Automatic Scan: stopped 2 minutes ago (events: 159, objects: 117, time: 00:06:32)
8/22/2012 11:24:27 Task stopped
8/22/2012 11:24:27 Cannot be backed up: Virus.Win32.Sality.s C:\WINDOWS\system32\wmdrtc32.dll
8/22/2012 11:22:46 Not processed C:\WINDOWS\system32\wmdrtc32.dll Skipped by user
8/22/2012 11:22:46 Not processed C:\WINDOWS\system32\rtutils.dll Skipped by user
8/22/2012 11:22:46 Not processed C:\WINDOWS\system32\iphlpapi.dll Skipped by user
8/22/2012 11:22:46 Not processed C:\WINDOWS\system32\imagehlp.dll Skipped by user
8/22/2012 11:22:46 Not processed C:\WINDOWS\system32\sfc_os.dll Skipped by user
8/22/2012 11:22:46 Not processed C:\WINDOWS\system32\wintrust.dll Skipped by user
8/22/2012 11:22:46 Not processed C:\WINDOWS\system32\psapi.dll Skipped by user
8/22/2012 11:22:46 Not processed C:\WINDOWS\system32\winmm.dll Skipped by user
8/22/2012 11:22:46 Not processed C:\WINDOWS\system32\atl.dll Skipped by user
8/22/2012 11:22:46 Not processed C:\WINDOWS\system32\userenv.dll Skipped by user
8/22/2012 11:22:46 Not processed C:\WINDOWS\system32\ntshrui.dll Skipped by user
8/22/2012 11:22:46 Not processed C:\WINDOWS\system32\linkinfo.dll Skipped by user
8/22/2012 11:22:46 Not processed C:\WINDOWS\system32\cryptdll.dll Skipped by user
8/22/2012 11:22:46 Not processed C:\WINDOWS\system32\winsta.dll Skipped by user
8/22/2012 11:22:46 Not processed C:\WINDOWS\system32\cryptnet.dll Skipped by user
8/22/2012 11:22:46 Not processed C:\WINDOWS\system32\cabinet.dll Skipped by user
8/22/2012 11:22:46 Not processed C:\WINDOWS\system32\scecli.dll Skipped by user
8/22/2012 11:22:46 Not processed C:\WINDOWS\system32\winscard.dll Skipped by user
8/22/2012 11:22:46 Not processed C:\WINDOWS\system32\dciman32.dll Skipped by user
8/22/2012 11:22:46 Not processed C:\WINDOWS\system32\samlib.dll Skipped by user
8/22/2012 11:22:46 Not processed C:\WINDOWS\system32\sensapi.dll Skipped by user
8/22/2012 11:22:46 Not processed C:\WINDOWS\system32\wsock32.dll Skipped by user
8/22/2012 11:22:46 Not processed C:\WINDOWS\system32\ws2_32.dll Skipped by user
8/22/2012 11:22:46 Not processed C:\WINDOWS\system32\ws2help.dll Skipped by user
8/22/2012 11:22:46 Not processed C:\WINDOWS\system32\wshtcpip.dll Skipped by user
8/22/2012 11:22:46 Not processed C:\WINDOWS\system32\mswsock.dll Skipped by user
8/22/2012 11:22:46 Not processed C:\WINDOWS\system32\rsaenh.dll Skipped by user
8/22/2012 11:22:46 Not processed C:\WINDOWS\system32\eTCAPI.dll Skipped by user
8/22/2012 11:22:46 Not processed C:\WINDOWS\system32\hnetcfg.dll Skipped by user
8/22/2012 11:22:46 Not processed C:\WINDOWS\system32\netapi32.dll Skipped by user
8/22/2012 11:22:46 Not processed C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.6002.22791_x-ww_c8dff154\GdiPlus.dll Skipped by user
