[Jamila'sfilter]

Hi Mike:

I did the reg file two days ago but maybe did it incorrectly, so I will do again, but please clarify:

CODE
REGEDIT4

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
"Notification Packages"=hex(7):73,63,65,63,6C,69,00,00
Note: it is important to copy this with the spacing left as it is, also make sure "Windows Registry Editor Version 5.00" is the first thing in Notepad (No spaces ahead or anything).

WHAT DOES this sentence mean?? I couldn't find anything that said "Windows Registry Editor Version 5.00" --nothing like that appeared in Notepad. DO I JUST type it in? If so, where?

Thanks

[Advertisements]

It should read "also make sure "REGEDIT4" is the first thing in Notepad (No spaces ahead or anything)." I forgot to make that change

So just go ahead with them, sorry for the confusion.

[Mike]

It should read "also make sure "REGEDIT4" is the first thing in Notepad (No spaces ahead or anything)." I forgot to make that change

So just go ahead with them, sorry for the confusion.

[Jamila'sfilter]

Hi Mike:

Results of the Kaspersky scan are below.

A quick update: I couldn't download the java, I kept getting error messages of many types, including: Error 1719 Windows Installer Service could not be accessed.

I reinstalled Windows Installer but also had to reset virtual memory paging from 370 to "system handles file."
(Among other error messages received were "data1.cab corrupt," Internal Error 2350, and Error 1335, if any of this is useful.)

I ran Kaspersky overnight but the scan aborted, and XoftSpy was running when I checked the computer in the morning. It showed two minor problems, cookies and something else, which I deleted.

My AVG had also launched its automatic scan. Just FYI, AVG always changes the following files, at every run:

kernel32.dll
wsock32.dll
user32.dll
shell32.dll
ntoskrnl.exe

After the AVG scan, I ran Kaspersky again. It took 4 hours, 33 minutes. (My computer is still running V-E-R-Y slowly at opening applications.) Below are the results:

--------------------------------------------------------------------------------
KASPERSKY ONLINE SCANNER 7 REPORT
Saturday, July 26, 2008
Operating System: Microsoft Windows XP Professional Service Pack 2 (build 2600)
Kaspersky Online Scanner 7 version: 7.0.25.0
Program database last update: Saturday, July 26, 2008 11:52:03
Records in database: 1011051
--------------------------------------------------------------------------------

Scan settings:
Scan using the following database: extended
Scan archives: yes
Scan mail databases: yes

Scan area - My Computer:
A:\
C:\
D:\
E:\

Scan statistics:
Files scanned: 50474
Threat name: 31
Infected objects: 1241
Suspicious objects: 18
Duration of the scan: 04:33:34


