3808f4" = FATE - The Traitor Soul

========== HKEY_USERS Uninstall List ==========

[HKEY_USERS\S-1-5-21-836366110-978052858-2386034689-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"CopyTrans Suite" = CopyTrans Suite Remove Only

========== Last 20 Event Log Errors ==========

[ Application Events ]
Error - 10/8/2012 1:36:46 PM | Computer Name = FamilyLaptop | Source = CVHSVC | ID = 100
Description = Information only. Error: Initialization failed 0x80070424 Type: 88::UnexpectedError.

Error - 10/8/2012 1:39:11 PM | Computer Name = FamilyLaptop | Source = Application Error | ID = 1000
Description = Faulting application name: wlarp.exe, version: 15.4.3555.308, time
stamp: 0x4f596764 Faulting module name: ntdll.dll, version: 6.1.7601.17725, time
stamp: 0x4ec49b8f Exception code: 0xc0000005 Fault offset: 0x00038dc9 Faulting process
id: 0x1314 Faulting application start time: 0x01cda57bc9f6baa9 Faulting application
path: C:\Program Files (x86)\Windows Live\Installer\wlarp.exe Faulting module path:
C:\windows\SysWOW64\ntdll.dll Report Id: 1120f9e6-116f-11e2-bb2e-00266cea2f06

Error - 10/8/2012 2:14:03 PM | Computer Name = FamilyLaptop | Source = WinMgmt | ID = 10
Description =

Error - 10/8/2012 2:22:44 PM | Computer Name = FamilyLaptop | Source = CVHSVC | ID = 100
Description = Information only. Error: Initialization failed 0x80070424 Type: 88::UnexpectedError.

Error - 10/8/2012 7:14:54 PM | Computer Name = FamilyLaptop | Source = WinMgmt | ID = 10
Description =

Error - 10/8/2012 7:23:44 PM | Computer Name = FamilyLaptop | Source = CVHSVC | ID = 100
Description = Information only. Error: Initialization failed 0x80070424 Type: 88::UnexpectedError.

Error - 10/8/2012 9:05:02 PM | Computer Name = FamilyLaptop | Source = WinMgmt | ID = 10
Description =

Error - 10/8/2012 9:14:37 PM | Computer Name = FamilyLaptop | Source = CVHSVC | ID = 100
Description = Information only. Error: There are currently no active network connections.
Background Intelligent Transfer Service (BITS) will try again when an adapter is
connected. ErrorCode: 14007(0x36b7).

Error - 10/8/2012 9:29:37 PM | Computer Name = FamilyLaptop | Source = WinMgmt | ID = 10
Description =

Error - 10/8/2012 9:40:22 PM | Computer Name = FamilyLaptop | Source = CVHSVC | ID = 100
Description = Information only. Error: The server returned an invalid or unrecognized
response ErrorCode: 14007(0x36b7).

[ System Events ]
Error - 10/8/2012 7:43:07 PM | Computer Name = FamilyLaptop | Source = Service Control Manager | ID = 7023
Description = The Function Discovery Resource Publication service terminated with
the following error: %%-2147024891

Error - 10/8/2012 7:43:07 PM | Computer Name = FamilyLaptop | Source = Service Control Manager | ID = 7001
Description = The HomeGroup Provider service depends on the Function Discovery Resource
Publication service which failed to start because of the following error: %%-2147024891

Error - 10/8/2012 7:50:39 PM | Computer Name = FamilyLaptop | Source = Service Control Manager | ID = 7023
Description = The Function Discovery Resource Publication service terminated with
the following error: %%-2147024891

Error - 10/8/2012 7:50:39 PM | Computer Name = FamilyLaptop | Source = Service Control Manager | ID = 7001
Description = The HomeGroup Provider service depends on the Function Discovery Resource
Publication service which failed to start because of the following error: %%-2147024891

Error - 10/8/2012 8:50:22 PM | Computer Name = FamilyLaptop | Source = Service Control Manager | ID = 7030
Description = The PEVSystemStart service is marked as an interactive service. However,
the system is configured to not allow interactive services. This service may not
function properly.

Error - 10/8/2012 8:58:52 PM | Computer Name = FamilyLaptop | Source = Application Popup | ID = 1060
Description = \??\C:\ComboFix\catchme.sys has been blocked from loading due to incompatibility
with this system. Please contact your software vendor for a compatible version
of the driver.

Error - 10/8/2012 9:01:53 PM | Computer Name = FamilyLaptop | Source = Service Control Manager | ID = 7030
Description = The PEVSystemStart service is marked as an interactive service. However,
the system is configured to not allow interactive services. This service may not
function properly.

Error - 10/8/2012 9:02:07 PM | Computer Name = FamilyLaptop | Source = DCOM | ID = 10010
Description =

Error - 10/8/2012 9:11:06 PM | Computer Name = FamilyLaptop | Source = Microsoft-Windows-WindowsUpdateClient | ID = 20
Description = Installation Failure: Windows failed to install the following update
with error 0x800f0902: Security Update for Windows 7 for x64-based Systems (KB2676562).

Error - 10/8/2012 9:26:32 PM | Computer Name = FamilyLaptop | Source = DCOM | ID = 10010
Description =

< End of report >

ajptjd, Oct 8, 2012

#63

Broni Malware Annihilator Posts: 39,398 +177

We'll get to updates...

You're running two AV programs, Avast and Norton.
You must uninstall one of them.
If Norton use this tool: http://majorgeeks.com/Norton_Removal_Tool_SymNRT_d4749.html

Next....

