Logfile of The Avenger Version 2.0, (c) by Swandog46
http://swandog46.geekstogo.com
Platform: Windows XP
*******************
Script file opened successfully.
Script file read successfully.
Backups directory opened successfully at C:\Avenger
*******************
Beginning to process script file:
Rootkit scan active.
No rootkits found!
Error: file "C:\Documents and Settings\All Users\Menu Avvio\Programmi\Esecuzione automatica\wmsncs.exe" not found!
Deletion of file "C:\Documents and Settings\All Users\Menu Avvio\Programmi\Esecuzione automatica\wmsncs.exe" failed!
Status: 0xc0000034 (STATUS_OBJECT_NAME_NOT_FOUND)
--> the object does not exist
Error: file "c:\windows\fonts\wmsncs.exe" not found!
Deletion of file "c:\windows\fonts\wmsncs.exe" failed!
Status: 0xc0000034 (STATUS_OBJECT_NAME_NOT_FOUND)
--> the object does not exist
Error: file "c:\programmi\file comuni\system\wmsncs.exe" not found!
Deletion of file "c:\programmi\file comuni\system\wmsncs.exe" failed!
Status: 0xc0000034 (STATUS_OBJECT_NAME_NOT_FOUND)
--> the object does not exist
Error: file "c:\windows\system32\spool\drivers\wmsncs.exe" not found!
Deletion of file "c:\windows\system32\spool\drivers\wmsncs.exe" failed!
Status: 0xc0000034 (STATUS_OBJECT_NAME_NOT_FOUND)
--> the object does not exist
Error: file "c:\windows\system32\wins\wmsncs.exe" not found!
Deletion of file "c:\windows\system32\wins\wmsncs.exe" failed!
Status: 0xc0000034 (STATUS_OBJECT_NAME_NOT_FOUND)
--> the object does not exist
Registry value "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servi ces\SharedAccess\Parameters\FirewallPolicy\DomainP rofile\AuthorizedApplications\List|wmsncs.exe" deleted successfully.
Registry value "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servi ces\SharedAccess\Parameters\FirewallPolicy\Standar dProfile\AuthorizedApplications\List|C:\WINDOWS\Fo nts\wmsncs.exe" deleted successfully.
Error: could not delete registry value "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servi ces\SharedAccess\Parameters\FirewallPolicy\Standar dProfile\AuthorizedApplications|wmsncs.exe"
Deletion of registry value "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servi ces\SharedAccess\Parameters\FirewallPolicy\Standar dProfile\AuthorizedApplications|wmsncs.exe" failed!
Status: 0xc0000034 (STATUS_OBJECT_NAME_NOT_FOUND)
--> the object does not exist
Registry value "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Cur rentVersion\Run|NvidMediaCenter" deleted successfully.
Registry value "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Cur rentVersion\Run|Wmsncs Service" deleted successfully.
Registry value "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Cur rentVersion\Run|Spool Driver Service" deleted successfully.
Registry value "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Cur rentVersion\Run|Wins Service" deleted successfully.
Registry key "HKEY_LOCAL_MACHINE\Software\Microsoft\Active Setup\Installed Components\{103L3C30-C3B3-4130-9363-E59E1375PERM}" deleted successfully.
Program "c:\fix.reg" successfully queued to run on reboot.
Completed script processing.
*******************
Finished! Terminate.
