Avira Free Antivirus Report file date: 27 maja 2012 23:36 Scanning for 3750486 virus strains and unwanted programs. The program is running as an unrestricted full version. Online services are available. Licensee : Avira AntiVir Personal - Free Antivirus Serial number : 0000149996-ADJIE-0000001 Platform : Windows Vista (TM) Home Premium Windows version : (Service Pack 2) [6.0.6002] Boot mode : Normally booted Username : SYSTEM Computer name : ROBERT-PC Version information: BUILD.DAT : 12.0.0.1125 41829 Bytes 2012-05-02 17:40:00 AVSCAN.EXE : 12.3.0.15 466896 Bytes 2012-05-08 17:15:06 AVSCAN.DLL : 12.3.0.15 54736 Bytes 2012-05-08 17:15:06 LUKE.DLL : 12.3.0.15 68304 Bytes 2012-05-08 17:15:12 AVSCPLR.DLL : 12.3.0.14 97032 Bytes 2012-05-08 17:15:14 AVREG.DLL : 12.3.0.17 232200 Bytes 2012-05-11 16:36:27 VBASE000.VDF : 7.10.0.0 19875328 Bytes 2009-11-06 18:18:34 VBASE001.VDF : 7.11.0.0 13342208 Bytes 2010-12-14 09:07:39 VBASE002.VDF : 7.11.19.170 14374912 Bytes 2011-12-20 09:46:24 VBASE003.VDF : 7.11.21.238 4472832 Bytes 2012-02-01 17:49:08 VBASE004.VDF : 7.11.26.44 4329472 Bytes 2012-03-28 18:27:04 VBASE005.VDF : 7.11.29.136 2166272 Bytes 2012-05-10 16:36:08 VBASE006.VDF : 7.11.29.137 2048 Bytes 2012-05-10 16:36:08 VBASE007.VDF : 7.11.29.138 2048 Bytes 2012-05-10 16:36:08 VBASE008.VDF : 7.11.29.139 2048 Bytes 2012-05-10 16:36:08 VBASE009.VDF : 7.11.29.140 2048 Bytes 2012-05-10 16:36:08 VBASE010.VDF : 7.11.29.141 2048 Bytes 2012-05-10 16:36:08 VBASE011.VDF : 7.11.29.142 2048 Bytes 2012-05-10 16:36:08 VBASE012.VDF : 7.11.29.143 2048 Bytes 2012-05-10 16:36:08 VBASE013.VDF : 7.11.29.144 2048 Bytes 2012-05-10 16:36:08 VBASE014.VDF : 7.11.30.3 198144 Bytes 2012-05-14 18:26:09 VBASE015.VDF : 7.11.30.69 186368 Bytes 2012-05-17 10:00:35 VBASE016.VDF : 7.11.30.143 223744 Bytes 2012-05-21 19:56:57 VBASE017.VDF : 7.11.30.207 287744 Bytes 2012-05-23 19:02:14 VBASE018.VDF : 7.11.30.208 2048 Bytes 2012-05-23 19:02:15 VBASE019.VDF : 7.11.30.209 2048 Bytes 2012-05-23 19:02:15 VBASE020.VDF : 7.11.30.210 2048 Bytes 2012-05-23 19:02:15 VBASE021.VDF : 7.11.30.211 2048 Bytes 2012-05-23 19:02:15 VBASE022.VDF : 7.11.30.212 2048 Bytes 2012-05-23 19:02:15 VBASE023.VDF : 7.11.30.213 2048 Bytes 2012-05-23 19:02:15 VBASE024.VDF : 7.11.30.214 2048 Bytes 2012-05-23 19:02:16 VBASE025.VDF : 7.11.30.215 2048 Bytes 2012-05-23 19:02:16 VBASE026.VDF : 7.11.30.216 2048 Bytes 2012-05-23 19:02:16 VBASE027.VDF : 7.11.30.217 2048 Bytes 2012-05-23 19:02:16 VBASE028.VDF : 7.11.30.218 2048 Bytes 2012-05-23 19:02:16 VBASE029.VDF : 7.11.30.219 2048 Bytes 2012-05-23 19:02:17 VBASE030.VDF : 7.11.30.220 2048 Bytes 2012-05-23 19:02:17 VBASE031.VDF : 7.11.31.32 118272 Bytes 2012-05-26 11:25:18 Engine version : 8.2.10.68 AEVDF.DLL : 8.1.2.2 106868 Bytes 2011-10-25 18:36:30 AESCRIPT.DLL : 8.1.4.19 455034 Bytes 2012-05-11 16:36:26 AESCN.DLL : 8.1.8.2 131444 Bytes 2012-01-29 17:32:16 AESBX.DLL : 8.2.5.5 606579 Bytes 2012-03-12 18:18:55 AERDL.DLL : 8.1.9.15 639348 Bytes 2011-09-08 21:16:06 AEPACK.DLL : 8.2.16.13 807287 Bytes 2012-05-11 16:36:25 AEOFFICE.DLL : 8.1.2.28 201082 Bytes 2012-04-27 17:09:21 AEHEUR.DLL : 8.1.4.28 4800886 Bytes 2012-05-18 10:00:52 AEHELP.DLL : 8.1.21.0 254326 Bytes 2012-05-11 16:36:11 AEGEN.DLL : 8.1.5.28 422260 Bytes 2012-04-27 17:09:07 AEEXP.DLL : 8.1.0.40 82292 Bytes 2012-05-18 10:00:52 AEEMU.DLL : 8.1.3.0 393589 Bytes 2011-09-01 21:46:01 AECORE.DLL : 8.1.25.6 201078 Bytes 2012-03-15 20:02:19 AEBB.DLL : 8.1.1.0 53618 Bytes 2011-09-01 21:46:01 AVWINLL.DLL : 12.3.0.15 27344 Bytes 2012-05-08 17:15:05 AVPREF.DLL : 12.3.0.15 51920 Bytes 2012-05-08 17:15:06 AVREP.DLL : 12.3.0.15 179208 Bytes 