Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Virus/Spayware/Malware Something is wrong


  • This topic is locked This topic is locked
4 replies to this topic

#1 PorkChopSandwiches

PorkChopSandwiches

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:01:52 AM

Posted 13 February 2010 - 02:54 PM

Sophos Log

****************** Sophos Anti-Virus Log - 2/13/2010 7:45:13 PM **************

20100213 152856 Using detection data version 4.50G (detection engine 3.4.2). This version can detect 1372933 items.
20100213 152856 User (NT AUTHORITY\LOCAL SERVICE) has started on-access scanning for this machine.
20100213 153318 User (NT AUTHORITY\SYSTEM) has stopped on-access scanning for this machine.
20100213 153324 Using detection data version 4.50G (detection engine 3.4.2). This version can detect 1374546 items.
20100213 153324 User (NT AUTHORITY\SYSTEM) has started on-access scanning for this machine.
20100213 153400 Scan 'Scan my computer' started.
20100213 153652 Scanning "C:\Windows\temp\uiht.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 153652 File "C:\Windows\temp\uiht.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 153652 File "C:\Windows\temp\uiht.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 153652 On-access scanner has denied access to location "C:\Windows\temp\uiht.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 153653 Scanning "C:\Windows\temp\uiht.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 153652 File "C:\Windows\temp\uiht.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 153652 File "C:\Windows\temp\uiht.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 153652 On-access scanner has denied access to location "C:\Windows\temp\uiht.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 153653 Scanning "C:\Windows\temp\uiht.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 153653 File "C:\Windows\temp\uiht.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 153653 File "C:\Windows\temp\uiht.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 153653 On-access scanner has denied access to location "C:\Windows\temp\uiht.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 153653 Scanning "C:\Windows\temp\uiht.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 153653 File "C:\Windows\temp\uiht.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 153653 File "C:\Windows\temp\uiht.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 153653 On-access scanner has denied access to location "C:\Windows\temp\uiht.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 153653 Scanning "C:\Windows\temp\uiht.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 153653 File "C:\Windows\temp\uiht.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 153653 File "C:\Windows\temp\uiht.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 153653 On-access scanner has denied access to location "C:\Windows\temp\uiht.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 153653 Scanning "C:\Windows\temp\uiht.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 153653 File "C:\Windows\temp\uiht.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 153653 File "C:\Windows\temp\uiht.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 153653 On-access scanner has denied access to location "C:\Windows\temp\uiht.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 153653 Scanning "C:\Windows\temp\uiht.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 153653 File "C:\Windows\temp\uiht.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 153653 File "C:\Windows\temp\uiht.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 153653 On-access scanner has denied access to location "C:\Windows\temp\uiht.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 153653 Scanning "C:\Windows\temp\uiht.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 153653 File "C:\Windows\temp\uiht.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 153653 File "C:\Windows\temp\uiht.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 153653 On-access scanner has denied access to location "C:\Windows\TEMP\uiht.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 153653 Scanning "C:\Windows\temp\uiht.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 153653 File "C:\Windows\temp\uiht.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 153653 File "C:\Windows\temp\uiht.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 153653 On-access scanner has denied access to location "C:\Windows\TEMP\uiht.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 153653 The on-access driver failed to perform a user action on file \Device\HarddiskVolume2\Windows\temp\uiht.tmp\svchost.exe.
20100213 153653 Scanning "C:\Windows\temp\uiht.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 153653 File "C:\Windows\temp\uiht.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 153653 File "C:\Windows\temp\uiht.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 153653 On-access scanner has denied access to location "C:\Windows\temp\uiht.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 154228 Scanning "C:\Windows\temp\jrah.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 154228 File "C:\Windows\temp\jrah.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 154228 File "C:\Windows\temp\jrah.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 154228 On-access scanner has denied access to location "C:\Windows\temp\jrah.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 154229 Scanning "C:\Windows\temp\jrah.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 154229 File "C:\Windows\temp\jrah.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 154229 File "C:\Windows\temp\jrah.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 154229 On-access scanner has denied access to location "C:\Windows\temp\jrah.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 154229 Scanning "C:\Windows\temp\jrah.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 154229 File "C:\Windows\temp\jrah.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 154229 File "C:\Windows\temp\jrah.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 154229 On-access scanner has denied access to location "C:\Windows\temp\jrah.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 154229 Scanning "C:\Windows\temp\jrah.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 154229 File "C:\Windows\temp\jrah.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 154229 File "C:\Windows\temp\jrah.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 154229 On-access scanner has denied access to location "C:\Windows\temp\jrah.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 154229 Scanning "C:\Windows\temp\jrah.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 154229 File "C:\Windows\temp\jrah.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 154229 File "C:\Windows\temp\jrah.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 154229 On-access scanner has denied access to location "C:\Windows\temp\jrah.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 154229 Scanning "C:\Windows\temp\jrah.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 154229 File "C:\Windows\temp\jrah.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 154229 File "C:\Windows\temp\jrah.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 154229 On-access scanner has denied access to location "C:\Windows\temp\jrah.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 154229 Scanning "C:\Windows\temp\jrah.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 154229 File "C:\Windows\temp\jrah.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 154229 File "C:\Windows\temp\jrah.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 154229 On-access scanner has denied access to location "C:\Windows\temp\jrah.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 154229 Scanning "C:\Windows\temp\jrah.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 154229 File "C:\Windows\temp\jrah.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 154229 File "C:\Windows\temp\jrah.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 154229 On-access scanner has denied access to location "C:\Windows\temp\jrah.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 154229 Scanning "C:\Windows\temp\jrah.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 154229 File "C:\Windows\temp\jrah.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 154229 File "C:\Windows\temp\jrah.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 154229 On-access scanner has denied access to location "C:\Windows\TEMP\jrah.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 154229 Scanning "C:\Windows\temp\jrah.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 154229 File "C:\Windows\temp\jrah.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 154229 File "C:\Windows\temp\jrah.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 154229 On-access scanner has denied access to location "C:\Windows\temp\jrah.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 154229 Scanning "C:\Windows\temp\jrah.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 154229 File "C:\Windows\temp\jrah.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 154229 File "C:\Windows\temp\jrah.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 154229 On-access scanner has denied access to location "C:\Windows\TEMP\jrah.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 154229 Scanning "C:\Windows\temp\jrah.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 154229 File "C:\Windows\temp\jrah.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 154229 File "C:\Windows\temp\jrah.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 154229 On-access scanner has denied access to location "C:\Windows\temp\jrah.tmp\svchost.exe" for user NT AUTHORITY\LOCAL SERVICE
20100213 154229 Scanning "C:\Windows\temp\jrah.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 154229 File "C:\Windows\temp\jrah.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 154229 File "C:\Windows\temp\jrah.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 154229 On-access scanner has denied access to location "C:\Windows\temp\jrah.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 154229 Scanning "C:\Windows\temp\jrah.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 154229 File "C:\Windows\temp\jrah.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 154229 File "C:\Windows\temp\jrah.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 154229 On-access scanner has denied access to location "C:\Windows\temp\jrah.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 154229 Scanning "C:\Windows\temp\jrah.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 154229 File "C:\Windows\temp\jrah.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 154229 File "C:\Windows\temp\jrah.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 154229 On-access scanner has denied access to location "C:\Windows\temp\jrah.tmp\svchost.exe" for user NT AUTHORITY\LOCAL SERVICE