Run OTL
Under the Custom Scans/Fixes box at the bottom, paste in the following
Code:
:OTL
IE - HKU\S-1-5-21-836366110-978052858-2386034689-1000\..\URLSearchHook: - No CLSID value found
IE - HKU\S-1-5-21-836366110-978052858-2386034689-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = <local>;*.local
O2 - BHO: (Shop to Win) - {EE146ACC-D881-1414-2148-B1D008B47ADB} - C:\Program Files (x86)\Shop to Win 27\Shop to Win 27.dll File not found
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKU\S-1-5-21-836366110-978052858-2386034689-1000\..\Toolbar\WebBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No CLSID value found.
O4 - Startup: C:\Users\Family\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\fliptoast.lnk = File not found
O4 - Startup: C:\Users\Guest.FamilyLaptop\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\IMVU.lnk = File not found
[2012/10/07 21:52:02 | 000,000,000 | ---D | C] -- C:\FRST
[2009/07/13 21:55:00 | 000,000,227 | RHS- | M] () -- C:\windows\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
"ThreadingModel" = Both
"" = C:\Windows\SysNative\shell32.dll -- [2012/06/08 22:43:10 | 014,172,672 | ---- | M] (Microsoft Corporation)

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
"" = C:\Windows\SysNative\shell32.dll -- [2012/06/08 22:43:10 | 014,172,672 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2012/06/08 21:41:00 | 012,873,728 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009/07/13 18:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2010/11/20 20:24:25 | 000,606,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009/07/13 18:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
@Alternate Data Stream - 132 bytes -> C:\ProgramData\TEMP:B12D1A7D

:Commands
[purity]
[emptytemp]
[emptyjava]
[emptyflash]
[Reboot]
Then click the Run Fix button at the top

Let the program run unhindered, reboot the PC when it is done

You will get a log that shows the results of the fix. Please post it.
NOTE. If for any reason OTL stalls (most likely at "killing processes..." step) run the fix from safe mode.

=================================

Last scans...

1. Download Security Check from HERE, and save it to your Desktop.

Double-click SecurityCheck.exe

Follow the onscreen instructions inside of the black box.

A Notepad document should open automatically called checkup.txt; please post the contents of that document.

NOTE SecurityCheck may produce some false warning(s), so leave the results reading to me.

2. Please download Farbar Service Scanner (FSS) and run it on the computer with the issue.

Make sure the following options are checked:

Internet Services

Windows Firewall

System Restore

Security Center

Windows Update

Windows Defender

Press "Scan".

It will create a log (FSS.txt) in the same directory the tool is run.

Please copy and paste the log to your reply.

3. Please download AdwCleaner by Xplode onto your desktop.

Close all open programs and internet browsers.

Double click on adwcleaner.exe to run the tool.

Click on Delete.

Confirm each time with Ok.

Your computer will be rebooted automatically. A text file will open after the restart.

Please post the contents of that logfile with your next reply.

You can find the logfile at C:\AdwCleaner[S1].txt as well.

Next...

Double click on adwcleaner.exe to run the tool.

Click on Uninstall.

Confirm with yes.

4. Download Temp File Cleaner (TFC)
Alternate download: http://www.itxassociates.com/OT-Tools/TFC.exe

Double click on TFC.exe to run the program.

Click on Start button to begin cleaning process.

TFC will close all running programs, and it may ask you to restart computer.

5. Please run a free online scan with the ESET Online Scanner

Disable your antivirus program

Tick the box next to YES, I accept the Terms of Use

Click Start

Accept any security warnings from your browser.

Check Scan archives

Click Start

ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.

When the scan completes, click on List of found threats

Click on Export to text file , and save the file to your desktop using a unique name, such as ESETScan. Include the contents of this report in your next reply.

NOTE. If Eset won't find any threats, it won't produce any log.

Broni, Oct 8, 2012

#64

ajptjd Newcomer, in training Posts: 71

At the very top, it says processes killed. I'm just wondering if I did it right

All processes killed
========== OTL ==========
Registry value HKEY_USERS\S-1-5-21-836366110-978052858-2386034689-1000\Software\Microsoft\Internet Explorer\URLSearchHooks\\ deleted successfully.
HKU\S-1-5-21-836366110-978052858-2386034689-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyOverride| /E : value set successfully!
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE146ACC-D881-1414-2148-B1D008B47ADB}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{EE146ACC-D881-1414-2148-B1D008B47ADB}\ deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\Locked deleted successfully.
Registry value HKEY_USERS\S-1-5-21-836366110-978052858-2386034689-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{2318C2B1-4965-11D4-9B18-009027A5CD4F} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2318C2B1-4965-11D4-9B18-009027A5CD4F}\ not found.
C:\Users\Family\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\fliptoast.lnk moved successfully.
C:\Users\Guest.FamilyLaptop\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\IMVU.lnk moved successfully.
C:\FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U folder moved successfully.
C:\FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\{1124a725-e7eb-82f4-e978-28044d39f9dc}\L folder moved successfully.
C:\FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\{1124a725-e7eb-82f4-e978-28044d39f9dc} folder moved successfully.
C:\FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U folder moved successfully.
C:\FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\L folder moved successfully.
C:\FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc} folder moved successfully.
Folder move failed. C:\FRST\Quarantine scheduled to be moved on reboot.
C:\FRST\Logs folder moved successfully.
C:\FRST\Hives folder moved successfully.
C:\FRST folder moved successfully.
C:\windows\assembly\Desktop.ini moved successfully.
File EY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64 not found.
File EY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] not found.
File EY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64 not found.
File EY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] not found.
File EY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64 not found.
File EY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] not found.
Folder EY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64\ not found.
Folder EY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]\ not found.
Folder EY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64\ not found.
Folder EY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]\ not found.
ADS C:\ProgramData\TEMP:B12D1A7D deleted successfully.
========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 56475 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: Family
->Temp folder emptied: 26400953 bytes
->Temporary Internet Files folder emptied: 312355699 bytes
->Java cache emptied: 2363998 bytes
->FireFox cache emptied: 86858572 bytes
->Google Chrome cache emptied: 13343101 bytes
->Opera cache emptied: 87247168 bytes
->Flash cache emptied: 239689 bytes

User: Guest
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 100989450 bytes
->FireFox cache emptied: 245502157 bytes
->Google Chrome cache emptied: 110865618 bytes
->Opera cache emptied: 13829392 bytes
->Flash cache emptied: 8938 bytes

User: Guest.FamilyLaptop
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 58403239 bytes
->Java cache emptied: 953 bytes
->FireFox cache emptied: 186993932 bytes
->Google Chrome cache emptied: 21416386 bytes
->Opera cache emptied: 92714382 bytes
->Flash cache emptied: 78633 bytes

User: Public
->Temp folder emptied: 0 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 0 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 50333 bytes
RecycleBin emptied: 63 bytes

Total Files Cleaned = 1,297.00 mb

[EMPTYJAVA]

