Infecter par trojan Drop.Age

jchristophe66 Messages postés 87 Statut Membre -
jchristophe66 Messages postés 87 Statut Membre - 11 août 2008 à 18:10

Bonjour,
antivir à detecté un trojan en téléchargeant un jeu sur zylom je l'ai mis en quanrantaine puis detruit. J'ai fait un log avec hijack, quelqu'un peut il me dire si il ne reste pas quelque miette .
Merci encore @+Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 18:52:18, on 08/08/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16674)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\WINDOWS\system32\DRIVERS\CDANTSRV.EXE
C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\slserv.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Apps\Powercinema\PCMService.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\Club-Internet\Lanceur\lanceur.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\PEAU DE CHACAL\Bureau\HiJackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://actus.sfr.fr
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [PCMService] "c:\Apps\Powercinema\PCMService.exe"
O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [updateMgr] C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe AcRdB7_0_9
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\system32\msjava.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\system32\msjava.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=file://C:\APPS\IE\offline\fr.htm
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {45A0A292-ECC6-4D8F-9EA9-A4BD411D24C1} (king.com) - https://www.king.com/
O17 - HKLM\System\CCS\Services\Tcpip\..\{5E621847-B6FC-45D3-8714-FFAE741B2DC6}: NameServer = 194.117.200.10,194.117.200.15
O17 - HKLM\System\CS1\Services\Tcpip\..\{5E621847-B6FC-45D3-8714-FFAE741B2DC6}: NameServer = 194.117.200.10,194.117.200.15
O23 - Service: Avira AntiVir Personal – Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal – Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: C-DillaSrv - C-Dilla Ltd - C:\WINDOWS\system32\DRIVERS\CDANTSRV.EXE
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: MysqlInventime - Unknown owner - c:\mysql\bin\mysqld-nt.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe

--
End of file - 6646 bytes

Configuration: Windows XP
Firefox 3.0.1

Afficher la suite

A voir également:

Infecter par trojan Drop.Age
Anti trojan - Télécharger - Antivirus & Antimalwares
Trojan remover - Télécharger - Antivirus & Antimalwares
Trojan killer - Télécharger - Antivirus & Antimalwares
Trojan powershell - Guide
Que pensez-vous de Trojan Remover ? ✓ - Forum Virus

5 réponses

Réponse 1 / 5
l'etudiant du 50 Messages postés 1312 Date d'inscription Statut Membre Dernière intervention 166

apparement non :
met ton log ici :
http://www.hijackthis.de/fr
0
1. jchristophe66 Messages postés 87 Statut Membre 1
  
  salut
  j'ai posté le log comme convenu
  014 effacer si aucune info revendeur ou ISP
  016 DPF( ) YInstStater vérifier si vous connaissez ce site si tel n'est pas le cas éffacer l'inscription
  comment puis-je avoir ces info
  merci
  
  0
Réponse 2 / 5
AV.DOM Messages postés 32 Statut Membre 1

Salut, Je te conseille de faire un fix sur la ligne suivante:

O16 - DPF: {45A0A292-ECC6-4D8F-9EA9-A4BD411D24C1} (king.com) - https://www.king.com/
0
1. jchristophe66 Messages postés 87 Statut Membre 1
  
  salut
  j'ai fait un fix sur la ligne 016
  
  0
Réponse 3 / 5
zorinho Messages postés 829 Statut Membre 51

Salut,

fais les mises à jour adobe
http://www.commentcamarche.net/telecharger/telecharger 27 acrobat reader

1)Tu peux faire un scan avec Antivir et coller un rapport ici
2) fais un scan avec Malwarebytes

téléchargement: http://www.commentcamarche.net/telecharger/telecharger 34055379 malwarebyte s anti malware
tuto en images:http://sasi.xooit.fr/t152-Tutorial-MalwareBytes-Anti-Malware.htm

L'idéal est de faire le scan complet, en mode sans échec

Colle un rapport ici

Zor
0
1. jchristophe66 Messages postés 87 Statut Membre 1
  
  salut
  voici le rapport mbam
  pour le rapport antivir il est plus long
  Malwarebytes' Anti-Malware 1.23
  Version de la base de données: 1000
  Windows 5.1.2600 Service Pack 2
  
  13:40:06 09/08/2008
  mbam-log-8-9-2008 (13-40-06).txt
  
  Type de recherche: Examen rapide
  Eléments examinés: 38001
  Temps écoulé: 5 minute(s), 41 second(s)
  
  Processus mémoire infecté(s): 0
  Module(s) mémoire infecté(s): 0
  Clé(s) du Registre infectée(s): 0
  Valeur(s) du Registre infectée(s): 0
  Elément(s) de données du Registre infecté(s): 0
  Dossier(s) infecté(s): 0
  Fichier(s) infecté(s): 0
  
  Processus mémoire infecté(s):
  (Aucun élément nuisible détecté)
  
  Module(s) mémoire infecté(s):
  (Aucun élément nuisible détecté)
  
  Clé(s) du Registre infectée(s):
  (Aucun élément nuisible détecté)
  
  Valeur(s) du Registre infectée(s):
  (Aucun élément nuisible détecté)
  
  Elément(s) de données du Registre infecté(s):
  (Aucun élément nuisible détecté)
  
  Dossier(s) infecté(s):
  (Aucun élément nuisible détecté)
  
  Fichier(s) infecté(s):
  (Aucun élément nuisible détecté)
  