File name / Threat name / Threats count
C:\Documents and Settings\OWNER\Local Settings\Application Data\Identities\{2D7C7D0A-719F-4FE3-982C-BC3EF1E2849A}\Microsoft\Outlook Express\Deleted Items.dbx Infected: Exploit.HTML.ObjData 15
C:\Documents and Settings\OWNER\Local Settings\Application Data\Identities\{2D7C7D0A-719F-4FE3-982C-BC3EF1E2849A}\Microsoft\Outlook Express\OLD INBOX.dbx Infected: Trojan-Spy.HTML.Pcard.c 3
C:\Documents and Settings\OWNER\Local Settings\Application Data\Identities\{2D7C7D0A-719F-4FE3-982C-BC3EF1E2849A}\Microsoft\Outlook Express\OLD INBOX.dbx Infected: Trojan-Spy.HTML.Citifraud.bb 4
C:\Documents and Settings\OWNER\Local Settings\Application Data\Identities\{2D7C7D0A-719F-4FE3-982C-BC3EF1E2849A}\Microsoft\Outlook Express\OLD INBOX.dbx Infected: Trojan-Spy.HTML.Citifraud.ay 5
C:\Documents and Settings\OWNER\Local Settings\Application Data\Identities\{2D7C7D0A-719F-4FE3-982C-BC3EF1E2849A}\Microsoft\Outlook Express\OLD INBOX.dbx Infected: Trojan-Spy.HTML.Sunfraud.ai 2
C:\Documents and Settings\OWNER\Local Settings\Application Data\Identities\{2D7C7D0A-719F-4FE3-982C-BC3EF1E2849A}\Microsoft\Outlook Express\OLD INBOX.dbx Infected: Trojan-Spy.HTML.Pcard.b 2
C:\Documents and Settings\OWNER\Local Settings\Application Data\Identities\{2D7C7D0A-719F-4FE3-982C-BC3EF1E2849A}\Microsoft\Outlook Express\OLD INBOX.dbx Infected: Trojan-Spy.HTML.Citifraud.bu 1
C:\Documents and Settings\OWNER\Local Settings\Application Data\Identities\{2D7C7D0A-719F-4FE3-982C-BC3EF1E2849A}\Microsoft\Outlook Express\OLD INBOX.dbx Infected: Trojan-Spy.HTML.Citifraud.bw 1
C:\Documents and Settings\OWNER\Local Settings\Application Data\Identities\{2D7C7D0A-719F-4FE3-982C-BC3EF1E2849A}\Microsoft\Outlook Express\OLD INBOX.dbx Infected: Trojan-Spy.HTML.Paylap.s 2
C:\Documents and Settings\OWNER\Local Settings\Application Data\Identities\{2D7C7D0A-719F-4FE3-982C-BC3EF1E2849A}\Microsoft\Outlook Express\OLD INBOX.dbx Infected: Trojan-Spy.HTML.Bayfraud.g 1
C:\Documents and Settings\OWNER\Local Settings\Application Data\Identities\{2D7C7D0A-719F-4FE3-982C-BC3EF1E2849A}\Microsoft\Outlook Express\OLD INBOX.dbx Infected: Trojan-Spy.HTML.Sunfraud.c 1
C:\Email Backup\Deleted Items.dbx Infected: Exploit.HTML.ObjData 15
C:\Email Backup\Deleted Items.dbx Infected: Trojan-Spy.HTML.Usbankfraud.f 2
C:\Email Backup\Inbox.dbx Infected: Trojan-Spy.HTML.Usbankfraud.b 2
C:\Email Backup\OLD INBOX.dbx Infected: Trojan-Spy.HTML.Pcard.c 3
C:\Email Backup\OLD INBOX.dbx Infected: Trojan-Spy.HTML.Citifraud.bb 4
C:\Email Backup\OLD INBOX.dbx Infected: Trojan-Spy.HTML.Citifraud.ay 5
C:\Email Backup\OLD INBOX.dbx Infected: Trojan-Spy.HTML.Sunfraud.ai 2
C:\Email Backup\OLD INBOX.dbx Infected: Trojan-Spy.HTML.Pcard.b 2
C:\Email Backup\OLD INBOX.dbx Infected: Trojan-Spy.HTML.Citifraud.bu 1
C:\Email Backup\OLD INBOX.dbx Infected: Trojan-Spy.HTML.Citifraud.bw 1
C:\Email Backup\OLD INBOX.dbx Infected: Trojan-Spy.HTML.Paylap.s 2
C:\Email Backup\OLD INBOX.dbx Infected: Trojan-Spy.HTML.Bayfraud.g 2
C:\Email Backup\OLD INBOX.dbx Infected: Trojan-Spy.HTML.Sunfraud.c 1
C:\Email Backup\OLD INBOX.dbx Infected: Trojan-Spy.HTML.Bankfraud.v 1
C:\Email Backup\OLD INBOX.dbx Suspicious: Trojan-Spy.HTML.Fraud.gen 1
C:\Email Backup\OLD INBOX.dbx Infected: Exploit.HTML.Iframe.FileDownload 1
C:\Program Files\Common Files\Real\Toolbar\RealBar.dll Infected: not-a-virus:AdWare.Win32.MegaSearch.s 1
C:\Program Files\Norton AntiVirus\Quarantine\001E5C0C Infected: Email-Worm.Win32.NetSky.q 1
C:\Program Files\Norton AntiVirus\Quarantine\004553E1 Suspicious: Exploit.HTML.Iframe.FileDownload 1
C:\Program Files\Norton AntiVirus\Quarantine\05B11379 Infected: Email-Worm.Win32.NetSky.q 1
C:\Program Files\Norton AntiVirus\Quarantine\08ED051D Infected: Email-Worm.Win32.Bagle.z 1
C:\Program Files\Norton AntiVirus\Quarantine\090B0A0E Infected: Email-Worm.Win32.NetSky.q 1
C:\Program Files\Norton AntiVirus\Quarantine\0CCD1183 Infected: Email-Worm.Win32.NetSky.q 1
C:\Program Files\Norton AntiVirus\Quarantine\0D0E593B Infected: Email-Worm.Win32.NetSky.q 1
C:\Program Files\Norton AntiVirus\Quarantine\0D1B012D Suspicious: Exploit.HTML.Iframe.FileDownload 1
C:\Program Files\Norton AntiVirus\Quarantine\119330C9 Infected: Email-Worm.Win32.NetSky.q 1
C:\Program Files\Norton AntiVirus\Quarantine\11A058BB Suspicious: Exploit.HTML.Iframe.FileDownload 1
C:\Program Files\Norton AntiVirus\Quarantine\11A72CB4 Infected: Email-Worm.Win32.NetSky.q 1
C:\Program Files\Norton AntiVirus\Quarantine\11B454A5 Infected: Email-Worm.Win32.NetSky.q 1
C:\Program Files\Norton AntiVirus\Quarantine\11B77EA2 Suspicious: Exploit.HTML.Iframe.FileDownload 1
C:\Program Files\Norton AntiVirus\Quarantine\11BB289E Infected: Email-Worm.Win32.NetSky.q 1
C:\Program Files\Norton AntiVirus\Quarantine\11C85090 Infected: Email-Worm.Win32.NetSky.q 1
C:\Program Files\Norton AntiVirus\Quarantine\11CB7A8C Suspicious: Exploit.HTML.Iframe.FileDownload 1
C:\Program Files\Norton AntiVirus\Quarantine\11E54A6F Infected: Email-Worm.Win32.NetSky.q 1
C:\Program Files\Norton AntiVirus\Quarantine\11EF4865 Infected: Email-Worm.Win32.NetSky.q 1
C:\Program Files\Norton AntiVirus\Quarantine\11F51C5D Suspicious: Exploit.HTML.Iframe.FileDownload 1
C:\Program Files\Norton AntiVirus\Quarantine\1202444F Infected: Email-Worm.Win32.NetSky.q 1
C:\Program Files\Norton AntiVirus\Quarantine\12091848 Infected: Email-Worm.Win32.NetSky.q 1
C:\Program Files\Norton AntiVirus\Quarantine\120F6C41 Suspicious: Exploit.HTML.Iframe.FileDownload 1
C:\Program Files\Norton AntiVirus\Quarantine\15C10D55 Infected: Email-Worm.Win32.Bagle.i 1
C:\Program Files\Norton AntiVirus\Quarantine\1FF513C1 Infected: Email-Worm.Win32.Bagle.z 1
C:\Program Files\Norton AntiVirus\Quarantine\208E4918 Infected: Email-Worm.Win32.Bagle.z 1
C:\Program Files\Norton AntiVirus\Quarantine\26641BAF Infected: Email-Worm.Win32.Sober.g 1
C:\Program Files\Norton AntiVirus\Quarantine\36191012 Infected: Email-Worm.Win32.NetSky.q 1
C:\Program Files\Norton AntiVirus\Quarantine\38A91A5F Infected: Trojan-Dropper.VBS.Zerolin 1
C:\Program Files\Norton AntiVirus\Quarantine\3F4415BF.htm Infected: Exploit.HTML.Mht 1
C:\Program Files\Norton AntiVirus\Quarantine\441E4EA4 Infected: Email-Worm.Win32.NetSky.q 1
C:\Program Files\Norton AntiVirus\Quarantine\4DD56E5A Infected: Email-Worm.Win32.NetSky.q 1
C:\Program Files\Norton AntiVirus\Quarantine\5B47181D Suspicious: Exploit.HTML.Iframe.FileDownload 1
C:\Program Files\Norton AntiVirus\Quarantine\5B47181D Infected: Email-Worm.Win32.NetSky.q 1
C:\Program Files\Norton AntiVirus\Quarantine\618A258A Infected: Email-Worm.Win32.NetSky.q 1
C:\Program Files\Norton AntiVirus\Quarantine\61E7106B Infected: Email-Worm.Win32.NetSky.q 1
C:\Program Files\Norton AntiVirus\Quarantine\645439C0 Infected: Email-Worm.Win32.NetSky.q 1
C:\Program Files\Norton AntiVirus\Quarantine\646B5FA7 Infected: Email-Worm.Win32.NetSky.q 1
C:\Program Files\Norton AntiVirus\Quarantine\647133A0 Suspicious: Exploit.HTML.Iframe.FileDownload 1
C:\Program Files\Norton AntiVirus\Quarantine\64BE7322 Infected: Email-Worm.Win32.NetSky.q 1
C:\Program Files\Norton AntiVirus\Quarantine\65AC6C1C Suspicious: Exploit.HTML.Iframe.FileDownload 1
C:\Program Files\Norton AntiVirus\Quarantine\65AC6C1C Infected: Email-Worm.Win32.NetSky.q 1
C:\Program Files\Norton AntiVirus\Quarantine\67E475AA Infected: Email-Worm.Win32.NetSky.q 1
C:\Program Files\Norton AntiVirus\Quarantine\67FE458E Suspicious: Exploit.HTML.Iframe.FileDownload 1
C:\Program Files\Norton AntiVirus\Quarantine\67FE458E Infected: Email-Worm.Win32.NetSky.q 1
C:\Program Files\Norton AntiVirus\Quarantine\6BEA7C1F Infected: Email-Worm.Win32.Bagle.n 1
C:\Program Files\Norton AntiVirus\Quarantine\6C70671B Infected: Email-Worm.Win32.NetSky.q 1
C:\Program Files\Norton AntiVirus\Quarantine\6C975EF0 Suspicious: Exploit.HTML.Iframe.FileDownload 1
C:\Program Files\Norton AntiVirus\Quarantine\6CA730DE Infected: Email-Worm.Win32.NetSky.q 1
C:\Program Files\Norton AntiVirus\Quarantine\6CBE56C5 Infected: Email-Worm.Win32.NetSky.q 1
C:\Program Files\Norton AntiVirus\Quarantine\6CC52ABE Suspicious: Exploit.HTML.Iframe.FileDownload 1
C:\Program Files\Norton AntiVirus\Quarantine\6EE552D5 Infected: Email-Worm.Win32.NetSky.q 1
C:\Program Files\Norton AntiVirus\Quarantine\727876C7 Infected: Email-Worm.Win32.NetSky.q 1
C:\Program Files\Norton AntiVirus\Quarantine\78A0643E Infected: Email-Worm.Win32.NetSky.q 1
C:\Program Files\Norton AntiVirus\Quarantine\78E87FEF Suspicious: Exploit.HTML.Iframe.FileDownload 1
C:\Program Files\Norton AntiVirus\Quarantine\78FB7BDA Infected: Email-Worm.Win32.NetSky.q 1