User: All Users

User: Default

User: Default User

User: Family
->Java cache emptied: 0 bytes

User: Guest

User: Guest.FamilyLaptop
->Java cache emptied: 0 bytes

User: Public

Total Java Files Cleaned = 0.00 mb

[EMPTYFLASH]

User: All Users

User: Default
->Flash cache emptied: 0 bytes

User: Default User
->Flash cache emptied: 0 bytes

User: Family
->Flash cache emptied: 0 bytes

User: Guest
->Flash cache emptied: 0 bytes

User: Guest.FamilyLaptop
->Flash cache emptied: 0 bytes

User: Public

Total Flash Files Cleaned = 0.00 mb

OTL by OldTimer - Version 3.2.69.0 log created on 10082012_205323

Files\Folders moved on Reboot...
File\Folder C:\FRST\Quarantine not found!
C:\Users\Family\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.
File move failed. C:\windows\temp\_avast_\Webshlock.txt scheduled to be moved on reboot.

PendingFileRenameOperations files...

Registry entries deleted on Reboot...

ajptjd, Oct 8, 2012

#65

Broni Malware Annihilator Posts: 39,398 +177

You did just fine

Broni, Oct 8, 2012

#66

ajptjd Newcomer, in training Posts: 71

Results of screen317's Security Check version 0.99.51
Windows 7 Service Pack 1 x64 (UAC is enabled)
Internet Explorer 9
``````````````Antivirus/Firewall Check:``````````````
Windows Firewall Enabled!
avast! Antivirus
Antivirus up to date!
`````````Anti-malware/Other Utilities Check:`````````
Malwarebytes Anti-Malware version 1.65.0.1400
Java 7 Update 6
Java version out of Date!
Mozilla Firefox 14.0.1 Firefox out of Date!
Google Chrome 21.0.1180.83
Google Chrome 21.0.1180.89
Google Chrome 22.0.1229.79
````````Process Check: objlist.exe by Laurent````````
Norton ccSvcHst.exe
Malwarebytes' Anti-Malware mbamscheduler.exe
AVAST Software Avast AvastSvc.exe
AVAST Software Avast AvastUI.exe
`````````````````System Health check`````````````````
Total Fragmentation on Drive C: 16% Defragment your hard drive soon! (Do NOT defrag if SSD!)
````````````````````End of Log``````````````````````

ajptjd, Oct 8, 2012

#67
ajptjd Newcomer, in training Posts: 71

Farbar Service Scanner Version: 07-10-2012
Ran by Family (administrator) on 08-10-2012 at 21:16:48
Running from "C:\Users\Family\Downloads"
Microsoft Windows 7 Home Premium Service Pack 1 (X64)
Boot Mode: Normal
****************************************************************

Internet Services:
============

Connection Status:
==============
Localhost is accessible.
LAN connected.
Google IP is accessible.
Google.com is accessible.
Yahoo IP is accessible.
Yahoo.com is accessible.

Windows Firewall:
=============

Firewall Disabled Policy:
==================

System Restore:
============

System Restore Disabled Policy:
========================

Action Center:
============

Windows Update:
============

Windows Autoupdate Disabled Policy:
============================

Windows Defender:
==============

Other Services:
==============

File Check:
========
C:\Windows\System32\nsisvc.dll => MD5 is legit
C:\Windows\System32\drivers\nsiproxy.sys => MD5 is legit
C:\Windows\System32\dhcpcore.dll => MD5 is legit
C:\Windows\System32\drivers\afd.sys => MD5 is legit
C:\Windows\System32\drivers\tdx.sys => MD5 is legit
C:\Windows\System32\Drivers\tcpip.sys => MD5 is legit
C:\Windows\System32\dnsrslvr.dll => MD5 is legit
C:\Windows\System32\mpssvc.dll => MD5 is legit
C:\Windows\System32\bfe.dll => MD5 is legit
C:\Windows\System32\drivers\mpsdrv.sys => MD5 is legit
C:\Windows\System32\SDRSVC.dll => MD5 is legit
C:\Windows\System32\vssvc.exe => MD5 is legit
C:\Windows\System32\wscsvc.dll => MD5 is legit
C:\Windows\System32\wbem\WMIsvc.dll => MD5 is legit
C:\Windows\System32\wuaueng.dll => MD5 is legit
C:\Windows\System32\qmgr.dll => MD5 is legit
C:\Windows\System32\es.dll => MD5 is legit
C:\Windows\System32\cryptsvc.dll => MD5 is legit
C:\Program Files\Windows Defender\MpSvc.dll => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit

**** End of log ****

ajptjd, Oct 8, 2012

#68
ajptjd Newcomer, in training Posts: 71

# AdwCleaner v2.004 - Logfile created 10/08/2012 at 21:23:16
# Updated 06/10/2012 by Xplode
# Operating system : Windows 7 Home Premium Service Pack 1 (64 bits)
# User : Family - FAMILYLAPTOP
# Boot Mode : Normal
# Running from : C:\Users\Family\Desktop\adwcleaner.exe
# Option [Delete]

***** [Services] *****

***** [Files / Folders] *****

File Deleted : C:\Program Files (x86)\Mozilla Firefox\searchplugins\avg-secure-search.xml
File Deleted : C:\Program Files (x86)\Mozilla Firefox\searchplugins\babylon.xml
File Deleted : C:\user.js
File Deleted : C:\Users\Family\AppData\Local\funmoods-speeddial.crx
Folder Deleted : C:\Program Files (x86)\Babylon
Folder Deleted : C:\Program Files (x86)\Conduit
Folder Deleted : C:\Program Files\Babylon
Folder Deleted : C:\ProgramData\Babylon
Folder Deleted : C:\Users\Family\AppData\Local\Babylon
Folder Deleted : C:\Users\Family\AppData\Local\Conduit
Folder Deleted : C:\Users\Family\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpglkicenollcignonpgiafdgfeehoj
Folder Deleted : C:\Users\Family\AppData\LocalLow\Conduit
Folder Deleted : C:\Users\Family\AppData\Roaming\Babylon
Folder Deleted : C:\Users\Family\Documents\ShopToWin

***** [Registry] *****

Key Deleted : HKCU\Software\AppDataLow\Software\Conduit
Key Deleted : HKCU\Software\AppDataLow\Software\Crossrider
Key Deleted : HKCU\Software\AppDataLow\Software\Fun Web Products
Key Deleted : HKCU\Software\AppDataLow\Software\FunWebProducts
Key Deleted : HKCU\Software\AppDataLow\Software\MyWebSearch
Key Deleted : HKCU\Software\AppDataLow\Software\PriceGong
Key Deleted : HKCU\Software\Google\Chrome\Extensions\cjpglkicenollcignonpgiafdgfeehoj
Key Deleted : HKCU\Software\IGearSettings
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2EECD738-5844-4A99-B4B6-146BF802613B}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2EECD738-5844-4A99-B4B6-146BF802613B}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F25AF245-4A81-40DC-92F9-E9021F207706}
Key Deleted : HKCU\Software\ShopToWin
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}
Key Deleted : HKLM\Software\Babylon
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{EA28B360-05E0-4F93-8150-02891F1D8D3C}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\escort.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\escortApp.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\escortEng.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\escorTlbr.DLL
Key Deleted : HKLM\SOFTWARE\Classes\FCTB000100565.IEToolbar
Key Deleted : HKLM\SOFTWARE\Classes\FCTB000100565.IEToolbar.1
Key Deleted : HKLM\SOFTWARE\Classes\FCTB000100565.JSOptionsImpl
Key Deleted : HKLM\SOFTWARE\Classes\FCTB000100565.JSOptionsImpl.1
Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT3150609
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}
Key Deleted : HKLM\Software\Conduit
Key Deleted : HKLM\SOFTWARE\FCTB000100565
Key Deleted : HKLM\Software\Freeze.com
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\Babylon_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\Babylon_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{08858AF6-42AD-4914-95D2-AC3AB0DC8E28}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{2EECD738-5844-4A99-B4B6-146BF802613B}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{CC5AD34C-6F10-4CB3-B74A-C2DD4D5060A3}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{E46C8196-B634-44A1-AF6E-957C64278AB1}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{23C70BCA-6E23-4A65-AD2E-1389062074F1}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{23D8EEF7-0E13-4000-B9C4-6603C1E912D1}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{295CACB4-51F5-46FD-914E-C72BAAE1B672}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{2CE5C4B9-6DBE-4528-96FA-C9FF38EF1762}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{34C1FDF7-02C1-4F23-B393-F48B16E071D1}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{54291324-7A3D-4F11-B707-3FB6A2C97BD9}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{59C63F11-D4E5-46E7-9B8A-EE158DCA83A8}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{5DA22CBD-0029-4A09-B757-CF0FAFC488ED}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{77A6E7D4-4A83-4A9B-A2A0-EF3B125DC29D}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{C0585B2F-74D7-4734-88DE-6C150C5D4036}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{CA17D76B-F91D-4659-A7FD-A9F7ED375CDD}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{D8242E89-2F81-484A-AE5B-BA8CAD5B7347}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{EF0588D6-1621-4A75-B8BE-F4BC34794136}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\cjpglkicenollcignonpgiafdgfeehoj
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{07B18EAA-A523-4961-B6BB-170DE4475CCA}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{07B18EAC-A523-4961-B6BB-170DE4475CCA}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{0D80F1C5-D17B-4177-AC68-955F3EF9F191}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{1093995A-BA37-41D2-836E-091067C4AD17}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{120927BF-1700-43BC-810F-FAB92549B390}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{169349CB-5EDB-48D0-9D62-630CEFDEE9FD}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{17DE5E5E-BFE3-4E83-8E1F-8755795359EC}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{1D5C5714-E466-4D35-B7A6-D74D12B06614}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{1F52A5FA-A705-4415-B975-88503B291728}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{23119123-0854-469D-807A-171568457991}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{23C70BCA-6E23-4A65-AD2E-1389062074F1}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{23D8EEF7-0E13-4000-B9C4-6603C1E912D1}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{247A115F-06C2-4FB3-967D-2D62D3CF4F0A}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{2736053D-1398-4791-B032-8CEF898A6208}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{295CACB4-51F5-46FD-914E-C72BAAE1B672}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{2CE5C4B9-6DBE-4528-96FA-C9FF38EF1762}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{2E3537FC-CF2F-4F56-AF54-5A6A3DD375CC}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{2E9937FC-CF2F-4F56-AF54-5A6A3DD375CC}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{34C1FDF7-02C1-4F23-B393-F48B16E071D1}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{3E1656ED-F60E-4597-B6AA-B6A58E171495}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{3E53E2CB-86DB-4A4A-8BD9-FFEB7A64DF82}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{3E720451-B472-4954-B7AA-33069EB53906}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{3E720453-B472-4954-B7AA-33069EB53906}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{3F4A085D-4BF0-4CAE-B668-78F1123BD706}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{4ECF3505-C397-4E95-BA9C-1B4921BED076}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{5308D535-9409-40F7-9857-6AE2E5C3A962}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{54291324-7A3D-