20100213 154229 Scanning "C:\Windows\temp\jrah.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 154229 File "C:\Windows\temp\jrah.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 154229 File "C:\Windows\temp\jrah.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 154229 On-access scanner has denied access to location "C:\Windows\temp\jrah.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 154818 Scanning "C:\Windows\temp\vqdj.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 154818 File "C:\Windows\temp\vqdj.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 154818 File "C:\Windows\temp\vqdj.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 154818 On-access scanner has denied access to location "C:\Windows\temp\vqdj.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 154818 Scanning "C:\Windows\temp\vqdj.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 154818 File "C:\Windows\temp\vqdj.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 154818 File "C:\Windows\temp\vqdj.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 154818 On-access scanner has denied access to location "C:\Windows\temp\vqdj.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 154818 Scanning "C:\Windows\temp\vqdj.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 154818 File "C:\Windows\temp\vqdj.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 154818 File "C:\Windows\temp\vqdj.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 154818 On-access scanner has denied access to location "C:\Windows\temp\vqdj.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 154818 Scanning "C:\Windows\temp\vqdj.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 154818 File "C:\Windows\temp\vqdj.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 154818 File "C:\Windows\temp\vqdj.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 154818 On-access scanner has denied access to location "C:\Windows\temp\vqdj.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 154818 Scanning "C:\Windows\temp\vqdj.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 154818 File "C:\Windows\temp\vqdj.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 154818 File "C:\Windows\temp\vqdj.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 154818 On-access scanner has denied access to location "C:\Windows\temp\vqdj.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 154818 Scanning "C:\Windows\temp\vqdj.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 154818 File "C:\Windows\temp\vqdj.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 154818 File "C:\Windows\temp\vqdj.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 154818 On-access scanner has denied access to location "C:\Windows\temp\vqdj.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 154818 Scanning "C:\Windows\temp\vqdj.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 154818 File "C:\Windows\temp\vqdj.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 154818 File "C:\Windows\temp\vqdj.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 154818 On-access scanner has denied access to location "C:\Windows\temp\vqdj.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 154818 Scanning "C:\Windows\temp\vqdj.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 154818 File "C:\Windows\temp\vqdj.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 154818 File "C:\Windows\temp\vqdj.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 154818 On-access scanner has denied access to location "C:\Windows\temp\vqdj.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 154819 Scanning "C:\Windows\temp\vqdj.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 154819 File "C:\Windows\temp\vqdj.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 154819 File "C:\Windows\temp\vqdj.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 154819 On-access scanner has denied access to location "C:\Windows\temp\vqdj.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 154819 Scanning "C:\Windows\temp\vqdj.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 154819 File "C:\Windows\temp\vqdj.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 154819 File "C:\Windows\temp\vqdj.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 154819 On-access scanner has denied access to location "C:\Windows\temp\vqdj.tmp\svchost.exe" for user NT AUTHORITY\LOCAL SERVICE
20100213 154819 Scanning "C:\Windows\temp\vqdj.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 154819 File "C:\Windows\temp\vqdj.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 154819 File "C:\Windows\temp\vqdj.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 154819 On-access scanner has denied access to location "C:\Windows\TEMP\vqdj.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 154819 Scanning "C:\Windows\temp\vqdj.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 154819 File "C:\Windows\temp\vqdj.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 154819 File "C:\Windows\temp\vqdj.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 154819 On-access scanner has denied access to location "C:\Windows\temp\vqdj.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 154819 Scanning "C:\Windows\temp\vqdj.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 154819 File "C:\Windows\temp\vqdj.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 154819 File "C:\Windows\temp\vqdj.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 154819 On-access scanner has denied access to location "C:\Windows\TEMP\vqdj.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 154819 Scanning "C:\Windows\temp\vqdj.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 154819 File "C:\Windows\temp\vqdj.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 154819 File "C:\Windows\temp\vqdj.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 154819 On-access scanner has denied access to location "C:\Windows\temp\vqdj.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 154819 Scanning "C:\Windows\temp\vqdj.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 154819 File "C:\Windows\temp\vqdj.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 154819 File "C:\Windows\temp\vqdj.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 154819 On-access scanner has denied access to location "C:\Windows\temp\vqdj.tmp\svchost.exe" for user NT AUTHORITY\LOCAL SERVICE
20100213 154819 Scanning "C:\Windows\temp\vqdj.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 154819 File "C:\Windows\temp\vqdj.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 154819 File "C:\Windows\temp\vqdj.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 154819 On-access scanner has denied access to location "C:\Windows\temp\vqdj.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 155252 File "C:\Windows\System32\wSxwRj.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 155252 On-access scanner has denied access to location "C:\Windows\System32\wSxwRj.exe" for user NT AUTHORITY\SYSTEM
20100213 155255 File "C:\Windows\System32\wSxwRj.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 155255 On-access scanner has denied access to location "C:\Windows\System32\wSxwRj.exe" for user NT AUTHORITY\SYSTEM
20100213 155257 File "C:\Windows\System32\wSxwRj.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 155257 On-access scanner has denied access to location "C:\Windows\System32\wSxwRj.exe" for user NT AUTHORITY\SYSTEM
20100213 155258 File "C:\Windows\System32\wSxwRj.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 155258 On-access scanner has denied access to location "C:\Windows\System32\wSxwRj.exe" for user NT AUTHORITY\SYSTEM
20100213 155300 File "C:\Windows\System32\wSxwRj.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 155300 On-access scanner has denied access to location "C:\Windows\System32\wSxwRj.exe" for user NT AUTHORITY\SYSTEM
20100213 155301 File "C:\Windows\System32\wSxwRj.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 155301 On-access scanner has denied access to location "C:\Windows\System32\wSxwRj.exe" for user NT AUTHORITY\SYSTEM
20100213 155302 File "C:\Windows\System32\wSxwRj.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 155305 Process "c:\program files\microsoft security essentials\MsMpEng.exe" exhibiting suspicious behavior pattern 'HIPS/ProcInj-002'.
No action taken.
If you are unsure whether the application can be authorized, please send a sample to Sophos.
20100213 155305 Virus/spyware 'Mal/Generic-A' has been removed.
20100213 155417 File "C:\Windows\System32\wSxwRj.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 155417 On-access scanner has denied access to location "C:\Windows\System32\wSxwRj.exe" for user NT AUTHORITY\SYSTEM
20100213 155424 Scanning "C:\Windows\temp\ajhe.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 155424 File "C:\Windows\temp\ajhe.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 155424 File "C:\Windows\temp\ajhe.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 155424 On-access scanner has denied access to location "C:\Windows\temp\ajhe.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 155425 Scanning "C:\Windows\temp\ajhe.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 155425 File "C:\Windows\temp\ajhe.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 155425 File "C:\Windows\temp\ajhe.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 155425 On-access scanner has denied access to location "C:\Windows\temp\ajhe.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 155425 Scanning "C:\Windows\temp\ajhe.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 155425 File "C:\Windows\temp\ajhe.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 155425 File "C:\Windows\temp\ajhe.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 155425 On-access scanner has denied access to location "C:\Windows\temp\ajhe.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 155425 Scanning "C:\Windows\temp\ajhe.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 155425 File "C:\Windows\temp\ajhe.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 155425 File "C:\Windows\temp\ajhe.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 155425 On-access scanner has denied access to location "C:\Windows\temp\ajhe.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 155425 Scanning "C:\Windows\temp\ajhe.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 155425 File "C:\Windows\temp\ajhe.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 155425 File "C:\Windows\temp\ajhe.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 155425 On-access scanner has denied access to location "C:\Windows\temp\ajhe.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 155425 Scanning "C:\Windows\temp\ajhe.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 155425 File "C:\Windows\temp\ajhe.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 155425 File "C:\Windows\temp\ajhe.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 155425 On-access scanner has denied access to location "C:\Windows\temp\ajhe.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 155425 Scanning "C:\Windows\temp\ajhe.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 155425 File "C:\Windows\temp\ajhe.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 155425 File "C:\Windows\temp\ajhe.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 155425 On-access scanner has denied access to location "C:\Windows\temp\ajhe.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 155425 Scanning "C:\Windows\temp\ajhe.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 155425 File "C:\Windows\temp\ajhe.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 155425 File "C:\Windows\temp\ajhe.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 155425 On-access scanner has denied access to location "C:\Windows\TEMP\ajhe.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 155425 Scanning "C:\Windows\temp\ajhe.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 155425 File "C:\Windows\temp\ajhe.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 155425 File "C:\Windows\temp\ajhe.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 155425 On-access scanner has denied access to location "C:\Windows\TEMP\ajhe.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 155425 The on-access driver failed to perform a user action on file \Device\HarddiskVolume2\Windows\temp\ajhe.tmp\svchost.exe.
20100213 155425 Scanning "C:\Windows\temp\ajhe.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 155425 File "C:\Windows\temp\ajhe.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 155425 File "C:\Windows\temp\ajhe.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 155425 On-access scanner has denied access to location "C:\Windows\temp\ajhe.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 155427 File "C:\Windows\System32\wSxwRj.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 155431 File "C:\Windows\System32\wSxwRj.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 155431 On-access scanner has denied access to location "C:\Windows\System32\wSxwRj.exe" for user NT AUTHORITY\SYSTEM
20100213 155431 Virus/spyware 'Mal/Generic-A' has been removed.
20100213 155431 Process "c:\program files\microsoft security essentials\MsMpEng.exe" exhibiting suspicious behavior pattern 'HIPS/ProcInj-002'.
No action taken.
If you are unsure whether the application can be authorized, please send a sample to Sophos.
20100213 155440 File "C:\Windows\System32\wSxwRj.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 155444 Virus/spyware 'Mal/Generic-A' has been removed.
20100213 155732 Suspicious process "MsMpEng.exe" has been authorized.