8/22/2012 11:22:46 Not processed C:\WINDOWS\system32\fltlib.dll Skipped by user
8/22/2012 11:22:46 Not processed C:\WINDOWS\system32\winhttp.dll Skipped by user
8/22/2012 11:22:46 Not processed C:\Program Files\Internet Download Manager\idmmkb.dll Skipped by user
8/22/2012 11:22:46 Not processed C:\WINDOWS\system32\eToken.dll Skipped by user
8/22/2012 11:22:46 Not processed C:\WINDOWS\system32\rasman.dll Skipped by user
8/22/2012 11:22:46 Not processed C:\WINDOWS\system32\eTUi.dll Skipped by user
8/22/2012 11:22:46 Not processed C:\documents and settings\user\local settings\temp\rarsfx0\9973660.exe Skipped by user
8/22/2012 11:22:46 OK 9973660.exe\rasman.dll
8/22/2012 11:22:46 OK 9973660.exe\rtutils.dll
8/22/2012 11:22:46 OK 9973660.exe\iphlpapi.dll
8/22/2012 11:22:45 OK 9973660.exe\imagehlp.dll
8/22/2012 11:22:45 OK 9973660.exe\sfc_os.dll
8/22/2012 11:22:45 OK 9973660.exe\wintrust.dll
8/22/2012 11:22:45 OK 9973660.exe\psapi.dll
8/22/2012 11:22:45 OK 9973660.exe\winmm.dll
8/22/2012 11:22:45 OK 9973660.exe\atl.dll
8/22/2012 11:22:45 OK 9973660.exe\userenv.dll
8/22/2012 11:22:45 OK 9973660.exe\ntshrui.dll
8/22/2012 11:22:45 OK 9973660.exe\linkinfo.dll
8/22/2012 11:22:44 OK 9973660.exe\cryptdll.dll
8/22/2012 11:22:44 OK 9973660.exe\imm32.dll Object was not changed (iChecker)
8/22/2012 11:22:44 OK 9973660.exe\winsta.dll
8/22/2012 11:22:44 Detected: Virus.Win32.Sality.s C:\WINDOWS\system32\wmdrtc32.dll
8/22/2012 11:22:44 OK 9973660.exe\cryptnet.dll
8/22/2012 11:22:44 OK 9973660.exe\msctfime.ime Object was not changed (iChecker)
8/22/2012 11:22:44 OK 9973660.exe\cabinet.dll
8/22/2012 11:22:44 OK 9973660.exe\usp10.dll Object was not changed (iChecker)
8/22/2012 11:22:44 OK 9973660.exe\msctf.dll Object was not changed (iChecker)
8/22/2012 11:22:44 OK 9973660.exe\scecli.dll
8/22/2012 11:22:44 OK 9973660.exe\dciman32.dll
8/22/2012 11:22:44 OK 9973660.exe\winspool.drv Object was not changed (iChecker)
8/22/2012 11:22:44 OK 9973660.exe\winscard.dll
8/22/2012 11:22:44 OK 9973660.exe\sensapi.dll
8/22/2012 11:22:44 OK 9973660.exe\samlib.dll
8/22/2012 11:22:44 OK 9973660.exe\wsock32.dll
8/22/2012 11:22:44 OK C:\WINDOWS\system32\xpsp2res.dll
8/22/2012 11:22:44 OK 9973660.exe\ws2_32.dll
8/22/2012 11:22:44 OK 9973660.exe\ws2help.dll
8/22/2012 11:22:44 OK 9973660.exe\wshtcpip.dll
8/22/2012 11:22:44 OK 9973660.exe\mswsock.dll
8/22/2012 11:22:44 OK 9973660.exe\rsaenh.dll
8/22/2012 11:22:44 OK C:\documents and settings\user\local settings\temp\rarsfx0\9973660.exe/#
8/22/2012 11:22:44 OK 9973660.exe\hnetcfg.dll
8/22/2012 11:22:44 OK 9973660.exe\eTCAPI.dll
8/22/2012 11:22:44 OK 9973660.exe\lpk.dll Object was not changed (iChecker)
8/22/2012 11:22:44 OK 9973660.exe\netapi32.dll
