Dr.Web AntiVirus

Dr.Web AntiVirus

Version 6.0

http://products.drweb.com/win/av/

* Best at curing active infections
* Installation in an infected system without its preliminary curing
* Absolute leader in detection and neutralization of complex viruses such as MaosBoot, Rustock.C, and Sector
* Unique technologies blocking even unknown threats
* Full scan of archives at all nesting levels
* Detection and neutralization of viruses found only in RAM and never existing as files

The Windows boot time has become slow than usually. Difference= 24 sec (-47%).

SPIDERAGENT.EXE
Description: SpIDer Agent for Windows Doctor Web, Ltd. Dr.Web ® 6.0.3.11261
MD5= 0AAEF3F131DBC409A993D3FD3ACA20AA
File is signed and the signature was verified.
File size= 1435888
Related registry changes:
HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\SPIDERAGENT: “”C:\PROGRAM FILES\DRWEB\SPIDERAGENT.EXE“”
SPIDERML.EXE
Description: SpIDer Mail ® for Windows Workstation Doctor Web, Ltd. Dr.Web ® 6.0.1.12100
MD5= 23EB2DA12DCE9E5A3CA58BBA22A01072
File is signed and the signature was verified.
File size= 1572592
Related registry changes:
HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\SPIDERMAIL: “”C:\PROGRAM FILES\DRWEB\SPIDERML.EXE” -AUTORUN”
DWPROT.SYS
Description: Dr.Web Protection for Windows Doctor Web, Ltd. Dr.Web Anti-Virus 6.0.6
MD5= D33CFEB3404D47AD146040AF6916BEB6
File is signed and the signature was verified.
File size= 135032
Related registry changes:
HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\EVENTLOG\SYSTEM\DWPROT\EVENTMESSAGEFILE: “%SYSTEMROOT%\SYSTEM32\DRIVERS\DWPROT.SYS
HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\DWPROT\PARAMETERS\DRIVERPATH: “\WINDOWS\SYSTEM32\DRIVERS\DWPROT.SYS
HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\DWPROT\IMAGEPATH: “SYSTEM32\DRIVERS\DWPROT.SYS
SPIDERG3.SYS
Description: Dr.Web File System Monitor Doctor Web, Ltd. Dr.Web Anti-Virus 6.0.5
MD5= 8F683D6AAC09B0F8C15E4D2D6728758C
File is signed and the signature was verified.
File size= 93944
Related registry changes:
HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\DWPROT\PARAMETERS\FILES\7\NAME: “\WINDOWS\SYSTEM32\DRIVERS\SPIDERG3.SYS
HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\SPIDERG3\IMAGEPATH: “SYSTEM32\DRIVERS\SPIDERG3.SYS
DWENGINE.EXE
Description: Service Dr.Web Scanning Engine (DrWebEngine) Dr.Web (R) Scanning Engine checks your files against viruses. It is essential part of the Dr.Web (R) Anti-Virus! Please do not stop and do not disable it. Start Type: loaded automatically by Server Manager Dr.Web (R) Scanning Engine Doctor Web, Ltd. Dr.Web (R) Anti-Virus 6.0.3.12080
MD5= E8B2CCA7AB58BED5A8EBAE93CF5773CD
File is signed and the signature was verified.
File size= 1660248
Related registry changes:
HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\EVENTLOG\APPLICATION\DR.WEB ENGINE\EVENTMESSAGEFILE: “C:\PROGRAM FILES\COMMON FILES\DOCTOR WEB\SCANNING ENGINE\DWENGINE.EXE
HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\DRWEBENGINE\IMAGEPATH: “”C:\PROGRAM FILES\COMMON FILES\DOCTOR WEB\SCANNING ENGINE\DWENGINE.EXE“”
DRWEBSP.DLL
Description: Dr.Web Winsock Provider Hook Doctor Web, Ltd. Dr.Web Anti-Virus 6.0.0.10290
MD5= 4066BBD1A1551ECBF1CC7A99057E8D31
File is signed and the signature was verified.
File size= 137456
DRWEB32W.EXE
Description: DrWeb32W.Exe Dr.Web© Scanner for Windows Doctor Web, Ltd. Dr.Web R for Windows 6.00.5.08312
Related registry changes:
HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\APP PATHS\DRWEB32W.EXE
HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\APP PATHS\DRWEB32W.EXE\FOLDER: “C:\DOCUMENTS AND SETTINGS\ALL USERS\START MENU\PROGRAMS\DR.WEB”
HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\APP PATHS\DRWEB32W.EXE\: “C:\PROGRAM FILES\DRWEB\DRWEB32W.EXE”
HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\APP PATHS\DRWEB32W.EXE\PATH: “C:\PROGRAM FILES\DRWEB”
DRWSXTN.DLL
Description: Dr.Web ® Shell Extension Doctor Web, Ltd. Dr.Web ® for Windows 6.00.0.02270
MD5= 6D0278599D1344A1ECB19BE5BCA4AF3E
File is signed and the signature was verified.
File size= 87592
Related registry changes:
HKLM\SOFTWARE\CLASSES\CLSID\{E7593602-124B-47C9-9F73-A69308EDC973}\INPROCSERVER32\: “C:\PROGRAM FILES\DRWEB\DRWSXTN.DLL