20100213 160011 Scanning "C:\Windows\temp\yesc.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 160011 File "C:\Windows\temp\yesc.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 160011 File "C:\Windows\temp\yesc.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 160011 On-access scanner has denied access to location "C:\Windows\temp\yesc.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 160011 Scanning "C:\Windows\temp\yesc.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 160011 File "C:\Windows\temp\yesc.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 160011 File "C:\Windows\temp\yesc.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 160011 On-access scanner has denied access to location "C:\Windows\temp\yesc.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 160011 Scanning "C:\Windows\temp\yesc.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 160011 File "C:\Windows\temp\yesc.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 160011 File "C:\Windows\temp\yesc.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 160011 On-access scanner has denied access to location "C:\Windows\temp\yesc.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 160011 Scanning "C:\Windows\temp\yesc.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 160011 File "C:\Windows\temp\yesc.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 160011 File "C:\Windows\temp\yesc.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 160011 On-access scanner has denied access to location "C:\Windows\temp\yesc.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 160011 Scanning "C:\Windows\temp\yesc.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 160011 File "C:\Windows\temp\yesc.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 160011 File "C:\Windows\temp\yesc.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 160011 On-access scanner has denied access to location "C:\Windows\TEMP\yesc.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 160012 Scanning "C:\Windows\temp\yesc.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 160012 Scanning "C:\Windows\temp\yesc.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 160011 File "C:\Windows\temp\yesc.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 160011 File "C:\Windows\temp\yesc.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 160012 On-access scanner has denied access to location "C:\Windows\temp\yesc.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 160012 File "C:\Windows\temp\yesc.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 160012 File "C:\Windows\temp\yesc.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 160012 On-access scanner has denied access to location "C:\Windows\TEMP\yesc.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 160012 Scanning "C:\Windows\temp\yesc.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 160012 File "C:\Windows\temp\yesc.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 160012 File "C:\Windows\temp\yesc.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 160012 On-access scanner has denied access to location "C:\Windows\temp\yesc.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 160012 Scanning "C:\Windows\temp\yesc.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 160012 File "C:\Windows\temp\yesc.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 160012 File "C:\Windows\temp\yesc.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 160012 On-access scanner has denied access to location "C:\Windows\temp\yesc.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 160015 File "C:\Program Files\Left 4 Dead 2\bin\steam_api.dll" belongs to virus/spyware 'Mal/Behav-321'.
20100213 160015 On-access scanner has denied access to location "C:\Program Files\Left 4 Dead 2\bin\steam_api.dll" for user NT AUTHORITY\SYSTEM
20100213 160021 File "C:\Program Files\Left 4 Dead 2\bin\steam_api.dll" belongs to virus/spyware 'Mal/Behav-321'.
20100213 160021 On-access scanner has denied access to location "C:\Program Files\Left 4 Dead 2\bin\steam_api.dll" for user NT AUTHORITY\SYSTEM
20100213 160025 File "C:\Program Files\Left 4 Dead 2\bin\steam_api.dll" belongs to virus/spyware 'Mal/Behav-321'.
20100213 160027 File "C:\Program Files\Left 4 Dead 2\bin\steam_api.dll" belongs to virus/spyware 'Mal/Behav-321'.
20100213 160027 On-access scanner has denied access to location "C:\Program Files\Left 4 Dead 2\bin\steam_api.dll" for user NT AUTHORITY\SYSTEM
20100213 160031 File "C:\Program Files\Left 4 Dead 2\bin\steam_api.dll" belongs to virus/spyware 'Mal/Behav-321'.
20100213 160031 On-access scanner has denied access to location "C:\Program Files\Left 4 Dead 2\bin\steam_api.dll" for user NT AUTHORITY\SYSTEM
20100213 160035 File "C:\Program Files\Left 4 Dead 2\bin\steam_api.dll" belongs to virus/spyware 'Mal/Behav-321'.
20100213 160035 On-access scanner has denied access to location "C:\Program Files\Left 4 Dead 2\bin\steam_api.dll" for user NT AUTHORITY\SYSTEM
20100213 160035 File "C:\Program Files\Left 4 Dead 2\bin\steam_api.dll" has been cleaned up.
20100213 160035 Virus/spyware 'Mal/Behav-321' has been removed.
20100213 160538 Scanning "C:\Windows\temp\alpw.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 160538 File "C:\Windows\temp\alpw.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 160538 File "C:\Windows\temp\alpw.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 160538 On-access scanner has denied access to location "C:\Windows\temp\alpw.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 160538 Scanning "C:\Windows\temp\alpw.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 160538 File "C:\Windows\temp\alpw.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 160538 File "C:\Windows\temp\alpw.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 160538 On-access scanner has denied access to location "C:\Windows\temp\alpw.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 160538 Scanning "C:\Windows\temp\alpw.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 160538 File "C:\Windows\temp\alpw.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 160538 File "C:\Windows\temp\alpw.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 160538 On-access scanner has denied access to location "C:\Windows\temp\alpw.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 160538 Scanning "C:\Windows\temp\alpw.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 160538 File "C:\Windows\temp\alpw.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 160538 File "C:\Windows\temp\alpw.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 160538 On-access scanner has denied access to location "C:\Windows\temp\alpw.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 160538 Scanning "C:\Windows\temp\alpw.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 160538 File "C:\Windows\temp\alpw.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 160538 File "C:\Windows\temp\alpw.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 160538 On-access scanner has denied access to location "C:\Windows\temp\alpw.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 160538 Scanning "C:\Windows\temp\alpw.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 160538 File "C:\Windows\temp\alpw.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 160538 File "C:\Windows\temp\alpw.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 160538 On-access scanner has denied access to location "C:\Windows\TEMP\alpw.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 160538 Scanning "C:\Windows\temp\alpw.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 160538 File "C:\Windows\temp\alpw.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 160538 File "C:\Windows\temp\alpw.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 160538 On-access scanner has denied access to location "C:\Windows\temp\alpw.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 160538 Scanning "C:\Windows\temp\alpw.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 160538 File "C:\Windows\temp\alpw.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 160538 File "C:\Windows\temp\alpw.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 160538 On-access scanner has denied access to location "C:\Windows\TEMP\alpw.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 160538 Scanning "C:\Windows\temp\alpw.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 160538 File "C:\Windows\temp\alpw.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 160538 File "C:\Windows\temp\alpw.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 160538 On-access scanner has denied access to location "C:\Windows\temp\alpw.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 160940 File "D:\Software\DVD Software\DVDRipper\Xilisoft DVD Ripper Platinum 4.0.54.0929\Keygen\KeyGen [ Xilisoft DVD Ripper Platinum 4.0.54.0929 ].exe" has been identified as suspicious file of type 'Sus/ComPack-C'.
If you are unsure whether the file can be authorized, please send a sample to Sophos.
20100213 160940 On-access scanner has denied access to location "D:\Software\DVD Software\DVDRipper\Xilisoft DVD Ripper Platinum 4.0.54.0929\Keygen\KeyGen [ Xilisoft DVD Ripper Platinum 4.0.54.0929 ].exe" for user NT AUTHORITY\SYSTEM
20100213 161011 File "D:\Software\DVD Software\DVDRipper\Xilisoft DVD Ripper Platinum 4.0.54.0929\Keygen\KeyGen [ Xilisoft DVD Ripper Platinum 4.0.54.0929 ].exe" has been identified as suspicious file of type 'Sus/ComPack-C'.
If you are unsure whether the file can be authorized, please send a sample to Sophos.
20100213 161011 On-access scanner has denied access to location "D:\Software\DVD Software\DVDRipper\Xilisoft DVD Ripper Platinum 4.0.54.0929\Keygen\KeyGen [ Xilisoft DVD Ripper Platinum 4.0.54.0929 ].exe" for user NT AUTHORITY\SYSTEM
20100213 161025 File "D:\Software\DVD Software\DVDRipper\Xilisoft DVD Ripper Platinum 4.0.54.0929\Keygen\KeyGen [ Xilisoft DVD Ripper Platinum 4.0.54.0929 ].exe" has been identified as suspicious file of type 'Sus/ComPack-C'.
If you are unsure whether the file can be authorized, please send a sample to Sophos.
20100213 161025 On-access scanner has denied access to location "D:\Software\DVD Software\DVDRipper\Xilisoft DVD Ripper Platinum 4.0.54.0929\Keygen\KeyGen [ Xilisoft DVD Ripper Platinum 4.0.54.0929 ].exe" for user NT AUTHORITY\SYSTEM
20100213 161037 File "D:\Software\DVD Software\DVDRipper\Xilisoft DVD Ripper Platinum 4.0.54.0929\Keygen\KeyGen [ Xilisoft DVD Ripper Platinum 4.0.54.0929 ].exe" has been identified as suspicious file of type 'Sus/ComPack-C'.
If you are unsure whether the file can be authorized, please send a sample to Sophos.
20100213 161037 On-access scanner has denied access to location "D:\Software\DVD Software\DVDRipper\Xilisoft DVD Ripper Platinum 4.0.54.0929\Keygen\KeyGen [ Xilisoft DVD Ripper Platinum 4.0.54.0929 ].exe" for user NT AUTHORITY\SYSTEM
20100213 161040 Suspicious file "KeyGen [ Xilisoft DVD Ripper Platinum 4.0.54.0929 ].exe" has been authorized.
20100213 161038 File "D:\Software\DVD Software\DVDRipper\Xilisoft DVD Ripper Platinum 4.0.54.0929\Keygen\KeyGen [ Xilisoft DVD Ripper Platinum 4.0.54.0929 ].exe" has been identified as suspicious file of type 'Sus/ComPack-C'.
If you are unsure whether the file can be authorized, please send a sample to Sophos.
20100213 161038 On-access scanner has denied access to location "D:\Software\DVD Software\DVDRipper\Xilisoft DVD Ripper Platinum 4.0.54.0929\Keygen\KeyGen [ Xilisoft DVD Ripper Platinum 4.0.54.0929 ].exe" for user Win7Ultimate\Kashi
20100213 161056 Scanning "C:\Windows\temp\aqwl.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 161056 File "C:\Windows\temp\aqwl.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 161056 File "C:\Windows\temp\aqwl.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 161056 On-access scanner has denied access to location "C:\Windows\TEMP\aqwl.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 161056 Scanning "C:\Windows\temp\aqwl.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 161056 File "C:\Windows\temp\aqwl.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 161056 File "C:\Windows\temp\aqwl.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 161056 On-access scanner has denied access to location "C:\Windows\TEMP\aqwl.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 161552 File "C:\CFix\iexplore.exe" belongs to adware or PUA 'NirCmd' (of type Other).
20100213 161552 File "C:\CFix\n.pif" belongs to adware or PUA 'NirCmd' (of type Other).
20100213 161552 File "C:\CFix\NircmdB.exe" belongs to adware or PUA 'NirCmd' (of type Other).