8/22/2012 11:22:44 OK 9973660.exe\uxtheme.dll Object was not changed (iChecker)
8/22/2012 11:22:44 OK 9973660.exe\fltlib.dll
8/22/2012 11:22:44 OK 9973660.exe\GdiPlus.dll
8/22/2012 11:22:44 OK 9973660.exe\winhttp.dll
8/22/2012 11:22:44 OK 9973660.exe\eToken.dll
8/22/2012 11:22:44 OK 9973660.exe\idmmkb.dll
8/22/2012 11:22:44 OK 9973660.exe\wmdrtc32.dll
8/22/2012 11:22:44 OK 9973660.exe\eTUi.dll
8/22/2012 11:22:44 OK 9973660.exe\xpsp2res.dll
8/22/2012 11:22:44 OK 9973660.exe\9973660.exe
8/22/2012 11:18:34 Detected: Virus.Win32.Sality.aa C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe
8/22/2012 11:18:00 OK C:\WINDOWS\system32\shell32.dll
8/22/2012 11:17:59 OK C:\WINDOWS\system32\user32.dll
8/22/2012 11:17:58 OK C:\WINDOWS\system32\ntdll.dll
8/22/2012 11:17:58 OK Ymsgr_tray.exe\user32.dll
8/22/2012 11:17:58 OK C:\WINDOWS\system32\kernel32.dll
8/22/2012 11:17:58 OK Ymsgr_tray.exe\shell32.dll
8/22/2012 11:17:58 OK C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_e6967989\msvcp80.dll
8/22/2012 11:17:58 OK Ymsgr_tray.exe\ntdll.dll
8/22/2012 11:17:58 OK Ymsgr_tray.exe\kernel32.dll
8/22/2012 11:17:58 OK C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_e6967989\msvcr80.dll
8/22/2012 11:17:58 OK Ymsgr_tray.exe\msvcp80.dll
8/22/2012 11:17:58 OK Ymsgr_tray.exe\msvcr80.dll
8/22/2012 11:17:58 OK C:\WINDOWS\system32\secur32.dll
8/22/2012 11:17:58 OK C:\WINDOWS\system32\shlwapi.dll
8/22/2012 11:17:58 OK Ymsgr_tray.exe\secur32.dll
8/22/2012 11:17:58 OK C:\WINDOWS\system32\gdi32.dll
8/22/2012 11:17:58 OK Ymsgr_tray.exe\shlwapi.dll
8/22/2012 11:17:58 OK C:\WINDOWS\system32\rpcrt4.dll
8/22/2012 11:17:58 OK Ymsgr_tray.exe\gdi32.dll
8/22/2012 11:17:57 OK C:\WINDOWS\system32\advapi32.dll
8/22/2012 11:17:57 OK Ymsgr_tray.exe\rpcrt4.dll
8/22/2012 11:17:57 OK C:\WINDOWS\system32\msvcrt.dll
8/22/2012 11:17:57 OK Ymsgr_tray.exe\advapi32.dll
8/22/2012 11:17:57 OK C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll
8/22/2012 11:17:57 OK C:\WINDOWS\system32\ole32.dll
8/22/2012 11:17:57 OK Ymsgr_tray.exe\msvcrt.dll
8/22/2012 11:17:57 OK Ymsgr_tray.exe\ole32.dll
8/22/2012 11:17:57 OK C:\WINDOWS\system32\oleaut32.dll
8/22/2012 11:17:57 OK Ymsgr_tray.exe\comctl32.dll
8/22/2012 11:17:57 OK C:\WINDOWS\system32\imm32.dll
8/22/2012 11:17:57 OK Ymsgr_tray.exe\oleaut32.dll
8/22/2012 11:17:57 OK Ymsgr_tray.exe\imm32.dll
8/22/2012 11:17:57 OK C:\WINDOWS\system32\msimg32.dll
8/22/2012 11:17:57 OK C:\WINDOWS\system32\msctfime.ime
8/22/2012 11:17:57 OK Ymsgr_tray.exe\msimg32.dll
8/22/2012 11:17:57 OK C:\WINDOWS\system32\riched20.dll
8/22/2012 11:17:57 OK Ymsgr_tray.exe\msctfime.ime
8/22/2012 11:17:57 OK C:\WINDOWS\system32\msctf.dll
8/22/2012 11:17:57 OK C:\WINDOWS\system32\usp10.dll
8/22/2012 11:17:56 OK C:\WINDOWS\system32\winspool.drv