2012-05-08 17:15:14 AVARKT.DLL : 12.3.0.15 211408 Bytes 2012-05-08 17:15:05 AVEVTLOG.DLL : 12.3.0.15 169168 Bytes 2012-05-08 17:15:06 SQLITE3.DLL : 3.7.0.1 398288 Bytes 2012-05-08 17:15:13 AVSMTP.DLL : 12.3.0.15 63440 Bytes 2012-05-08 17:15:06 NETNT.DLL : 12.3.0.15 17104 Bytes 2012-05-08 17:15:12 RCIMAGE.DLL : 12.3.0.15 4450000 Bytes 2012-05-08 17:15:05 RCTEXT.DLL : 12.3.0.15 96720 Bytes 2012-05-08 17:15:05 Configuration settings for the scan: Jobname.............................: Complete system scan Configuration file..................: C:\program files\avira\antivir desktop\sysscan.avp Logging.............................: default Primary action......................: Interactive Secondary action....................: Ignore Scan master boot sector.............: on Scan boot sector....................: on Boot sectors........................: C:, D:, Process scan........................: on Extended process scan...............: on Scan registry.......................: on Search for rootkits.................: on Integrity checking of system files..: on Optimised scan......................: on Scan all files......................: All files Scan archives.......................: on Recursion depth.....................: 20 Smart extensions....................: on Macro heuristic.....................: on File heuristic......................: extended Deviating risk categories...........: +APPL,+GAME,+JOKE,+PCK,+PFS,+SPR, Start of the scan: 27 maja 2012 23:36 Starting master boot sector scan: Master boot sector HD0 [INFO] No virus was found! Start scanning boot sectors: Boot sector 'C:\' [INFO] No virus was found! Boot sector 'D:\' [INFO] No virus was found! Starting search for hidden objects. The scan of running processes will be started Scan process 'ssText3d.scr' - '35' Module(s) have been scanned Scan process 'svchost.exe' - '36' Module(s) have been scanned Scan process 'vssvc.exe' - '49' Module(s) have been scanned Scan process 'avscan.exe' - '81' Module(s) have been scanned Scan process 'avscan.exe' - '29' Module(s) have been scanned Scan process 'avcenter.exe' - '67' Module(s) have been scanned Scan process 'taskeng.exe' - '39' Module(s) have been scanned Scan process 'svchost.exe' - '21' Module(s) have been scanned Scan process 'CCC.exe' - '150' Module(s) have been scanned Scan process 'CFSwMgr.exe' - '72' Module(s) have been scanned Scan process 'Apntex.exe' - '16' Module(s) have been scanned Scan process 'ehmsas.exe' - '22' Module(s) have been scanned Scan process 'ApMsgFwd.exe' - '16' Module(s) have been scanned Scan process 'MOM.EXE' - '59' Module(s) have been scanned Scan process 'avshadow.exe' - '33' Module(s) have been scanned Scan process 'SearchIndexer.exe' - '63' Module(s) have been scanned Scan process 'svchost.exe' - '11' Module(s) have been scanned Scan process 'ULCDRSvr.exe' - '5' Module(s) have been scanned Scan process 'TosBtSrv.exe' - '24' Module(s) have been scanned Scan process 'TosCoSrv.exe' - '26' Module(s) have been scanned Scan process 'TODDSrv.exe' - '23' Module(s) have been scanned Scan process 'TNaviSrv.exe' - '5' Module(s) have been scanned Scan process 'GoogleToolbarNotifier.exe' - '70' Module(s) have been scanned Scan process 'sidebar.exe' - '97' Module(s) have been scanned Scan process 'swupdtmr.exe' - '13' Module(s) have been scanned Scan process 'ehtray.exe' - '29' Module(s) have been scanned Scan process 'TOSCDSPD.exe' - '16' Module(s) have been scanned Scan process 'svchost.exe' - '44' Module(s) have been scanned Scan process 'svchost.exe' - '42' Module(s) have been scanned Scan process 'jusched.exe' - '69' Module(s) have