20100213 161628 Scanning "C:\Windows\temp\djhw.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 161628 File "C:\Windows\temp\djhw.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 161628 File "C:\Windows\temp\djhw.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 161628 On-access scanner has denied access to location "C:\Windows\temp\djhw.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 161629 Scanning "C:\Windows\temp\djhw.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 161629 File "C:\Windows\temp\djhw.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 161629 File "C:\Windows\temp\djhw.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 161629 On-access scanner has denied access to location "C:\Windows\temp\djhw.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 161629 Scanning "C:\Windows\temp\djhw.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 161629 File "C:\Windows\temp\djhw.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 161629 File "C:\Windows\temp\djhw.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 161629 On-access scanner has denied access to location "C:\Windows\temp\djhw.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 161629 Scanning "C:\Windows\temp\djhw.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 161629 File "C:\Windows\temp\djhw.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 161629 File "C:\Windows\temp\djhw.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 161629 On-access scanner has denied access to location "C:\Windows\temp\djhw.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 161629 Scanning "C:\Windows\temp\djhw.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 161629 File "C:\Windows\temp\djhw.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 161629 File "C:\Windows\temp\djhw.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 161629 On-access scanner has denied access to location "C:\Windows\temp\djhw.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 161629 Scanning "C:\Windows\temp\djhw.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 161629 File "C:\Windows\temp\djhw.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 161629 File "C:\Windows\temp\djhw.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 161629 On-access scanner has denied access to location "C:\Windows\temp\djhw.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 161629 Scanning "C:\Windows\temp\djhw.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 161629 File "C:\Windows\temp\djhw.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 161629 File "C:\Windows\temp\djhw.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 161629 On-access scanner has denied access to location "C:\Windows\temp\djhw.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 161629 Scanning "C:\Windows\temp\djhw.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 161629 File "C:\Windows\temp\djhw.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 161629 File "C:\Windows\temp\djhw.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 161629 On-access scanner has denied access to location "C:\Windows\temp\djhw.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 161629 Scanning "C:\Windows\temp\djhw.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 161629 File "C:\Windows\temp\djhw.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 161629 File "C:\Windows\temp\djhw.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 161629 On-access scanner has denied access to location "C:\Windows\temp\djhw.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 161629 Scanning "C:\Windows\temp\djhw.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 161629 File "C:\Windows\temp\djhw.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 161629 File "C:\Windows\temp\djhw.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 161629 On-access scanner has denied access to location "C:\Windows\temp\djhw.tmp\svchost.exe" for user NT AUTHORITY\LOCAL SERVICE
20100213 161629 Scanning "C:\Windows\temp\djhw.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 161629 File "C:\Windows\temp\djhw.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 161629 File "C:\Windows\temp\djhw.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 161629 On-access scanner has denied access to location "C:\Windows\TEMP\djhw.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 161630 Scanning "C:\Windows\temp\djhw.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 161630 File "C:\Windows\temp\djhw.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 161630 File "C:\Windows\temp\djhw.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 161630 On-access scanner has denied access to location "C:\Windows\temp\djhw.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 161630 Scanning "C:\Windows\temp\djhw.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 161630 File "C:\Windows\temp\djhw.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 161630 File "C:\Windows\temp\djhw.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 161630 On-access scanner has denied access to location "C:\Windows\TEMP\djhw.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 161630 Scanning "C:\Windows\temp\djhw.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 161630 File "C:\Windows\temp\djhw.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 161630 File "C:\Windows\temp\djhw.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 161630 On-access scanner has denied access to location "C:\Windows\temp\djhw.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 161630 Scanning "C:\Windows\temp\djhw.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 161630 File "C:\Windows\temp\djhw.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 161630 File "C:\Windows\temp\djhw.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 161630 On-access scanner has denied access to location "C:\Windows\temp\djhw.tmp\svchost.exe" for user NT AUTHORITY\LOCAL SERVICE
20100213 161630 Scanning "C:\Windows\temp\djhw.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 161630 File "C:\Windows\temp\djhw.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 161630 File "C:\Windows\temp\djhw.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 161630 On-access scanner has denied access to location "C:\Windows\temp\djhw.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 161948 File "C:\Windows\System32\wSxwRj.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 161948 On-access scanner has denied access to location "C:\Windows\System32\wSxwRj.exe" for user Win7Ultimate\Kashi
20100213 162000 File "C:\Windows\System32\wSxwRj.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 162006 File "C:\Windows\NIRCMD.exe" belongs to adware or PUA 'NirCmd' (of type Other).
20100213 162006 On-access scanner has denied access to location "C:\Windows\NIRCMD.exe" for user Win7Ultimate\Kashi
20100213 162008 Virus/spyware 'Mal/Generic-A' has been removed.
20100213 162157 Scanning "C:\Windows\temp\fymh.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 162157 File "C:\Windows\temp\fymh.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 162157 File "C:\Windows\temp\fymh.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 162157 On-access scanner has denied access to location "C:\Windows\temp\fymh.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 162157 Scanning "C:\Windows\temp\fymh.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 162157 File "C:\Windows\temp\fymh.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 162157 File "C:\Windows\temp\fymh.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 162157 On-access scanner has denied access to location "C:\Windows\temp\fymh.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 162157 Scanning "C:\Windows\temp\fymh.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 162157 File "C:\Windows\temp\fymh.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 162157 File "C:\Windows\temp\fymh.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 162157 On-access scanner has denied access to location "C:\Windows\temp\fymh.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 162157 Scanning "C:\Windows\temp\fymh.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 162157 File "C:\Windows\temp\fymh.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 162157 File "C:\Windows\temp\fymh.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 162157 On-access scanner has denied access to location "C:\Windows\temp\fymh.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 162157 Scanning "C:\Windows\temp\fymh.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 162157 File "C:\Windows\temp\fymh.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 162157 File "C:\Windows\temp\fymh.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 162157 On-access scanner has denied access to location "C:\Windows\temp\fymh.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 162157 Scanning "C:\Windows\temp\fymh.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 162157 File "C:\Windows\temp\fymh.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 162157 File "C:\Windows\temp\fymh.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 162157 On-access scanner has denied access to location "C:\Windows\temp\fymh.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 162157 Scanning "C:\Windows\temp\fymh.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 162157 File "C:\Windows\temp\fymh.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 162157 File "C:\Windows\temp\fymh.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 162157 On-access scanner has denied access to location "C:\Windows\temp\fymh.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 162157 Scanning "C:\Windows\temp\fymh.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 162157 File "C:\Windows\temp\fymh.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 162157 File "C:\Windows\temp\fymh.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 162157 On-access scanner has denied access to location "C:\Windows\TEMP\fymh.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 162157 Scanning "C:\Windows\temp\fymh.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 162157 File "C:\Windows\temp\fymh.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 162157 File "C:\Windows\temp\fymh.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 162157 On-access scanner has denied access to location "C:\Windows\TEMP\fymh.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 162157 The on-access driver failed to perform a user action on file \Device\HarddiskVolume2\Windows\temp\fymh.tmp\svchost.exe.
20100213 162157 Scanning "C:\Windows\temp\fymh.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 162157 File "C:\Windows\temp\fymh.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 162157 File "C:\Windows\temp\fymh.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 162157 On-access scanner has denied access to location "C:\Windows\temp\fymh.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 162546 File "C:\Windows\NIRCMD.exe" belongs to adware or PUA 'NirCmd' (of type Other).
20100213 162546 On-access scanner has denied access to location "C:\Windows\NIRCMD.exe" for user Win7Ultimate\Kashi
20100213 162733 Scanning "C:\Windows\temp\rqut.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 162733 File "C:\Windows\temp\rqut.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 162733 File "C:\Windows\temp\rqut.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 162733 On-access scanner has denied access to location "C:\Windows\temp\rqut.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 162734 Scanning "C:\Windows\temp\rqut.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 162734 File "C:\Windows\temp\rqut.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 162734 File "C:\Windows\temp\rqut.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 162734 On-access scanner has denied access to location "C:\Windows\temp\rqut.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 162734 Scanning "C:\Windows\temp\rqut.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 162734 File "C:\Windows\temp\rqut.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 162734 File "C:\Windows\temp\rqut.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 162734 On-access scanner has denied access to location "C:\Windows\temp\rqut.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 162734 Scanning "C:\Windows\temp\rqut.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 162734 File "C:\Windows\temp\rqut.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 162734 File "C:\Windows\temp\rqut.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 162734 On-access scanner has denied access to location "C:\Windows\temp\rqut.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 162734 Scanning "C:\Windows\temp\rqut.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 162734 File "C:\Windows\temp\rqut.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 162734 File "C:\Windows\temp\rqut.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 162734 On-access scanner has denied access to location "C:\Windows\temp\rqut.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 162734 Scanning "C:\Windows\temp\rqut.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 162734 File "C:\Windows\temp\rqut.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 162734 File "C:\Windows\temp\rqut.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 162734 On-access scanner has denied access to location "C:\Windows\temp\rqut.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 162734 Scanning "C:\Windows\temp\rqut.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 162734 File "C:\Windows\temp\rqut.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 162734 File "C:\Windows\temp\rqut.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 162734 On-access scanner has denied access to location "C:\Windows\temp\rqut.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 162734 Scanning "C:\Windows\temp\rqut.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 162734 File "C:\Windows\temp\rqut.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 162734 File "C:\Windows\temp\rqut.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 162734 On-access scanner has denied access to location "C:\Windows\temp\rqut.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 162734 Scanning "C:\Windows\temp\rqut.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 162734 File "C:\Windows\temp\rqut.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 162734 File "C:\Windows\temp\rqut.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 162734 On-access scanner has denied access to location "C:\Windows\temp\rqut.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 162734 Scanning "C:\Windows\temp\rqut.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 162734 File "C:\Windows\temp\rqut.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 162734 File "C:\Windows\temp\rqut.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 162734 On-access scanner has denied access to location "C:\Windows\temp\rqut.tmp\svchost.exe" for user NT AUTHORITY\LOCAL SERVICE