  0
Réponse 4 / 5
zorinho Messages postés 829 Statut Membre 51

Ca c'est parfait.
J'attends le rapport de scan Antivir
A plus

Zor
0
1. jchristophe66 Messages postés 87 Statut Membre 1
  
  salut desolepour l'attente
  voici le scan antivir
  
  13/07/2008,10:35:12 ---------------------------------------------------------
  13/07/2008,10:35:16 Keyfile contains a valid license. The Avira AntiVir Personal – Free Antivirus will run as a fully functional version!
  13/07/2008,10:35:16 AntiVir Guard version: 8.00.01.15,engine version 8.1.0.28,VDF version: 7.0.3.68
  13/07/2008,10:35:17 AntiVir Guard was enabled.
  13/07/2008,10:35:17 Avira AntiVir Personal – Free Antivirus has been started successfully!
  13/07/2008,10:35:17 [CONFIG] On-Access configuration used:
  - Files to scan: scan files from local drives
  - Device mode: scan files on open, scan files on close
  - Only scan files with one of the following extensions: . .386 .?HT* .ACM .ADE .ADP .ANI .APP .ASD .ASF .ASP .ASX .AWX .AX .BAS .BAT .BIN .BOO .CDF .CHM .CLASS .CMD .CNV .COM .CPL .CRT .CSH .DLL .DLO .DO? .DRV .EMF .EML .EXE* .FLT .FOT .HLP .HT* .INF .INI .INS .ISP .J2K .JAR .JFF .JFI .JFIF .JIF .JMH .JNG .JP2 .JPE .JPEG .JPG .JS* .JSE .LNK .LSP .MD? .MDB .MOD .MS? .NWS .OBJ .OCX .OLB .OSD .OV? .PCD .PDF .PDR .PGM .PHP .PIF .PKG .PL* .PNG .POT .PPS .PPT .PRG .RAR .REG .RPL .RTF .SBF .SCR .SCRIPT .SCT .SH .SHA .SHB .SHS .SHTM* .SIS .SPL .SWF .SYS .TLB .TMP .TSP .TTF .URL .VB? .VCS .VLM .VXD .VXO .WIZ .WLL .WMD .WMF .WMS .WMZ .WPC .WSC .WSF .WSH .WWK .XL? .XML .ZIP
  - Unpack runtime compressed files
  - Actions: ask the user
  - Heuristic: MACRO , WIN32 MEDIUM
  - Logfile report level 1
  13/07/2008,22:38:05 Avira AntiVir Personal – Free Antivirus service has been stopped!
  14/07/2008,11:07:27 ---------------------------------------------------------
  14/07/2008,11:08:18 Keyfile contains a valid license. The Avira AntiVir Personal – Free Antivirus will run as a fully functional version!
  14/07/2008,11:08:19 AntiVir Guard version: 8.00.01.15,engine version 8.1.0.28,VDF version: 7.0.3.68
  14/07/2008,11:08:20 AntiVir Guard was enabled.
  14/07/2008,11:08:20 Avira AntiVir Personal – Free Antivirus has been started successfully!
  14/07/2008,11:08:20 [CONFIG] On-Access configuration used:
  - Files to scan: scan files from local drives
  - Device mode: scan files on open, scan files on close
  - Only scan files with one of the following extensions: . .386 .?HT* .ACM .ADE .ADP .ANI .APP .ASD .ASF .ASP .ASX .AWX .AX .BAS .BAT .BIN .BOO .CDF .CHM .CLASS .CMD .CNV .COM .CPL .CRT .CSH .DLL .DLO .DO? .DRV .EMF .EML .EXE* .FLT .FOT .HLP .HT* .INF .INI .INS .ISP .J2K .JAR .JFF .JFI .JFIF .JIF .JMH .JNG .JP2 .JPE .JPEG .JPG .JS* .JSE .LNK .LSP .MD? .MDB .MOD .MS? .NWS .OBJ .OCX .OLB .OSD .OV? .PCD .PDF .PDR .PGM .PHP .PIF .PKG .PL* .PNG .POT .PPS .PPT .PRG .RAR .REG .RPL .RTF .SBF .SCR .SCRIPT .SCT .SH .SHA .SHB .SHS .SHTM* .SIS .SPL .SWF .SYS .TLB .TMP .TSP .TTF .URL .VB? .VCS .VLM .VXD .VXO .WIZ .WLL .WMD .WMF .WMS .WMZ .WPC .WSC .WSF .WSH .WWK .XL? .XML .ZIP
  - Unpack runtime compressed files
  - Actions: ask the user
  - Heuristic: MACRO , WIN32 MEDIUM
  - Logfile report level 1
  14/07/2008,11:11:52 Avira AntiVir Personal – Free Antivirus service has been stopped!
  14/07/2008,11:11:58 ---------------------------------------------------------
  14/07/2008,11:12:01 Keyfile contains a valid license. The Avira AntiVir Personal – Free Antivirus will run as a fully functional version!
  14/07/2008,11:12:01 AntiVir Guard version: 8.00.01.15,engine version 8.1.0.64,VDF version: 7.0.5.110
  14/07/2008,11:12:03 AntiVir Guard was enabled.
  14/07/2008,11:12:03 Avira AntiVir Personal – Free Antivirus has been started successfully!
  14/07/2008,11:12:03 [CONFIG] On-Access configuration used:
  - Files to scan: scan files from local drives
  - Device mode: scan files on open, scan files on close
  - Only scan files with one of the following extensions: . .386 .?HT* .ACM .ADE .ADP .ANI .APP .ASD .ASF .ASP .ASX .AWX .AX .BAS .BAT .BIN .BOO .CDF .CHM .CLASS .CMD .CNV .COM .CPL .CRT .CSH .DLL .DLO .DO? .DRV .EMF .EML .EXE* .FLT .FOT .HLP .HT* .INF .INI .INS .ISP .J2K .JAR .JFF .JFI .JFIF .JIF .JMH .JNG .JP2 .JPE .JPEG .JPG .JS* .JSE .LNK .LSP .MD? .MDB .MOD .MS? .NWS .OBJ .OCX .OLB .OSD .OV? .PCD .PDF .PDR .PGM .PHP .PIF .PKG .PL* .PNG .POT .PPS .PPT .PRG .RAR .REG .RPL .RTF .SBF .SCR .SCRIPT .SCT .SH .SHA .SHB .SHS .SHTM* .SIS .SPL .SWF .SYS .TLB .TMP .TSP .TTF .URL .VB? .VCS .VLM .VXD .VXO .WIZ .WLL .WMD .WMF .WMS .WMZ .WPC .WSC .WSF .WSH .WWK .XL? .XML .ZIP
  - Unpack runtime compressed files
  - Actions: ask the user
  - Heuristic: MACRO , WIN32 MEDIUM
  - Logfile report level 1
  14/07/2008,11:12:10 [CONFIG] On-Access configuration used:
  - Files to scan: scan files from local drives
  - Device mode: scan files on open, scan files on close
  - Only scan files with one of the following extensions: . .386 .?HT* .ACM .ADE .ADP .ANI .APP .ASD .ASF .ASP .ASX .AWX .AX .BAS .BAT .BIN .BOO .CDF .CHM .CLASS .CMD .CNV .COM .CPL .CRT .CSH .DLL .DLO .DO? .DRV .EMF .EML .EXE* .FLT .FOT .HLP .HT* .INF .INI .INS .ISP .J2K .JAR .JFF .JFI .JFIF .JIF .JMH .JNG .JP2 .JPE .JPEG .JPG .JS* .JSE .LNK .LSP .MD? .MDB .MOD .MS? .NWS .OBJ .OCX .OLB .OSD .OV? .PCD .PDF .PDR .PGM .PHP .PIF .PKG .PL* .PNG .POT .PPS .PPT .PRG .RAR .REG .RPL .RTF .SBF .SCR .SCRIPT .SCT .SH .SHA .SHB .SHS .SHTM* .SIS .SPL .SWF .SYS .TLB .TMP .TSP .TTF .URL .VB? .VCS .VLM .VXD .VXO .WIZ .WLL .WMD .WMF .WMS .WMZ .WPC .WSC .WSF .WSH .WWK .XL? .XML .ZIP
  - Unpack runtime compressed files
  - Actions: ask the user
  - Heuristic: MACRO , WIN32 MEDIUM
  - Logfile report level 1
  15/07/2008,00:02:31 Avira AntiVir Personal – Free Antivirus service has been stopped!
  15/07/2008,09:33:32 ---------------------------------------------------------
  15/07/2008,09:34:25 Keyfile contains a valid license. The Avira AntiVir Personal – Free Antivirus will run as a fully functional version!
  15/07/2008,09:34:25 AntiVir Guard version: 8.00.01.15,engine version 8.1.0.64,VDF version: 7.0.5.110
  15/07/2008,09:34:26 AntiVir Guard was enabled.
  15/07/2008,09:34:26 Avira AntiVir Personal – Free Antivirus has been started successfully!
  15/07/2008,09:34:28 [CONFIG] On-Access configuration used:
  - Files to scan: scan files from local drives
  - Device mode: scan files on open, scan files on close
  - Only scan files with one of the following extensions: . .386 .?HT* .ACM .ADE .ADP .ANI .APP .ASD .ASF .ASP .ASX .AWX .AX .BAS .BAT .BIN .BOO .CDF .CHM .CLASS .CMD .CNV .COM .CPL .CRT .CSH .DLL .DLO .DO? .DRV .EMF .EML .EXE* .FLT .FOT .HLP .HT* .INF .INI .INS .ISP .J2K .JAR .JFF .JFI .JFIF .JIF .JMH .JNG .JP2 .JPE .JPEG .JPG .JS* .JSE .LNK .LSP .MD? .MDB .MOD .MS? .NWS .OBJ .OCX .OLB .OSD .OV? .PCD .PDF .PDR .PGM .PHP .PIF .PKG .PL* .PNG .POT .PPS .PPT .PRG .RAR .REG .RPL .RTF .SBF .SCR .SCRIPT .SCT .SH .SHA .SHB .SHS .SHTM* .SIS .SPL .SWF .SYS .TLB .TMP .TSP .TTF .URL .VB? .VCS .VLM .VXD .VXO .WIZ .WLL .WMD .WMF .WMS .WMZ .WPC .WSC .WSF .WSH .WWK .XL? .XML .ZIP
  - Unpack runtime compressed files
  - Actions: ask the user
  - Heuristic: MACRO , WIN32 MEDIUM
  - Logfile report level 1
  15/07/2008,11:11:08 [CONFIG] On-Access configuration used:
  - Files to scan: scan files from local drives
  - Device mode: scan files on open, scan files on close
  - Only scan files with one of the following extensions: . .386 .?HT* .ACM .ADE .ADP .ANI .APP .ASD .ASF .ASP .ASX .AWX .AX .BAS .BAT .BIN .BOO .CDF .CHM .CLASS .CMD .CNV .COM .CPL .CRT .CSH .DLL .DLO .DO? .DRV .EMF .EML .EXE* .FLT .FOT .HLP .HT* .INF .INI .INS .ISP .J2K .JAR .JFF .JFI .JFIF .JIF .JMH .JNG .JP2 .JPE .JPEG .JPG .JS* .JSE .LNK .LSP .MD? .MDB .MOD .MS? .NWS .OBJ .OCX .OLB .OSD .OV? .PCD .PDF .PDR .PGM .PHP .PIF .PKG .PL* .PNG .POT .PPS .PPT .PRG .RAR .REG .RPL .RTF .SBF .SCR .SCRIPT .SCT .SH .SHA .SHB .SHS .SHTM* .SIS .SPL .SWF .SYS .TLB .TMP .TSP .TTF .URL .VB? .VCS .VLM .VXD .VXO .WIZ .WLL .WMD .WMF .WMS .WMZ .WPC .WSC .WSF .WSH .WWK .XL? .XML .ZIP
  - Unpack runtime compressed files
  - Actions: ask the user
  - Heuristic: MACRO , WIN32 MEDIUM
  - Logfile report level 1
  15/07/2008,12:45:17 Avira AntiVir Personal – Free Antivirus service has been stopped!
  15/07/2008,12:45:22 ---------------------------------------------------------
  15/07/2008,12:45:28 Keyfile contains a valid license. The Avira AntiVir Personal – Free Antivirus will run as a fully functional version!
  15/07/2008,12:45:28 AntiVir Guard version: 8.00.01.18,engine version 8.1.0.64,VDF version: 7.0.5.116
  15/07/2008,12:45:29 AntiVir Guard was enabled.
  15/07/2008,12:45:29 Avira AntiVir Personal – Free Antivirus has been started successfully!
  15/07/2008,12:45:29 [CONFIG] On-Access configuration used:
  - Files to scan: scan files from local drives
  - Device mode: scan files on open, scan files on close
  - Only scan files with one of the following extensions: . .386 .?HT* .ACM .ADE .ADP .ANI .APP .ASD .ASF .ASP .ASX .AWX .AX .BAS .BAT .BIN .BOO .CDF .CHM .CLASS .CMD .CNV .COM .CPL .CRT .CSH .DLL .DLO .DO? .DRV .EMF .EML .EXE* .FLT .FOT .HLP .HT* .INF .INI .INS .ISP .J2K .JAR .JFF .JFI .JFIF .JIF .JMH .JNG .JP2 .JPE .JPEG .JPG .JS* .JSE .LNK .LSP .MD? .MDB .MOD .MS? .NWS .OBJ .OCX .OLB .OSD .OV? .PCD .PDF .PDR .PGM .PHP .PIF .PKG .PL* .PNG .POT .PPS .PPT .PRG .RAR .REG .RPL .RTF .SBF .SCR .SCRIPT .SCT .SH .SHA .SHB .SHS .SHTM* .SIS .SPL .SWF .SYS .TLB .TMP .TSP .TTF .URL .VB? .VCS .VLM .VXD .VXO .WIZ .WLL .WMD .WMF .WMS .WMZ .WPC .WSC .WSF .WSH .WWK .XL? .XML .ZIP
  - Unpack runtime compressed files
  - Actions: ask the user
  - Heuristic: MACRO , WIN32 MEDIUM
  - Logfile report level 1
  15/07/2008,12:45:29 [CONFIG] On-Access configuration used:
  - Files to scan: scan files from local drives
  - Device mode: scan files on open, scan files on close