been scanned Scan process 'avgnt.exe' - '69' Module(s) have been scanned Scan process 'GrooveMonitor.exe' - '41' Module(s) have been scanned Scan process 'pinger.exe' - '57' Module(s) have been scanned Scan process 'TCrdMain.exe' - '98' Module(s) have been scanned Scan process 'SmoothView.exe' - '17' Module(s) have been scanned Scan process 'TPwrMain.exe' - '35' Module(s) have been scanned Scan process 'NDSTray.exe' - '94' Module(s) have been scanned Scan process 'RtHDVCpl.exe' - '44' Module(s) have been scanned Scan process 'MSASCui.exe' - '39' Module(s) have been scanned Scan process 'Apoint.exe' - '51' Module(s) have been scanned Scan process 'hasplms.exe' - '50' Module(s) have been scanned Scan process 'CFSvcs.exe' - '70' Module(s) have been scanned Scan process 'avguard.exe' - '66' Module(s) have been scanned Scan process 'agrsmsvc.exe' - '16' Module(s) have been scanned Scan process 'armsvc.exe' - '24' Module(s) have been scanned Scan process 'taskeng.exe' - '82' Module(s) have been scanned Scan process 'svchost.exe' - '61' Module(s) have been scanned Scan process 'Explorer.EXE' - '138' Module(s) have been scanned Scan process 'sched.exe' - '52' Module(s) have been scanned Scan process 'taskeng.exe' - '49' Module(s) have been scanned Scan process 'Dwm.exe' - '26' Module(s) have been scanned Scan process 'spoolsv.exe' - '88' Module(s) have been scanned Scan process 'svchost.exe' - '101' Module(s) have been scanned Scan process 'Ati2evxx.exe' - '31' Module(s) have been scanned Scan process 'svchost.exe' - '82' Module(s) have been scanned Scan process 'SLsvc.exe' - '23' Module(s) have been scanned Scan process 'svchost.exe' - '37' Module(s) have been scanned Scan process 'svchost.exe' - '157' Module(s) have been scanned Scan process 'svchost.exe' - '114' Module(s) have been scanned Scan process 'svchost.exe' - '64' Module(s) have been scanned Scan process 'Ati2evxx.exe' - '28' Module(s) have been scanned Scan process 'svchost.exe' - '48' Module(s) have been scanned Scan process 'PresentationFontCache.exe' - '30' Module(s) have been scanned Scan process 'svchost.exe' - '39' Module(s) have been scanned Scan process 'svchost.exe' - '40' Module(s) have been scanned Scan process 'winlogon.exe' - '31' Module(s) have been scanned Scan process 'lsm.exe' - '32' Module(s) have been scanned Scan process 'lsass.exe' - '60' Module(s) have been scanned Scan process 'services.exe' - '33' Module(s) have been scanned Scan process 'csrss.exe' - '14' Module(s) have been scanned Scan process 'wininit.exe' - '26' Module(s) have been scanned Scan process 'csrss.exe' - '14' Module(s) have been scanned Scan process 'smss.exe' - '2' Module(s) have been scanned Initiating scan of system files: Signed -> 'C:\Windows\system32\svchost.exe' Signed -> 'C:\Windows\system32\winlogon.exe' Signed -> 'C:\Windows\explorer.exe' Signed -> 'C:\Windows\system32\smss.exe' Signed -> 'C:\Windows\system32\wininet.DLL' Signed -> 'C:\Windows\system32\wsock32.DLL' Signed -> 'C:\Windows\system32\ws2_32.DLL' Signed -> 'C:\Windows\system32\services.exe' Signed -> 'C:\Windows\system32\lsass.exe' Signed -> 'C:\Windows\system32\csrss.exe' Signed -> 'C:\Windows\system32\drivers\kbdclass.sys' Signed -> 'C:\Windows\system32\spoolsv.exe' Signed -> 'C:\Windows\system32\alg.exe' Signed -> 'C:\Windows\system32\wuauclt.exe' Signed -> 'C:\Windows\system32\advapi32.DLL' Signed -> 'C:\Windows\system32\user32.DLL' Signed -> 'C:\Windows\system32\gdi32.DLL' Signed -> 'C:\Windows\system32\kernel32.DLL' Signed -> 'C:\Windows\system32\ntdll.DLL' Signed -> 'C:\Windows\system32\ntoskrnl.exe' Signed -> 