Norman Malware Cleaner v2.03.03 Copyright © 1990 - 2011, Norman ASA. Norman Scanner Engine Version: 6.07.13 nvcbin.def: Version: 6.07.00, Date: 2012/02/21 11:39:14, Variants: 14242179 nvcmacro.def: Version: 6.07.00, Date: 2011/02/01 15:21:31, Variants: 20465 Operating System: Windows XP Dodatek Service Pack 3 Switches: /iagree Scan started: 2012/02/21 17:29:12 Running pre-scan cleanup routine... Potentially unwanted registry value: 'HKCR\.scr --> (null) = AutoCADScriptFile' Modify registry value: HKCR\.scr --> (Default) from 'AutoCADScriptFile' to 'scrfile' Cleaning successful Number of malicious objects found: 1 Number of malicious objects cleaned: 1 Scanning time: 0s Scanning system for active rootkit activity... Number of malicious objects found: 0 Number of malicious objects cleaned: 0 Number of malicious files found: 0 Number of malicious files cleaned: 0 Scanning time: 0s Scanning running processes and process memory... C:\WINDOWS\System32\smss.exe: Process infected with W32/ZAccess.R C:\WINDOWS\System32\smss.exe: File infected with W32/ZAccess.R Delete file: C:\WINDOWS\System32\smss.exe Cleaning operation failed (Error code: 0x00000005) Delete file on reboot: C:\WINDOWS\System32\smss.exe Cleaning successful Number of objects found: 1072 Number of objects scanned: 1072 Number of objects not scanned: 0 Number of malicious memory objects found: 1 Number of malicious objects cleaned: 1 Number of malicious files found: 1 Number of malicious files cleaned: 1 Scanning time: 48s Scanning system for FakeAV... Number of malicious objects found: 0 Number of malicious objects cleaned: 0 Number of malicious files found: 0 Number of malicious files cleaned: 0 Scanning time: 0s Running full scan... C:\Documents and Settings\All Users\Dane aplikacji\Microsoft\Microsoft Antimalware\IMpServiceEDB4FA23-53B8-4AFA-8C5D-99752CCA7094.lock: Error opening file for read: 0x00000020 C:\Documents and Settings\All Users\Dane aplikacji\Microsoft\Microsoft Antimalware\Scans\History\CacheManager\MpScanCache-0.bin: Error opening file for read: 0x00000020 C:\Documents and Settings\All Users\Dane aplikacji\Microsoft\Microsoft Antimalware\Scans\MpDiag.bin: Error opening file for read: 0x00000020 C:\Documents and Settings\LocalService\NTUSER.DAT: Error opening file for read: 0x00000020 C:\Documents and Settings\LocalService\ntuser.dat.LOG: Error opening file for read: 0x00000020 C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\Microsoft\Windows\UsrClass.dat: Error opening file for read: 0x00000020 C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\Microsoft\Windows\UsrClass.dat.LOG: Error opening file for read: 0x00000020 C:\Documents and Settings\NetworkService\NTUSER.DAT: Error opening file for read: 0x00000020 C:\Documents and Settings\NetworkService\ntuser.dat.LOG: Error opening file for read: 0x00000020 C:\Documents and Settings\NetworkService\Ustawienia lokalne\Dane aplikacji\Microsoft\Windows\UsrClass.dat: Error opening file for read: 0x00000020 C:\Documents and Settings\NetworkService\Ustawienia lokalne\Dane aplikacji\Microsoft\Windows\UsrClass.dat.LOG: Error opening file for read: 0x00000020 C:\Documents and Settings\Pc\NTUSER.DAT: Error opening file for read: 0x00000020 C:\Documents and Settings\Pc\ntuser.dat.LOG: Error opening file for read: 0x00000020 C:\Documents and Settings\Pc\Ustawienia lokalne\Dane aplikacji\Microsoft\Windows\UsrClass.dat: Error opening file for read: 0x00000020 C:\Documents and Settings\Pc\Ustawienia lokalne\Dane aplikacji\Microsoft\Windows\UsrClass.dat.LOG: Error opening file for read: 0x00000020 C:\Documents and Settings\Pc\Ustawienia lokalne\Dane aplikacji\Opera\Opera\cache\g_006B\opr03GCI.tmp/file0: I/O error scanning file: 0x00000026 C:\Documents and Settings\Pc\Ustawienia