20100213 162734 Scanning "C:\Windows\temp\rqut.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 162734 File "C:\Windows\temp\rqut.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 162734 File "C:\Windows\temp\rqut.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 162734 On-access scanner has denied access to location "C:\Windows\temp\rqut.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 162735 Scanning "C:\Windows\temp\rqut.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 162735 File "C:\Windows\temp\rqut.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 162735 File "C:\Windows\temp\rqut.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 162735 On-access scanner has denied access to location "C:\Windows\temp\rqut.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 162735 Scanning "C:\Windows\temp\rqut.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 162735 File "C:\Windows\temp\rqut.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 162735 File "C:\Windows\temp\rqut.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 162735 On-access scanner has denied access to location "C:\Windows\temp\rqut.tmp\svchost.exe" for user NT AUTHORITY\LOCAL SERVICE
20100213 162735 Scanning "C:\Windows\temp\rqut.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 162735 File "C:\Windows\temp\rqut.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 162735 File "C:\Windows\temp\rqut.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 162735 On-access scanner has denied access to location "C:\Windows\temp\rqut.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 162735 Scanning "C:\Windows\temp\rqut.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 162735 File "C:\Windows\temp\rqut.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 162735 File "C:\Windows\temp\rqut.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 162735 On-access scanner has denied access to location "C:\Windows\TEMP\rqut.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 162735 Scanning "C:\Windows\temp\rqut.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 162735 File "C:\Windows\temp\rqut.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 162735 File "C:\Windows\temp\rqut.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 162735 On-access scanner has denied access to location "C:\Windows\TEMP\rqut.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 162744 File "C:\CFix\iexplore.exe" belongs to adware or PUA 'NirCmd' (of type Other).
20100213 162744 File "C:\CFix\n.pif" belongs to adware or PUA 'NirCmd' (of type Other).
20100213 162744 File "C:\CFix\NircmdB.exe" belongs to adware or PUA 'NirCmd' (of type Other).
20100213 162744 File "C:\Windows\NIRCMD.exe" belongs to adware or PUA 'NirCmd' (of type Other).
20100213 162744 File "C:\CFix\iexplore.exe" has been cleaned up.
20100213 162745 File "C:\CFix\n.pif" has been cleaned up.
20100213 162745 File "C:\CFix\NircmdB.exe" has been cleaned up.
20100213 162746 File "C:\Windows\NIRCMD.exe" has been cleaned up.
20100213 162746 Adware or PUA 'NirCmd' has been removed.
20100213 163311 Scanning "C:\Windows\temp\dqgf.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 163311 File "C:\Windows\temp\dqgf.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 163311 File "C:\Windows\temp\dqgf.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 163311 On-access scanner has denied access to location "C:\Windows\temp\dqgf.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 163311 Scanning "C:\Windows\temp\dqgf.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 163311 File "C:\Windows\temp\dqgf.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 163311 File "C:\Windows\temp\dqgf.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 163311 On-access scanner has denied access to location "C:\Windows\temp\dqgf.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 163311 Scanning "C:\Windows\temp\dqgf.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 163311 File "C:\Windows\temp\dqgf.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 163311 File "C:\Windows\temp\dqgf.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 163311 On-access scanner has denied access to location "C:\Windows\temp\dqgf.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 163311 Scanning "C:\Windows\temp\dqgf.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 163311 File "C:\Windows\temp\dqgf.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 163311 File "C:\Windows\temp\dqgf.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 163311 On-access scanner has denied access to location "C:\Windows\temp\dqgf.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 163311 Scanning "C:\Windows\temp\dqgf.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 163311 File "C:\Windows\temp\dqgf.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 163311 File "C:\Windows\temp\dqgf.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 163311 On-access scanner has denied access to location "C:\Windows\temp\dqgf.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 163311 Scanning "C:\Windows\temp\dqgf.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 163311 File "C:\Windows\temp\dqgf.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 163311 File "C:\Windows\temp\dqgf.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 163311 On-access scanner has denied access to location "C:\Windows\temp\dqgf.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 163312 Scanning "C:\Windows\temp\dqgf.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 163312 File "C:\Windows\temp\dqgf.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 163312 File "C:\Windows\temp\dqgf.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 163312 On-access scanner has denied access to location "C:\Windows\temp\dqgf.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 163312 Scanning "C:\Windows\temp\dqgf.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 163312 File "C:\Windows\temp\dqgf.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 163312 File "C:\Windows\temp\dqgf.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 163312 On-access scanner has denied access to location "C:\Windows\temp\dqgf.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 163312 Scanning "C:\Windows\temp\dqgf.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 163312 File "C:\Windows\temp\dqgf.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 163312 File "C:\Windows\temp\dqgf.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 163312 On-access scanner has denied access to location "C:\Windows\temp\dqgf.tmp\svchost.exe" for user NT AUTHORITY\LOCAL SERVICE
20100213 163312 Scanning "C:\Windows\temp\dqgf.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 163312 File "C:\Windows\temp\dqgf.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 163312 File "C:\Windows\temp\dqgf.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 163312 On-access scanner has denied access to location "C:\Windows\temp\dqgf.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 163312 Scanning "C:\Windows\temp\dqgf.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 163312 File "C:\Windows\temp\dqgf.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 163312 File "C:\Windows\temp\dqgf.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 163312 On-access scanner has denied access to location "C:\Windows\temp\dqgf.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 163312 Scanning "C:\Windows\temp\dqgf.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 163312 File "C:\Windows\temp\dqgf.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 163312 File "C:\Windows\temp\dqgf.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 163312 On-access scanner has denied access to location "C:\Windows\temp\dqgf.tmp\svchost.exe" for user NT AUTHORITY\LOCAL SERVICE
20100213 163312 Scanning "C:\Windows\temp\dqgf.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 163312 File "C:\Windows\temp\dqgf.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 163312 File "C:\Windows\temp\dqgf.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 163312 On-access scanner has denied access to location "C:\Windows\TEMP\dqgf.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 163313 Scanning "C:\Windows\temp\dqgf.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 163312 File "C:\Windows\temp\dqgf.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 163312 File "C:\Windows\temp\dqgf.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 163313 On-access scanner has denied access to location "C:\Windows\temp\dqgf.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 163313 Scanning "C:\Windows\temp\dqgf.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 163313 File "C:\Windows\temp\dqgf.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 163313 File "C:\Windows\temp\dqgf.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 163313 On-access scanner has denied access to location "C:\Windows\TEMP\dqgf.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 163415 File "C:\Windows\System32\VKcrzG.bat" belongs to virus/spyware 'Troj/Agent-LWD'.
20100213 163429 File "C:\Windows\System32\wSxwRj.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 163452 Scanning "C:\Windows\System32\drivers\atapi.sys" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 163457 Scanning "C:\Windows\System32\drivers\sptd.sys" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 163745 File "C:\Windows\System32\VKcrzG.bat" belongs to virus/spyware 'Troj/Agent-LWD'.
20100213 163749 Virus/spyware 'Troj/Agent-LWD' has been removed.
20100213 163754 File "C:\Windows\System32\wSxwRj.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 163757 Virus/spyware 'Mal/Generic-A' has been removed.
20100213 163830 Scanning "C:\Windows\temp\qecu.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 163830 File "C:\Windows\temp\qecu.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 163830 File "C:\Windows\temp\qecu.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 163830 On-access scanner has denied access to location "C:\Windows\temp\qecu.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 163830 Scanning "C:\Windows\temp\qecu.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 163830 File "C:\Windows\temp\qecu.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 163830 File "C:\Windows\temp\qecu.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 163830 On-access scanner has denied access to location "C:\Windows\temp\qecu.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 163830 Scanning "C:\Windows\temp\qecu.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 163830 File "C:\Windows\temp\qecu.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 163830 File "C:\Windows\temp\qecu.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 163830 On-access scanner has denied access to location "C:\Windows\temp\qecu.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 163830 Scanning "C:\Windows\temp\qecu.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 163830 File "C:\Windows\temp\qecu.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 163830 File "C:\Windows\temp\qecu.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 163830 On-access scanner has denied access to location "C:\Windows\temp\qecu.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 163830 Scanning "C:\Windows\temp\qecu.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 163830 File "C:\Windows\temp\qecu.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 163830 File "C:\Windows\temp\qecu.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 163830 On-access scanner has denied access to location "C:\Windows\temp\qecu.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 163830 Scanning "C:\Windows\temp\qecu.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 163830 File "C:\Windows\temp\qecu.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 163830 File "C:\Windows\temp\qecu.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 163830 On-access scanner has denied access to location "C:\Windows\temp\qecu.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 163830 Scanning "C:\Windows\temp\qecu.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 163830 File "C:\Windows\temp\qecu.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 163830 File "C:\Windows\temp\qecu.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 163830 On-access scanner has denied access to location "C:\Windows\temp\qecu.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 163830 Scanning "C:\Windows\temp\qecu.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 163830 File "C:\Windows\temp\qecu.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 163830 File "C:\Windows\temp\qecu.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 163830 On-access scanner has denied access to location "C:\Windows\temp\qecu.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 163830 Scanning "C:\Windows\temp\qecu.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 163830 File "C:\Windows\temp\qecu.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 163830 File "C:\Windows\temp\qecu.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 163830 On-access scanner has denied access to location "C:\Windows\TEMP\qecu.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 163830 Scanning "C:\Windows\temp\qecu.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 163830 File "C:\Windows\temp\qecu.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 163830 File "C:\Windows\temp\qecu.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 163830 On-access scanner has denied access to location "C:\Windows\temp\qecu.tmp\svchost.exe" for user NT AUTHORITY\LOCAL SERVICE
