Objects Scan: completed 5 minutes ago (events: 69, objects: 463726, time: 00:5

2:57)
6/20/14 12:59 AM
Task started
6/20/14 1:03 AM Detected: Trojan.BAT.BitCoinMiner.ah
C:/Program Files/PCDApp/
nstart.bat
6/20/14 1:04 AM Deleted: Trojan.BAT.BitCoinMiner.ah
C:/Program Files/PCDApp/
nstart.bat
6/20/14 1:07 AM Detected: Trojan.MSIL.Citron.sw C:/ProgramData/Microsoft.com
6/20/14 1:07 AM Disinfected: Trojan.MSIL.Citron.sw
HKEY_USERS\S-1-5-21-3396
818672-304709142-4233628581-1001\Software\Microsoft\Windows NT\CurrentVersion\Wi
ndows/Load
6/20/14 1:08 AM Deleted: Trojan.MSIL.Citron.sw C:/ProgramData/Microsoft.com
6/20/14 1:08 AM Detected: Trojan.MSIL.Citron.sw C:/ProgramData/Windows Services/
wservice.exe
6/20/14 1:08 AM Disinfected: Trojan.MSIL.Citron.sw
HKEY_USERS\S-1-5-21-3396
818672-304709142-4233628581-1001\Software\Microsoft\Windows\CurrentVersion\RunOn
ce/WindowsUpdate
6/20/14 1:08 AM Disinfected: Trojan.MSIL.Citron.sw
HKEY_USERS\S-1-5-21-3396
818672-304709142-4233628581-1001\Software\Microsoft\Windows NT\CurrentVersion\Wi
nlogon/Shell
6/20/14 1:08 AM Detected: not-a-virus:AdWare.Win32.Amonetize.wx C:/Users/Vladimi
r/AppData/Local/7878/a7252.exe
6/20/14 1:09 AM Detected: not-a-virus:AdWare.Win32.Amonetize.wx C:/Users/Vladimi
r/AppData/Local/7878/a7252.exe
6/20/14 1:09 AM Deleted: Trojan.MSIL.Citron.sw C:/ProgramData/Windows Services/
wservice.exe
6/20/14 1:10 AM Detected: Trojan.MSIL.Citron.sw C:/Users/Vladimir/Documents/Goog
le.com
6/20/14 1:10 AM Disinfected: not-a-virus:AdWare.Win32.Amonetize.wx
C:/Windo
ws/System32/Tasks/AmiUpdXp/C:\Users\Vladimir\AppData\Local\7878\a7252.exe
6/20/14 1:10 AM Deleted: not-a-virus:AdWare.Win32.Amonetize.wx C:/Users/Vladimi
r/AppData/Local/7878/a7252.exe
6/20/14 1:11 AM Detected: Trojan.Win32.AntiFW.b C:/Users/Vladimir/Downloads/Down
load.exe/data0005
6/20/14 1:12 AM Detected: Trojan.MSIL.Citron.sw C:/Users/Vladimir/Downloads/Comp
ressed/setup.rar/setup.exe
6/20/14 1:12 AM Untreated: Trojan.MSIL.Citron.sw
C:/Users/Vladimir/Downlo
ads/Compressed/setup.rar/setup.exe
Write not supported
6/20/14 1:12 AM Detected: HEUR:Trojan.Win32.Generic
C:/Users/Vladimir/Downlo
ads/Programs/inSSIDer-Installer-2.0.6.1208.msi/_D7D112F049BA1A655B5D9A1D0702DEE5
/data0016.res/F7SD98~1.EXE/PE_Patch/PECompact
6/20/14 1:12 AM Cannot be backed up: not-a-virus:AdWare.Win32.Amonetize.wx
C:/Users/Vladimir/AppData/Local/7878/a7252.exe
6/20/14 1:12 AM Deleted: Trojan.MSIL.Citron.sw C:/Users/Vladimir/Documents/Goog
le.com
6/20/14 1:12 AM Deleted: Trojan.Win32.AntiFW.b C:/Users/Vladimir/Downloads/Down
load.exe
6/20/14 1:12 AM Processing error
C:/Users/Vladimir/Documents/Google.com
Read error
6/20/14 1:22 AM Detected: Trojan.MSIL.Citron.sw C:/Program Files (x86)/Windows S
ervices/wservice.exe
6/20/14 1:22 AM Deleted: Trojan.MSIL.Citron.sw C:/Program Files (x86)/Windows S
ervices/wservice.exe
6/20/14 1:26 AM Detected: Trojan.MSIL.Citron.sw C:/Users/Vladimir/Downloads/Comp
ressed/setup.rar/setup.exe
6/20/14 1:26 AM Untreated: Trojan.MSIL.Citron.sw
C:/Users/Vladimir/Downlo
ads/Compressed/setup.rar/setup.exe
Write not supported
6/20/14 1:33 AM Detected: Trojan.MSIL.Citron.sw C:/Windows/SysWOW64/Google.com
6/20/14 1:34 AM Detected: Trojan.MSIL.Citron.sw C:/Windows/SysWOW64/Microsoft.co
m