FILES ADDED:178

C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\APPLICATION DATA\DOWNLOADED INSTALLATIONS\DOCTOR WEB\{9B68B1FE-85E3-41FE-8B0F-C281D0938781}\1033.MST
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\APPLICATION DATA\DOWNLOADED INSTALLATIONS\DOCTOR WEB\{9B68B1FE-85E3-41FE-8B0F-C281D0938781}\DRWEB-600-WIN-X86.MSI
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\DRWEB-SETUP.LOG
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\{F34C0C50-9F20-410A-9153-E2B86E6F8F3E}\0X0402.INI
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\{F34C0C50-9F20-410A-9153-E2B86E6F8F3E}\0X0404.INI
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\{F34C0C50-9F20-410A-9153-E2B86E6F8F3E}\0X0407.INI
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\{F34C0C50-9F20-410A-9153-E2B86E6F8F3E}\0X0408.INI
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\{F34C0C50-9F20-410A-9153-E2B86E6F8F3E}\0X0409.INI
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\{F34C0C50-9F20-410A-9153-E2B86E6F8F3E}\0X040A.INI
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\{F34C0C50-9F20-410A-9153-E2B86E6F8F3E}\0X040C.INI
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\{F34C0C50-9F20-410A-9153-E2B86E6F8F3E}\0X040E.INI
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\{F34C0C50-9F20-410A-9153-E2B86E6F8F3E}\0X0410.INI
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\{F34C0C50-9F20-410A-9153-E2B86E6F8F3E}\0X0415.INI
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\{F34C0C50-9F20-410A-9153-E2B86E6F8F3E}\0X0419.INI
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\{F34C0C50-9F20-410A-9153-E2B86E6F8F3E}\0X041B.INI
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\{F34C0C50-9F20-410A-9153-E2B86E6F8F3E}\0X041F.INI
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\{F34C0C50-9F20-410A-9153-E2B86E6F8F3E}\0X0422.INI
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\{F34C0C50-9F20-410A-9153-E2B86E6F8F3E}\0X0425.INI
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\{F34C0C50-9F20-410A-9153-E2B86E6F8F3E}\0X0426.INI
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\{F34C0C50-9F20-410A-9153-E2B86E6F8F3E}\0X0427.INI
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\{F34C0C50-9F20-410A-9153-E2B86E6F8F3E}\0X0804.INI
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\{F34C0C50-9F20-410A-9153-E2B86E6F8F3E}\0X0816.INI
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\{F34C0C50-9F20-410A-9153-E2B86E6F8F3E}\1033.MST
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\{F34C0C50-9F20-410A-9153-E2B86E6F8F3E}\DRWEB-600-WIN-X86.MSI
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\{F34C0C50-9F20-410A-9153-E2B86E6F8F3E}\SETUP.INI
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\{F34C0C50-9F20-410A-9153-E2B86E6F8F3E}\_ISMSIDEL.INI
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\DOCTORWEB\DRWEB32W.LOG
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\DOCTORWEB\SPIDERML.LOG
C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\DOCTOR WEB\BASES\DRW50000.VDB
C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\DOCTOR WEB\BASES\DRW50001.VDB
C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\DOCTOR WEB\BASES\DRW50002.VDB
C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\DOCTOR WEB\BASES\DRW50003.VDB
C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\DOCTOR WEB\BASES\DRW50004.VDB
C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\DOCTOR WEB\BASES\DRW50005.VDB
C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\DOCTOR WEB\BASES\DRW50006.VDB
C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\DOCTOR WEB\BASES\DRW50007.VDB
C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\DOCTOR WEB\BASES\DRW50008.VDB
C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\DOCTOR WEB\BASES\DRW50009.VDB
C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\DOCTOR WEB\BASES\DRW50010.VDB
C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\DOCTOR WEB\BASES\DRW50011.VDB
C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\DOCTOR WEB\BASES\DRW50012.VDB
C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\DOCTOR WEB\BASES\DRW50013.VDB
C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\DOCTOR WEB\BASES\DRW50014.VDB
C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\DOCTOR WEB\BASES\DRW50015.VDB
C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\DOCTOR WEB\BASES\DRW50016.VDB
C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\DOCTOR WEB\BASES\DRW50017.VDB
C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\DOCTOR WEB\BASES\DRW50018.VDB