  - Only scan files with one of the following extensions: . .386 .?HT* .ACM .ADE .ADP .ANI .APP .ASD .ASF .ASP .ASX .AWX .AX .BAS .BAT .BIN .BOO .CDF .CHM .CLASS .CMD .CNV .COM .CPL .CRT .CSH .DLL .DLO .DO? .DRV .EMF .EML .EXE* .FLT .FOT .HLP .HT* .INF .INI .INS .ISP .J2K .JAR .JFF .JFI .JFIF .JIF .JMH .JNG .JP2 .JPE .JPEG .JPG .JS* .JSE .LNK .LSP .MD? .MDB .MOD .MS? .NWS .OBJ .OCX .OLB .OSD .OV? .PCD .PDF .PDR .PGM .PHP .PIF .PKG .PL* .PNG .POT .PPS .PPT .PRG .RAR .REG .RPL .RTF .SBF .SCR .SCRIPT .SCT .SH .SHA .SHB .SHS .SHTM* .SIS .SPL .SWF .SYS .TLB .TMP .TSP .TTF .URL .VB? .VCS .VLM .VXD .VXO .WIZ .WLL .WMD .WMF .WMS .WMZ .WPC .WSC .WSF .WSH .WWK .XL? .XML .ZIP
  - Unpack runtime compressed files
  - Actions: ask the user
  - Heuristic: MACRO , WIN32 MEDIUM
  - Logfile report level 1
  15/07/2008,19:52:44 Avira AntiVir Personal – Free Antivirus service has been stopped!
  15/07/2008,19:54:19 ---------------------------------------------------------
  15/07/2008,19:55:15 Keyfile contains a valid license. The Avira AntiVir Personal – Free Antivirus will run as a fully functional version!
  15/07/2008,19:55:15 AntiVir Guard version: 8.00.01.18,engine version 8.1.0.64,VDF version: 7.0.5.116
  15/07/2008,19:55:19 AntiVir Guard was enabled.
  15/07/2008,19:55:19 Avira AntiVir Personal – Free Antivirus has been started successfully!
  15/07/2008,19:55:21 [CONFIG] On-Access configuration used:
  - Files to scan: scan files from local drives
  - Device mode: scan files on open, scan files on close
  - Only scan files with one of the following extensions: . .386 .?HT* .ACM .ADE .ADP .ANI .APP .ASD .ASF .ASP .ASX .AWX .AX .BAS .BAT .BIN .BOO .CDF .CHM .CLASS .CMD .CNV .COM .CPL .CRT .CSH .DLL .DLO .DO? .DRV .EMF .EML .EXE* .FLT .FOT .HLP .HT* .INF .INI .INS .ISP .J2K .JAR .JFF .JFI .JFIF .JIF .JMH .JNG .JP2 .JPE .JPEG .JPG .JS* .JSE .LNK .LSP .MD? .MDB .MOD .MS? .NWS .OBJ .OCX .OLB .OSD .OV? .PCD .PDF .PDR .PGM .PHP .PIF .PKG .PL* .PNG .POT .PPS .PPT .PRG .RAR .REG .RPL .RTF .SBF .SCR .SCRIPT .SCT .SH .SHA .SHB .SHS .SHTM* .SIS .SPL .SWF .SYS .TLB .TMP .TSP .TTF .URL .VB? .VCS .VLM .VXD .VXO .WIZ .WLL .WMD .WMF .WMS .WMZ .WPC .WSC .WSF .WSH .WWK .XL? .XML .ZIP
  - Unpack runtime compressed files
  - Actions: ask the user
  - Heuristic: MACRO , WIN32 MEDIUM
  - Logfile report level 1
  15/07/2008,23:14:52 Avira AntiVir Personal – Free Antivirus service has been stopped!
  16/07/2008,10:10:51 ---------------------------------------------------------
  16/07/2008,10:11:45 Keyfile contains a valid license. The Avira AntiVir Personal – Free Antivirus will run as a fully functional version!
  16/07/2008,10:11:45 AntiVir Guard version: 8.00.01.18,engine version 8.1.0.64,VDF version: 7.0.5.116
  16/07/2008,10:11:47 AntiVir Guard was enabled.
  16/07/2008,10:11:47 Avira AntiVir Personal – Free Antivirus has been started successfully!
  16/07/2008,10:11:48 [CONFIG] On-Access configuration used:
  - Files to scan: scan files from local drives
  - Device mode: scan files on open, scan files on close
  - Only scan files with one of the following extensions: . .386 .?HT* .ACM .ADE .ADP .ANI .APP .ASD .ASF .ASP .ASX .AWX .AX .BAS .BAT .BIN .BOO .CDF .CHM .CLASS .CMD .CNV .COM .CPL .CRT .CSH .DLL .DLO .DO? .DRV .EMF .EML .EXE* .FLT .FOT .HLP .HT* .INF .INI .INS .ISP .J2K .JAR .JFF .JFI .JFIF .JIF .JMH .JNG .JP2 .JPE .JPEG .JPG .JS* .JSE .LNK .LSP .MD? .MDB .MOD .MS? .NWS .OBJ .OCX .OLB .OSD .OV? .PCD .PDF .PDR .PGM .PHP .PIF .PKG .PL* .PNG .POT .PPS .PPT .PRG .RAR .REG .RPL .RTF .SBF .SCR .SCRIPT .SCT .SH .SHA .SHB .SHS .SHTM* .SIS .SPL .SWF .SYS .TLB .TMP .TSP .TTF .URL .VB? .VCS .VLM .VXD .VXO .WIZ .WLL .WMD .WMF .WMS .WMZ .WPC .WSC .WSF .WSH .WWK .XL? .XML .ZIP
  - Unpack runtime compressed files
  - Actions: ask the user
  - Heuristic: MACRO , WIN32 MEDIUM
  - Logfile report level 1
  16/07/2008,11:11:04 Update process started!
  16/07/2008,11:11:15 Current Engine Version: 8.1.0.68
  16/07/2008,11:11:15 Current Pattern File: 7.0.5.124
  16/07/2008,11:11:20 [CONFIG] On-Access configuration used:
  - Files to scan: scan files from local drives
  - Device mode: scan files on open, scan files on close
  - Only scan files with one of the following extensions: . .386 .?HT* .ACM .ADE .ADP .ANI .APP .ASD .ASF .ASP .ASX .AWX .AX .BAS .BAT .BIN .BOO .CDF .CHM .CLASS .CMD .CNV .COM .CPL .CRT .CSH .DLL .DLO .DO? .DRV .EMF .EML .EXE* .FLT .FOT .HLP .HT* .INF .INI .INS .ISP .J2K .JAR .JFF .JFI .JFIF .JIF .JMH .JNG .JP2 .JPE .JPEG .JPG .JS* .JSE .LNK .LSP .MD? .MDB .MOD .MS? .NWS .OBJ .OCX .OLB .OSD .OV? .PCD .PDF .PDR .PGM .PHP .PIF .PKG .PL* .PNG .POT .PPS .PPT .PRG .RAR .REG .RPL .RTF .SBF .SCR .SCRIPT .SCT .SH .SHA .SHB .SHS .SHTM* .SIS .SPL .SWF .SYS .TLB .TMP .TSP .TTF .URL .VB? .VCS .VLM .VXD .VXO .WIZ .WLL .WMD .WMF .WMS .WMZ .WPC .WSC .WSF .WSH .WWK .XL? .XML .ZIP
  - Unpack runtime compressed files
  - Actions: ask the user
  - Heuristic: MACRO , WIN32 MEDIUM
  - Logfile report level 1
  16/07/2008,20:51:27 Avira AntiVir Personal – Free Antivirus service has been stopped!
  17/07/2008,08:45:05 ---------------------------------------------------------
  17/07/2008,08:46:02 Keyfile contains a valid license. The Avira AntiVir Personal – Free Antivirus will run as a fully functional version!
  17/07/2008,08:46:02 AntiVir Guard version: 8.00.01.18,engine version 8.1.0.68,VDF version: 7.0.5.124
  17/07/2008,08:46:06 AntiVir Guard was enabled.
  17/07/2008,08:46:06 Avira AntiVir Personal – Free Antivirus has been started successfully!
  17/07/2008,08:46:08 [CONFIG] On-Access configuration used:
  - Files to scan: scan files from local drives
  - Device mode: scan files on open, scan files on close
  - Only scan files with one of the following extensions: . .386 .?HT* .ACM .ADE .ADP .ANI .APP .ASD .ASF .ASP .ASX .AWX .AX .BAS .BAT .BIN .BOO .CDF .CHM .CLASS .CMD .CNV .COM .CPL .CRT .CSH .DLL .DLO .DO? .DRV .EMF .EML .EXE* .FLT .FOT .HLP .HT* .INF .INI .INS .ISP .J2K .JAR .JFF .JFI .JFIF .JIF .JMH .JNG .JP2 .JPE .JPEG .JPG .JS* .JSE .LNK .LSP .MD? .MDB .MOD .MS? .NWS .OBJ .OCX .OLB .OSD .OV? .PCD .PDF .PDR .PGM .PHP .PIF .PKG .PL* .PNG .POT .PPS .PPT .PRG .RAR .REG .RPL .RTF .SBF .SCR .SCRIPT .SCT .SH .SHA .SHB .SHS .SHTM* .SIS .SPL .SWF .SYS .TLB .TMP .TSP .TTF .URL .VB? .VCS .VLM .VXD .VXO .WIZ .WLL .WMD .WMF .WMS .WMZ .WPC .WSC .WSF .WSH .WWK .XL? .XML .ZIP
  - Unpack runtime compressed files
  - Actions: ask the user
  - Heuristic: MACRO , WIN32 MEDIUM
  - Logfile report level 1
  17/07/2008,11:11:02 Update process started!
  17/07/2008,11:11:13 Current Engine Version: 8.1.1.9
  17/07/2008,11:11:14 Current Pattern File: 7.0.5.130
  17/07/2008,11:11:19 [CONFIG] On-Access configuration used:
  - Files to scan: scan files from local drives
  - Device mode: scan files on open, scan files on close
  - Only scan files with one of the following extensions: . .386 .?HT* .ACM .ADE .ADP .ANI .APP .ASD .ASF .ASP .ASX .AWX .AX .BAS .BAT .BIN .BOO .CDF .CHM .CLASS .CMD .CNV .COM .CPL .CRT .CSH .DLL .DLO .DO? .DRV .EMF .EML .EXE* .FLT .FOT .HLP .HT* .INF .INI .INS .ISP .J2K .JAR .JFF .JFI .JFIF .JIF .JMH .JNG .JP2 .JPE .JPEG .JPG .JS* .JSE .LNK .LSP .MD? .MDB .MOD .MS? .NWS .OBJ .OCX .OLB .OSD .OV? .PCD .PDF .PDR .PGM .PHP .PIF .PKG .PL* .PNG .POT .PPS .PPT .PRG .RAR .REG .RPL .RTF .SBF .SCR .SCRIPT .SCT .SH .SHA .SHB .SHS .SHTM* .SIS .SPL .SWF .SYS .TLB .TMP .TSP .TTF .URL .VB? .VCS .VLM .VXD .VXO .WIZ .WLL .WMD .WMF .WMS .WMZ .WPC .WSC .WSF .WSH .WWK .XL? .XML .ZIP
  - Unpack runtime compressed files
  - Actions: ask the user
  - Heuristic: MACRO , WIN32 MEDIUM
  - Logfile report level 1
  17/07/2008,22:02:27 Avira AntiVir Personal – Free Antivirus service has been stopped!
  18/07/2008,08:04:31 ---------------------------------------------------------
  18/07/2008,08:05:35 Keyfile contains a valid license. The Avira AntiVir Personal – Free Antivirus will run as a fully functional version!
  18/07/2008,08:05:35 AntiVir Guard version: 8.00.01.18,engine version 8.1.1.9,VDF version: 7.0.5.130
  18/07/2008,08:05:38 AntiVir Guard was enabled.
  18/07/2008,08:05:39 Avira AntiVir Personal – Free Antivirus has been started successfully!
  18/07/2008,08:05:40 [CONFIG] On-Access configuration used:
  - Files to scan: scan files from local drives
  - Device mode: scan files on open, scan files on close
  - Only scan files with one of the following extensions: . .386 .?HT* .ACM .ADE .ADP .ANI .APP .ASD .ASF .ASP .ASX .AWX .AX .BAS .BAT .BIN .BOO .CDF .CHM .CLASS .CMD .CNV .COM .CPL .CRT .CSH .DLL .DLO .DO? .DRV .EMF .EML .EXE* .FLT .FOT .HLP .HT* .INF .INI .INS .ISP .J2K .JAR .JFF .JFI .JFIF .JIF .JMH .JNG .JP2 .JPE .JPEG .JPG .JS* .JSE .LNK .LSP .MD? .MDB .MOD .MS? .NWS .OBJ .OCX .OLB .OSD .OV? .PCD .PDF .PDR .PGM .PHP .PIF .PKG .PL* .PNG .POT .PPS .PPT .PRG .RAR .REG .RPL .RTF .SBF .SCR .SCRIPT .SCT .SH .SHA .SHB .SHS .SHTM* .SIS .SPL .SWF .SYS .TLB .TMP .TSP .TTF .URL .VB? .VCS .VLM .VXD .VXO .WIZ .WLL .WMD .WMF .WMS .WMZ .WPC .WSC .WSF .WSH .WWK .XL? .XML .ZIP
  - Unpack runtime compressed files
  - Actions: ask the user
  - Heuristic: MACRO , WIN32 MEDIUM
  - Logfile report level 1
  18/07/2008,09:21:35 Avira AntiVir Personal – Free Antivirus service has been stopped!
  18/07/2008,09:22:57 ---------------------------------------------------------
  18/07/2008,09:23:49 Keyfile contains a valid license. The Avira AntiVir Personal – Free Antivirus will run as a fully functional version!
  18/07/2008,09:23:49 AntiVir Guard version: 8.00.01.18,engine version 8.1.1.9,VDF version: 7.0.5.130
  18/07/2008,09:23:51 AntiVir Guard was enabled.
  18/07/2008,09:23:51 Avira AntiVir Personal – Free Antivirus has been started successfully!
  18/07/2008,09:23:53 [CONFIG] On-Access configuration used:
  - Files to scan: scan files from local drives
  - Device mode: scan files on open, scan files on close
  - Only scan files with one of the following extensions: . .386 .?HT* .ACM .ADE .ADP .ANI .APP .ASD .ASF .ASP .ASX .AWX .AX .BAS .BAT .BIN .BOO .CDF .CHM .CLASS .CMD .CNV .COM .CPL .CRT .CSH .DLL .DLO .DO? .DRV .EMF .EML .EXE* .FLT .FOT .HLP .HT* .INF .INI .INS .ISP .J2K .JAR .JFF .JFI .JFIF .JIF .JMH .JNG .JP2 .JPE .JPEG .JPG .JS* .JSE .LNK .LSP .MD? .MDB .MOD .MS? .NWS .OBJ .OCX .OLB .OSD .OV? .PCD .PDF .PDR .PGM .PHP .PIF .PKG .PL* .PNG .POT .PPS .PPT .PRG .RAR .REG .RPL .RTF .SBF .SCR .SCRIPT .SCT .SH .SHA .SHB .SHS .SHTM* .SIS .SPL .SWF .SYS .TLB .TMP .TSP .TTF .URL .VB? .VCS .VLM .VXD .VXO .WIZ .WLL .WMD .WMF .WMS .WMZ .WPC .WSC .WSF .WSH .WWK .XL? .XML .ZIP