C:\Program Files\Norton AntiVirus\Quarantine\790F77C4 Infected: Email-Worm.Win32.NetSky.q 1
C:\Program Files\Norton AntiVirus\Quarantine\79154BBD Suspicious: Exploit.HTML.Iframe.FileDownload 1
C:\Program Files\Norton AntiVirus\Quarantine\791C1FB6 Infected: Email-Worm.Win32.NetSky.q 1
C:\Program Files\Norton AntiVirus\Quarantine\792947A7 Infected: Email-Worm.Win32.NetSky.q 1
C:\Program Files\Norton AntiVirus\Quarantine\7933459D Suspicious: Exploit.HTML.Iframe.FileDownload 1
C:\Program Files\Norton AntiVirus\Quarantine\79503F7C Infected: Email-Worm.Win32.NetSky.q 1
C:\Program Files\Norton AntiVirus\Quarantine\796A0F5F Infected: Email-Worm.Win32.NetSky.q 1
C:\Program Files\Norton AntiVirus\Quarantine\796E395C Suspicious: Exploit.HTML.Iframe.FileDownload 1
C:\Program Files\Norton AntiVirus\Quarantine\797B614D Infected: Email-Worm.Win32.NetSky.q 1
C:\Program Files\Norton AntiVirus\Quarantine\7FD3165F Infected: Email-Worm.Win32.NetSky.q 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\003A35E6.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\00465783.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\007129DA.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\008B1B38.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\01092C2C.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\012019FB.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\014754B6.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0184749D.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\01A415ED.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\01CE0A1C.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\01F63561.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\02151A77.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\022E4184.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0278705F.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\027D7A3D.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\02840069.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\028A3535.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\02BD3413.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\02E76669.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\032B6A5D.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\032E117C.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\03A9424E.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\03D02F0F.exe Infected: Trojan-Downloader.Win32.Agent.bq 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\03E63661.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\03EB0033.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\03FA1C53.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\044634B1.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\044F39B8.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0460125B.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\04C60863.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\04DA3485.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\04E045EF.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\04F53F27.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\04FE29D9.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\052C316B.exe Infected: Trojan-Downloader.Win32.Agent.bq 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\052D7E6A.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\054636E2.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\056E3459.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\05937472.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\05DA36B6.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\05E015E7.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\05E55650.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\05F96A79.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\062B0163.exe Infected: Trojan-Downloader.Win32.Agent.bq 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\062D6A09.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\062E2C12.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\065F6081.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\066E368A.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\06953401.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\06C55688.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\06DD1C33.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\06DF65DF.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\06E42648.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\06E94AFB.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0701365E.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\072933D5.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\072B4C90.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0766297F.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\078B0C54.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\07914297.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\07AB6D34.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\07B45315.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\07DE35D7.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\07E37640.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\07F7389F.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\08147E08.dll Infected: Trojan-Downloader.Win32.WinShow.ak 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\081A491D.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\08285884.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\08293606.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\082A2153.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\083A7C75.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\084102A1.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0866010E.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\08A32998.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\08BD35DA.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\08DD05CF.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\08E24638.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\08E53351.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\08E86C95.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\08F072C2.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\09035B22.exe Infected: Trojan-Downloader.Win32.Agent.bq 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0929714B.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\095135AE.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\09695129.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\09793325.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0998425B.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\09CF4731.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\09DC55C6.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\09DD060F.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\09E11630.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\09E53582.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0A0D32F9.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0AA132CD.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0ADB25BE.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0AEF18EE.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0AFF6ADC.dll Infected: Trojan-Downloader.Win32.Agent.bc 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0B0C12CE.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0B0D352A.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0B0F3CCA.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0B1366C7.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0B1610C3.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0B193ABF.dll Infected: Trojan-Downloader.Win32.Agent.bc 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0B193ABF.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0B1C64BC.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0B200EB8.dll Infected: Trojan-Downloader.Win32.Agent.bc 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0B200EB8.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0B2338B5.dll Infected: Trojan-Downloader.Win32.Agent.bc 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0B2338B5.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0B2662B1.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0B2A0CAD.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0B2B2DE4.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0B2D36AA.dll Infected: Trojan-Downloader.Win32.Agent.bc 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0B2D36AA.