C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\DOCTOR WEB\BASES\DRW50019.VDB
C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\DOCTOR WEB\BASES\DRW50020.VDB
C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\DOCTOR WEB\BASES\DRW50021.VDB
C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\DOCTOR WEB\BASES\DRW50022.VDB
C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\DOCTOR WEB\BASES\DRW50023.VDB
C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\DOCTOR WEB\BASES\DRW50024.VDB
C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\DOCTOR WEB\BASES\DRW50025.VDB
C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\DOCTOR WEB\BASES\DRW50026.VDB
C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\DOCTOR WEB\BASES\DRW50027.VDB
C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\DOCTOR WEB\BASES\DRW50028.VDB
C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\DOCTOR WEB\BASES\DRW50029.VDB
C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\DOCTOR WEB\BASES\DRW50030.VDB
C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\DOCTOR WEB\BASES\DRW50031.VDB
C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\DOCTOR WEB\BASES\DRW50032.VDB
C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\DOCTOR WEB\BASES\DRW50033.VDB
C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\DOCTOR WEB\BASES\DRW50034.VDB
C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\DOCTOR WEB\BASES\DRW50035.VDB
C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\DOCTOR WEB\BASES\DRW50036.VDB
C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\DOCTOR WEB\BASES\DRW50037.VDB
C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\DOCTOR WEB\BASES\DRW50038.VDB
C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\DOCTOR WEB\BASES\DRW50039.VDB
C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\DOCTOR WEB\BASES\DRW50040.VDB
C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\DOCTOR WEB\BASES\DRW50041.VDB
C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\DOCTOR WEB\BASES\DRW50042.VDB
C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\DOCTOR WEB\BASES\DRW50043.VDB
C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\DOCTOR WEB\BASES\DRW50044.VDB
C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\DOCTOR WEB\BASES\DRW50045.VDB
C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\DOCTOR WEB\BASES\DRW50046.VDB
C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\DOCTOR WEB\BASES\DRW50047.VDB
C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\DOCTOR WEB\BASES\DRW50048.VDB
C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\DOCTOR WEB\BASES\DRW50049.VDB
C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\DOCTOR WEB\BASES\DRW50050.VDB
C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\DOCTOR WEB\BASES\DRW50051.VDB
C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\DOCTOR WEB\BASES\DRW50052.VDB
C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\DOCTOR WEB\BASES\DRW50053.VDB
C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\DOCTOR WEB\BASES\DRW50054.VDB
C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\DOCTOR WEB\BASES\DRW50055.VDB
C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\DOCTOR WEB\BASES\DRW50056.VDB
C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\DOCTOR WEB\BASES\DRW50057.VDB
C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\DOCTOR WEB\BASES\DRW50058.VDB
C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\DOCTOR WEB\BASES\DRW50059.VDB
C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\DOCTOR WEB\BASES\DRW50060.VDB
C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\DOCTOR WEB\BASES\DRW50061.VDB
C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\DOCTOR WEB\BASES\DRW50062.VDB
C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\DOCTOR WEB\BASES\DRWDAILY.VDB
C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\DOCTOR WEB\BASES\DRWEBASE.VDB
C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\DOCTOR WEB\BASES\DRWNASTY.VDB
C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\DOCTOR WEB\BASES\DRWRISKY.VDB
C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\DOCTOR WEB\BASES\DRWTODAY.VDB
C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\DOCTOR WEB\BASES\DWN50000.VDB
C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\DOCTOR WEB\BASES\DWN50001.VDB
C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\DOCTOR WEB\BASES\DWN50002.VDB
C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\DOCTOR WEB\BASES\DWN50003.VDB