20100213 163830 Scanning "C:\Windows\temp\qecu.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 163830 File "C:\Windows\temp\qecu.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 163830 File "C:\Windows\temp\qecu.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 163830 On-access scanner has denied access to location "C:\Windows\TEMP\qecu.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 163830 The on-access driver failed to perform a user action on file \Device\HarddiskVolume2\Windows\temp\qecu.tmp\svchost.exe.
20100213 163830 Scanning "C:\Windows\temp\qecu.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 163830 File "C:\Windows\temp\qecu.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 163830 File "C:\Windows\temp\qecu.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 163830 On-access scanner has denied access to location "C:\Windows\temp\qecu.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 164208 File "D:\Downloads\WM_Recorder_12\WM Recorder 12\WMR12Patch.exe" belongs to adware or PUA 'Patch Crack' (of type Hacking tool).
20100213 164358 Scanning "C:\Windows\temp\dxdt.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 164358 File "C:\Windows\temp\dxdt.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 164358 File "C:\Windows\temp\dxdt.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 164358 On-access scanner has denied access to location "C:\Windows\temp\dxdt.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 164358 Scanning "C:\Windows\temp\dxdt.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 164358 File "C:\Windows\temp\dxdt.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 164358 File "C:\Windows\temp\dxdt.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 164358 On-access scanner has denied access to location "C:\Windows\temp\dxdt.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 164358 Scanning "C:\Windows\temp\dxdt.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 164358 File "C:\Windows\temp\dxdt.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 164358 File "C:\Windows\temp\dxdt.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 164358 On-access scanner has denied access to location "C:\Windows\temp\dxdt.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 164358 Scanning "C:\Windows\temp\dxdt.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 164358 File "C:\Windows\temp\dxdt.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 164358 File "C:\Windows\temp\dxdt.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 164358 On-access scanner has denied access to location "C:\Windows\temp\dxdt.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 164358 Scanning "C:\Windows\temp\dxdt.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 164358 File "C:\Windows\temp\dxdt.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 164358 File "C:\Windows\temp\dxdt.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 164358 On-access scanner has denied access to location "C:\Windows\temp\dxdt.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 164358 Scanning "C:\Windows\temp\dxdt.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 164358 File "C:\Windows\temp\dxdt.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 164358 File "C:\Windows\temp\dxdt.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 164358 On-access scanner has denied access to location "C:\Windows\temp\dxdt.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 164358 Scanning "C:\Windows\temp\dxdt.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 164358 File "C:\Windows\temp\dxdt.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 164358 File "C:\Windows\temp\dxdt.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 164358 On-access scanner has denied access to location "C:\Windows\temp\dxdt.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 164358 Scanning "C:\Windows\temp\dxdt.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 164358 File "C:\Windows\temp\dxdt.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 164358 File "C:\Windows\temp\dxdt.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 164358 On-access scanner has denied access to location "C:\Windows\temp\dxdt.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 164358 Scanning "C:\Windows\temp\dxdt.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 164358 File "C:\Windows\temp\dxdt.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 164358 File "C:\Windows\temp\dxdt.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 164358 On-access scanner has denied access to location "C:\Windows\temp\dxdt.tmp\svchost.exe" for user NT AUTHORITY\LOCAL SERVICE
20100213 164359 Scanning "C:\Windows\temp\dxdt.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 164359 File "C:\Windows\temp\dxdt.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 164359 File "C:\Windows\temp\dxdt.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 164359 On-access scanner has denied access to location "C:\Windows\temp\dxdt.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 164359 Scanning "C:\Windows\temp\dxdt.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 164359 File "C:\Windows\temp\dxdt.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 164359 File "C:\Windows\temp\dxdt.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 164359 On-access scanner has denied access to location "C:\Windows\temp\dxdt.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 164359 Scanning "C:\Windows\temp\dxdt.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 164359 File "C:\Windows\temp\dxdt.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 164359 File "C:\Windows\temp\dxdt.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 164359 On-access scanner has denied access to location "C:\Windows\temp\dxdt.tmp\svchost.exe" for user NT AUTHORITY\LOCAL SERVICE
20100213 164359 Scanning "C:\Windows\temp\dxdt.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 164359 File "C:\Windows\temp\dxdt.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 164359 File "C:\Windows\temp\dxdt.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 164359 On-access scanner has denied access to location "C:\Windows\TEMP\dxdt.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 164359 Scanning "C:\Windows\temp\dxdt.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 164359 File "C:\Windows\temp\dxdt.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 164359 File "C:\Windows\temp\dxdt.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 164359 On-access scanner has denied access to location "C:\Windows\temp\dxdt.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 164359 Scanning "C:\Windows\temp\dxdt.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 164359 File "C:\Windows\temp\dxdt.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 164359 File "C:\Windows\temp\dxdt.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 164359 On-access scanner has denied access to location "C:\Windows\TEMP\dxdt.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 164543 File "D:\Software\Games\Worms\Zips\protect.dll" belongs to virus/spyware 'Mal/Packer'.
20100213 164724 Scanning "D:\Software\Games\Worms\Zips\protect.dll" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 164724 Item 'Mal/Packer' could not be redetected.
20100213 164822 Adware or PUA 'NirCmd' has been detected.
20100213 164822 Virus/spyware 'Troj/Agent-LWD' has been detected.
20100213 164822 Virus/spyware 'Mal/Generic-A' has been detected.
20100213 164822 Adware or PUA 'Patch Crack' has been detected.
20100213 164822 Virus/spyware 'Mal/Packer' has been detected.
20100213 164822 Scan 'Scan my computer' completed.
20100213 164823 Summary of results for scan 'Scan my computer':
Items scanned: 177362
Errors: 2
Items quarantined: 5
Items dealt with: 0
20100213 164846 File "C:\Windows\System32\VKcrzG.bat" belongs to virus/spyware 'Troj/Agent-LWD'.
20100213 164849 Virus/spyware 'Troj/Agent-LWD' has been removed.
20100213 164850 Scanning "D:\Software\Games\Worms\Zips\protect.dll" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 164850 Item 'Mal/Packer' could not be redetected.
20100213 164854 File "C:\Windows\System32\wSxwRj.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 164857 Virus/spyware 'Mal/Generic-A' has been removed.
20100213 164912 Scanning "C:\Windows\temp\jlpo.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 164912 File "C:\Windows\temp\jlpo.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 164912 File "C:\Windows\temp\jlpo.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 164912 On-access scanner has denied access to location "C:\Windows\temp\jlpo.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 164912 Scanning "C:\Windows\temp\jlpo.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 164912 File "C:\Windows\temp\jlpo.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 164912 File "C:\Windows\temp\jlpo.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 164912 On-access scanner has denied access to location "C:\Windows\temp\jlpo.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 164912 Scanning "C:\Windows\temp\jlpo.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 164912 File "C:\Windows\temp\jlpo.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 164912 File "C:\Windows\temp\jlpo.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 164912 On-access scanner has denied access to location "C:\Windows\temp\jlpo.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 164912 Scanning "C:\Windows\temp\jlpo.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 164912 File "C:\Windows\temp\jlpo.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 164912 File "C:\Windows\temp\jlpo.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 164912 On-access scanner has denied access to location "C:\Windows\temp\jlpo.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 164912 Scanning "C:\Windows\temp\jlpo.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 164912 File "C:\Windows\temp\jlpo.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 164912 File "C:\Windows\temp\jlpo.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 164912 On-access scanner has denied access to location "C:\Windows\temp\jlpo.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 164913 Scanning "C:\Windows\temp\jlpo.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 164913 File "C:\Windows\temp\jlpo.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 164913 File "C:\Windows\temp\jlpo.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 164913 On-access scanner has denied access to location "C:\Windows\temp\jlpo.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 164913 Scanning "C:\Windows\temp\jlpo.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 164913 File "C:\Windows\temp\jlpo.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 164913 File "C:\Windows\temp\jlpo.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 164913 On-access scanner has denied access to location "C:\Windows\temp\jlpo.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 164913 Scanning "C:\Windows\temp\jlpo.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 164913 File "C:\Windows\temp\jlpo.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 164913 File "C:\Windows\temp\jlpo.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 164913 On-access scanner has denied access to location "C:\Windows\TEMP\jlpo.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 164913 Scanning "C:\Windows\temp\jlpo.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 164913 File "C:\Windows\temp\jlpo.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 164913 File "C:\Windows\temp\jlpo.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 164913 On-access scanner has denied access to location "C:\Windows\TEMP\jlpo.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 164913 The on-access driver failed to perform a user action on file \Device\HarddiskVolume2\Windows\temp\jlpo.tmp\svchost.exe.