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0B3060A6.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0B330AA3.dll Infected: Trojan-Downloader.Win32.Agent.bc 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0B330AA3.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0B3532A1.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0B37349F.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0B3A5E9C.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0B3D0898.dll Infected: Trojan-Downloader.Win32.Agent.bc 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0B3D0898.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0B403294.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0B445C91.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0B47068D.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0B4A308A.dll Infected: Trojan-Downloader.Win32.Agent.bc 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0B4A308A.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0B4D5A86.dll Infected: Trojan-Downloader.Win32.Agent.bc 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0B4D5A86.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0B510482.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0B542E7F.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0B57587B.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0B5A0278.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0B615670.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0B64006D.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0B682A69.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0B6B5466.dll Infected: Trojan-Downloader.Win32.Agent.bc 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0B6B5466.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0B6E7E62.dll Infected: Trojan-Downloader.Win32.Agent.bc 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0B6E7E62.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0B71285E.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0B75525B.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0B787C57.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0B7B2654.dll Infected: Trojan-Downloader.Win32.Agent.bc 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0B7B2654.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0B7E5050.dll Infected: Trojan-Downloader.Win32.Agent.bc 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0B7E5050.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0B827A4C.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0B841C8A.dll Infected: Trojan-Downloader.Win32.WinShow.ak 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0B852449.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0B884E45.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0B8B7842.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0B8F223E.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0B924C3A.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0B957637.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0B991A6B.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0B992033.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0B9C4A30.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0B9F742C.dll Infected: Trojan-Downloader.Win32.Agent.bc 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0B9F742C.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0BA21E29.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0BA64825.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0BA97221.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0BAC1C1E.dll Infected: Trojan-Downloader.Win32.Agent.bc 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0BAC1C1E.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0BAF461A.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0BB37017.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0BB61A13.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0BB9440F.dll Infected: Trojan-Downloader.Win32.Agent.bc 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0BB9440F.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0BBC6E0C.dll Infected: Trojan-Downloader.Win32.Agent.bc 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0BBC6E0C.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0BC01808.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0BC34205.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0BC66C01.dll Infected: Trojan-Downloader.Win32.Agent.bc 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0BC66C01.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0BCA15FD.dll Infected: Trojan-Downloader.Win32.Agent.bc 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0BCA15FD.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0BCD3FFA.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0BD069F6.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0BD313F3.dll Infected: Trojan-Downloader.Win32.Agent.bc 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0BD313F3.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0BD73DEF.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0BDA67EB.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0BDB75B6.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0BDD11E8.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0BE03620.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0BE03BE4.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0BE465E1.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0BE70FDD.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0BEA39D9.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0BEB2E4A.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0BED63D6.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0BF10DD2.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0BF437CF.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0BF761CB.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0BFB0BC7.dll Infected: Trojan-Downloader.Win32.Agent.bc 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0BFB0BC7.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0BFE35C4.dll Infected: Trojan-Downloader.Win32.Agent.bc 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0BFE35C4.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0C015FC0.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0C0409BD.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0C0833B9.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0C0B5DB6.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0C0E07B2.dll Infected: Trojan-Downloader.Win32.Agent.bc 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0C0E07B2.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0C0F1EEB.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0C1131AE.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0C155BAB.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0C1805A7.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0C1B2FA4.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0C1E59A0.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0C22039C.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0C252D99.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0C266132.exe Infected: Trojan-Downloader.Win32.Agent.bq 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0C285795.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0C2B0192.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0C2F2B8E.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0C32558A.dll Infected: Trojan-Downloader.Win32.WinShow.ak 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0C32558A.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0C3534D2.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0C392983.dll Infected: Trojan-Downloader.Win32.WinShow.ak 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0C3F7D7C.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0C422778.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0C465175.dll Infected: Trojan-Downloader.Win32.Agent.bc 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0C465175.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0C497B71.dll Infected: Trojan-Downloader.Win32.Agent.bc 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0C497B71.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0C4C256E.dll Infected: Trojan-Downloader.Win32.Agent.bc 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0C4C256E.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0C4F4F6A.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0C537966.