  - Unpack runtime compressed files
  - Actions: ask the user
  - Heuristic: MACRO , WIN32 MEDIUM
  - Logfile report level 1
  18/07/2008,11:13:18 ---------------------------------------------------------
  18/07/2008,11:13:22 Keyfile contains a valid license. The Avira AntiVir Personal - Free Antivirus will run as a fully functional version!
  18/07/2008,11:13:22 AntiVir Guard version: 8.00.01.26,engine version 8.1.1.9,VDF version: 7.0.5.137
  18/07/2008,11:13:24 AntiVir Guard was enabled.
  18/07/2008,11:13:24 Avira AntiVir Personal - Free Antivirus has been started successfully!
  18/07/2008,11:13:24 [CONFIG] On-Access configuration used:
  - Files to scan: scan files from local drives
  - Device mode: scan files on open, scan files on close
  - Only scan files with one of the following extensions: . .386 .?HT* .ACM .ADE .ADP .ANI .APP .ASD .ASF .ASP .ASX .AWX .AX .BAS .BAT .BIN .BOO .CDF .CHM .CLASS .CMD .CNV .COM .CPL .CRT .CSH .DLL .DLO .DO? .DRV .EMF .EML .EXE* .FLT .FOT .HLP .HT* .INF .INI .INS .ISP .J2K .JAR .JFF .JFI .JFIF .JIF .JMH .JNG .JP2 .JPE .JPEG .JPG .JS* .JSE .LNK .LSP .MD? .MDB .MOD .MS? .NWS .OBJ .OCX .OLB .OSD .OV? .PCD .PDF .PDR .PGM .PHP .PIF .PKG .PL* .PNG .POT .PPS .PPT .PRG .RAR .REG .RPL .RTF .SBF .SCR .SCRIPT .SCT .SH .SHA .SHB .SHS .SHTM* .SIS .SPL .SWF .SYS .TLB .TMP .TSP .TTF .URL .VB? .VCS .VLM .VXD .VXO .WIZ .WLL .WMD .WMF .WMS .WMZ .WPC .WSC .WSF .WSH .WWK .XL? .XML .ZIP
  - Unpack runtime compressed files
  - Actions: ask the user
  - Heuristic: MACRO , WIN32 MEDIUM
  - Logfile report level 1
  18/07/2008,11:13:41 [CONFIG] On-Access configuration used:
  - Files to scan: scan files from local drives
  - Device mode: scan files on open, scan files on close
  - Only scan files with one of the following extensions: . .386 .?HT* .ACM .ADE .ADP .ANI .APP .ASD .ASF .ASP .ASX .AWX .AX .BAS .BAT .BIN .BOO .CDF .CHM .CLASS .CMD .CNV .COM .CPL .CRT .CSH .DLL .DLO .DO? .DRV .EMF .EML .EXE* .FLT .FOT .HLP .HT* .INF .INI .INS .ISP .J2K .JAR .JFF .JFI .JFIF .JIF .JMH .JNG .JP2 .JPE .JPEG .JPG .JS* .JSE .LNK .LSP .MD? .MDB .MOD .MS? .NWS .OBJ .OCX .OLB .OSD .OV? .PCD .PDF .PDR .PGM .PHP .PIF .PKG .PL* .PNG .POT .PPS .PPT .PRG .RAR .REG .RPL .RTF .SBF .SCR .SCRIPT .SCT .SH .SHA .SHB .SHS .SHTM* .SIS .SPL .SWF .SYS .TLB .TMP .TSP .TTF .URL .VB? .VCS .VLM .VXD .VXO .WIZ .WLL .WMD .WMF .WMS .WMZ .WPC .WSC .WSF .WSH .WWK .XL? .XML .ZIP
  - Unpack runtime compressed files
  - Actions: ask the user
  - Heuristic: MACRO , WIN32 MEDIUM
  - Logfile report level 1
  18/07/2008,21:06:08 Avira AntiVir Personal - Free Antivirus service has been stopped!
  19/07/2008,10:47:57 ---------------------------------------------------------
  19/07/2008,10:48:59 Keyfile contains a valid license. The Avira AntiVir Personal - Free Antivirus will run as a fully functional version!
  19/07/2008,10:48:59 AntiVir Guard version: 8.00.01.26,engine version 8.1.1.9,VDF version: 7.0.5.137
  19/07/2008,10:49:03 AntiVir Guard was enabled.
  19/07/2008,10:49:03 Avira AntiVir Personal - Free Antivirus has been started successfully!
  19/07/2008,10:49:05 [CONFIG] On-Access configuration used:
  - Files to scan: scan files from local drives
  - Device mode: scan files on open, scan files on close
  - Only scan files with one of the following extensions: . .386 .?HT* .ACM .ADE .ADP .ANI .APP .ASD .ASF .ASP .ASX .AWX .AX .BAS .BAT .BIN .BOO .CDF .CHM .CLASS .CMD .CNV .COM .CPL .CRT .CSH .DLL .DLO .DO? .DRV .EMF .EML .EXE* .FLT .FOT .HLP .HT* .INF .INI .INS .ISP .J2K .JAR .JFF .JFI .JFIF .JIF .JMH .JNG .JP2 .JPE .JPEG .JPG .JS* .JSE .LNK .LSP .MD? .MDB .MOD .MS? .NWS .OBJ .OCX .OLB .OSD .OV? .PCD .PDF .PDR .PGM .PHP .PIF .PKG .PL* .PNG .POT .PPS .PPT .PRG .RAR .REG .RPL .RTF .SBF .SCR .SCRIPT .SCT .SH .SHA .SHB .SHS .SHTM* .SIS .SPL .SWF .SYS .TLB .TMP .TSP .TTF .URL .VB? .VCS .VLM .VXD .VXO .WIZ .WLL .WMD .WMF .WMS .WMZ .WPC .WSC .WSF .WSH .WWK .XL? .XML .ZIP
  - Unpack runtime compressed files
  - Actions: ask the user
  - Heuristic: MACRO , WIN32 MEDIUM
  - Logfile report level 1
  19/07/2008,11:10:55 Update process started!
  19/07/2008,11:11:03 Current Engine Version: 8.1.1.11
  19/07/2008,11:11:04 Current Pattern File: 7.0.5.138
  19/07/2008,11:11:08 [CONFIG] On-Access configuration used:
  - Files to scan: scan files from local drives
  - Device mode: scan files on open, scan files on close
  - Only scan files with one of the following extensions: . .386 .?HT* .ACM .ADE .ADP .ANI .APP .ASD .ASF .ASP .ASX .AWX .AX .BAS .BAT .BIN .BOO .CDF .CHM .CLASS .CMD .CNV .COM .CPL .CRT .CSH .DLL .DLO .DO? .DRV .EMF .EML .EXE* .FLT .FOT .HLP .HT* .INF .INI .INS .ISP .J2K .JAR .JFF .JFI .JFIF .JIF .JMH .JNG .JP2 .JPE .JPEG .JPG .JS* .JSE .LNK .LSP .MD? .MDB .MOD .MS? .NWS .OBJ .OCX .OLB .OSD .OV? .PCD .PDF .PDR .PGM .PHP .PIF .PKG .PL* .PNG .POT .PPS .PPT .PRG .RAR .REG .RPL .RTF .SBF .SCR .SCRIPT .SCT .SH .SHA .SHB .SHS .SHTM* .SIS .SPL .SWF .SYS .TLB .TMP .TSP .TTF .URL .VB? .VCS .VLM .VXD .VXO .WIZ .WLL .WMD .WMF .WMS .WMZ .WPC .WSC .WSF .WSH .WWK .XL? .XML .ZIP
  - Unpack runtime compressed files
  - Actions: ask the user
  - Heuristic: MACRO , WIN32 MEDIUM
  - Logfile report level 1
  19/07/2008,22:01:15 Avira AntiVir Personal - Free Antivirus service has been stopped!
  20/07/2008,12:33:47 ---------------------------------------------------------
  20/07/2008,12:34:46 Keyfile contains a valid license. The Avira AntiVir Personal - Free Antivirus will run as a fully functional version!
  20/07/2008,12:34:46 AntiVir Guard version: 8.00.01.26,engine version 8.1.1.11,VDF version: 7.0.5.138
  20/07/2008,12:34:49 AntiVir Guard was enabled.
  20/07/2008,12:34:49 Avira AntiVir Personal - Free Antivirus has been started successfully!
  20/07/2008,12:34:50 [CONFIG] On-Access configuration used:
  - Files to scan: scan files from local drives
  - Device mode: scan files on open, scan files on close
  - Only scan files with one of the following extensions: . .386 .?HT* .ACM .ADE .ADP .ANI .APP .ASD .ASF .ASP .ASX .AWX .AX .BAS .BAT .BIN .BOO .CDF .CHM .CLASS .CMD .CNV .COM .CPL .CRT .CSH .DLL .DLO .DO? .DRV .EMF .EML .EXE* .FLT .FOT .HLP .HT* .INF .INI .INS .ISP .J2K .JAR .JFF .JFI .JFIF .JIF .JMH .JNG .JP2 .JPE .JPEG .JPG .JS* .JSE .LNK .LSP .MD? .MDB .MOD .MS? .NWS .OBJ .OCX .OLB .OSD .OV? .PCD .PDF .PDR .PGM .PHP .PIF .PKG .PL* .PNG .POT .PPS .PPT .PRG .RAR .REG .RPL .RTF .SBF .SCR .SCRIPT .SCT .SH .SHA .SHB .SHS .SHTM* .SIS .SPL .SWF .SYS .TLB .TMP .TSP .TTF .URL .VB? .VCS .VLM .VXD .VXO .WIZ .WLL .WMD .WMF .WMS .WMZ .WPC .WSC .WSF .WSH .WWK .XL? .XML .ZIP
  - Unpack runtime compressed files
  - Actions: ask the user
  - Heuristic: MACRO , WIN32 MEDIUM
  - Logfile report level 1
  20/07/2008,12:39:38 Update process started!
  20/07/2008,12:40:21 Current Engine Version: 8.1.1.11
  20/07/2008,12:40:21 Current Pattern File: 7.0.5.139
  20/07/2008,12:40:29 [CONFIG] On-Access configuration used:
  - Files to scan: scan files from local drives
  - Device mode: scan files on open, scan files on close
  - Only scan files with one of the following extensions: . .386 .?HT* .ACM .ADE .ADP .ANI .APP .ASD .ASF .ASP .ASX .AWX .AX .BAS .BAT .BIN .BOO .CDF .CHM .CLASS .CMD .CNV .COM .CPL .CRT .CSH .DLL .DLO .DO? .DRV .EMF .EML .EXE* .FLT .FOT .HLP .HT* .INF .INI .INS .ISP .J2K .JAR .JFF .JFI .JFIF .JIF .JMH .JNG .JP2 .JPE .JPEG .JPG .JS* .JSE .LNK .LSP .MD? .MDB .MOD .MS? .NWS .OBJ .OCX .OLB .OSD .OV? .PCD .PDF .PDR .PGM .PHP .PIF .PKG .PL* .PNG .POT .PPS .PPT .PRG .RAR .REG .RPL .RTF .SBF .SCR .SCRIPT .SCT .SH .SHA .SHB .SHS .SHTM* .SIS .SPL .SWF .SYS .TLB .TMP .TSP .TTF .URL .VB? .VCS .VLM .VXD .VXO .WIZ .WLL .WMD .WMF .WMS .WMZ .WPC .WSC .WSF .WSH .WWK .XL? .XML .ZIP
  - Unpack runtime compressed files
  - Actions: ask the user
  - Heuristic: MACRO , WIN32 MEDIUM
  - Logfile report level 1
  20/07/2008,20:55:05 Avira AntiVir Personal - Free Antivirus service has been stopped!
  21/07/2008,09:37:37 ---------------------------------------------------------
  21/07/2008,09:38:38 Keyfile contains a valid license. The Avira AntiVir Personal - Free Antivirus will run as a fully functional version!
  21/07/2008,09:38:38 AntiVir Guard version: 8.00.01.26,engine version 8.1.1.11,VDF version: 7.0.5.139
  21/07/2008,09:38:42 AntiVir Guard was enabled.
  21/07/2008,09:38:42 Avira AntiVir Personal - Free Antivirus has been started successfully!
  21/07/2008,09:38:43 [CONFIG] On-Access configuration used:
  - Files to scan: scan files from local drives
  - Device mode: scan files on open, scan files on close
  - Only scan files with one of the following extensions: . .386 .?HT* .ACM .ADE .ADP .ANI .APP .ASD .ASF .ASP .ASX .AWX .AX .BAS .BAT .BIN .BOO .CDF .CHM .CLASS .CMD .CNV .COM .CPL .CRT .CSH .DLL .DLO .DO? .DRV .EMF .EML .EXE* .FLT .FOT .HLP .HT* .INF .INI .INS .ISP .J2K .JAR .JFF .JFI .JFIF .JIF .JMH .JNG .JP2 .JPE .JPEG .JPG .JS* .JSE .LNK .LSP .MD? .MDB .MOD .MS? .NWS .OBJ .OCX .OLB .OSD .OV? .PCD .PDF .PDR .PGM .PHP .PIF .PKG .PL* .PNG .POT .PPS .PPT .PRG .RAR .REG .RPL .RTF .SBF .SCR .SCRIPT .SCT .SH .SHA .SHB .SHS .SHTM* .SIS .SPL .SWF .SYS .TLB .TMP .TSP .TTF .URL .VB? .VCS .VLM .VXD .VXO .WIZ .WLL .WMD .WMF .WMS .WMZ .WPC .WSC .WSF .WSH .WWK .XL? .XML .ZIP
  - Unpack runtime compressed files
  - Actions: ask the user
  - Heuristic: MACRO , WIN32 MEDIUM
  - Logfile report level 1
  21/07/2008,12:36:29 Update process started!
  21/07/2008,12:36:37 Current Engine Version: 8.1.1.11
  21/07/2008,12:36:37 Current Pattern File: 7.0.5.143
  21/07/2008,12:36:40 [CONFIG] On-Access configuration used:
  - Files to scan: scan files from local drives
  - Device mode: scan files on open, scan files on close
  - Only scan files with one of the following extensions: . .386 .?HT* .ACM .ADE .ADP .ANI .APP .ASD .ASF .ASP .ASX .AWX .AX .BAS .BAT .BIN .BOO .CDF .CHM .CLASS .CMD .CNV .COM .CPL .CRT .CSH .DLL .DLO .DO? .DRV .EMF .EML .EXE* .FLT .FOT .HLP .HT* .INF .INI .INS .ISP .J2K .JAR .JFF .JFI .JFIF .JIF .JMH .JNG .JP2 .JPE .JPEG .JPG .JS* .JSE .LNK .LSP .MD? .MDB .MOD .MS? .NWS .OBJ .OCX .OLB .OSD .OV? .PCD .PDF .PDR .PGM .PHP .PIF .PKG .PL* .PNG .POT .PPS .PPT .PRG .RAR .REG .RPL .RTF .SBF .SCR .SCRIPT .SCT .SH .SHA .SHB .SHS .SHTM* .SIS .SPL .SWF .SYS .TLB .TMP .TSP .TTF .URL .VB? .VCS .VLM .VXD .VXO .WIZ .WLL .WMD .WMF .WMS .WMZ .WPC .WSC .WSF .WSH .WWK .XL? .XML .ZIP