6/20/14
6/20/14
Windows
6/20/14
Windows
6/20/14
Windows
6/20/14
Windows
6/20/14
Windows
6/20/14
Windows
6/20/14
Windows
6/20/14
Windows
6/20/14
Windows
6/20/14
Windows
6/20/14
Windows
6/20/14
Windows
6/20/14
Windows
6/20/14
Windows
6/20/14
Windows
6/20/14
Windows
6/20/14
Windows
6/20/14
Windows
6/20/14
Windows
6/20/14
Windows
6/20/14
Windows
6/20/14
Windows
6/20/14
Windows
6/20/14
Windows
r
6/20/14
Windows
6/20/14
Windows
6/20/14
Windows
6/20/14
Windows
6/20/14
Windows

1:34 AM Deleted: Trojan.MSIL.Citron.sw C:/Windows/SysWOW64/Google.com

1:34 AM Disinfected: Trojan.MSIL.Citron.sw
HKLM\SOFTWARE\Microsoft\
NT\CurrentVersion\Image File Execution Options\AvastSvc.exe/Debugger
1:34 AM Disinfected: Trojan.MSIL.Citron.sw
HKLM\SOFTWARE\Microsoft\
NT\CurrentVersion\Image File Execution Options\AvastUI.exe/Debugger
1:34 AM Disinfected: Trojan.MSIL.Citron.sw
HKLM\SOFTWARE\Microsoft\
NT\CurrentVersion\Image File Execution Options\avcenter.exe/Debugger
1:34 AM Disinfected: Trojan.MSIL.Citron.sw
HKLM\SOFTWARE\Microsoft\
NT\CurrentVersion\Image File Execution Options\avconfig.exe/Debugger
1:34 AM Disinfected: Trojan.MSIL.Citron.sw
HKLM\SOFTWARE\Microsoft\
NT\CurrentVersion\Image File Execution Options\avgcsrvx.exe/Debugger
1:34 AM Disinfected: Trojan.MSIL.Citron.sw
HKLM\SOFTWARE\Microsoft\
NT\CurrentVersion\Image File Execution Options\avgidsagent.exe/Debugger
1:34 AM Disinfected: Trojan.MSIL.Citron.sw
HKLM\SOFTWARE\Microsoft\
NT\CurrentVersion\Image File Execution Options\avgnt.exe/Debugger
1:34 AM Disinfected: Trojan.MSIL.Citron.sw
HKLM\SOFTWARE\Microsoft\
NT\CurrentVersion\Image File Execution Options\avgrsx.exe/Debugger
1:34 AM Disinfected: Trojan.MSIL.Citron.sw
HKLM\SOFTWARE\Microsoft\
NT\CurrentVersion\Image File Execution Options\avguard.exe/Debugger
1:34 AM Disinfected: Trojan.MSIL.Citron.sw
HKLM\SOFTWARE\Microsoft\
NT\CurrentVersion\Image File Execution Options\avgui.exe/Debugger
1:34 AM Disinfected: Trojan.MSIL.Citron.sw
HKLM\SOFTWARE\Microsoft\
NT\CurrentVersion\Image File Execution Options\avgwdsvc.exe/Debugger
1:34 AM Disinfected: Trojan.MSIL.Citron.sw
HKLM\SOFTWARE\Microsoft\
NT\CurrentVersion\Image File Execution Options\avp.exe/Debugger
1:34 AM Disinfected: Trojan.MSIL.Citron.sw
HKLM\SOFTWARE\Microsoft\
NT\CurrentVersion\Image File Execution Options\avscan.exe/Debugger
1:34 AM Disinfected: Trojan.MSIL.Citron.sw
HKLM\SOFTWARE\Microsoft\
NT\CurrentVersion\Image File Execution Options\bdagent.exe/Debugger
1:34 AM Disinfected: Trojan.MSIL.Citron.sw
HKLM\SOFTWARE\Microsoft\
NT\CurrentVersion\Image File Execution Options\ccuac.exe/Debugger
1:34 AM Disinfected: Trojan.MSIL.Citron.sw
HKLM\SOFTWARE\Microsoft\
NT\CurrentVersion\Image File Execution Options\ComboFix.exe/Debugger
1:34 AM Disinfected: Trojan.MSIL.Citron.sw
HKLM\SOFTWARE\Microsoft\
NT\CurrentVersion\Image File Execution Options\egui.exe/Debugger
1:34 AM Disinfected: Trojan.MSIL.Citron.sw
HKLM\SOFTWARE\Microsoft\
NT\CurrentVersion\Image File Execution Options\hijackthis.exe/Debugger
1:34 AM Disinfected: Trojan.MSIL.Citron.sw
HKLM\SOFTWARE\Microsoft\
NT\CurrentVersion\Image File Execution Options\instup.exe/Debugger
1:34 AM Disinfected: Trojan.MSIL.Citron.sw
HKLM\SOFTWARE\Microsoft\
NT\CurrentVersion\Image File Execution Options\keyscrambler.exe/Debugger
1:34 AM Disinfected: Trojan.MSIL.Citron.sw
HKLM\SOFTWARE\Microsoft\
NT\CurrentVersion\Image File Execution Options\mbam.exe/Debugger
1:34 AM Disinfected: Trojan.MSIL.Citron.sw
HKLM\SOFTWARE\Microsoft\
NT\CurrentVersion\Image File Execution Options\mbamgui.exe/Debugger
1:34 AM Disinfected: Trojan.MSIL.Citron.sw
HKLM\SOFTWARE\Microsoft\
NT\CurrentVersion\Image File Execution Options\mbampt.exe/Debugger
1:34 AM Disinfected: Trojan.MSIL.Citron.sw
HKLM\SOFTWARE\Microsoft\
NT\CurrentVersion\Image File Execution Options\mbamscheduler.exe/Debugge
1:34 AM Disinfected: Trojan.MSIL.Citron.sw
HKLM\SOFTWARE\Microsoft\
NT\CurrentVersion\Image File Execution Options\mbamservice.exe/Debugger
1:34 AM Disinfected: Trojan.MSIL.Citron.sw
HKLM\SOFTWARE\Microsoft\
NT\CurrentVersion\Image File Execution Options\MpCmdRun.exe/Debugger
1:34 AM Disinfected: Trojan.MSIL.Citron.sw
HKLM\SOFTWARE\Microsoft\
NT\CurrentVersion\Image File Execution Options\MSASCui.exe/Debugger
1:34 AM Disinfected: Trojan.MSIL.Citron.sw
HKLM\SOFTWARE\Microsoft\
NT\CurrentVersion\Image File Execution Options\MsMpEng.exe/Debugger
1:34 AM Disinfected: Trojan.MSIL.Citron.sw
HKLM\SOFTWARE\Microsoft\
NT\CurrentVersion\Image File Execution Options\msseces.exe/Debugger