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0C54629F.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0C562363.dll Infected: Trojan-Downloader.Win32.Agent.bc 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0C562363.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0C594D5F.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0C5C775C.exe Infected: Trojan-Downloader.Win32.Agent.bq 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0C602158.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0C634B54.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0C667551.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0C6A1F4D.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0C6D494A.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0C707346.dll Infected: Trojan-Downloader.Win32.Agent.bc 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0C707346.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0C731D43.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0C77473F.dll Infected: Trojan-Downloader.Win32.Agent.bc 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0C77473F.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0C7A713B.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0C7D1B38.dll Infected: Trojan-Downloader.Win32.WinShow.ak 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0C7D1B38.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0C8146D2.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0C9A1E6B.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0CC834A6.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0CDA45AE.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0CDF0617.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0CF0321D.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0D480E8C.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0D5B5083.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0D5C347A.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0D8431F0.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0DF77EAD.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0E0A1CF7.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0E1831C4.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0E250122.exe Infected: Trojan-Downloader.Win32.Agent.bq 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0E4137C6.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0E867B7B.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0EA56ECD.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0EAC3198.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0EAD74FA.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0ECB3F30.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0ED8659E.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0F24511A.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0F4704DC.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0F545EEE.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0F852D66.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0F8B5852.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0FAC33C9.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0FC41895.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0FD43140.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0FF14E5A.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\1040339D.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\10574461.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\10683114.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\10BD3A69.dll Infected: Trojan-Downloader.Win32.Agent.bc 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\10BD3A69.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\10D43371.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\10D7058D.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\10FD580B.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\11233070.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\11261E69.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\113D5E78.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\11683345.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\11892678.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\11D15F35.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\11D65585.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\11EF1C7F.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\11F73170.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\120467AA.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\12186395.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\121B0D91.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\121E378D.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\1222618A.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\12250B86.dll Infected: Trojan-Downloader.Win32.WinShow.ak 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\12250B86.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\12283583.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\122B5F7F.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\122F097B.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\12323378.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\12355D74.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\12390771.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\123C316D.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\123F5B69.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\12420566.dll Infected: Trojan-Downloader.Win32.Agent.bc 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\12420566.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\1249595F.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\124C035B.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\124F2D57.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\12535754.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\12551287.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\12560150.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\125720A3.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\12592B4D.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\125C5549.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\12607F45.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\12632942.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\1266533E.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\126A7D3B.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\126D2737.dll Infected: Trojan-Downloader.Win32.Agent.bc 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\126D2737.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\12705133.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\12737B30.dll Infected: Trojan-Downloader.Win32.Agent.bc 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\12737B30.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\1277252C.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\127A4F29.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\127D7925.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\12802322.dll Infected: Trojan-Downloader.Win32.Agent.bc 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\12802322.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\12844D1E.dll Infected: Trojan-Downloader.Win32.Agent.bc 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\12844D1E.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\1287771A.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\128A2117.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\128D4B13.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\12917510.dll Infected: Trojan-Downloader.Win32.Agent.bc 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\12917510.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\12941F0C.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\12BB088E.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\12D5257D.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\130510C4.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\13227E96.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\132F70E7.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\134B3038.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\1374349B.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\1388749E.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\13A53A06.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\13AA051B.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\13B400E5.exe Infected: Trojan.Win32.Agent.bi 1
C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\13D47575.e