  - Unpack runtime compressed files
  - Actions: ask the user
  - Heuristic: MACRO , WIN32 MEDIUM
  - Logfile report level 1
  21/07/2008,20:54:44 Avira AntiVir Personal - Free Antivirus service has been stopped!
  22/07/2008,11:11:21 ---------------------------------------------------------
  22/07/2008,11:12:14 Keyfile contains a valid license. The Avira AntiVir Personal - Free Antivirus will run as a fully functional version!
  22/07/2008,11:12:14 AntiVir Guard version: 8.00.01.26,engine version 8.1.1.11,VDF version: 7.0.5.143
  22/07/2008,11:12:15 AntiVir Guard was enabled.
  22/07/2008,11:12:15 Avira AntiVir Personal - Free Antivirus has been started successfully!
  22/07/2008,11:12:15 [CONFIG] On-Access configuration used:
  - Files to scan: scan files from local drives
  - Device mode: scan files on open, scan files on close
  - Only scan files with one of the following extensions: . .386 .?HT* .ACM .ADE .ADP .ANI .APP .ASD .ASF .ASP .ASX .AWX .AX .BAS .BAT .BIN .BOO .CDF .CHM .CLASS .CMD .CNV .COM .CPL .CRT .CSH .DLL .DLO .DO? .DRV .EMF .EML .EXE* .FLT .FOT .HLP .HT* .INF .INI .INS .ISP .J2K .JAR .JFF .JFI .JFIF .JIF .JMH .JNG .JP2 .JPE .JPEG .JPG .JS* .JSE .LNK .LSP .MD? .MDB .MOD .MS? .NWS .OBJ .OCX .OLB .OSD .OV? .PCD .PDF .PDR .PGM .PHP .PIF .PKG .PL* .PNG .POT .PPS .PPT .PRG .RAR .REG .RPL .RTF .SBF .SCR .SCRIPT .SCT .SH .SHA .SHB .SHS .SHTM* .SIS .SPL .SWF .SYS .TLB .TMP .TSP .TTF .URL .VB? .VCS .VLM .VXD .VXO .WIZ .WLL .WMD .WMF .WMS .WMZ .WPC .WSC .WSF .WSH .WWK .XL? .XML .ZIP
  - Unpack runtime compressed files
  - Actions: ask the user
  - Heuristic: MACRO , WIN32 MEDIUM
  - Logfile report level 1
  22/07/2008,12:37:42 Update process started!
  22/07/2008,12:37:54 Current Engine Version: 8.1.1.11
  22/07/2008,12:37:54 Current Pattern File: 7.0.5.150
  22/07/2008,12:38:00 [CONFIG] On-Access configuration used:
  - Files to scan: scan files from local drives
  - Device mode: scan files on open, scan files on close
  - Only scan files with one of the following extensions: . .386 .?HT* .ACM .ADE .ADP .ANI .APP .ASD .ASF .ASP .ASX .AWX .AX .BAS .BAT .BIN .BOO .CDF .CHM .CLASS .CMD .CNV .COM .CPL .CRT .CSH .DLL .DLO .DO? .DRV .EMF .EML .EXE* .FLT .FOT .HLP .HT* .INF .INI .INS .ISP .J2K .JAR .JFF .JFI .JFIF .JIF .JMH .JNG .JP2 .JPE .JPEG .JPG .JS* .JSE .LNK .LSP .MD? .MDB .MOD .MS? .NWS .OBJ .OCX .OLB .OSD .OV? .PCD .PDF .PDR .PGM .PHP .PIF .PKG .PL* .PNG .POT .PPS .PPT .PRG .RAR .REG .RPL .RTF .SBF .SCR .SCRIPT .SCT .SH .SHA .SHB .SHS .SHTM* .SIS .SPL .SWF .SYS .TLB .TMP .TSP .TTF .URL .VB? .VCS .VLM .VXD .VXO .WIZ .WLL .WMD .WMF .WMS .WMZ .WPC .WSC .WSF .WSH .WWK .XL? .XML .ZIP
  - Unpack runtime compressed files
  - Actions: ask the user
  - Heuristic: MACRO , WIN32 MEDIUM
  - Logfile report level 1
  22/07/2008,21:37:29 Avira AntiVir Personal - Free Antivirus service has been stopped!
  23/07/2008,11:22:35 ---------------------------------------------------------
  23/07/2008,11:23:35 Keyfile contains a valid license. The Avira AntiVir Personal - Free Antivirus will run as a fully functional version!
  23/07/2008,11:23:35 AntiVir Guard version: 8.00.01.26,engine version 8.1.1.11,VDF version: 7.0.5.150
  23/07/2008,11:23:40 AntiVir Guard was enabled.
  23/07/2008,11:23:40 Avira AntiVir Personal - Free Antivirus has been started successfully!
  23/07/2008,11:23:41 [CONFIG] On-Access configuration used:
  - Files to scan: scan files from local drives
  - Device mode: scan files on open, scan files on close
  - Only scan files with one of the following extensions: . .386 .?HT* .ACM .ADE .ADP .ANI .APP .ASD .ASF .ASP .ASX .AWX .AX .BAS .BAT .BIN .BOO .CDF .CHM .CLASS .CMD .CNV .COM .CPL .CRT .CSH .DLL .DLO .DO? .DRV .EMF .EML .EXE* .FLT .FOT .HLP .HT* .INF .INI .INS .ISP .J2K .JAR .JFF .JFI .JFIF .JIF .JMH .JNG .JP2 .JPE .JPEG .JPG .JS* .JSE .LNK .LSP .MD? .MDB .MOD .MS? .NWS .OBJ .OCX .OLB .OSD .OV? .PCD .PDF .PDR .PGM .PHP .PIF .PKG .PL* .PNG .POT .PPS .PPT .PRG .RAR .REG .RPL .RTF .SBF .SCR .SCRIPT .SCT .SH .SHA .SHB .SHS .SHTM* .SIS .SPL .SWF .SYS .TLB .TMP .TSP .TTF .URL .VB? .VCS .VLM .VXD .VXO .WIZ .WLL .WMD .WMF .WMS .WMZ .WPC .WSC .WSF .WSH .WWK .XL? .XML .ZIP
  - Unpack runtime compressed files
  - Actions: ask the user
  - Heuristic: MACRO , WIN32 MEDIUM
  - Logfile report level 1
  23/07/2008,12:36:31 [CONFIG] On-Access configuration used:
  - Files to scan: scan files from local drives
  - Device mode: scan files on open, scan files on close
  - Only scan files with one of the following extensions: . .386 .?HT* .ACM .ADE .ADP .ANI .APP .ASD .ASF .ASP .ASX .AWX .AX .BAS .BAT .BIN .BOO .CDF .CHM .CLASS .CMD .CNV .COM .CPL .CRT .CSH .DLL .DLO .DO? .DRV .EMF .EML .EXE* .FLT .FOT .HLP .HT* .INF .INI .INS .ISP .J2K .JAR .JFF .JFI .JFIF .JIF .JMH .JNG .JP2 .JPE .JPEG .JPG .JS* .JSE .LNK .LSP .MD? .MDB .MOD .MS? .NWS .OBJ .OCX .OLB .OSD .OV? .PCD .PDF .PDR .PGM .PHP .PIF .PKG .PL* .PNG .POT .PPS .PPT .PRG .RAR .REG .RPL .RTF .SBF .SCR .SCRIPT .SCT .SH .SHA .SHB .SHS .SHTM* .SIS .SPL .SWF .SYS .TLB .TMP .TSP .TTF .URL .VB? .VCS .VLM .VXD .VXO .WIZ .WLL .WMD .WMF .WMS .WMZ .WPC .WSC .WSF .WSH .WWK .XL? .XML .ZIP
  - Unpack runtime compressed files
  - Actions: ask the user
  - Heuristic: MACRO , WIN32 MEDIUM
  - Logfile report level 1
  23/07/2008,20:48:55 Avira AntiVir Personal - Free Antivirus service has been stopped!
  26/07/2008,16:34:38 ---------------------------------------------------------
  26/07/2008,16:35:42 Keyfile contains a valid license. The Avira AntiVir Personal - Free Antivirus will run as a fully functional version!
  26/07/2008,16:35:42 AntiVir Guard version: 8.00.01.26,engine version 8.1.1.11,VDF version: 7.0.5.150
  26/07/2008,16:35:46 AntiVir Guard was enabled.
  26/07/2008,16:35:46 Avira AntiVir Personal - Free Antivirus has been started successfully!
  26/07/2008,16:35:47 [CONFIG] On-Access configuration used:
  - Files to scan: scan files from local drives
  - Device mode: scan files on open, scan files on close
  - Only scan files with one of the following extensions: . .386 .?HT* .ACM .ADE .ADP .ANI .APP .ASD .ASF .ASP .ASX .AWX .AX .BAS .BAT .BIN .BOO .CDF .CHM .CLASS .CMD .CNV .COM .CPL .CRT .CSH .DLL .DLO .DO? .DRV .EMF .EML .EXE* .FLT .FOT .HLP .HT* .INF .INI .INS .ISP .J2K .JAR .JFF .JFI .JFIF .JIF .JMH .JNG .JP2 .JPE .JPEG .JPG .JS* .JSE .LNK .LSP .MD? .MDB .MOD .MS? .NWS .OBJ .OCX .OLB .OSD .OV? .PCD .PDF .PDR .PGM .PHP .PIF .PKG .PL* .PNG .POT .PPS .PPT .PRG .RAR .REG .RPL .RTF .SBF .SCR .SCRIPT .SCT .SH .SHA .SHB .SHS .SHTM* .SIS .SPL .SWF .SYS .TLB .TMP .TSP .TTF .URL .VB? .VCS .VLM .VXD .VXO .WIZ .WLL .WMD .WMF .WMS .WMZ .WPC .WSC .WSF .WSH .WWK .XL? .XML .ZIP
  - Unpack runtime compressed files
  - Actions: ask the user
  - Heuristic: MACRO , WIN32 MEDIUM
  - Logfile report level 1
  26/07/2008,16:38:18 Update process started!
  26/07/2008,16:38:26 Current Engine Version: 8.1.1.12
  26/07/2008,16:38:26 Current Pattern File: 7.0.5.175
  26/07/2008,16:38:28 [CONFIG] On-Access configuration used:
  - Files to scan: scan files from local drives
  - Device mode: scan files on open, scan files on close
  - Only scan files with one of the following extensions: . .386 .?HT* .ACM .ADE .ADP .ANI .APP .ASD .ASF .ASP .ASX .AWX .AX .BAS .BAT .BIN .BOO .CDF .CHM .CLASS .CMD .CNV .COM .CPL .CRT .CSH .DLL .DLO .DO? .DRV .EMF .EML .EXE* .FLT .FOT .HLP .HT* .INF .INI .INS .ISP .J2K .JAR .JFF .JFI .JFIF .JIF .JMH .JNG .JP2 .JPE .JPEG .JPG .JS* .JSE .LNK .LSP .MD? .MDB .MOD .MS? .NWS .OBJ .OCX .OLB .OSD .OV? .PCD .PDF .PDR .PGM .PHP .PIF .PKG .PL* .PNG .POT .PPS .PPT .PRG .RAR .REG .RPL .RTF .SBF .SCR .SCRIPT .SCT .SH .SHA .SHB .SHS .SHTM* .SIS .SPL .SWF .SYS .TLB .TMP .TSP .TTF .URL .VB? .VCS .VLM .VXD .VXO .WIZ .WLL .WMD .WMF .WMS .WMZ .WPC .WSC .WSF .WSH .WWK .XL? .XML .ZIP
  - Unpack runtime compressed files
  - Actions: ask the user
  - Heuristic: MACRO , WIN32 MEDIUM
  - Logfile report level 1
  26/07/2008,19:48:15 Avira AntiVir Personal - Free Antivirus service has been stopped!
  27/07/2008,16:53:36 ---------------------------------------------------------
  27/07/2008,16:54:36 Keyfile contains a valid license. The Avira AntiVir Personal - Free Antivirus will run as a fully functional version!
  27/07/2008,16:54:36 AntiVir Guard version: 8.00.01.26,engine version 8.1.1.12,VDF version: 7.0.5.175
  27/07/2008,16:54:42 AntiVir Guard was enabled.
  27/07/2008,16:54:42 Avira AntiVir Personal - Free Antivirus has been started successfully!
  27/07/2008,16:54:43 [CONFIG] On-Access configuration used:
  - Files to scan: scan files from local drives
  - Device mode: scan files on open, scan files on close
  - Only scan files with one of the following extensions: . .386 .?HT* .ACM .ADE .ADP .ANI .APP .ASD .ASF .ASP .ASX .AWX .AX .BAS .BAT .BIN .BOO .CDF .CHM .CLASS .CMD .CNV .COM .CPL .CRT .CSH .DLL .DLO .DO? .DRV .EMF .EML .EXE* .FLT .FOT .HLP .HT* .INF .INI .INS .ISP .J2K .JAR .JFF .JFI .JFIF .JIF .JMH .JNG .JP2 .JPE .JPEG .JPG .JS* .JSE .LNK .LSP .MD? .MDB .MOD .MS? .NWS .OBJ .OCX .OLB .OSD .OV? .PCD .PDF .PDR .PGM .PHP .PIF .PKG .PL* .PNG .POT .PPS .PPT .PRG .RAR .REG .RPL .RTF .SBF .SCR .SCRIPT .SCT .SH .SHA .SHB .SHS .SHTM* .SIS .SPL .SWF .SYS .TLB .TMP .TSP .TTF .URL .VB? .VCS .VLM .VXD .VXO .WIZ .WLL .WMD .WMF .WMS .WMZ .WPC .WSC .WSF .WSH .WWK .XL? .XML .ZIP
  - Unpack runtime compressed files
  - Actions: ask the user
  - Heuristic: MACRO , WIN32 MEDIUM
  - Logfile report level 1
  27/07/2008,16:57:34 Update process started!
  27/07/2008,16:57:40 Current Engine Version: 8.1.1.12
  27/07/2008,16:57:40 Current Pattern File: 7.0.5.176
  27/07/2008,16:57:43 [CONFIG] On-Access configuration used:
  - Files to scan: scan files from local drives
  - Device mode: scan files on open, scan files on close