C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\DOCTOR WEB\BASES\DWN50004.VDB
C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\DOCTOR WEB\BASES\DWN50005.VDB
C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\DOCTOR WEB\BASES\DWN50006.VDB
C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\DOCTOR WEB\BASES\DWN50007.VDB
C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\DOCTOR WEB\BASES\DWN50008.VDB
C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\DOCTOR WEB\BASES\DWN50009.VDB
C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\DOCTOR WEB\BASES\DWN50010.VDB
C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\DOCTOR WEB\BASES\DWN50011.VDB
C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\DOCTOR WEB\BASES\DWN50012.VDB
C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\DOCTOR WEB\BASES\DWN50013.VDB
C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\DOCTOR WEB\BASES\DWN50014.VDB
C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\DOCTOR WEB\BASES\DWN50015.VDB
C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\DOCTOR WEB\BASES\DWN50016.VDB
C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\DOCTOR WEB\BASES\DWN50017.VDB
C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\DOCTOR WEB\BASES\DWN50018.VDB
C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\DOCTOR WEB\BASES\DWN50019.VDB
C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\DOCTOR WEB\BASES\DWN50020.VDB
C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\DOCTOR WEB\BASES\DWN50021.VDB
C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\DOCTOR WEB\BASES\DWNTODAY.VDB
C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\DOCTOR WEB\BASES\DWR50001.VDB
C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\DOCTOR WEB\BASES\DWR50002.VDB
C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\DOCTOR WEB\BASES\DWR50003.VDB
C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\DOCTOR WEB\BASES\DWR50004.VDB
C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\DOCTOR WEB\BASES\DWR50005.VDB
C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\DOCTOR WEB\BASES\DWR50006.VDB
C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\DOCTOR WEB\BASES\DWR50007.VDB
C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\DOCTOR WEB\BASES\DWR50008.VDB
C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\DOCTOR WEB\BASES\DWR50009.VDB
C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\DOCTOR WEB\BASES\DWRTODAY.VDB
C:\DOCUMENTS AND SETTINGS\ALL USERS\DESKTOP\DR.WEB SCANNER.LNK
C:\DOCUMENTS AND SETTINGS\ALL USERS\START MENU\PROGRAMS\DR.WEB\DR.WEB HELP (ENGLISH).LNK
C:\DOCUMENTS AND SETTINGS\ALL USERS\START MENU\PROGRAMS\DR.WEB\SCANNER.LNK
C:\DOCUMENTS AND SETTINGS\ALL USERS\START MENU\PROGRAMS\DR.WEB\SPIDERAGENT.LNK
C:\PROGRAM FILES\COMMON FILES\DOCTOR WEB\SCANNING ENGINE\DRWEB32.DLL
C:\PROGRAM FILES\COMMON FILES\DOCTOR WEB\SCANNING ENGINE\DWENGINE.EXE
C:\PROGRAM FILES\COMMON FILES\DOCTOR WEB\SCANNING ENGINE\DWINCTL.DLL
C:\PROGRAM FILES\COMMON FILES\DOCTOR WEB\SCANNING ENGINE\DWSEWSC.EXE
C:\PROGRAM FILES\DRWEB\ALERT.WAV
C:\PROGRAM FILES\DRWEB\CURED.WAV
C:\PROGRAM FILES\DRWEB\DELETED.WAV
C:\PROGRAM FILES\DRWEB\DRWADINS.EXE
C:\PROGRAM FILES\DRWEB\DRWEB32.INI
C:\PROGRAM FILES\DRWEB\DRWEB32.KEY
C:\PROGRAM FILES\DRWEB\DRWEB32W.EXE
C:\PROGRAM FILES\DRWEB\DRWEBFOROUTLOOK.DLL
C:\PROGRAM FILES\DRWEB\DRWEBSETTINGPROCESS.EXE
C:\PROGRAM FILES\DRWEB\DRWEBSP.DLL
C:\PROGRAM FILES\DRWEB\DRWEBUPW.EXE
C:\PROGRAM FILES\DRWEB\DRWEBWCL.EXE
C:\PROGRAM FILES\DRWEB\DRWMSG.DLL
C:\PROGRAM FILES\DRWEB\DRWREG.EXE
C:\PROGRAM FILES\DRWEB\DRWSXTN.DLL
C:\PROGRAM FILES\DRWEB\DWEBLLIO.DLL
C:\PROGRAM FILES\DRWEB\DWQRUI.EXE
C:\PROGRAM FILES\DRWEB\DWSCANCL.EXE
C:\PROGRAM FILES\DRWEB\DWSYSINFO.EXE
C:\PROGRAM FILES\DRWEB\EN-DRWEB.CHM
C:\PROGRAM FILES\DRWEB\ERROR.WAV
C:\PROGRAM FILES\DRWEB\FINISH.WAV
C:\PROGRAM FILES\DRWEB\LANG.LST
C:\PROGRAM FILES\DRWEB\LICENSE.TXT
C:\PROGRAM FILES\DRWEB\MOVED.WAV
C:\PROGRAM FILES\DRWEB\RENAMED.WAV
C:\PROGRAM FILES\DRWEB\SPIDERAGENT.EXE
C:\PROGRAM FILES\DRWEB\SPIDERAGENT_ADM.EXE
C:\PROGRAM FILES\DRWEB\SPIDERAGENT_SET.EXE
C:\PROGRAM FILES\DRWEB\SPIDERG3.LOG
C:\PROGRAM FILES\DRWEB\SPIDERML.EXE
C:\PROGRAM FILES\DRWEB\SPML_SET.EXE
C:\PROGRAM FILES\DRWEB\TEST.TXT
C:\PROGRAM FILES\DRWEB\UPDATE.DRL
C:\WINDOWS\INSTALLER\26720.MSI
C:\WINDOWS\INSTALLER\{D68B6F53-200B-4899-B005-D264F0083AA6}\1033.MST
C:\WINDOWS\INSTALLER\{D68B6F53-200B-4899-B005-D264F0083AA6}\ARPPRODUCTICON.EXE
C:\WINDOWS\SYSTEM32\DRIVERS\DWPROT.SYS
C:\WINDOWS\SYSTEM32\DRIVERS\SPIDERG3.SYS
C:\WINDOWS\TASKS\DR.WEB DAILY SCAN.JOB
C:\WINDOWS\TASKS\DR.WEB UPDATE.JOB