4F11-B707-3FB6A2C97BD9}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{59C63F11-D4E5-46E7-9B8A-EE158DCA83A8}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{5B9AFA9A-424A-4B0F-A665-D6DC3D51C837}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{5DA22CBD-0029-4A09-B757-CF0FAFC488ED}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{62271480-66D1-42D0-A818-BE5E65C56FA4}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{63D0ED2B-B45B-4458-8B3B-60C69BBBD83C}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{63D0ED2D-B45B-4458-8B3B-60C69BBBD83C}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{670593B8-D230-4521-A3EF-59D400A645B8}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{6E74766C-4D93-4CC0-96D1-47B8E07FF9CA}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{72581E0D-724E-4F3E-850C-97A7AA22695C}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{72EE7F04-15BD-4845-A005-D6711144D86A}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{741DE825-A6F0-4497-9AA6-8023CF9B0FFF}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{744DDF68-A2C6-47D5-BDAE-146C6EA23B56}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{7473D291-B7BB-4F24-AE82-7E2CE94BB6A9}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{7473D293-B7BB-4F24-AE82-7E2CE94BB6A9}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{7473D295-B7BB-4F24-AE82-7E2CE94BB6A9}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{7473D297-B7BB-4F24-AE82-7E2CE94BB6A9}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{77A6E7D4-4A83-4A9B-A2A0-EF3B125DC29D}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{77B7DC62-D647-4A3E-971D-723D9F49625A}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{784B84DA-D5B3-46A9-8492-A9B872B37718}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{7991D62C-DE2C-4F05-A12D-228BC7F357B3}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{7D0B0305-0302-4B6B-BCE1-C4DCDCBF7239}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{826E0DB1-7BBE-48A4-B548-31ABD5A07A78}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{8442E942-AB01-47DB-8E3C-38E3E14320E4}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{891DFD94-5982-46EC-9B4D-1E86B07F33F2}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{8953967E-9D15-4C6C-A1F1-D73EC0E8D0F0}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{8968BBE7-1429-4015-A8EF-2FD913EA5B27}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{8A21CC5C-3AEF-477C-9939-AD565F0EACE9}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{8DF27CC6-3E08-4368-A1AC-9BEB795D0CB6}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{8E9CF769-3D3B-40EB-9E2D-76E7A205E4D2}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{90449521-D834-4703-BB4E-D3AA44042FF8}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{920354F8-AA6D-4801-B277-D916472E2127}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{991AAC62-B100-47CE-8B75-253965244F69}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{A189396C-EB06-4361-A69D-1D5AC9EA9DBD}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{A626CDBD-3D13-4F78-B819-440A28D7E8FC}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{AA66FB1C-413E-4053-A863-5982A55E2A44}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{B140F2D1-BF2D-402A-AA19-0FC57AD53B25}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{BBABDC90-F3D5-4801-863A-EE6AE529862D}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{BD68C8B7-6214-449A-B2F3-2C99903CEAF6}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C0585B2F-74D7-4734-88DE-6C150C5D4036}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{CA17D76B-F91D-4659-A7FD-A9F7ED375CDD}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{CF54BE1C-9359-4395-8533-1657CF209CFE}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{D6FF3684-AD3B-48EB-BBB4-B9E6C5A355C1}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{D8242E89-2F81-484A-AE5B-BA8CAD5B7347}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{DE38C398-B328-4F4C-A3AD-1B5E4ED93477}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E342AF55-B78A-4CD0-A2BB-DA7F52D9D25E}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E342AF55-B78A-4CD0-A2BB-DA7F52D9D25F}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E79DFBC9-5697-4FBD-94E5-5B2A9C7C1612}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E79DFBCB-5697-4FBD-94E5-5B2A9C7C1612}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{EB9E5C1C-B1F9-4C2B-BE8A-27D6446FDAF8}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{EF0588D6-1621-4A75-B8BE-F4BC34794136}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{F35F23E4-B079-42A2-9089-1A1BF5C1C70B}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{F87D7FB5-9DC5-4C8C-B998-D8DFE02E2978}
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\bbjciahceamgodcoidkjpchnokgfpphh
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\cjpglkicenollcignonpgiafdgfeehoj
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
Key Deleted : HKLM\SOFTWARE\Software
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}]
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\New Windows\Allow [*.crossrider.com]

***** [Internet Browsers] *****

-\\ Internet Explorer v9.0.8112.16421

[OK] Registry is clean.

-\\ Mozilla Firefox v14.0.1 (en-US)

Profile name : default
File : C:\Users\Family\AppData\Roaming\Mozilla\Firefox\Profiles\tjh6jcjb.default\prefs.js

C:\Users\Family\AppData\Roaming\Mozilla\Firefox\Profiles\tjh6jcjb.default\user.js ... Deleted !

Deleted : user_pref("extensions.funmoods.aflt", "axl");
Deleted : user_pref("extensions.funmoods.autoRvrt", false);
Deleted : user_pref("extensions.funmoods.brwsrsrc", "ietlbr");
Deleted : user_pref("extensions.funmoods.cntry", "US");
Deleted : user_pref("extensions.funmoods.cv", "cv5");
Deleted : user_pref("extensions.funmoods.dfltLng", "");
Deleted : user_pref("extensions.funmoods.dfltSrch", false);
Deleted : user_pref("extensions.funmoods.dfltlng", "en");
Deleted : user_pref("extensions.funmoods.dfltsrch", "false");
Deleted : user_pref("extensions.funmoods.dnsErr", true);
Deleted : user_pref("extensions.funmoods.envrmnt", "production");
Deleted : user_pref("extensions.funmoods.excTlbr", false);
Deleted : user_pref("extensions.funmoods.hdrMd5", "9540A68A2DED8E4481A5F0F012F8E5C8");
Deleted : user_pref("extensions.funmoods.hmpg", true);
Deleted : user_pref("extensions.funmoods.hmpgUrl", "hxxp://start.funmoods.com/?f=1&a=axl&chnl=axl&cd=2XzuyEtN2[...]
Deleted : user_pref("extensions.funmoods.hrdid", "E0CA94990BE1BAA1");
Deleted : user_pref("extensions.funmoods.id", "E0CA94990BE1BAA1");
Deleted : user_pref("extensions.funmoods.instlDay", "15546");
Deleted : user_pref("extensions.funmoods.instlRef", "axl");
Deleted : user_pref("extensions.funmoods.instlday", "15546");
Deleted : user_pref("extensions.funmoods.instlref", "axl");
Deleted : user_pref("extensions.funmoods.isdcmntcmplt", true);
Deleted : user_pref("extensions.funmoods.keywordurl", "");
Deleted : user_pref("extensions.funmoods.lastVrsnTs", "1.5.23.2223:6:59");
Deleted : user_pref("extensions.funmoods.mntrvrsn", "1.3.0");
Deleted : user_pref("extensions.funmoods.newTab", true);
Deleted : user_pref("extensions.funmoods.newTabUrl", "hxxp://start.funmoods.com/?f=2&a=axl&chnl=axl&cd=2XzuyEt[...]
Deleted : user_pref("extensions.funmoods.newtab", true);
Deleted : user_pref("extensions.funmoods.newtaburl", "hxxp://start.funmoods.com/?f=2&a=axl&chnl=axl&cd=2XzuyEt[...]
Deleted : user_pref("extensions.funmoods.prdct", "funmoods");
Deleted : user_pref("extensions.funmoods.prtnrId", "funmoods");
Deleted : user_pref("extensions.funmoods.prtnrid", "funmoods");
Deleted : user_pref("extensions.funmoods.savedVrsnTs", "1");
Deleted : user_pref("extensions.funmoods.sg", "none");
Deleted : user_pref("extensions.funmoods.smplGrp", "none");
Deleted : user_pref("extensions.funmoods.smplgrp", "none");
Deleted : user_pref("extensions.funmoods.srch", "");
Deleted : user_pref("extensions.funmoods.srchPrvdr", "Search");
Deleted : user_pref("extensions.funmoods.srchprvdr", "Search");
Deleted : user_pref("extensions.funmoods.tlbrId", "base");
Deleted : user_pref("extensions.funmoods.tlbrSrchUrl", "hxxp://start.funmoods.com/?f=3&a=axl&chnl=axl&cd=2Xzuy[...]
Deleted : user_pref("extensions.funmoods.tlbrid", "base");
Deleted : user_pref("extensions.funmoods.tlbrsrchurl", "hxxp://start.funmoods.com/?f=3&a=axl&chnl=axl&cd=2Xzuy[...]
Deleted : user_pref("extensions.funmoods.vrsn", "1.5.23.22");
Deleted : user_pref("extensions.funmoods.vrsnTs", "1.5.23.2223:6:59");
Deleted : user_pref("extensions.funmoods.vrsni", "1.5.23.22");
Deleted : user_pref("extensions.funmoods.vrsnts", "1.5.23.2223:6:59");
Deleted : user_pref("extensions.funmoods_i.newTab", true);
Deleted : user_pref("extensions.funmoods_i.smplGrp", "none");
Deleted : user_pref("extensions.funmoods_i.vrsnTs", "1.5.23.2223:6:59");

-\\ Google Chrome v [Unable to get version]

File : C:\Users\Family\AppData\Local\Google\Chrome\User Data\Default\Preferences

[OK] File is clean.

-\\ Opera v12.0.1467.0

File : C:\Users\Family\AppData\Roaming\Opera\Opera\operaprefs.ini

[OK] File is clean.

*************************

AdwCleaner[S2].txt - [17673 octets] - [08/10/2012 21:23:16]

########## EOF - C:\AdwCleaner[S2].txt - [17734 octets] ##########

ajptjd, Oct 8, 2012

#69
ajptjd Newcomer, in training Posts: 71

I just got the Windows has encountered at problem pop up again

ajptjd, Oct 8, 2012

#70
Broni Malware Annihilator Posts: 39,398 +177

You can't boot again?

At what exact point did it happen?

Broni, Oct 8, 2012

#71
ajptjd Newcomer, in training Posts: 71
When I did:

4. Download Temp File Cleaner (TFC)
Alternate download: http://www.itxassociates.com/OT-Tools/TFC.exe

Double click on TFC.exe to run the program.

Click on Start button to begin cleaning process.

TFC will close all running programs, and it may ask you to restart computer.

But now I'm doing the 5th part, and it didn't pop up anymore.
ajptjd, Oct 8, 2012

#72
Broni Malware Annihilator Posts: 39,398 +177

Oh, if it happened just once not a big deal.

Broni, Oct 8, 2012

#73
Broni Malware Annihilator Posts: 39,398 +177

I've seen this happening with TFC.
Sometimes you have to run it in safe mode.

Broni, Oct 8, 2012

#74
ajptjd Newcomer, in training Posts: 71

Okay thank you. The scan still going, so I have to keep it up all night.

ajptjd, Oct 9, 2012

#75
ajptjd Newcomer, in training Posts: 71

C:\TDSSKiller_Quarantine\08.10.2012_10.23.15\mbr0000\tdlfs0000\tsk0000.dta Win32/Olmarik.AWO trojan cleaned by deleting - quarantined
C:\TDSSKiller_Quarantine\08.10.2012_10.23.15\mbr0000\tdlfs0000\tsk0001.dta Win64/Olmarik.AD trojan cleaned by deleting - quarantined
C:\TDSSKiller_Quarantine\08.10.2012_10.23.15\mbr0000\tdlfs0000\tsk0002.dta Win32/Olmarik.AYH trojan cleaned by deleting - quarantined
C:\TDSSKiller_Quarantine\08.10.2012_10.23.15\mbr0000\tdlfs0000\tsk0003.dta Win64/Olmarik.AG trojan cleaned by deleting - quarantined
C:\TDSSKiller_Quarantine\08.10.2012_10.23.15\mbr0000\tdlfs0000\tsk0004.dta Win32/Olmarik.AWO trojan cleaned by deleting - quarantined