[Mike]

Hi there,

The log got cut off, could you attach it please? I would like to see the rest before we go ahead.

To attach a file, do the following:* Click Add Reply
* Under the reply panel is the Attachments Panel
* Browse for the attachment file you want to upload, then click the green Upload button
* Once it has uploaded, click the Manage Current Attachments drop down box
* Click on to insert the attachment into your post

[Jamila'sfilter]

 Kaspersky.scan.7.26.08.doc   133.04KB   58 downloads

Hi Mike:

It should be attached. I pasted it into a Word doc. It wouldn't upload as a .txt file.

Thanks

[Mike]

Hi there,

You have some infected emails, can you go into MalwareBytes' Anti-Malware, click on the 'Logs' Tab, select the first log (i.e The earliest one, found on the bottom) and click on 'Open'. Post the contents here please.

First off, delete everything in this folder (not the folder itself) C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine

Let's do another scan that disinfects (sorry, i know they are long.)

Let's do a scan with BitDefender Online Scan

• Click I Agree to agree to the EULA.
• Allow the ActiveX control to install when prompted.
• Click Click here to begin the scan.
• Please refrain from using the computer until the scan is finished. This might take a while to run, but it is important that nothing else is running while you scan.
• When the scan is finished, click on Click here to export the scan results.
• Save the report to your desktop.

Right click on the report and click on "Send to" then "Compressed Zipped Folder" attach the file here in your next reply.

Edited by Mike, 27 July 2008 - 04:47 AM.

[Jamila'sfilter]

Hi Mike:

MBAM didn't produce a log from either of the first two aborted scans. (See my previous posts.) I posted the only log listed below.

There are seven items in quarantine from the first scan: Trojan.Agent (2) in Documents and Settings; and in the registry keys: Trojan.FakeAlert (1); Adware.Minibug (2); Adware.MyWebSearch (1); and Rogue.Multiple (1). Shall I delete?

I will delete the quarantine files from the Norton and then run the scan.

Please let me know what else I should do.