  - Only scan files with one of the following extensions: . .386 .?HT* .ACM .ADE .ADP .ANI .APP .ASD .ASF .ASP .ASX .AWX .AX .BAS .BAT .BIN .BOO .CDF .CHM .CLASS .CMD .CNV .COM .CPL .CRT .CSH .DLL .DLO .DO? .DRV .EMF .EML .EXE* .FLT .FOT .HLP .HT* .INF .INI .INS .ISP .J2K .JAR .JFF .JFI .JFIF .JIF .JMH .JNG .JP2 .JPE .JPEG .JPG .JS* .JSE .LNK .LSP .MD? .MDB .MOD .MS? .NWS .OBJ .OCX .OLB .OSD .OV? .PCD .PDF .PDR .PGM .PHP .PIF .PKG .PL* .PNG .POT .PPS .PPT .PRG .RAR .REG .RPL .RTF .SBF .SCR .SCRIPT .SCT .SH .SHA .SHB .SHS .SHTM* .SIS .SPL .SWF .SYS .TLB .TMP .TSP .TTF .URL .VB? .VCS .VLM .VXD .VXO .WIZ .WLL .WMD .WMF .WMS .WMZ .WPC .WSC .WSF .WSH .WWK .XL? .XML .ZIP
  - Unpack runtime compressed files
  - Actions: ask the user
  - Heuristic: MACRO , WIN32 MEDIUM
  - Logfile report level 1
  27/07/2008,18:27:28 Avira AntiVir Personal - Free Antivirus service has been stopped!
  28/07/2008,13:00:03 ---------------------------------------------------------
  28/07/2008,13:01:06 Keyfile contains a valid license. The Avira AntiVir Personal - Free Antivirus will run as a fully functional version!
  28/07/2008,13:01:06 AntiVir Guard version: 8.00.01.26,engine version 8.1.1.12,VDF version: 7.0.5.176
  28/07/2008,13:01:12 AntiVir Guard was enabled.
  28/07/2008,13:01:12 Avira AntiVir Personal - Free Antivirus has been started successfully!
  28/07/2008,13:01:13 [CONFIG] On-Access configuration used:
  - Files to scan: scan files from local drives
  - Device mode: scan files on open, scan files on close
  - Only scan files with one of the following extensions: . .386 .?HT* .ACM .ADE .ADP .ANI .APP .ASD .ASF .ASP .ASX .AWX .AX .BAS .BAT .BIN .BOO .CDF .CHM .CLASS .CMD .CNV .COM .CPL .CRT .CSH .DLL .DLO .DO? .DRV .EMF .EML .EXE* .FLT .FOT .HLP .HT* .INF .INI .INS .ISP .J2K .JAR .JFF .JFI .JFIF .JIF .JMH .JNG .JP2 .JPE .JPEG .JPG .JS* .JSE .LNK .LSP .MD? .MDB .MOD .MS? .NWS .OBJ .OCX .OLB .OSD .OV? .PCD .PDF .PDR .PGM .PHP .PIF .PKG .PL* .PNG .POT .PPS .PPT .PRG .RAR .REG .RPL .RTF .SBF .SCR .SCRIPT .SCT .SH .SHA .SHB .SHS .SHTM* .SIS .SPL .SWF .SYS .TLB .TMP .TSP .TTF .URL .VB? .VCS .VLM .VXD .VXO .WIZ .WLL .WMD .WMF .WMS .WMZ .WPC .WSC .WSF .WSH .WWK .XL? .XML .ZIP
  - Unpack runtime compressed files
  - Actions: ask the user
  - Heuristic: MACRO , WIN32 MEDIUM
  - Logfile report level 1
  28/07/2008,16:56:16 Update process started!
  28/07/2008,16:56:26 Current Engine Version: 8.1.1.12
  28/07/2008,16:56:26 Current Pattern File: 7.0.5.181
  28/07/2008,16:56:29 [CONFIG] On-Access configuration used:
  - Files to scan: scan files from local drives
  - Device mode: scan files on open, scan files on close
  - Only scan files with one of the following extensions: . .386 .?HT* .ACM .ADE .ADP .ANI .APP .ASD .ASF .ASP .ASX .AWX .AX .BAS .BAT .BIN .BOO .CDF .CHM .CLASS .CMD .CNV .COM .CPL .CRT .CSH .DLL .DLO .DO? .DRV .EMF .EML .EXE* .FLT .FOT .HLP .HT* .INF .INI .INS .ISP .J2K .JAR .JFF .JFI .JFIF .JIF .JMH .JNG .JP2 .JPE .JPEG .JPG .JS* .JSE .LNK .LSP .MD? .MDB .MOD .MS? .NWS .OBJ .OCX .OLB .OSD .OV? .PCD .PDF .PDR .PGM .PHP .PIF .PKG .PL* .PNG .POT .PPS .PPT .PRG .RAR .REG .RPL .RTF .SBF .SCR .SCRIPT .SCT .SH .SHA .SHB .SHS .SHTM* .SIS .SPL .SWF .SYS .TLB .TMP .TSP .TTF .URL .VB? .VCS .VLM .VXD .VXO .WIZ .WLL .WMD .WMF .WMS .WMZ .WPC .WSC .WSF .WSH .WWK .XL? .XML .ZIP
  - Unpack runtime compressed files
  - Actions: ask the user
  - Heuristic: MACRO , WIN32 MEDIUM
  - Logfile report level 1
  28/07/2008,20:57:31 Avira AntiVir Personal - Free Antivirus service has been stopped!
  29/07/2008,07:19:25 ---------------------------------------------------------
  29/07/2008,07:20:24 Keyfile contains a valid license. The Avira AntiVir Personal - Free Antivirus will run as a fully functional version!
  29/07/2008,07:20:24 AntiVir Guard version: 8.00.01.26,engine version 8.1.1.12,VDF version: 7.0.5.181
  29/07/2008,07:20:26 AntiVir Guard was enabled.
  29/07/2008,07:20:26 Avira AntiVir Personal - Free Antivirus has been started successfully!
  29/07/2008,07:20:27 [CONFIG] On-Access configuration used:
  - Files to scan: scan files from local drives
  - Device mode: scan files on open, scan files on close
  - Only scan files with one of the following extensions: . .386 .?HT* .ACM .ADE .ADP .ANI .APP .ASD .ASF .ASP .ASX .AWX .AX .BAS .BAT .BIN .BOO .CDF .CHM .CLASS .CMD .CNV .COM .CPL .CRT .CSH .DLL .DLO .DO? .DRV .EMF .EML .EXE* .FLT .FOT .HLP .HT* .INF .INI .INS .ISP .J2K .JAR .JFF .JFI .JFIF .JIF .JMH .JNG .JP2 .JPE .JPEG .JPG .JS* .JSE .LNK .LSP .MD? .MDB .MOD .MS? .NWS .OBJ .OCX .OLB .OSD .OV? .PCD .PDF .PDR .PGM .PHP .PIF .PKG .PL* .PNG .POT .PPS .PPT .PRG .RAR .REG .RPL .RTF .SBF .SCR .SCRIPT .SCT .SH .SHA .SHB .SHS .SHTM* .SIS .SPL .SWF .SYS .TLB .TMP .TSP .TTF .URL .VB? .VCS .VLM .VXD .VXO .WIZ .WLL .WMD .WMF .WMS .WMZ .WPC .WSC .WSF .WSH .WWK .XL? .XML .ZIP
  - Unpack runtime compressed files
  - Actions: ask the user
  - Heuristic: MACRO , WIN32 MEDIUM
  - Logfile report level 1
  29/07/2008,11:02:44 Avira AntiVir Personal - Free Antivirus service has been stopped!
  29/07/2008,11:04:02 ---------------------------------------------------------
  29/07/2008,11:04:54 Keyfile contains a valid license. The Avira AntiVir Personal - Free Antivirus will run as a fully functional version!
  29/07/2008,11:04:54 AntiVir Guard version: 8.00.01.26,engine version 8.1.1.12,VDF version: 7.0.5.181
  29/07/2008,11:04:56 AntiVir Guard was enabled.
  29/07/2008,11:04:56 Avira AntiVir Personal - Free Antivirus has been started successfully!
  29/07/2008,11:04:58 [CONFIG] On-Access configuration used:
  - Files to scan: scan files from local drives
  - Device mode: scan files on open, scan files on close
  - Only scan files with one of the following extensions: . .386 .?HT* .ACM .ADE .ADP .ANI .APP .ASD .ASF .ASP .ASX .AWX .AX .BAS .BAT .BIN .BOO .CDF .CHM .CLASS .CMD .CNV .COM .CPL .CRT .CSH .DLL .DLO .DO? .DRV .EMF .EML .EXE* .FLT .FOT .HLP .HT* .INF .INI .INS .ISP .J2K .JAR .JFF .JFI .JFIF .JIF .JMH .JNG .JP2 .JPE .JPEG .JPG .JS* .JSE .LNK .LSP .MD? .MDB .MOD .MS? .NWS .OBJ .OCX .OLB .OSD .OV? .PCD .PDF .PDR .PGM .PHP .PIF .PKG .PL* .PNG .POT .PPS .PPT .PRG .RAR .REG .RPL .RTF .SBF .SCR .SCRIPT .SCT .SH .SHA .SHB .SHS .SHTM* .SIS .SPL .SWF .SYS .TLB .TMP .TSP .TTF .URL .VB? .VCS .VLM .VXD .VXO .WIZ .WLL .WMD .WMF .WMS .WMZ .WPC .WSC .WSF .WSH .WWK .XL? .XML .ZIP
  - Unpack runtime compressed files
  - Actions: ask the user
  - Heuristic: MACRO , WIN32 MEDIUM
  - Logfile report level 1
  29/07/2008,13:35:34 ---------------------------------------------------------
  29/07/2008,13:36:26 Keyfile contains a valid license. The Avira AntiVir Personal - Free Antivirus will run as a fully functional version!
  29/07/2008,13:36:26 AntiVir Guard version: 8.00.01.26,engine version 8.1.1.12,VDF version: 7.0.5.181
  29/07/2008,13:36:28 AntiVir Guard was enabled.
  29/07/2008,13:36:28 Avira AntiVir Personal - Free Antivirus has been started successfully!
  29/07/2008,13:36:30 [CONFIG] On-Access configuration used:
  - Files to scan: scan files from local drives
  - Device mode: scan files on open, scan files on close
  - Only scan files with one of the following extensions: . .386 .?HT* .ACM .ADE .ADP .ANI .APP .ASD .ASF .ASP .ASX .AWX .AX .BAS .BAT .BIN .BOO .CDF .CHM .CLASS .CMD .CNV .COM .CPL .CRT .CSH .DLL .DLO .DO? .DRV .EMF .EML .EXE* .FLT .FOT .HLP .HT* .INF .INI .INS .ISP .J2K .JAR .JFF .JFI .JFIF .JIF .JMH .JNG .JP2 .JPE .JPEG .JPG .JS* .JSE .LNK .LSP .MD? .MDB .MOD .MS? .NWS .OBJ .OCX .OLB .OSD .OV? .PCD .PDF .PDR .PGM .PHP .PIF .PKG .PL* .PNG .POT .PPS .PPT .PRG .RAR .REG .RPL .RTF .SBF .SCR .SCRIPT .SCT .SH .SHA .SHB .SHS .SHTM* .SIS .SPL .SWF .SYS .TLB .TMP .TSP .TTF .URL .VB? .VCS .VLM .VXD .VXO .WIZ .WLL .WMD .WMF .WMS .WMZ .WPC .WSC .WSF .WSH .WWK .XL? .XML .ZIP
  - Unpack runtime compressed files
  - Actions: ask the user
  - Heuristic: MACRO , WIN32 MEDIUM
  - Logfile report level 1
  29/07/2008,16:56:16 Update process started!
  29/07/2008,16:56:26 Current Engine Version: 8.1.1.12
  29/07/2008,16:56:26 Current Pattern File: 7.0.5.187
  29/07/2008,16:56:29 [CONFIG] On-Access configuration used:
  - Files to scan: scan files from local drives
  - Device mode: scan files on open, scan files on close
  - Only scan files with one of the following extensions: . .386 .?HT* .ACM .ADE .ADP .ANI .APP .ASD .ASF .ASP .ASX .AWX .AX .BAS .BAT .BIN .BOO .CDF .CHM .CLASS .CMD .CNV .COM .CPL .CRT .CSH .DLL .DLO .DO? .DRV .EMF .EML .EXE* .FLT .FOT .HLP .HT* .INF .INI .INS .ISP .J2K .JAR .JFF .JFI .JFIF .JIF .JMH .JNG .JP2 .JPE .JPEG .JPG .JS* .JSE .LNK .LSP .MD? .MDB .MOD .MS? .NWS .OBJ .OCX .OLB .OSD .OV? .PCD .PDF .PDR .PGM .PHP .PIF .PKG .PL* .PNG .POT .PPS .PPT .PRG .RAR .REG .RPL .RTF .SBF .SCR .SCRIPT .SCT .SH .SHA .SHB .SHS .SHTM* .SIS .SPL .SWF .SYS .TLB .TMP .TSP .TTF .URL .VB? .VCS .VLM .VXD .VXO .WIZ .WLL .WMD .WMF .WMS .WMZ .WPC .WSC .WSF .WSH .WWK .XL? .XML .ZIP
  - Unpack runtime compressed files
  - Actions: ask the user
  - Heuristic: MACRO , WIN32 MEDIUM
  - Logfile report level 1
  29/07/2008,20:51:45 Avira AntiVir Personal - Free Antivirus service has been stopped!
  30/07/2008,10:31:22 ---------------------------------------------------------
  30/07/2008,10:32:18 Keyfile contains a valid license. The Avira AntiVir Personal - Free Antivirus will run as a fully functional version!
  30/07/2008,10:32:18 AntiVir Guard version: 8.00.01.26,engine version 8.1.1.12,VDF version: 7.0.5.187
  30/07/2008,10:32:20 AntiVir Guard was enabled.
  30/07/2008,10:32:20 Avira AntiVir Personal - Free Antivirus has been started successfully!
  30/07/2008,10:32:20 [CONFIG] On-Access configuration used:
  - Files to scan: scan files from local drives
  - Device mode: scan files on open, scan files on close
  - Only scan files with one of the following extensions: . .386 .?HT* .ACM .ADE .ADP .ANI .APP .ASD .ASF .ASP .ASX .AWX .AX .BAS .BAT .BIN .BOO .CDF .CHM .CLASS .CMD .CNV .COM .CPL .CRT .CSH .DLL .DLO .DO? .DRV .EMF .EML .EXE* .FLT .FOT .HLP .HT* .INF .INI .INS .ISP .J2K .JAR .JFF .JFI .JFIF .JIF .JMH .JNG .JP2 .JPE .JPEG .JPG .JS* .JSE .LNK .LSP .MD? .MDB .MOD .MS? .NWS .OBJ .OCX .OLB .OSD .OV? .PCD .PDF .PDR .PGM .PHP .PIF .PKG .PL* .PNG .POT .PPS .PPT .PRG .RAR .REG .RPL .RTF .SBF .SCR .SCRIPT .SCT .SH .SHA .SHB .SHS .SHTM* .SIS .SPL .SWF .SYS .TLB .TMP .TSP .TTF .URL .VB? .VCS .VLM .VXD .VXO .WIZ .WLL .WMD .WMF .WMS .WMZ .WPC .WSC .WSF .WSH .WWK .XL? .XML .ZIP