C:\TDSSKiller_Quarantine\08.10.2012_10.23.15\mbr0000\tdlfs0000\tsk0005.dta Win64/Olmarik.AF trojan cleaned by deleting - quarantined
C:\TDSSKiller_Quarantine\08.10.2012_10.23.15\mbr0000\tdlfs0000\tsk0009.dta Win32/Olmarik.AWO trojan cleaned by deleting - quarantined
C:\TDSSKiller_Quarantine\08.10.2012_10.23.15\mbr0000\tdlfs0000\tsk0010.dta Win64/Olmarik.X trojan cleaned by deleting - quarantined
C:\Users\Family\AppData\Local\Google\Chrome\User Data\Default\Default\aaggdedddagedggfdfdfdadddedegcdh\background.html Win32/BHO.OEI trojan cleaned by deleting - quarantined
C:\Users\Family\AppData\Local\Google\Chrome\User Data\Default\Default\aaggdedddagedggfdfdfdadddedegcdh\ContentScript.js Win32/BHO.OEI trojan cleaned by deleting - quarantined
C:\Users\Family\Downloads\mightymagoo-setup.exe Win32/DownloadAdmin.Gen application cleaned by deleting - quarantined
C:\Users\Guest.FamilyLaptop\AppData\Local\Google\Chrome\User Data\Default\Default\aaggdedddagedggfdfdfdadddedegcdh\background.html Win32/BHO.OEI trojan cleaned by deleting - quarantined
C:\Users\Guest.FamilyLaptop\AppData\Local\Google\Chrome\User Data\Default\Default\aaggdedddagedggfdfdfdadddedegcdh\ContentScript.js Win32/BHO.OEI trojan cleaned by deleting - quarantined
C:\Users\Guest.FamilyLaptop\AppData\Roaming\Mozilla\Firefox\Profiles\uqzx41d9.default\extensions\qofrjpsqin@qofrjpsqin.org.xpi JS/Redirector.NCA trojan deleted - quarantined
C:\Users\Guest.FamilyLaptop\Downloads\captain-america.exe a variant of Win32/InstallCore.AL application cleaned by deleting - quarantined
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DY5974ZJ\all-lyric_com[1].htm HTML/Iframe.B.Gen virus deleted - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\00000008.@ Win64/Agent.BA trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\000000cb.@ Win64/Conedex.B trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz103.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz1056.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz10B0.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz10CD.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz10E.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz1136.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz11F9.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz1258.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz1271.tmp a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz128.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz12D.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz12DE.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz12F6.tmp a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz1303.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz1314.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz1317.tmp a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz133A.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz1361.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz1393.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz13A5.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz13BE.tmp a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz13C4.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz13F.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz1420.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz149.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz14B9.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz14CE.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz150F.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz1553.tmp a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz15E5.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz160F.tmp a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz1653.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz1678.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz167F.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz16E5.tmp a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz1730.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz1760.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz179D.tmp a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz17BF.tmp a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz17C3.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz17CD.tmp a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz189E.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz1918.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz1921.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz193E.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz1986.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz19B6.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz1AB9.tmp a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz1AE0.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz1B1C.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz1B52.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz1B5E.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz1C11.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz1C18.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz1C7D.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz1CD9.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz1D07.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz1D09.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz1D14.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz1D48.tmp a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz1D4F.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz1D8E.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz1D9B.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz1DBE.tmp a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz1DEE.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz1E2F.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz1E3F.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz1E60.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz1E8B.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz1E9D.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz1EA1.tmp a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz1ECF.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz1F1B.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz1F55.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz1FE4.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz1FEC.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz2056.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz2060.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz2080.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz208A.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz20A5.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz20B0.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz20CC.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz20E0.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz2108.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz2132.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz2141.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz21AE.tmp a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz21C9.tmp a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz21F9.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz2207.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz2231.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz2279.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz227D.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz22AC.tmp a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz22B3.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz22B4.tmp a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz22C8.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz22DB.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz22EF.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz2308.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz232A.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz236A.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz2383.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz238A.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz23D2.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz23DB.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined

ajptjd, Oct 9, 2012

#76
ajptjd Newcomer, in training Posts: 71

C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz23DF.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz23E1.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz2436.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz24A.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz2503.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz2510.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz2539.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz2568.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz256F.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz257B.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz25B6.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz25B8.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz25BC.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz25BD.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz26.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz2631.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz2633.tmp a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz2648.tmp a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz265D.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz267F.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz26E1.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz26EA.tmp Win64/Sirefef.AN trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz272D.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz273.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz2736.tmp Win64/Conedex.B trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz273A.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz279C.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz27C7.tmp a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz27EA.tmp a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz27F7.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz2807.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz281D.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz2861.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz2877.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz28A1.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz28B7.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz2901.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz292E.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz292F.tmp a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz2942.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz2958.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz29AD.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz2A5.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz2A82.tmp a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz2A8E.