KASPERSKY ONLINE SCANNER 7 REPORT
Sunday, July 13, 2008
Operating System: Microsoft Windows XP Home Edition Service Pack 2 (build 2600)
Kaspersky Online Scanner 7 version: 7.0.25.0
Program database last update: Sunday, July 13, 2008 16:21:04
Records in database: 949010
Scan settings
Scan using the following database 	extended
Scan archives 	yes
Scan mail databases 	yes
Scan area 	My Computer
C:\
D:\
E:\
Scan statistics
Files scanned 	97220
Threat name 	1
Infected objects 	1
Suspicious objects 	0
Duration of the scan 	02:38:09

File name 	Threat name 	Threats count
C:\Program Files\Online Services\AOL\United States\AOL90\comps\toolbar\toolbr.EXE	Infected: not-a-virus:AdWare.Win32.SearchIt.t	1	
The selected area was scanned.

Malwarebytes' Anti-Malware 1.20
Versión de la Base de Datos: 938
Windows 5.1.2600 Service Pack 2

02:30:51 p.m. 11/07/2008
mbam-log-7-11-2008 (14-30-43).txt

Tipo de examen : Examen Completo (C:\|D:\|)
Objetos examinados: 137499
Tiempo transcurrido: 4 hour(s), 57 minute(s), 56 second(s)

Procesos en Memoria Infectados: 0
Módulos en Memoria Infectados: 1
Claves del Registro Infectadas: 6
Valores del Registro Infectados: 3
Elementos de Datos del Registro Infectados: 2
Carpetas Infectadas: 4
Ficheros Infectados: 37

Procesos en Memoria Infectados:
(No se han detectado elementos maliciosos)

Módulos en Memoria Infectados:
C:\WINDOWS\system32\wvUmmKCS.dll (Trojan.Vundo) -> No action taken.

Claves del Registro Infectadas:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{d3ab3a15-3b39-4b18-ba29-a64ac4b6c34d} (Trojan.Vundo) -> No action taken.
HKEY_CLASSES_ROOT\CLSID\{d3ab3a15-3b39-4b18-ba29-a64ac4b6c34d} (Trojan.Vundo) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MS Juan (Malware.Trace) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\RemoveRP (Trojan.Vundo) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\The Weather Channel (Adware.Hotbar) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Weather Services (Adware.Hotbar) -> No action taken.

Valores del Registro Infectados:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\203352e1 (Trojan.Vundo) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\bm2300617d (Trojan.Agent) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Control Panel\Cpls\wxfw.dll (Adware.Hotbar) -> No action taken.

Elementos de Datos del Registro Infectados:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\LSA\Notification Packages (Trojan.Vundo) -> Data: c:\windows\system32\wvummkcs -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\LSA\Authentication Packages (Trojan.Vundo) -> Data: c:\windows\system32\wvummkcs  -> No action taken.

Carpetas Infectadas:
C:\Program Files\Gamevance (Adware.Gamevance) -> No action taken.
C:\Documents and Settings\taliban\Application Data\SpywareRemover (Rogue.Spyware.Remover) -> No action taken.
C:\Documents and Settings\taliban\Application Data\SpywareRemover\Log (Rogue.Spyware.Remover) -> No action taken.
C:\Documents and Settings\taliban\Application Data\SpywareRemover\Settings (Rogue.Spyware.Remover) -> No action taken.