6/20/14 1:34 AM Disinfected: Trojan.MSIL.Citron.sw

HKLM\SOFTWARE\Microsoft\
Windows NT\CurrentVersion\Image File Execution Options\rstrui.exe/Debugger
6/20/14 1:34 AM Disinfected: Trojan.MSIL.Citron.sw
HKLM\SOFTWARE\Microsoft\
Windows NT\CurrentVersion\Image File Execution Options\spybotsd.exe/Debugger
6/20/14 1:34 AM Disinfected: Trojan.MSIL.Citron.sw
HKLM\SOFTWARE\Microsoft\
Windows NT\CurrentVersion\Image File Execution Options\wireshark.exe/Debugger
6/20/14 1:34 AM Disinfected: Trojan.MSIL.Citron.sw
HKLM\SOFTWARE\Microsoft\
Windows NT\CurrentVersion\Image File Execution Options\zlclient.exe/Debugger
6/20/14 1:35 AM Deleted: Trojan.MSIL.Citron.sw C:/Windows/SysWOW64/Microsoft.co
m
6/20/14 1:50 AM Processing error
C:/Windows/Installer/528d2.msp/PATCH_CAB
Read error
6/20/14 1:50 AM Processing error
C:/Windows/Installer/2910dd96.msi/Data1.
cab/linux.iso/VMWARETO.TGZ;1/VMWARETO.tar
Read error
6/20/14 1:50 AM Processing error
C:/Windows/Installer/2910dd96.msi/Data1.
cab/linux.iso/VMWARETO.TGZ;1
Read error
6/20/14 1:51 AM Processing error
C:/Windows/Installer/528d2.msp Read err
or
6/20/14 1:53 AM Task completed