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz2A98.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz2AB.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz2AB0.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz2AB9.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz2B3.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz2B4.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz2B52.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz2B5C.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz2BD9.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz2C40.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz2C96.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz2CE0.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz2CF2.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz2D0B.tmp a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz2D16.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz2D6F.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz2DC1.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz2E82.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz2E89.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz2EB5.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz2EEF.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz2F21.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz2F6C.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz2FC.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz2FF2.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz302A.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz305E.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz3073.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz3077.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz30BB.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz30C2.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz30CF.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz30D1.tmp a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz30DB.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz30DC.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz310E.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz3114.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz313A.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz314E.tmp Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz316.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz31A5.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz31DD.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz31E0.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz31EB.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz31EC.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz324E.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz3292.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz32A3.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz32B5.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz32C9.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz32E8.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz32F.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz3325.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz339E.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz33A3.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz33C0.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz33C9.tmp a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz33D3.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz3466.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz3484.tmp a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz349A.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz34A6.tmp a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz34CC.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined

ajptjd, Oct 9, 2012

#77
ajptjd Newcomer, in training Posts: 71

C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz34D4.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz3516.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz3561.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz3562.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz35DA.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz35E0.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz361.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz3627.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz362E.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz3650.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz36B9.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz371E.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz3731.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz3760.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz3778.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz3784.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz37A.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz37AC.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz37B8.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz37D4.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz3813.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz3921.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz3958.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz3978.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz39C9.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz39FA.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz39FD.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz3A0.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz3AAB.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz3B07.tmp a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz3B28.tmp Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz3BE6.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz3C39.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz3C46.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz3C90.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz3C99.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz3CA5.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz3DBB.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz3DDB.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz3E4.tmp a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz3E97.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz3EC.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz3EE0.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz3EF1.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz3F3E.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz3FA0.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz3FDA.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz3FE2.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz4009.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz401E.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz40F4.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz41A.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz41E3.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz4231.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz424C.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz4282.tmp a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz42A0.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz42BC.tmp a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz4303.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz430A.tmp a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz436.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz4416.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz4434.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz4456.tmp a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz4553.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz4571.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz45B5.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz45E0.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz45FD.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz4620.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz4661.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz46EA.tmp a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz4705.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz4717.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz471D.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz475C.tmp a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz47E3.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz47F2.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz481E.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz4841.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz485E.tmp a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz486F.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz4875.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz4877.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz48CC.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz48D.tmp a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz48DB.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz4931.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz493C.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz494A.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz49D0.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz49D9.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz4AD3.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz4AED.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz4B4D.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz4B82.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz4B8E.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz4BB7.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz4BBD.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz4C0D.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz4C23.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz4C67.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz4CD3.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz4CD5.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz4D54.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz4D5E.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz4E18.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz4E81.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz4E8B.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz4EDC.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz4EFD.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz4F00.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz4F0A.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz4F3.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz4F53.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz4F62.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz4F6A.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz4FBA.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz4FE5.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz4FF2.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz5.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz506.