8/22/2012 11:17:56 OK C:\WINDOWS\system32\mscms.dll
8/22/2012 11:17:56 OK Ymsgr_tray.exe\riched20.dll
8/22/2012 11:17:56 OK C:\Program Files\Yahoo!\Messenger\yui.dll
8/22/2012 11:17:56 OK C:\WINDOWS\system32\icm32.dll
8/22/2012 11:17:56 OK Ymsgr_tray.exe\usp10.dll
8/22/2012 11:17:56 OK C:\WINDOWS\system32\lpk.dll
8/22/2012 11:17:56 OK Ymsgr_tray.exe\msctf.dll
8/22/2012 11:17:56 OK C:\WINDOWS\system32\comctl32.dll
8/22/2012 11:17:56 OK Ymsgr_tray.exe\mscms.dll
8/22/2012 11:17:56 OK C:\Program Files\Yahoo!\Messenger\res_msgr.dll Object was not changed (iChecker)
8/22/2012 11:17:56 OK Ymsgr_tray.exe\winspool.drv
8/22/2012 11:17:56 OK C:\WINDOWS\system32\iertutil.dll
8/22/2012 11:17:56 OK Ymsgr_tray.exe\icm32.dll
8/22/2012 11:17:56 OK C:\WINDOWS\system32\uxtheme.dll
8/22/2012 11:17:56 OK Ymsgr_tray.exe\lpk.dll
8/22/2012 11:17:56 OK Ymsgr_tray.exe\yui.dll
8/22/2012 11:17:56 OK C:\WINDOWS\system32\urlmon.dll
8/22/2012 11:17:56 OK C:\WINDOWS\system32\wininet.dll
8/22/2012 11:17:56 OK Ymsgr_tray.exe\res_msgr.dll
8/22/2012 11:17:56 OK Ymsgr_tray.exe\comctl32.dll
8/22/2012 11:17:56 OK Ymsgr_tray.exe\uxtheme.dll
8/22/2012 11:17:56 OK C:\WINDOWS\system32\normaliz.dll
8/22/2012 11:17:56 OK Ymsgr_tray.exe\iertutil.dll
8/22/2012 11:17:56 OK Ymsgr_tray.exe\wininet.dll
8/22/2012 11:17:56 OK Ymsgr_tray.exe\urlmon.dll
8/22/2012 11:17:56 OK Ymsgr_tray.exe\Ymsgr_tray.exe
8/22/2012 11:17:56 OK Ymsgr_tray.exe\normaliz.dll
8/22/2012 11:17:56 OK System Memory
8/22/2012 11:17:55 Task started
Disinfect active threats: running (events: 80, objects: 73, time: 00:04:40)
8/22/2012 11:22:44 Task started
8/22/2012 11:24:05 Detected: Virus.Win32.Sality.aa C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe
8/22/2012 11:24:05 Backed up C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe
8/22/2012 11:24:05 Disinfection on system restart failed: Virus.Win32.Sality.aa C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe
8/22/2012 11:25:04 Not processed C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe Skipped by user
8/22/2012 11:26:41 Will be deleted on system restart: Virus.Win32.Sality.aa C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe
8/22/2012 11:26:41 OK System Memory
8/22/2012 11:26:41 OK Ymsgr_tray.exe\normaliz.dll
8/22/2012 11:26:41 OK C:\WINDOWS\system32\normaliz.dll Object was not changed (iSwift 3)
8/22/2012 11:26:41 OK Ymsgr_tray.exe\Ymsgr_tray.exe Object was not changed (iChecker)
8/22/2012 11:26:41 OK Ymsgr_tray.exe\urlmon.dll
8/22/2012 11:26:41 OK C:\WINDOWS\system32\urlmon.dll Object was not changed (iSwift 3)
8/22/2012 11:26:41 OK Ymsgr_tray.exe\wmdrtc32.dll
8/22/2012 11:26:41 OK Ymsgr_tray.exe\wininet.dll
8/22/2012 11:26:41 OK C:\WINDOWS\system32\wininet.dll Object was not changed (iSwift 3)