Thanks


Malwarebytes' Anti-Malware 1.22
Database version: 980
Windows 5.1.2600 Service Pack 2

6:49:07 PM 7/24/2008
mbam-log-7-24-2008 (18-49-07).txt

Scan type: Quick Scan
Objects scanned: 39013
Time elapsed: 23 minute(s), 18 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)

[Jamila'sfilter]

Hi Mike:

Should I also delete the quarantined files in this folder? :

C:\Program Files\Norton AntiVirus\Quarantine

Thanks

[Mike]

Yup go ahead and delete the contents if there is anything present

Edited by Mike, 27 July 2008 - 09:13 AM.

[Jamila'sfilter]

 BitDefender.2.7_27_08.zip   19.5KB   334 downloads  bitdefender7_26_08.zip   2KB   207 downloadsip]Hi Mike:

I ran the scan twice, so I have attached both files. I ran it twice because the virus definitions did not update the first time -- the update aborted.

The BitDefender2.7-27-08 is the scan run after the update.

Thanks

Jamila

[Mike]

Re-run DSS and post a new log please.

How is your PC running? The stuff in quarantine we will delete later on, don't worry about them at the moment.

[Jamila'sfilter]

Hi Mike:

Here is the log of the new DSS scan. There was no "extra text" window this time.

Thanks

Deckard's System Scanner v20071014.68
Run by OWNER on 2008-07-28 19:29:17
Computer is in Normal Mode.
--------------------------------------------------------------------------------

Total Physical Memory: 248 MiB (512 MiB recommended).


-- HijackThis (run as OWNER.exe) -----------------------------------------------

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 7:29:23 PM, on 7/28/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Sygate\SPF\smc.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Yahoo!\browser\ybrwicon.exe
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\PROGRA~1\Yahoo!\browser\ycommon.exe
C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Spyware Doctor\pctsTray.exe
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\PROGRA~1\PANICW~1\POP-UP~1\PSComp.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\AWS\WeatherBug\Weather.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\Spyware Doctor\pctsAuxs.exe
C:\Program Files\Spyware Doctor\pctsSvc.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\wbem\wmiprvse.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Documents and Settings\OWNER\Desktop\dss.exe
C:\PROGRA~1\TRENDM~1\HIJACK~1\OWNER.exe
C:\WINDOWS\System32\wbem\wmiprvse.exe

O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O3 - Toolbar: &Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Common\ycomp5_1_6_0.dll
O4 - HKLM\..\Run: [YBrowser] C:\Program Files\Yahoo!\browser\ybrwicon.exe
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [SmcService] C:\PROGRA~1\Sygate\SPF\smc.exe -startgui
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [UserFaultCheck] %systemroot%\system32\dumprep 0 -u
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [ISTray] "C:\Program Files\Spyware Doctor\pctsTray.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
O4 - HKCU\..\Run: [PopUpStopperCompanion] "C:\PROGRA~1\PANICW~1\POP-UP~1\PSComp.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Yahoo! Pager] 1
O4 - HKCU\..\Run: [Weather] C:\Program Files\AWS\WeatherBug\Weather.exe 1
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [Norton SystemWorks] "C:\Program Files\Norton SystemWorks\cfgwiz.exe" /GUID {05858CFD-5CC4-4ceb-AAAF-CF00BF39736A} /MODE CfgWiz (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [RunNarrator] Narrator.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [Norton SystemWorks] "C:\Program Files\Norton SystemWorks\cfgwiz.exe" /GUID {05858CFD-5CC4-4ceb-AAAF-CF00BF39736A} /MODE CfgWiz (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [RunNarrator] Narrator.exe (User 'Default user')
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Yahoo! Dictionary - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
O8 - Extra context menu item: Yahoo! Search - file:///C:\Program Files\Yahoo!\Common/ycsrch.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: Yahoo! Login - {2499216C-4BA5-11D5-BD9C-000103C116D5} - C:\Program Files\Yahoo!\Common\ylogin.dll
O9 - Extra 'Tools' menuitem: Yahoo! Login - {2499216C-4BA5-11D5-BD9C-000103C116D5} - C:\Program Files\Yahoo!\Common\ylogin.dll
O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!\Messenger\yhexbmes.dll
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!\Messenger\yhexbmes.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .bcf: C:\Program Files\Internet Explorer\Plugins\NPBelv32.dll
O16 - DPF: {04E214E5-63AF-4236-83C6-A7ADCBF9BD02} (HouseCall Control) - http://housecall60.t...all/xscan60.cab
O16 - DPF: {2D8ED06D-3C30-438B-96AE-4D110FDC1FB8} (ActiveScan 2.0 Installer Class) - http://acs.pandasoft...s/as2stubie.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitd...can8/oscan8.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.micros...b?1120361566056
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai...all/xscan53.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://www.pandasoft.../as5/asinst.cab
O16 - DPF: {C2F38867-251C-4216-9B1C-BBE89B8700E2} (iVocalize Internet Conference 3 Setup) - http://www.talkingco...t3/ivsetup3.cab
O16 - DPF: {D18F962A-3722-4B59-B08D-28BB9EB2281E} (PhotosCtrl Class) - http://photos.yahoo....plorer1_9us.cab
O16 - DPF: {E06E2E99-0AA1-11D4-ABA6-0060082AA75C} (GpcContainer Class) - https://meethere.web...bex/ieatgpc.cab
O16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) - http://chat.msn.com/bin/msnchat45.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{1082EB63-1679-45ED-8B99-6266710A0E95}: NameServer = 68.94.156.1 68.94.157.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{1082EB63-1679-45ED-8B99-6266710A0E95}: NameServer = 68.94.156.1 68.94.157.1
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\pctsAuxs.exe
O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\pctsSvc.exe
O23 - Service: Sygate Personal Firewall (SmcService) - Sygate Technologies, Inc. - C:\Program Files\Sygate\SPF\smc.exe
O23 - Service: YPCService - Yahoo! Inc. - C:\WINDOWS\system32\YPCSER~1.EXE