'C:\Windows\system32\ctfmon.exe' The system files were scanned ('21' files) Starting to scan executable files (registry). The registry was scanned ( '4497' files ). Starting the file scan: Begin scan in 'C:\' C:\Program Files\TOSHIBA Games\TOSHIBA Media Center Game Console\Uninstall.exe [WARNING] Invalid end of file C:\Users\Robert\AppData\Local\Microsoft\Windows\cadfvfsfv\Low\Content.IE5\KLONE65W\install_flashplayer11x32ax_gtbp_chrd_aih[1].exe [WARNING] The file is password protected C:\Users\Robert\AppData\Roaming\OpenFM\CacheDir\HttpPartialResponses\12d680c7358ab7132bcfec35387caeaffbd590aa\.content.bin [WARNING] Invalid end of file C:\Users\Robert\AppData\Roaming\SUPERAntiSpyware.com\SUPERAntiSpyware\Quarantine\Quarantine - 02-19-2011 - 14-17-48.SBU [WARNING] The file is password protected C:\Users\Robert\AppData\Roaming\SUPERAntiSpyware.com\SUPERAntiSpyware\Quarantine\Quarantine - 02-28-2011 - 06-36-09.SBU [WARNING] The file is password protected C:\Users\Robert\AppData\Roaming\SUPERAntiSpyware.com\SUPERAntiSpyware\Quarantine\Quarantine - 10-11-2011 - 18-12-00.SBU [WARNING] The file is password protected C:\Users\Robert\AppData\Roaming\SUPERAntiSpyware.com\SUPERAntiSpyware\Quarantine\Quarantine - 11-12-2010 - 16-29-51.SBU [WARNING] The file is password protected C:\Windows\System32\CoreAAC-uninstall.exe [WARNING] Invalid end of file C:\WORKSSETUP\MSWORKS\REDIST\IE6\IENT_S1.CAB [WARNING] Error multiple volume C:\WORKSSETUP\MSWORKS\REDIST\IE6\IENT_S2.CAB [WARNING] Error multiple volume C:\WORKSSETUP\MSWORKS\REDIST\IE6\IENT_S3.CAB [WARNING] Error multiple volume C:\WORKSSETUP\MSWORKS\REDIST\IE6\IENT_S4.CAB [WARNING] Error multiple volume C:\WORKSSETUP\MSWORKS\REDIST\IE6\IENT_S5.CAB [WARNING] Error multiple volume C:\WORKSSETUP\MSWORKS\REDIST\IE6\IE_S1.CAB [WARNING] Error multiple volume C:\WORKSSETUP\MSWORKS\REDIST\IE6\IE_S2.CAB [WARNING] Error multiple volume C:\WORKSSETUP\MSWORKS\REDIST\IE6\IE_S3.CAB [WARNING] Error multiple volume C:\WORKSSETUP\MSWORKS\REDIST\IE6\IE_S4.CAB [WARNING] Error multiple volume C:\WORKSSETUP\MSWORKS\REDIST\IE6\IE_S5.CAB [WARNING] Error multiple volume Begin scan in 'D:\' D:\Geodezja\0_11003_Błonie_Podzialy\PODGiK\015-512_2011_Geomapa\DaneWektorowe_015-512_2011.ZIP [WARNING] Invalid end of file D:\INSTALKI\Awira\avira_free_antivirus_en.exe [WARNING] The file is password protected D:\INSTALKI\Inroads\iroads_v8i_XM_v8_11_05_47.part1.rar [WARNING] Error multiple volume D:\INSTALKI\Mapy_Numeryczne\ustation\uninstall.exe [WARNING] Invalid end of file D:\INSTALKI\Remuvery\ncleaner_setup\ncleaner_setup.exe [WARNING] No further files can be extracted from this archive. The archive will be closed D:\INSTALKI\Sopcast\Setup-SopCast-3.3.2-2010-12-15.exe [WARNING] Unknown compression method D:\INSTALKI\Sopcast\SopCast-3.3.2.zip [WARNING] Unknown compression method D:\Użytki\Antywirusy\RkUnhooker\uninstall.exe [WARNING] Invalid end of file D:\Użytki\uTorrent\Sciagane\Bentley.PowerCivil.v08.09.04.37.for.Powerdraft.XM-SoS\Data1.cab [WARNING] No further files can be extracted from this archive. The archive will be closed End of the scan: 28 maja 2012 01:41 Used time: 2:05:23 Hour(s) The scan has been done completely. 28606 Scanned directories 941845 Files were scanned 0 Viruses and/or unwanted programs were found 0 Files were classified as suspicious 0 Files were deleted 0 Viruses and unwanted programs were repaired 0 Files were moved to quarantine 0 Files were renamed 0 Files cannot be scanned 941845 Files not concerned 4274 Archives were scanned 27 Warnings 0 Notes 863443 Objects were scanned with rootkit scan 0 Hidden objects were found