8/22/2012 11:26:41 OK Ymsgr_tray.exe\iertutil.dll
8/22/2012 11:26:41 OK C:\WINDOWS\system32\iertutil.dll Object was not changed (iSwift 3)
8/22/2012 11:26:41 OK Ymsgr_tray.exe\uxtheme.dll Object was not changed (iChecker)
8/22/2012 11:26:41 OK C:\WINDOWS\system32\uxtheme.dll Object was not changed (iSwift 3)
8/22/2012 11:26:41 OK Ymsgr_tray.exe\comctl32.dll Object was not changed (iChecker)
8/22/2012 11:26:41 OK C:\WINDOWS\system32\comctl32.dll Object was not changed (iSwift 3)
8/22/2012 11:26:41 OK Ymsgr_tray.exe\res_msgr.dll Object was not changed (iChecker)
8/22/2012 11:26:41 OK C:\Program Files\Yahoo!\Messenger\res_msgr.dll Object was not changed (iSwift 3)
8/22/2012 11:26:41 OK Ymsgr_tray.exe\yui.dll Object was not changed (iChecker)
8/22/2012 11:26:41 OK C:\Program Files\Yahoo!\Messenger\yui.dll Object was not changed (iSwift 3)
8/22/2012 11:26:41 OK Ymsgr_tray.exe\lpk.dll Object was not changed (iChecker)
8/22/2012 11:26:41 OK C:\WINDOWS\system32\lpk.dll Object was not changed (iSwift 3)
8/22/2012 11:26:41 OK Ymsgr_tray.exe\icm32.dll Object was not changed (iChecker)
8/22/2012 11:26:41 OK C:\WINDOWS\system32\icm32.dll Object was not changed (iSwift 3)
8/22/2012 11:26:41 OK Ymsgr_tray.exe\ws2help.dll Object was not changed (iChecker)
8/22/2012 11:26:41 OK Ymsgr_tray.exe\ws2_32.dll
8/22/2012 11:26:41 OK Ymsgr_tray.exe\winspool.drv Object was not changed (iChecker)
8/22/2012 11:26:41 OK C:\WINDOWS\system32\winspool.drv Object was not changed (iSwift 3)
8/22/2012 11:26:41 OK Ymsgr_tray.exe\mscms.dll Object was not changed (iChecker)
8/22/2012 11:26:41 OK C:\WINDOWS\system32\ws2help.dll
8/22/2012 11:26:41 OK C:\WINDOWS\system32\mscms.dll Object was not changed (iSwift 3)
8/22/2012 11:26:41 OK Ymsgr_tray.exe\msctf.dll Object was not changed (iChecker)
8/22/2012 11:26:41 OK C:\WINDOWS\system32\msctf.dll Object was not changed (iSwift 3)
8/22/2012 11:26:41 OK Ymsgr_tray.exe\usp10.dll Object was not changed (iChecker)
8/22/2012 11:26:41 OK C:\WINDOWS\system32\ws2_32.dll
8/22/2012 11:26:41 OK C:\WINDOWS\system32\usp10.dll Object was not changed (iSwift 3)
8/22/2012 11:26:41 OK Ymsgr_tray.exe\riched20.dll Object was not changed (iChecker)
8/22/2012 11:26:42 OK C:\WINDOWS\system32\riched20.dll Object was not changed (iSwift 3)
8/22/2012 11:26:42 OK Ymsgr_tray.exe\msctfime.ime Object was not changed (iChecker)
8/22/2012 11:26:42 OK C:\WINDOWS\system32\msctfime.ime Object was not changed (iSwift 3)
8/22/2012 11:26:42 OK Ymsgr_tray.exe\msimg32.dll Object was not changed (iChecker)
8/22/2012 11:26:42 Detected: Virus.Win32.Sality.s C:\WINDOWS\system32\wmdrtc32.dll
8/22/2012 11:26:42 OK C:\WINDOWS\system32\msimg32.dll Object was not changed (iSwift 3)