20100213 164913 Scanning "C:\Windows\temp\jlpo.tmp\svchost.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 164913 File "C:\Windows\temp\jlpo.tmp\svchost.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 164913 File "C:\Windows\temp\jlpo.tmp\svchost.exe" belongs to virus/spyware 'Mal/EncPk-LE'.
20100213 164913 On-access scanner has denied access to location "C:\Windows\temp\jlpo.tmp\svchost.exe" for user NT AUTHORITY\SYSTEM
20100213 164914 Scanning "C:\CFix\iexplore.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 164914 Scanning "C:\CFix\n.pif" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 164914 Scanning "C:\CFix\NircmdB.exe" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 164914 Item 'NirCmd' could not be redetected.
20100213 164918 File "D:\Downloads\WM_Recorder_12\WM Recorder 12\WMR12Patch.exe" belongs to adware or PUA 'Patch Crack' (of type Hacking tool).
20100213 164918 On-access scanner has denied access to location "D:\Downloads\WM_Recorder_12\WM Recorder 12\WMR12Patch.exe" for user Win7Ultimate\Kashi
20100213 165122 Using detection data version 4.50G (detection engine 3.4.2). This version can detect 1374546 items.
20100213 165123 User (NT AUTHORITY\LOCAL SERVICE) has started on-access scanning for this machine.
20100213 180438 Using detection data version 4.50G (detection engine 3.4.2). This version can detect 1374546 items.
20100213 180439 User (NT AUTHORITY\LOCAL SERVICE) has started on-access scanning for this machine.
20100213 180622 Adware or PUA 'Patch Crack' (of type Hacking tool) has been authorized.
20100213 180626 File "D:\Downloads\WM_Recorder_12\WM Recorder 12\WMR12Patch.exe" belongs to authorized adware or PUA 'Patch Crack'.
20100213 180616 File "D:\Downloads\WM_Recorder_12\WM Recorder 12\WMR12Patch.exe" belongs to adware or PUA 'Patch Crack' (of type Hacking tool).
20100213 180616 On-access scanner has denied access to location "D:\Downloads\WM_Recorder_12\WM Recorder 12\WMR12Patch.exe" for user Win7Ultimate\Kashi
20100213 180849 User (NT AUTHORITY\SYSTEM) has stopped on-access scanning for this machine.
20100213 180852 Using detection data version 4.50G (detection engine 3.4.2). This version can detect 1374547 items.
20100213 180852 User (NT AUTHORITY\SYSTEM) has started on-access scanning for this machine.
20100213 181030 Scan 'New scan' started.
20100213 182824 File "C:\Windows\System32\wSxwRj.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 182824 On-access scanner has denied access to location "C:\Windows\System32\wSxwRj.exe" for user NT AUTHORITY\SYSTEM
20100213 182835 File "C:\Windows\System32\wSxwRj.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 182835 On-access scanner has denied access to location "C:\Windows\System32\wSxwRj.exe" for user NT AUTHORITY\SYSTEM
20100213 182836 File "C:\Windows\System32\wSxwRj.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 182838 File "C:\Windows\System32\wSxwRj.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 182838 On-access scanner has denied access to location "C:\Windows\System32\wSxwRj.exe" for user NT AUTHORITY\SYSTEM
20100213 182840 Virus/spyware 'Mal/Generic-A' has been removed.
20100213 182840 File "C:\ProgramData\Sophos\Sophos Anti-Virus\Temp\ef540001.$$$" belongs to virus/spyware 'Mal/Generic-A'.
20100213 182840 On-access scanner has denied access to location "C:\ProgramData\Sophos\Sophos Anti-Virus\Temp\ef540001.$$$" for user NT AUTHORITY\SYSTEM
20100213 182841 File "C:\Windows\System32\wSxwRj.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 182841 On-access scanner has denied access to location "C:\Windows\System32\wSxwRj.exe" for user NT AUTHORITY\SYSTEM
20100213 182842 File "C:\Windows\System32\wSxwRj.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 182842 On-access scanner has denied access to location "C:\Windows\System32\wSxwRj.exe" for user NT AUTHORITY\SYSTEM
20100213 182844 File "C:\Windows\System32\wSxwRj.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 182844 On-access scanner has denied access to location "C:\Windows\System32\wSxwRj.exe" for user NT AUTHORITY\SYSTEM
20100213 182849 File "C:\ProgramData\Sophos\Sophos Anti-Virus\Temp\ef540001.$$$" belongs to virus/spyware 'Mal/Generic-A'.
20100213 182853 File "C:\Windows\System32\wSxwRj.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 182857 File "C:\ProgramData\Sophos\Sophos Anti-Virus\Temp\ef540001.$$$" has been cleaned up.
20100213 182858 File "C:\ProgramData\Sophos\Sophos Anti-Virus\Temp\ef650002.$$$" belongs to virus/spyware 'Mal/Generic-A'.
20100213 182858 On-access scanner has denied access to location "C:\ProgramData\Sophos\Sophos Anti-Virus\Temp\ef650002.$$$" for user NT AUTHORITY\SYSTEM
20100213 182902 Virus/spyware 'Mal/Generic-A' has been removed.
20100213 182902 File "C:\ProgramData\Sophos\Sophos Anti-Virus\Temp\ef6a0004.$$$" belongs to virus/spyware 'Mal/Generic-A'.
20100213 182902 On-access scanner has denied access to location "C:\ProgramData\Sophos\Sophos Anti-Virus\Temp\ef6a0004.$$$" for user NT AUTHORITY\SYSTEM
20100213 182912 File "C:\ProgramData\Sophos\Sophos Anti-Virus\Temp\ef6a0004.$$$" belongs to virus/spyware 'Mal/Generic-A'.
20100213 182916 File "C:\ProgramData\Sophos\Sophos Anti-Virus\Temp\ef6a0004.$$$" has been cleaned up.
20100213 182916 Virus/spyware 'Mal/Generic-A' has been removed.
20100213 182950 File "C:\Windows\System32\wSxwRj.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 182950 On-access scanner has denied access to location "C:\Windows\System32\wSxwRj.exe" for user NT AUTHORITY\SYSTEM
20100213 182959 File "C:\Windows\System32\wSxwRj.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 183002 Virus/spyware 'Mal/Generic-A' has been removed.
20100213 183003 File "C:\Windows\System32\wSxwRj.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 183003 On-access scanner has denied access to location "C:\Windows\System32\wSxwRj.exe" for user NT AUTHORITY\SYSTEM
20100213 183003 File "C:\ProgramData\Sophos\Sophos Anti-Virus\Temp\efa70001.$$$" belongs to virus/spyware 'Mal/Generic-A'.
20100213 183003 On-access scanner has denied access to location "C:\ProgramData\Sophos\Sophos Anti-Virus\Temp\efa70001.$$$" for user NT AUTHORITY\SYSTEM
20100213 183013 File "C:\ProgramData\Sophos\Sophos Anti-Virus\Temp\efa70001.$$$" belongs to virus/spyware 'Mal/Generic-A'.
20100213 183017 File "C:\Windows\System32\wSxwRj.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 183019 File "C:\ProgramData\Sophos\Sophos Anti-Virus\Temp\efa70001.$$$" belongs to virus/spyware 'Mal/Generic-A'.
20100213 183019 On-access scanner has denied access to location "C:\ProgramData\Sophos\Sophos Anti-Virus\Temp\efa70001.$$$" for user NT AUTHORITY\SYSTEM
20100213 183020 File "C:\ProgramData\Sophos\Sophos Anti-Virus\Temp\efa70001.$$$" belongs to virus/spyware 'Mal/Generic-A'.
20100213 183020 On-access scanner has denied access to location "C:\ProgramData\Sophos\Sophos Anti-Virus\Temp\efa70001.$$$" for user NT AUTHORITY\SYSTEM
20100213 183022 File "C:\ProgramData\Sophos\Sophos Anti-Virus\Temp\efa70001.$$$" has been cleaned up.
20100213 183022 Scanning "C:\ProgramData\Sophos\Sophos Anti-Virus\Temp\efa70001.$$$" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 183022 File "C:\ProgramData\Sophos\Sophos Anti-Virus\Temp\efa70001.$$$" belongs to virus/spyware 'Mal/Generic-A'.
20100213 183022 On-access scanner has denied access to location "C:\ProgramData\Sophos\Sophos Anti-Virus\Temp\efa70001.$$$" for user NT AUTHORITY\SYSTEM
20100213 183022 The on-access driver failed to perform a user action on file \Device\HarddiskVolume2\ProgramData\Sophos\Sophos Anti-Virus\Temp\efa70001.$$$.
20100213 183023 File "C:\ProgramData\Sophos\Sophos Anti-Virus\Temp\efb90002.$$$" belongs to virus/spyware 'Mal/Generic-A'.
20100213 183023 On-access scanner has denied access to location "C:\ProgramData\Sophos\Sophos Anti-Virus\Temp\efb90002.$$$" for user NT AUTHORITY\SYSTEM
20100213 183027 Virus/spyware 'Mal/Generic-A' has been removed.
20100213 183028 File "C:\ProgramData\Sophos\Sophos Anti-Virus\Temp\efbf0004.$$$" belongs to virus/spyware 'Mal/Generic-A'.
20100213 183028 On-access scanner has denied access to location "C:\ProgramData\Sophos\Sophos Anti-Virus\Temp\efbf0004.$$$" for user NT AUTHORITY\SYSTEM
20100213 183037 File "C:\ProgramData\Sophos\Sophos Anti-Virus\Temp\efbf0004.$$$" belongs to virus/spyware 'Mal/Generic-A'.
20100213 183041 File "C:\ProgramData\Sophos\Sophos Anti-Virus\Temp\efbf0004.$$$" has been cleaned up.
20100213 183041 Virus/spyware 'Mal/Generic-A' has been removed.
20100213 183042 File "C:\ProgramData\Sophos\Sophos Anti-Virus\Temp\efcd0001.$$$" belongs to virus/spyware 'Mal/Generic-A'.
20100213 183042 On-access scanner has denied access to location "C:\ProgramData\Sophos\Sophos Anti-Virus\Temp\efcd0001.$$$" for user NT AUTHORITY\SYSTEM
20100213 183051 File "C:\ProgramData\Sophos\Sophos Anti-Virus\Temp\efcd0001.$$$" belongs to virus/spyware 'Mal/Generic-A'.
20100213 183055 File "C:\ProgramData\Sophos\Sophos Anti-Virus\Temp\efcd0001.$$$" has been cleaned up.
20100213 183056 Virus/spyware 'Mal/Generic-A' has been removed.
20100213 183056 File "C:\ProgramData\Sophos\Sophos Anti-Virus\Temp\efdb0001.$$$" belongs to virus/spyware 'Mal/Generic-A'.
20100213 183056 On-access scanner has denied access to location "C:\ProgramData\Sophos\Sophos Anti-Virus\Temp\efdb0001.$$$" for user NT AUTHORITY\SYSTEM
20100213 183106 File "C:\ProgramData\Sophos\Sophos Anti-Virus\Temp\efdb0001.$$$" belongs to virus/spyware 'Mal/Generic-A'.
20100213 183110 File "C:\ProgramData\Sophos\Sophos Anti-Virus\Temp\efdb0001.$$$" has been cleaned up.
20100213 183110 Virus/spyware 'Mal/Generic-A' has been removed.
20100213 190743 File "C:\Windows\System32\VKcrzG.bat" belongs to virus/spyware 'Troj/Agent-LWD'.
20100213 190759 File "C:\Windows\System32\wSxwRj.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 190825 Scanning "C:\Windows\System32\drivers\atapi.sys" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 190830 Scanning "C:\Windows\System32\drivers\sptd.sys" returned SAV Interface error 0xa0040210: The file could not be accessed.
20100213 191643 Virus/spyware 'Troj/Agent-LWD' has been detected.
20100213 191643 Virus/spyware 'Mal/Generic-A' has been detected.
20100213 191643 Scan 'New scan' completed.
20100213 191643 Summary of results for scan 'New scan':
Items scanned: 127832
Errors: 2
Items quarantined: 2
Items dealt with: 0
20100213 191700 File "C:\Windows\System32\VKcrzG.bat" belongs to virus/spyware 'Troj/Agent-LWD'.
20100213 191703 Virus/spyware 'Troj/Agent-LWD' has been removed.
20100213 191707 File "C:\Windows\System32\wSxwRj.exe" belongs to virus/spyware 'Mal/Generic-A'.
20100213 191711 Virus/spyware 'Mal/Generic-A' has been removed.
20100213 191712 File "C:\ProgramData\Sophos\Sophos Anti-Virus\Temp\fab30001.$$$" belongs to virus/spyware 'Mal/Generic-A'.
20100213 191712 On-access scanner has denied access to location "C:\ProgramData\Sophos\Sophos Anti-Virus\Temp\fab30001.$$$" for user NT AUTHORITY\SYSTEM
20100213 191723 The attempt to perform an action on the item already being dealt with has been ignored.
20100213 191725 File "C:\ProgramData\Sophos\Sophos Anti-Virus\Temp\fab30001.$$$" belongs to virus/spyware 'Mal/Generic-A'.
20100213 191732 File "C:\ProgramData\Sophos\Sophos Anti-Virus\Temp\fab30001.$$$" could not be removed.
20100213 191732 Virus/spyware 'Mal/Generic-A' has been removed.
20100213 191742 File "C:\ProgramData\Sophos\Sophos Anti-Virus\Temp\fab30001.$$$" belongs to virus/spyware 'Mal/Generic-A'.
20100213 191746 File "C:\ProgramData\Sophos\Sophos Anti-Virus\Temp\fab30001.$$$" has been cleaned up.
20100213 191747 Virus/spyware 'Mal/Generic-A' has been removed.
20100213 191926 Using detection data version 4.50G (detection engine 3.4.2). This version can detect 1374547 items.
20100213 191927 User (NT AUTHORITY\LOCAL SERVICE) has started on-access scanning for this machine.
(891 items)