  - Unpack runtime compressed files
  - Actions: ask the user
  - Heuristic: MACRO , WIN32 MEDIUM
  - Logfile report level 1
  30/07/2008,19:17:32 Update process started!
  30/07/2008,19:17:40 Current Engine Version: 8.1.1.12
  30/07/2008,19:17:40 Current Pattern File: 7.0.5.194
  30/07/2008,19:17:44 [CONFIG] On-Access configuration used:
  - Files to scan: scan files from local drives
  - Device mode: scan files on open, scan files on close
  - Only scan files with one of the following extensions: . .386 .?HT* .ACM .ADE .ADP .ANI .APP .ASD .ASF .ASP .ASX .AWX .AX .BAS .BAT .BIN .BOO .CDF .CHM .CLASS .CMD .CNV .COM .CPL .CRT .CSH .DLL .DLO .DO? .DRV .EMF .EML .EXE* .FLT .FOT .HLP .HT* .INF .INI .INS .ISP .J2K .JAR .JFF .JFI .JFIF .JIF .JMH .JNG .JP2 .JPE .JPEG .JPG .JS* .JSE .LNK .LSP .MD? .MDB .MOD .MS? .NWS .OBJ .OCX .OLB .OSD .OV? .PCD .PDF .PDR .PGM .PHP .PIF .PKG .PL* .PNG .POT .PPS .PPT .PRG .RAR .REG .RPL .RTF .SBF .SCR .SCRIPT .SCT .SH .SHA .SHB .SHS .SHTM* .SIS .SPL .SWF .SYS .TLB .TMP .TSP .TTF .URL .VB? .VCS .VLM .VXD .VXO .WIZ .WLL .WMD .WMF .WMS .WMZ .WPC .WSC .WSF .WSH .WWK .XL? .XML .ZIP
  - Unpack runtime compressed files
  - Actions: ask the user
  - Heuristic: MACRO , WIN32 MEDIUM
  - Logfile report level 1
  30/07/2008,20:59:52 Avira AntiVir Personal - Free Antivirus service has been stopped!
  31/07/2008,09:38:21 ---------------------------------------------------------
  31/07/2008,09:39:14 Keyfile contains a valid license. The Avira AntiVir Personal - Free Antivirus will run as a fully functional version!
  31/07/2008,09:39:14 AntiVir Guard version: 8.00.01.26,engine version 8.1.1.12,VDF version: 7.0.5.194
  31/07/2008,09:39:15 AntiVir Guard was enabled.
  31/07/2008,09:39:15 Avira AntiVir Personal - Free Antivirus has been started successfully!
  31/07/2008,09:39:15 [CONFIG] On-Access configuration used:
  - Files to scan: scan files from local drives
  - Device mode: scan files on open, scan files on close
  - Only scan files with one of the following extensions: . .386 .?HT* .ACM .ADE .ADP .ANI .APP .ASD .ASF .ASP .ASX .AWX .AX .BAS .BAT .BIN .BOO .CDF .CHM .CLASS .CMD .CNV .COM .CPL .CRT .CSH .DLL .DLO .DO? .DRV .EMF .EML .EXE* .FLT .FOT .HLP .HT* .INF .INI .INS .ISP .J2K .JAR .JFF .JFI .JFIF .JIF .JMH .JNG .JP2 .JPE .JPEG .JPG .JS* .JSE .LNK .LSP .MD? .MDB .MOD .MS? .NWS .OBJ .OCX .OLB .OSD .OV? .PCD .PDF .PDR .PGM .PHP .PIF .PKG .PL* .PNG .POT .PPS .PPT .PRG .RAR .REG .RPL .RTF .SBF .SCR .SCRIPT .SCT .SH .SHA .SHB .SHS .SHTM* .SIS .SPL .SWF .SYS .TLB .TMP .TSP .TTF .URL .VB? .VCS .VLM .VXD .VXO .WIZ .WLL .WMD .WMF .WMS .WMZ .WPC .WSC .WSF .WSH .WWK .XL? .XML .ZIP
  - Unpack runtime compressed files
  - Actions: ask the user
  - Heuristic: MACRO , WIN32 MEDIUM
  - Logfile report level 1
  31/07/2008,19:16:53 Update process started!
  31/07/2008,19:17:02 Current Engine Version: 8.1.1.15
  31/07/2008,19:17:02 Current Pattern File: 7.0.5.199
  31/07/2008,19:17:08 [CONFIG] On-Access configuration used:
  - Files to scan: scan files from local drives
  - Device mode: scan files on open, scan files on close
  - Only scan files with one of the following extensions: . .386 .?HT* .ACM .ADE .ADP .ANI .APP .ASD .ASF .ASP .ASX .AWX .AX .BAS .BAT .BIN .BOO .CDF .CHM .CLASS .CMD .CNV .COM .CPL .CRT .CSH .DLL .DLO .DO? .DRV .EMF .EML .EXE* .FLT .FOT .HLP .HT* .INF .INI .INS .ISP .J2K .JAR .JFF .JFI .JFIF .JIF .JMH .JNG .JP2 .JPE .JPEG .JPG .JS* .JSE .LNK .LSP .MD? .MDB .MOD .MS? .NWS .OBJ .OCX .OLB .OSD .OV? .PCD .PDF .PDR .PGM .PHP .PIF .PKG .PL* .PNG .POT .PPS .PPT .PRG .RAR .REG .RPL .RTF .SBF .SCR .SCRIPT .SCT .SH .SHA .SHB .SHS .SHTM* .SIS .SPL .SWF .SYS .TLB .TMP .TSP .TTF .URL .VB? .VCS .VLM .VXD .VXO .WIZ .WLL .WMD .WMF .WMS .WMZ .WPC .WSC .WSF .WSH .WWK .XL? .XML .ZIP
  - Unpack runtime compressed files
  - Actions: ask the user
  - Heuristic: MACRO , WIN32 MEDIUM
  - Logfile report level 1
  31/07/2008,22:50:07 Avira AntiVir Personal - Free Antivirus service has been stopped!
  01/08/2008,10:53:46 ---------------------------------------------------------
  01/08/2008,10:54:42 Keyfile contains a valid license. The Avira AntiVir Personal - Free Antivirus will run as a fully functional version!
  01/08/2008,10:54:42 AntiVir Guard version: 8.00.01.26,engine version 8.1.1.15,VDF version: 7.0.5.199
  01/08/2008,10:54:43 AntiVir Guard was enabled.
  01/08/2008,10:54:43 Avira AntiVir Personal - Free Antivirus has been started successfully!
  01/08/2008,10:54:43 [CONFIG] On-Access configuration used:
  - Files to scan: scan files from local drives
  - Device mode: scan files on open, scan files on close
  - Only scan files with one of the following extensions: . .386 .?HT* .ACM .ADE .ADP .ANI .APP .ASD .ASF .ASP .ASX .AWX .AX .BAS .BAT .BIN .BOO .CDF .CHM .CLASS .CMD .CNV .COM .CPL .CRT .CSH .DLL .DLO .DO? .DRV .EMF .EML .EXE* .FLT .FOT .HLP .HT* .INF .INI .INS .ISP .J2K .JAR .JFF .JFI .JFIF .JIF .JMH .JNG .JP2 .JPE .JPEG .JPG .JS* .JSE .LNK .LSP .MD? .MDB .MOD .MS? .NWS .OBJ .OCX .OLB .OSD .OV? .PCD .PDF .PDR .PGM .PHP .PIF .PKG .PL* .PNG .POT .PPS .PPT .PRG .RAR .REG .RPL .RTF .SBF .SCR .SCRIPT .SCT .SH .SHA .SHB .SHS .SHTM* .SIS .SPL .SWF .SYS .TLB .TMP .TSP .TTF .URL .VB? .VCS .VLM .VXD .VXO .WIZ .WLL .WMD .WMF .WMS .WMZ .WPC .WSC .WSF .WSH .WWK .XL? .XML .ZIP
  - Unpack runtime compressed files
  - Actions: ask the user
  - Heuristic: MACRO , WIN32 MEDIUM
  - Logfile report level 1
  01/08/2008,17:43:58 Avira AntiVir Personal - Free Antivirus service has been stopped!
  01/08/2008,17:45:23 ---------------------------------------------------------
  01/08/2008,17:46:21 Keyfile contains a valid license. The Avira AntiVir Personal - Free Antivirus will run as a fully functional version!
  01/08/2008,17:46:21 AntiVir Guard version: 8.00.01.26,engine version 8.1.1.15,VDF version: 7.0.5.199
  01/08/2008,17:46:26 AntiVir Guard was enabled.
  01/08/2008,17:46:26 Avira AntiVir Personal - Free Antivirus has been started successfully!
  01/08/2008,17:46:27 [CONFIG] On-Access configuration used:
  - Files to scan: scan files from local drives
  - Device mode: scan files on open, scan files on close
  - Only scan files with one of the following extensions: . .386 .?HT* .ACM .ADE .ADP .ANI .APP .ASD .ASF .ASP .ASX .AWX .AX .BAS .BAT .BIN .BOO .CDF .CHM .CLASS .CMD .CNV .COM .CPL .CRT .CSH .DLL .DLO .DO? .DRV .EMF .EML .EXE* .FLT .FOT .HLP .HT* .INF .INI .INS .ISP .J2K .JAR .JFF .JFI .JFIF .JIF .JMH .JNG .JP2 .JPE .JPEG .JPG .JS* .JSE .LNK .LSP .MD? .MDB .MOD .MS? .NWS .OBJ .OCX .OLB .OSD .OV? .PCD .PDF .PDR .PGM .PHP .PIF .PKG .PL* .PNG .POT .PPS .PPT .PRG .RAR .REG .RPL .RTF .SBF .SCR .SCRIPT .SCT .SH .SHA .SHB .SHS .SHTM* .SIS .SPL .SWF .SYS .TLB .TMP .TSP .TTF .URL .VB? .VCS .VLM .VXD .VXO .WIZ .WLL .WMD .WMF .WMS .WMZ .WPC .WSC .WSF .WSH .WWK .XL? .XML .ZIP
  - Unpack runtime compressed files
  - Actions: ask the user
  - Heuristic: MACRO , WIN32 MEDIUM
  - Logfile report level 1
  01/08/2008,21:07:34 Avira AntiVir Personal - Free Antivirus service has been stopped!
  02/08/2008,11:42:44 ---------------------------------------------------------
  02/08/2008,11:43:46 Keyfile contains a valid license. The Avira AntiVir Personal - Free Antivirus will run as a fully functional version!
  02/08/2008,11:43:47 AntiVir Guard version: 8.00.01.26,engine version 8.1.1.15,VDF version: 7.0.5.199
  02/08/2008,11:43:51 AntiVir Guard was enabled.
  02/08/2008,11:43:51 Avira AntiVir Personal - Free Antivirus has been started successfully!
  02/08/2008,11:43:52 [CONFIG] On-Access configuration used:
  - Files to scan: scan files from local drives
  - Device mode: scan files on open, scan files on close
  - Only scan files with one of the following extensions: . .386 .?HT* .ACM .ADE .ADP .ANI .APP .ASD .ASF .ASP .ASX .AWX .AX .BAS .BAT .BIN .BOO .CDF .CHM .CLASS .CMD .CNV .COM .CPL .CRT .CSH .DLL .DLO .DO? .DRV .EMF .EML .EXE* .FLT .FOT .HLP .HT* .INF .INI .INS .ISP .J2K .JAR .JFF .JFI .JFIF .JIF .JMH .JNG .JP2 .JPE .JPEG .JPG .JS* .JSE .LNK .LSP .MD? .MDB .MOD .MS? .NWS .OBJ .OCX .OLB .OSD .OV? .PCD .PDF .PDR .PGM .PHP .PIF .PKG .PL* .PNG .POT .PPS .PPT .PRG .RAR .REG .RPL .RTF .SBF .SCR .SCRIPT .SCT .SH .SHA .SHB .SHS .SHTM* .SIS .SPL .SWF .SYS .TLB .TMP .TSP .TTF .URL .VB? .VCS .VLM .VXD .VXO .WIZ .WLL .WMD .WMF .WMS .WMZ .WPC .WSC .WSF .WSH .WWK .XL? .XML .ZIP
  - Unpack runtime compressed files
  - Actions: ask the user
  - Heuristic: MACRO , WIN32 MEDIUM
  - Logfile report level 1
  02/08/2008,19:16:48 Update process started!
  02/08/2008,19:16:58 Current Engine Version: 8.1.1.15
  02/08/2008,19:16:58 Current Pattern File: 7.0.5.205
  02/08/2008,19:17:02 [CONFIG] On-Access configuration used:
  - Files to scan: scan files from local drives
  - Device mode: scan files on open, scan files on close
  - Only scan files with one of the following extensions: . .386 .?HT* .ACM .ADE .ADP .ANI .APP .ASD .ASF .ASP .ASX .AWX .AX .BAS .BAT .BIN .BOO .CDF .CHM .CLASS .CMD .CNV .COM .CPL .CRT .CSH .DLL .DLO .DO? .DRV .EMF .EML .EXE* .FLT .FOT .HLP .HT* .INF .INI .INS .ISP .J2K .JAR .JFF .JFI .JFIF .JIF .JMH .JNG .JP2 .JPE .JPEG .JPG .JS* .JSE .LNK .LSP .MD? .MDB .MOD .MS? .NWS .OBJ .OCX .OLB .OSD .OV? .PCD .PDF .PDR .PGM .PHP .PIF .PKG .PL* .PNG .POT .PPS .PPT .PRG .RAR .REG .RPL .RTF .SBF .SCR .SCRIPT .SCT .SH .SHA .SHB .SHS .SHTM* .SIS .SPL .SWF .SYS .TLB .TMP .TSP .TTF .URL .VB? .VCS .VLM .VXD .VXO .WIZ .WLL .WMD .WMF .WMS .WMZ .WPC .WSC .WSF .WSH .WWK .XL? .XML .ZIP
  - Unpack runtime compressed files
  - Actions: ask the user
  - Heuristic: MACRO , WIN32 MEDIUM
  - Logfile report level 1
  02/08/2008,22:44:10 Avira AntiVir Personal - Free Antivirus service has been stopped!
  03/08/2008,11:17:21 ---------------------------------------------------------
  03/08/2008,11:18:28 Keyfile contains a valid license. The Avira AntiVir Personal - Free Antivirus will run as a fully functional version!
  03/08/2008,11:18:28 AntiVir Guard version: 8.00.01.26,engine version 8.1.1.15,VDF version: 7.0.5.205
  03/08/2008,11:18:31 AntiVir Guard was enabled.
  03/08/2008,11:18:31 Avira AntiVir Personal - Free Antivirus has
  