FILES[ATTR]MODIFIED:2

C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\CE4CF87733651BF1F44DD1E02FC1A8E8
C:\PROGRAM FILES\VMWARE\VMWARE TOOLS\VMWAREUSER.EXE

FOLDERS ADDED:12

C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\APPLICATION DATA\DOWNLOADED INSTALLATIONS
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\APPLICATION DATA\DOWNLOADED INSTALLATIONS\DOCTOR WEB
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\APPLICATION DATA\DOWNLOADED INSTALLATIONS\DOCTOR WEB\{9B68B1FE-85E3-41FE-8B0F-C281D0938781}
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\{F34C0C50-9F20-410A-9153-E2B86E6F8F3E}
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\DOCTORWEB
C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\DOCTOR WEB
C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\DOCTOR WEB\BASES
C:\DOCUMENTS AND SETTINGS\ALL USERS\START MENU\PROGRAMS\DR.WEB
C:\PROGRAM FILES\COMMON FILES\DOCTOR WEB
C:\PROGRAM FILES\COMMON FILES\DOCTOR WEB\SCANNING ENGINE
C:\PROGRAM FILES\DRWEB
C:\WINDOWS\INSTALLER\{D68B6F53-200B-4899-B005-D264F0083AA6}

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Download UnHackMe
Fully Functional 30-day Trial. No credit is required. Reviews. EULA. Privacy Policy.

Leave a Reply