8/22/2012 11:26:42 OK Ymsgr_tray.exe\imm32.dll Object was not changed (iChecker)
8/22/2012 11:26:42 OK C:\WINDOWS\system32\imm32.dll Object was not changed (iSwift 3)
8/22/2012 11:26:42 OK Ymsgr_tray.exe\oleaut32.dll Object was not changed (iChecker)
8/22/2012 11:26:42 OK C:\WINDOWS\system32\oleaut32.dll Object was not changed (iSwift 3)
8/22/2012 11:26:42 OK Ymsgr_tray.exe\comctl32.dll Object was not changed (iChecker)
8/22/2012 11:26:42 OK C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll Object was not changed (iSwift 3)
8/22/2012 11:26:42 OK Ymsgr_tray.exe\ole32.dll Object was not changed (iChecker)
8/22/2012 11:26:42 OK C:\WINDOWS\system32\ole32.dll Object was not changed (iSwift 3)
8/22/2012 11:26:42 OK Ymsgr_tray.exe\msvcrt.dll Object was not changed (iChecker)
8/22/2012 11:26:42 OK C:\WINDOWS\system32\msvcrt.dll Object was not changed (iSwift 3)
8/22/2012 11:26:42 OK Ymsgr_tray.exe\advapi32.dll Object was not changed (iChecker)
8/22/2012 11:26:42 OK C:\WINDOWS\system32\advapi32.dll Object was not changed (iSwift 3)
8/22/2012 11:26:42 OK Ymsgr_tray.exe\rpcrt4.dll Object was not changed (iChecker)
8/22/2012 11:26:42 OK C:\WINDOWS\system32\rpcrt4.dll Object was not changed (iSwift 3)
8/22/2012 11:26:42 OK Ymsgr_tray.exe\gdi32.dll Object was not changed (iChecker)
8/22/2012 11:26:42 OK C:\WINDOWS\system32\gdi32.dll Object was not changed (iSwift 3)
8/22/2012 11:26:42 OK Ymsgr_tray.exe\shlwapi.dll Object was not changed (iChecker)
8/22/2012 11:26:42 OK C:\WINDOWS\system32\shlwapi.dll Object was not changed (iSwift 3)
8/22/2012 11:26:42 OK Ymsgr_tray.exe\secur32.dll Object was not changed (iChecker)
8/22/2012 11:26:42 OK C:\WINDOWS\system32\secur32.dll Object was not changed (iSwift 3)
8/22/2012 11:26:42 OK Ymsgr_tray.exe\msvcr80.dll
8/22/2012 11:26:42 OK C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_e6967989\msvcr80.dll Object was not changed (iSwift 3)
8/22/2012 11:26:42 OK Ymsgr_tray.exe\msvcp80.dll
8/22/2012 11:26:42 OK C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_e6967989\msvcp80.dll Object was not changed (iSwift 3)
8/22/2012 11:26:42 OK Ymsgr_tray.exe\kernel32.dll Object was not changed (iChecker)
8/22/2012 11:26:42 OK C:\WINDOWS\system32\kernel32.dll Object was not changed (iSwift 3)
8/22/2012 11:26:42 OK Ymsgr_tray.exe\ntdll.dll Object was not changed (iChecker)
8/22/2012 11:26:42 OK C:\WINDOWS\system32\ntdll.dll Object was not changed (iSwift 3)
8/22/2012 11:26:42 OK Ymsgr_tray.exe\shell32.dll Object was not changed (iChecker)
8/22/2012 11:26:42 OK C:\WINDOWS\system32\shell32.dll Object was not changed (iSwift 3)
8/22/2012 11:26:42 OK Ymsgr_tray.exe\user32.dll Object was not changed (iChecker)
8/22/2012 11:26:42 OK C:\WINDOWS\system32\user32.dll Object was not changed (iSwift 3)