  0
Vous n’avez pas trouvé la réponse que vous recherchez ?
Posez votre question
Réponse 5 / 5
zorinho Messages postés 829 Statut Membre 51

Heu, tu es sûr qu'antivir est toujours actif???

lu dans ton rapport
02/08/2008,22:44:10 Avira AntiVir Personal - Free Antivirus service has been stopped!

Il serait souhaitable que désisntalles cette version d'antivir pour la réinstaller.
http://www.commentcamarche.net/telecharger/telecharger 55 antivir personal

qu'en dis-tu???
0
1. jchristophe66 Messages postés 87 Statut Membre 1
  
  j'ai desinstalle antivir et je l'ai reinstalle je vais le faire scaner mais je pense qu'il etait actif car c'est lui qui a detecte le trojan. Le truc peut etre c'est que le soir j étteind mon routeur c'est peut etre ca les message non on va bien voir merci encore
  @ plus
  
  0
2. jchristophe66 Messages postés 87 Statut Membre 1
  
  voici le scan de antivir
  
  Avira AntiVir Personal
  Report file date: lundi 11 août 2008 16:49
  
  Scanning for 1546443 virus strains and unwanted programs.
  
  Licensed to: Avira AntiVir PersonalEdition Classic
  Serial number: 0000149996-ADJIE-0001
  Platform: Windows XP
  Windows version: (Service Pack 2) [5.1.2600]
  Boot mode: Normally booted
  Username: SYSTEM
  Computer name: MIKULSKY
  
  Version information:
  BUILD.DAT : 8.1.0.326 16933 Bytes 11/07/2008 12:57:00
  AVSCAN.EXE : 8.1.4.7 315649 Bytes 26/06/2008 08:57:53
  AVSCAN.DLL : 8.1.4.0 40705 Bytes 26/05/2008 07:56:40
  LUKE.DLL : 8.1.4.5 164097 Bytes 12/06/2008 12:44:19
  LUKERES.DLL : 8.1.4.0 12033 Bytes 26/05/2008 07:58:52
  ANTIVIR0.VDF : 6.40.0.0 11030528 Bytes 18/07/2007 10:33:34
  ANTIVIR1.VDF : 7.0.5.1 8182784 Bytes 24/06/2008 13:54:15
  ANTIVIR2.VDF : 7.0.5.207 2316800 Bytes 04/08/2008 14:31:55
  ANTIVIR3.VDF : 7.0.5.239 220672 Bytes 11/08/2008 14:31:56
  Engineversion : 8.1.1.19
  AEVDF.DLL : 8.1.0.5 102772 Bytes 09/07/2008 08:46:50
  AESCRIPT.DLL : 8.1.0.63 311673 Bytes 11/08/2008 14:32:03
  AESCN.DLL : 8.1.0.23 119156 Bytes 11/08/2008 14:32:03
  AERDL.DLL : 8.1.0.20 418165 Bytes 09/07/2008 08:46:50
  AEPACK.DLL : 8.1.2.1 364917 Bytes 11/08/2008 14:32:02
  AEOFFICE.DLL : 8.1.0.21 192891 Bytes 11/08/2008 14:32:01
  AEHEUR.DLL : 8.1.0.47 1368437 Bytes 11/08/2008 14:32:01
  AEHELP.DLL : 8.1.0.15 115063 Bytes 09/07/2008 08:46:50
  AEGEN.DLL : 8.1.0.35 315764 Bytes 11/08/2008 14:31:59
  AEEMU.DLL : 8.1.0.7 430452 Bytes 11/08/2008 14:31:58
  AECORE.DLL : 8.1.1.8 172406 Bytes 11/08/2008 14:31:57
  AEBB.DLL : 8.1.0.1 53617 Bytes 24/04/2008 08:50:42
  AVWINLL.DLL : 1.0.0.12 15105 Bytes 09/07/2008 08:40:05
  AVPREF.DLL : 8.0.2.0 38657 Bytes 16/05/2008 09:28:01
  AVREP.DLL : 8.0.0.2 98344 Bytes 11/08/2008 14:31:57
  AVREG.DLL : 8.0.0.1 33537 Bytes 09/05/2008 11:26:40
  AVARKT.DLL : 1.0.0.23 307457 Bytes 12/02/2008 08:29:23
  AVEVTLOG.DLL : 8.0.0.16 119041 Bytes 12/06/2008 12:27:49
  SQLITE3.DLL : 3.3.17.1 339968 Bytes 22/01/2008 17:28:02
  SMTPLIB.DLL : 1.2.0.23 28929 Bytes 12/06/2008 12:49:40
  NETNT.DLL : 8.0.0.1 7937 Bytes 25/01/2008 12:05:10
  RCIMAGE.DLL : 8.0.0.51 2371841 Bytes 12/06/2008 13:48:07
  RCTEXT.DLL : 8.0.52.0 86273 Bytes 27/06/2008 13:34:37
  
  Configuration settings for the scan:
  Jobname..........................: Complete system scan
  Configuration file...............: c:\program files\avira\antivir personaledition classic\sysscan.avp
  Logging..........................: low
  Primary action...................: interactive
  Secondary action.................: ignore
  Scan master boot sector..........: on
  Scan boot sector.................: on
  Boot sectors.....................: C:,
  Process scan.....................: on
  Scan registry....................: on
  Search for rootkits..............: off
  Scan all files...................: Intelligent file selection
  Scan archives....................: on
  Recursion depth..................: 20
  Smart extensions.................: on
  Macro heuristic..................: on
  File heuristic...................: medium
  
  Start of the scan: lundi 11 août 2008 16:49
  
  The scan of running processes will be started
  Scan process 'avscan.exe' - '1' Module(s) have been scanned
  Scan process 'avcenter.exe' - '1' Module(s) have been scanned
  Scan process 'avgnt.exe' - '1' Module(s) have been scanned
  Scan process 'avguard.exe' - '1' Module(s) have been scanned
  Scan process 'sched.exe' - '1' Module(s) have been scanned
  Scan process 'usnsvc.exe' - '1' Module(s) have been scanned
  Scan process 'svchost.exe' - '1' Module(s) have been scanned
  Scan process 'alg.exe' - '1' Module(s) have been scanned
  Scan process 'lanceur.exe' - '1' Module(s) have been scanned
  Scan process 'msnmsgr.exe' - '1' Module(s) have been scanned
  Scan process 'ctfmon.exe' - '1' Module(s) have been scanned
  Scan process 'PCMService.exe' - '1' Module(s) have been scanned
  Scan process 'SOUNDMAN.EXE' - '1' Module(s) have been scanned
  Scan process 'realsched.exe' - '1' Module(s) have been scanned
  Scan process 'svchost.exe' - '1' Module(s) have been scanned
  Scan process 'slserv.exe' - '1' Module(s) have been scanned
  Scan process 'HPZipm12.exe' - '1' Module(s) have been scanned
  Scan process 'nvsvc32.exe' - '1' Module(s) have been scanned
  Scan process 'mdm.exe' - '1' Module(s) have been scanned
  Scan process 'CDANTSRV.EXE' - '1' Module(s) have been scanned
  Scan process 'AppleMobileDeviceService.exe' - '1' Module(s) have been scanned
  Scan process 'AOLacsd.exe' - '1' Module(s) have been scanned
  Scan process 'explorer.exe' - '1' Module(s) have been scanned
  Scan process 'spoolsv.exe' - '1' Module(s) have been scanned
  Scan process 'svchost.exe' - '1' Module(s) have been scanned
  Scan process 'svchost.exe' - '1' Module(s) have been scanned
  Scan process 'svchost.exe' - '1' Module(s) have been scanned
  Scan process 'svchost.exe' - '1' Module(s) have been scanned
  Scan process 'svchost.exe' - '1' Module(s) have been scanned
  Scan process 'lsass.exe' - '1' Module(s) have been scanned
  Scan process 'services.exe' - '1' Module(s) have been scanned
  Scan process 'winlogon.exe' - '1' Module(s) have been scanned
  Scan process 'csrss.exe' - '1' Module(s) have been scanned
  Scan process 'smss.exe' - '1' Module(s) have been scanned
  34 processes with 34 modules were scanned
  
  Starting master boot sector scan:
  Master boot sector HD0
  [INFO] No virus was found!
  Master boot sector HD1
  [INFO] No virus was found!
  [WARNING] System error [21]: Le périphérique n'est pas prêt.
  Master boot sector HD2
  [INFO] No virus was found!
  [WARNING] System error [21]: Le périphérique n'est pas prêt.
  Master boot sector HD3
  [INFO] No virus was found!
  [WARNING] System error [21]: Le périphérique n'est pas prêt.
  Master boot sector HD4
  [INFO] No virus was found!
  [WARNING] System error [21]: Le périphérique n'est pas prêt.
  Master boot sector HD5
  [INFO] No virus was found!
  [WARNING] System error [21]: Le périphérique n'est pas prêt.
  
  Start scanning boot sectors:
  Boot sector 'C:\'
  [INFO] No virus was found!
  
  Starting to scan the registry.
  The registry was scanned ( '47' files ).
  
  Starting the file scan:
  
  Begin scan in 'C:\' <HDD>
  C:\hiberfil.sys
  [WARNING] The file could not be opened!
  C:\pagefile.sys
  [WARNING] The file could not be opened!
  C:\Documents and Settings\PEAU DE CHACAL\Bureau\install_antivirworkstationwinuenhp.exe(2).exe
  [DETECTION] Contains a recognition pattern of the (harmful) BDS/Small.fft back-door program
  [NOTE] The file was moved to '491352c3.qua'!
  C:\Documents and Settings\PEAU DE CHACAL\Bureau\install_antivirworkstationwinuenhp.exe(3).exe
  [DETECTION] Contains a recognition pattern of the (harmful) BDS/Small.fft back-door program
  [NOTE] The file was moved to '491352cb.qua'!
  C:\Documents and Settings\PEAU DE CHACAL\Local Settings\Application Data\Mozilla\Firefox\Profiles\x9bg4dqi.default\Cache\9F96A864d01
  [DETECTION] Contains a recognition pattern of the (harmful) BDS/Small.fft back-door program
  [NOTE] The file was moved to '48d95894.qua'!
  C:\Program Files\Fichiers communs\Real\GToolbar\GoogleToolbarInstaller.exe
  [DETECTION] Is the TR/Dldr.Agent.aaar Trojan
  [NOTE] The file was moved to '490f5c57.qua'!
  C:\Program Files\Real\RealArcade\GoogleToolbarInstaller.exe
  [DETECTION] Is the TR/Dldr.Agent.aaar Trojan
  [NOTE] The file was moved to '490f5ef3.qua'!
  C:\System Volume Information\_restore{751238CC-FEB5-4605-9EA9-B441EBD3D66D}\RP180\A0038813.exe
  [DETECTION] Contains a recognition pattern of the (harmful) BDS/Small.fft back-door program
  [NOTE] The file was moved to '48d0613b.qua'!
  C:\System Volume Information\_restore{751238CC-FEB5-4605-9EA9-B441EBD3D66D}\RP180\A0038814.exe
  [DETECTION] Contains a recognition pattern of the (harmful) BDS/Small.fft back-door program
  [NOTE] The file was moved to '48d0613f.qua'!
  C:\System Volume Information\_restore{751238CC-FEB5-4605-9EA9-B441EBD3D66D}\RP180\A0038815.exe
  [DETECTION] Contains a recognition pattern of the (harmful) BDS/Small.fft back-door program
  [NOTE] The file was deleted!
  C:\System Volume Information\_restore{751238CC-FEB5-4605-9EA9-B441EBD3D66D}\RP180\A0038816.exe
  [DETECTION] Is the TR/Dldr.Agent.aaar Trojan
  [NOTE] The file was moved to '48d0614a.qua'!
  C:\System Volume Information\_restore{751238CC-FEB5-4605-9EA9-B441EBD3D66D}\RP180\A0038817.exe
  [DETECTION] Is the TR/Dldr.Agent.aaar Trojan
  [NOTE] The file was moved to '48d0614d.qua'!
  
  End of the scan: lundi 11 août 2008 18:07
  Used time: 1:18:21 Hour(s)
  
  The scan has been done completely.
  
  8832 Scanning directories
  325415 Files were scanned
  10 viruses and/or unwanted programs were found
  0 Files were classified as suspicious:
  1 files were deleted
  0 files were repaired
  9 files were moved to quarantine
  0 files were renamed
  2 Files cannot be scanned
  325403 Files not concerned
  7080 Archives were scanned
  7 Warnings
  10 Notes
  
  0

Infecter par trojan Drop.Age

5 réponses

Discussions similaires

Newsletters