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz506F.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz5078.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz508F.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz50D.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz511C.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz511E.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz5146.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz515.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz518B.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz5190.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz51BB.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz5206.tmp a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz5209.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz5235.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz52A5.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz52BA.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz52C9.tmp Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz52D0.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz532E.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz5336.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz5360.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz5363.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz5386.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz53AB.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz5421.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz5463.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz54A9.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz54BB.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz54CD.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz54DF.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz55.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz5523.tmp Win64/Conedex.B trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz5576.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz55C2.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz55E.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz5606.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz566D.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz56C0.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz56C8.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz56E1.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz56F4.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz571F.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz5724.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined

ajptjd, Oct 9, 2012

#78
ajptjd Newcomer, in training Posts: 71

C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz577A.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz57CB.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz57EF.tmp Win64/Sirefef.AN trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz584E.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz5884.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz592.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz59B7.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz59DB.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz59EE.tmp a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz5A03.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz5A2A.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz5A5B.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz5A85.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz5AC.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz5AD8.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz5B64.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz5B91.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz5CBD.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz5D15.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz5D3F.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz5D44.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz5D5A.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz5D7C.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz5DA3.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz5DBB.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz5E08.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz5E1C.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz5E21.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz5E53.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz5E63.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz5EEA.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz5F48.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz5F6F.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz5FA8.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz5FCA.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz601C.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz602D.tmp a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz6034.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz6052.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz6057.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz6081.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz6091.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz609A.tmp a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz609C.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz609F.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz6103.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz6110.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz611B.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz612C.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz6161.tmp a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz6169.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz616A.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz61C5.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz61DE.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz61FB.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz6225.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz6257.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz6261.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz6267.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz629D.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz62A3.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz62AF.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz62B6.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz62C7.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz62E5.tmp a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz63.tmp Win64/Conedex.B trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz631B.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz632E.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz6341.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz6374.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz639E.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz63B9.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz63CB.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz63D3.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz63ED.tmp a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz642C.tmp a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz6443.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz6467.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz64F8.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz6523.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz655A.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz655D.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz656F.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz658.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz658F.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz65A.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz65D1.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz65EE.tmp a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz660C.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz6660.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz66B9.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz6706.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz6775.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz67BA.tmp a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz67BE.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz67C.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz67CD.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz67EA.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz6831.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz685B.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz686A.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz6871.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz6873.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz6883.tmp a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz688D.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz689F.tmp a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz68A6.tmp a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz68CD.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz68D1.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz68ED.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz68F2.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz6904.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz69A9.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz6A30.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz6AB2.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz6B00.tmp Win64/Sirefef.AN trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz6B1E.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz6B1F.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz6B31.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz6B53.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz6B65.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz6BEB.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz6BED.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz6C02.tmp a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz6C0C.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz6C93.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz6CD4.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz6D05.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz6D34.tmp a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz6D8E.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz6D90.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz6DA0.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz6DC4.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz6DCA.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz6E50.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz6E65.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz6EC3.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz6ED1.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz6F04.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz6F61.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz6F67.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz6F8A.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz6FBE.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz700F.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined

ajptjd, Oct 9, 2012

#79
ajptjd Newcomer, in training Posts: 71

C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz7045.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz705B.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz7088.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz70D7.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz70E4.tmp a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz719.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz71C1.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz71C8.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz71DE.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz71F0.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz72.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz725F.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz726F.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz7276.tmp Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz7290.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz72BE.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz72D3.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz72E.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz72F7.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz72FB.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz7303.tmp a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz7307.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz738F.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz7390.tmp a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz73AE.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz73EE.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz7434.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz7442.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz74C1.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz74ED.tmp a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz74F1.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz7521.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz755.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz755D.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz7583.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz7588.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz7616.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz7692.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz7696.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz76B.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz76EB.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz7714.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz7732.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz7742.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz776.tmp a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz777.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz77B1.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz77CC.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz77D3.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz77D6.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz77E5.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz7840.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz786D.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz78A9.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz790.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz7914.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz7927.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz792B.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz793.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz795.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz7983.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz7995.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz79C4.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz7A2A.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz7A65.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz7AA9.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz7AD1.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz7AF1.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz7AF9.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz7B23.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz7B64.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz7B91.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz7BE4.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz7C11.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz7C45.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz7C4D.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz7C7E.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz7D49.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz7E12.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz7E15.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz7E16.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz7E36.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz7EA5.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz7ED5.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz7EF5.tmp a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz7F2.tmp a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz7F41.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz7F75.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz7F8B.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz7F98.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz7FEC.tmp a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz7FFF.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz8055.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz8059.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz806A.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz8108.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz811.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz8187.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz81BB.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz821A.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz8250.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz8259.tmp a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz8260.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz8284.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz8288.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz829B.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz82AA.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz8343.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz836A.tmp a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz83BA.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz83C8.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz83D.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz83E6.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz83E9.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz840E.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz844D.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz8461.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz8464.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz8474.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz84A6.tmp a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz84B9.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz84FA.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz853E.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz857.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz8570.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz85A5.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz85CB.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz85DE.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz8605.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz8609.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz860E.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz8648.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz8673.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz86AF.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz86F3.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz8715.tmp Win64/Sirefef.AN trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz8716.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz8723.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz87A9.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz87BC.tmp a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz8815.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz8836.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz8855.tmp a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz8894.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz8916.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz8926.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz892B.tmp a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz8950.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz89A5.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz89D1.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz89F0.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz89FB.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz8A50.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz8A65.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz8A87.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz8A9E.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz8AAC.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz8ACC.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz8AD.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz8AD1.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz8B.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz8B44.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz8B47.tmp a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz8B5C.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz8B7B.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz8BAE.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz8BD4.tmp a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz8C19.tmp Win64/Conedex.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz8C43.tmp probably a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz8C77.tmp Win64/Sirefef.AP trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\10082012_205323\C_FRST\Quarantine\{1124a725-e7eb-82f4-e978-28044d39f9dc}\U\trz8C81.tmp a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined

ajptjd, Oct 9, 2012

#80

Page 4 of 5

Add New Comment

	Social Login & Guest Posting			TechSpot Members Login here or sign up for free, it takes about a minute.
Get complete access to the TechSpot community. Join thousands of technology enthusiasts that contribute and share knowledge in our forum. Get a private inbox, upload your own photo gallery and more.