Malware Byte Log


Malwarebytes' Anti-Malware 1.44
Database version: 3728
Windows 6.1.7600 (Safe Mode)
Internet Explorer 8.0.7600.16385

2/13/2010 9:34:44 AM
mbam-log-2010-02-13 (09-34-44).txt

Scan type: Full Scan (C:\|)
Objects scanned: 235123
Time elapsed: 24 minute(s), 3 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)


Hijack This Log

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:47:10 AM, on 2/13/2010
Platform: Unknown Windows (WinNT 6.01.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16385)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Google\Quick Search Box\GoogleQuickSearchBox.exe
C:\Program Files\Microsoft Security Essentials\msseces.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Program Files\Orbitdownloader\orbitdm.exe
C:\Program Files\Sophos\AutoUpdate\ALMon.exe
C:\Program Files\Orbitdownloader\orbitnet.exe
C:\Program Files\Common Files\Logishrd\KHAL2\KHALMNPR.EXE
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Sophos Web Content Scanner - {39EA7695-B3F2-4C44-A4BC-297ADA8FD235} - C:\Program Files\Sophos\Sophos Anti-Virus\SophosBHO.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.5.4723.1820\swg.dll
O2 - BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: Grab Pro - {C55BBCD6-41AD-48AD-9953-3609C48EACC7} - C:\Program Files\Orbitdownloader\GrabPro.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [Google Quick Search Box] "C:\Program Files\Google\Quick Search Box\GoogleQuickSearchBox.exe" /autorun
O4 - HKLM\..\Run: [MSSE] "C:\Program Files\Microsoft Security Essentials\msseces.exe" -hide
O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKUS\S-1-5-18\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" (User 'Default user')
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe
O4 - Global Startup: Orbit.lnk = C:\Program Files\Orbitdownloader\orbitdm.exe
O4 - Global Startup: Sophos AutoUpdate Monitor.lnk = C:\Program Files\Sophos\AutoUpdate\ALMon.exe
O8 - Extra context menu item: &Download by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/201
O8 - Extra context menu item: &Grab video by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/204
O8 - Extra context menu item: Do&wnload selected by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/203
O8 - Extra context menu item: Down&load all by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/202
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_96D6FF0C6D236BF8.dll/cmsidewiki.html
O9 - Extra button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\Program Files\PokerStars\PokerStarsUpdate.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: Bodog Poker - {F47C1DB5-ED21-4dc1-853E-D1495792D4C5} - C:\Program Files\Bodog Poker\BPGame.exe
O9 - Extra button: UB - {1FBA04EE-3024-11d2-8F1F-0000F87ABD16} - C:\Users\Kashi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\UB\UB.lnk (HKCU)
O9 - Extra 'Tools' menuitem: UB - {1FBA04EE-3024-11d2-8F1F-0000F87ABD16} - C:\Users\Kashi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\UB\UB.lnk (HKCU)
O16 - DPF: vzTCPConfig - http://www2.verizon.net/help/fios_settings...vzTCPConfig.CAB
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O20 - AppInit_DLLs: C:\Windows\System32\avgrsstx.dll,C:\PROGRA~1\Sophos\SOPHOS~1\SOPHOS~1.DLL
O23 - Service: AMD External Events Utility - AMD - C:\Windows\system32\atiesrxx.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Program Files\Common Files\Logishrd\Bluetooth\LBTServ.exe
O23 - Service: PEVSystemStart - Unknown owner - C:\CFix\PEV.cfxxe
O23 - Service: Sophos Anti-Virus status reporter (SAVAdminService) - Sophos Plc - C:\Program Files\Sophos\Sophos Anti-Virus\SAVAdminService.exe
O23 - Service: Sophos Anti-Virus (SAVService) - Sophos Plc - C:\Program Files\Sophos\Sophos Anti-Virus\SavService.exe
O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
O23 - Service: Sophos AutoUpdate Service - Sophos Plc - C:\Program Files\Sophos\AutoUpdate\ALsvc.exe

--
End of file - 6527 bytes

Microsoft Security Essentials was alos used and comes up clean, yet detects infections after a reboot.

I keep getting redirects when I click on links and I also keep getting infection messages even though everything seems to be clean
Mal/Generic-A
c:\windows\system32\wSxwRj.exe

I have also scanned with spybot, combofix and smitfraud


Any help would be greatly appreciated

Edited by PorkChopSandwiches, 13 February 2010 - 06:13 PM.


BC AdBot (Login to Remove)

 


#2 PorkChopSandwiches

PorkChopSandwiches
  • Topic Starter

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:01:52 AM

Posted 14 February 2010 - 01:15 PM

I used Hitman Pro 3.5 it detected a rootkit in the atapi.sys (C:\windows\System32\Drivers) and a Trojan wSxwRj.exe (C:\windows\System32) I let the app correct he problems and restared. It seems to have got rid of the issues. Thanks

#3 PorkChopSandwiches

PorkChopSandwiches
  • Topic Starter

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:01:52 AM

Posted 14 February 2010 - 01:49 PM

I spoke to soon, I'm still getting Mal/Generic-A reporting, but the redirects seem to have stopped.



===========

Hello

While we understand your frustration at having to wait, please note that Bleeping Computer deals with several hundred requests for assistance such as yours on a daily basis. As a result, our backlog is quite large as are other comparable sites that help others with malware issues. Although our HJT Team members work on hundreds of requests each day, they are all volunteers who work logs when they can and are able to do so. No one is paid by Bleeping Computer for their assistance to our members.

Further, our malware removal staff is comprised of team members with various levels of skill and expertise to deal with thousands of malware variants, some more complex than others. Although we try to take DDS/HJT logs in order (starting with the oldest), it is often the skill level of the particular helper and sometimes the operating system that dictates which logs get selected first. Some infections are more complicated than others and require a higher skill level to remove. Without that skill level attempted removal could result in disastrous results. In other instances, the helper may not be familiar with the operating system that you are using, since they use another. In either case, neither of us want someone to assist you who is not familiar with your issue and attempt to fix it.

We ask that once you have posted your log and are waiting, please DO NOT "bump" your thread or make further replies until it has been responded to by a member of the Malware Response Team. The reason we ask this or do not respond to your requests is because that would remove you from the active queue that Techs and Staff have access to. The malware staff checks the forum for postings that have 0 replies as this makes it easier for them to identify those who have not been helped. If you post another response, there will be 1 reply. A team member, looking for a new log to work may assume another HJT Team member is already assisting you and not open the thread to respond.

That is why I have made an edit to your last post, instead of a reply. Please do not multiple post here, as that only pushes you further down the queue and causes confusion to the staff.

Please be patient. It may take several days, up to more than a week, perhaps less, to get a response but your log will be reviewed and answered as soon as possible. I advise checking your topic once a day for responses as the e-mail notification system is unreliable.

Thank you for understanding.

Elise - forum moderator

Edited by elise025, 16 February 2010 - 08:19 AM.


#4 myrti

myrti

    Sillyberry


  • Malware Study Hall Admin
  • 33,772 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:At home
  • Local time:11:52 AM

Posted 18 February 2010 - 12:20 PM

Hello and welcome to Bleeping Computer

We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.

If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine.

Please include a clear description of the problems you're having, along with any steps you may have performed so far.

Please refrain from running tools or applying updates other than those we suggest while we are cleaning up your computer. The reason for this is so we know what is going on with the machine at any time. Some programs can interfere with others and hamper the recovery process.

Even if you have already provided information about your PC, we need a new log to see what has changed since you originally posted your problem.
We need to create an OTL Report
  1. Please download OTL from one of the following mirrors:
  2. Save it to your desktop.
  3. Double click on the icon on your desktop.
  4. Click the "Scan All Users" checkbox.
  5. In the custom scan box paste the following:
    CODE
    netsvcs
    msconfig
    safebootminimal
    safebootnetwork
    activex
    drivers32
    %systemroot%\system32\*.dll /lockedfiles
    %systemroot%\Tasks\*.job /lockedfiles
    /md5start
    eventlog.dll
    scecli.dll
    netlogon.dll
    cngaudit.dll
    sceclt.dll
    ntelogon.dll
    logevent.dll
    iaStor.sys
    nvstor.sys
    atapi.sys
    IdeChnDr.sys
    viasraid.sys
    AGP440.sys
    vaxscsi.sys
    nvatabus.sys
    viamraid.sys
    nvata.sys
    nvgts.sys
    iastorv.sys
    ViPrt.sys
    eNetHook.dll
    ahcix86.sys
    KR10N.sys
    nvstor32.sys
    ahcix86s.sys
    nvrd32.sys
    /md5stop
    %systemroot%\*. /mp /s
  6. Push the button.
  7. Two reports will open, copy and paste them in a reply here:
    • OTL.txt <-- Will be opened
    • Extra.txt<--Will be minimized

In the upper right hand corner of the topic you will see a button called Options. If you click on this in the drop-down menu you can choose Track this topic. I suggest you do this and select Immediate E-Mail notification and click on Proceed. This way you will be advised when we respond to your topic and facilitate the cleaning of your machine.

After 5 days if a topic is not replied to we assume it has been abandoned and it is closed.

regards myrti

is that a bird?  a plane? nooo it's the flying blueberry!

If I have been helping you and haven't replied in 2 days, feel free to shoot me a PM! Please don't send help request via PM, unless I am already helping you. Use the forums!

 

Follow BleepingComputer on: Facebook | Twitter | Google+


#5 myrti

myrti

    Sillyberry


  • Malware Study Hall Admin
  • 33,772 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:At home
  • Local time:11:52 AM

Posted 06 March 2010 - 04:24 PM

Due to lack of feedback, this topic is now Closed

If you need this topic reopened, please send me a PM.
Please include the address of this thread in your request.
This applies only to the original topic starter.

Everyone else please start a new topic.

With Regards,
myrti

is that a bird?  a plane? nooo it's the flying blueberry!

If I have been helping you and haven't replied in 2 days, feel free to shoot me a PM! Please don't send help request via PM, unless I am already helping you. Use the forums!

 

Follow BleepingComputer on: Facebook | Twitter | Google+





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users