Ficheros Infectados:
C:\WINDOWS\system32\wvUmmKCS.dll (Trojan.Vundo) -> No action taken.
C:\WINDOWS\system32\SCKmmUvw.ini (Trojan.Vundo) -> No action taken.
C:\WINDOWS\system32\SCKmmUvw.ini2 (Trojan.Vundo) -> No action taken.
C:\WINDOWS\system32\bfmkawre.dll (Trojan.Vundo) -> No action taken.
C:\WINDOWS\system32\erwakmfb.ini (Trojan.Vundo) -> No action taken.
C:\System Volume Information\_restore{A2578CBA-012A-4EE9-9E3D-27D3F494A2B6}\RP58\A0015898.exe (Adware.Hotbar) -> No action taken.
C:\System Volume Information\_restore{A2578CBA-012A-4EE9-9E3D-27D3F494A2B6}\RP58\A0015900.exe (Adware.Hotbar) -> No action taken.
C:\System Volume Information\_restore{A2578CBA-012A-4EE9-9E3D-27D3F494A2B6}\RP58\A0015901.exe (Adware.Hotbar) -> No action taken.
C:\System Volume Information\_restore{A2578CBA-012A-4EE9-9E3D-27D3F494A2B6}\RP58\A0015902.exe (Adware.Hotbar) -> No action taken.
C:\System Volume Information\_restore{A2578CBA-012A-4EE9-9E3D-27D3F494A2B6}\RP58\A0015904.exe (Adware.Hotbar) -> No action taken.
C:\System Volume Information\_restore{A2578CBA-012A-4EE9-9E3D-27D3F494A2B6}\RP58\A0015905.exe (Adware.Hotbar) -> No action taken.
C:\System Volume Information\_restore{A2578CBA-012A-4EE9-9E3D-27D3F494A2B6}\RP58\A0015906.dll (Adware.Hotbar) -> No action taken.
C:\System Volume Information\_restore{A2578CBA-012A-4EE9-9E3D-27D3F494A2B6}\RP58\A0015908.dll (Adware.Hotbar) -> No action taken.
C:\System Volume Information\_restore{A2578CBA-012A-4EE9-9E3D-27D3F494A2B6}\RP59\A0016136.exe (Adware.Hotbar) -> No action taken.
C:\System Volume Information\_restore{A2578CBA-012A-4EE9-9E3D-27D3F494A2B6}\RP59\A0016138.exe (Adware.Hotbar) -> No action taken.
C:\System Volume Information\_restore{A2578CBA-012A-4EE9-9E3D-27D3F494A2B6}\RP59\A0016139.exe (Adware.Hotbar) -> No action taken.
C:\System Volume Information\_restore{A2578CBA-012A-4EE9-9E3D-27D3F494A2B6}\RP59\A0016140.exe (Adware.Hotbar) -> No action taken.
C:\System Volume Information\_restore{A2578CBA-012A-4EE9-9E3D-27D3F494A2B6}\RP59\A0016142.exe (Adware.Hotbar) -> No action taken.
C:\System Volume Information\_restore{A2578CBA-012A-4EE9-9E3D-27D3F494A2B6}\RP59\A0016143.exe (Adware.Hotbar) -> No action taken.
C:\System Volume Information\_restore{A2578CBA-012A-4EE9-9E3D-27D3F494A2B6}\RP59\A0016144.dll (Adware.Hotbar) -> No action taken.
C:\System Volume Information\_restore{A2578CBA-012A-4EE9-9E3D-27D3F494A2B6}\RP59\A0016146.dll (Adware.Hotbar) -> No action taken.
C:\Program Files\Gamevance\ars.cfg (Adware.Gamevance) -> No action taken.
C:\Program Files\Gamevance\gamevancelib32.dll (Adware.Gamevance) -> No action taken.
C:\Program Files\Gamevance\gvcfglib.dll (Adware.Gamevance) -> No action taken.
C:\Program Files\Gamevance\gvpop.dll (Adware.Gamevance) -> No action taken.
C:\Program Files\Gamevance\gvwslib.dll (Adware.Gamevance) -> No action taken.
C:\Program Files\Gamevance\icon.ico (Adware.Gamevance) -> No action taken.
C:\Documents and Settings\taliban\Application Data\SpywareRemover\rs.dat (Rogue.Spyware.Remover) -> No action taken.
C:\Documents and Settings\taliban\Application Data\SpywareRemover\Log\2008 Jul 09 - 05_05_31 PM_281.log (Rogue.Spyware.Remover) -> No action taken.
C:\Documents and Settings\taliban\Application Data\SpywareRemover\Settings\ScanResults.pie (Rogue.Spyware.Remover) -> No action taken.
C:\WINDOWS\hosts (Trojan.Agent) -> No action taken.
C:\WINDOWS\cookies.ini (Malware.Trace) -> No action taken.
C:\WINDOWS\system32\nqqyirph.dll (Trojan.Agent) -> No action taken.
C:\WINDOWS\system32\model.dat (Spyware.MarketScore) -> No action taken.
C:\WINDOWS\BM2300617d.xml (Trojan.Vundo) -> No action taken.
C:\WINDOWS\BM2300617d.txt (Trojan.Vundo) -> No action taken.
C:\WINDOWS\Tasks\SpywareRemover Scheduled Scan.job (Rogue.Spyware.Remover) -> No action taken.