lokalne\Temporary Internet Files\Content.IE5\07ONJ37F\kontakt[1].htm: File infected with Redirector.D C:\Documents and Settings\Pc\Ustawienia lokalne\Temporary Internet Files\Content.IE5\07ONJ37F\kadra[1].htm: File infected with Redirector.D Delete file: C:\Documents and Settings\Pc\Ustawienia lokalne\Temporary Internet Files\Content.IE5\07ONJ37F\kontakt[1].htm Cleaning successful Delete file: C:\Documents and Settings\Pc\Ustawienia lokalne\Temporary Internet Files\Content.IE5\07ONJ37F\kadra[1].htm Cleaning successful C:\Documents and Settings\Pc\Ustawienia lokalne\Temporary Internet Files\Content.IE5\07ONJ37F\patron[1].htm: File infected with Redirector.D Delete file: C:\Documents and Settings\Pc\Ustawienia lokalne\Temporary Internet Files\Content.IE5\07ONJ37F\patron[1].htm Cleaning successful C:\Documents and Settings\Pc\Ustawienia lokalne\Temporary Internet Files\Content.IE5\0B09VRFF\191[1]: Error opening file for read: 0x00000005 C:\System Volume Information\_restore{7EBAB578-AA22-4E97-B04E-AA3D3E6E36CE}\RP713\A0208746.sys: Error opening file for read: 0x00000005 C:\System Volume Information\_restore{7EBAB578-AA22-4E97-B04E-AA3D3E6E36CE}\RP713\A0208769.sys: Error opening file for read: 0x00000005 C:\System Volume Information\_restore{7EBAB578-AA22-4E97-B04E-AA3D3E6E36CE}\RP714\A0208804.sys: Error opening file for read: 0x00000005 C:\WINDOWS\system32\CatRoot2\edb.log: Error opening file for read: 0x00000020 C:\WINDOWS\system32\CatRoot2\tmp.edb: Error opening file for read: 0x00000020 C:\WINDOWS\system32\CatRoot2\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}\catdb: Error opening file for read: 0x00000020 C:\WINDOWS\system32\CatRoot2\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\catdb: Error opening file for read: 0x00000020 C:\WINDOWS\system32\config\default: Error opening file for read: 0x00000020 C:\WINDOWS\system32\config\default.LOG: Error opening file for read: 0x00000020 C:\WINDOWS\system32\config\SAM: Error opening file for read: 0x00000020 C:\WINDOWS\system32\config\SECURITY: Error opening file for read: 0x00000020 C:\WINDOWS\system32\config\SAM.LOG: Error opening file for read: 0x00000020 C:\WINDOWS\system32\config\SECURITY.LOG: Error opening file for read: 0x00000020 C:\WINDOWS\system32\config\software: Error opening file for read: 0x00000020 C:\WINDOWS\system32\config\system: Error opening file for read: 0x00000020 C:\WINDOWS\system32\config\software.LOG: Error opening file for read: 0x00000020 C:\WINDOWS\system32\config\system.LOG: Error opening file for read: 0x00000020 C:\WINDOWS\system32\drivers\sptd.sys: Error opening file for read: 0x00000020 C:\WINDOWS\system32\s217unic.dll: File infected with W32/Troj_Generic.UUZF Delete file: C:\WINDOWS\system32\s217unic.dll Cleaning operation failed (Error code: 0x00000005) Delete file on reboot: C:\WINDOWS\system32\s217unic.dll Cleaning successful C:\WINDOWS\Temp\Perflib_Perfdata_4f0.dat: Error opening file for read: 0x00000020 Number of files found: 79195 Number of archives unpacked: 3768 Number of objects found: 349034 Number of objects scanned: 348998 Number of objects not scanned: 36 Number of malicious objects found: 4 Number of malicious objects cleaned: 4 Number of malicious files found: 4 Number of malicious files cleaned: 4 Scanning time: 1h 49m 25s Scan aborted by user Results: Total number of files found: 79195 Total number of archives unpacked: 3768 Total number of objects found: 350106 Total number of objects scanned: 350070 Total number of objects not scanned: 36 Total number of malicious objects found: 6 Total number of malicious objects cleaned: 6 Total number of malicious files found: 5 Total number of malicious files cleaned: 5 Total number of objects quarantined: 6 Total scanning time: 1h 50m 13s