--
End of file - 9018 bytes

-- Files created between 2008-06-28 and 2008-07-28 -----------------------------

2008-07-27 10:18:39 0 d-------- C:\WINDOWS\BDOSCAN8
2008-07-26 00:02:18 0 d-------- C:\Program Files\Sun
2008-07-25 20:11:48 0 d-------- C:\Documents and Settings\OWNER\.SunDownloadManager
2008-07-22 21:02:24 0 d-------- C:\Documents and Settings\OWNER\Application Data\Malwarebytes
2008-07-22 21:01:54 0 d-------- C:\Documents and Settings\All Users\Application Data\Malwarebytes
2008-07-22 21:01:38 0 d-------- C:\Program Files\Malwarebytes' Anti-Malware
2008-07-20 13:35:05 0 d-------- C:\Program Files\Trend Micro
2008-07-20 11:56:33 0 d-------- C:\Program Files\Panda Security
2008-07-19 20:30:25 0 d-------- C:\Program Files\Spyware Doctor
2008-07-19 20:30:25 0 d-------- C:\Documents and Settings\OWNER\Application Data\PC Tools
2008-07-15 16:59:20 0 d-------- C:\Program Files\XoftSpySE
2008-07-15 16:22:02 0 d-a------ C:\Documents and Settings\All Users\Application Data\TEMP
2008-07-15 14:38:54 0 dr-h----- C:\$VAULT$.AVG


-- Find3M Report ---------------------------------------------------------------

2008-07-25 23:59:53 0 d-------- C:\Program Files\Java
2008-07-22 19:17:19 0 d-------- C:\Documents and Settings\OWNER\Application Data\WeatherBug
2008-07-20 18:10:53 0 d-------- C:\Documents and Settings\OWNER\Application Data\AVG7
2008-07-19 19:47:57 0 d-------- C:\Program Files\SpywareBlaster
2008-07-05 09:58:29 0 d-------- C:\Program Files\Maxthon
2008-06-08 17:12:51 0 d-------- C:\Program Files\Common Files\Adobe
2008-06-08 17:08:54 0 d-------- C:\Documents and Settings\OWNER\Application Data\AdobeUM


-- Registry Dump ---------------------------------------------------------------

*Note* empty entries & legit default entries are not shown


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"YBrowser"="C:\Program Files\Yahoo!\browser\ybrwicon.exe" [07/11/2003 03:51 PM]
"AVG7_CC"="C:\PROGRA~1\Grisoft\AVG7\avgcc.exe" [04/19/2008 09:06 AM]
"Adobe Photo Downloader"="C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe" [06/07/2005 12:46 AM]
"SmcService"="C:\PROGRA~1\Sygate\SPF\smc.exe" [10/15/2004 08:40 PM]
"KernelFaultCheck"="C:\WINDOWS\system32\dumprep 0 -k" []
"UserFaultCheck"="C:\WINDOWS\system32\dumprep 0 -u" []
"TkBellExe"="C:\Program Files\Common Files\Real\Update_OB\realsched.exe" [04/06/2008 11:41 AM]
"QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [03/28/2008 11:37 PM]
"iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [03/30/2008 10:36 AM]
"ISTray"="C:\Program Files\Spyware Doctor\pctsTray.exe" [12/10/2007 02:53 PM]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe" [06/10/2008 04:27 AM]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"PopUpStopperCompanion"="C:\PROGRA~1\PANICW~1\POP-UP~1\PSComp.exe" [07/21/2003 03:19 PM]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [08/04/2004 03:56 AM]
"Yahoo! Pager"="1" []
"Weather"="C:\Program Files\AWS\WeatherBug\Weather.exe" [09/09/2004 06:35 PM]
"MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" [10/13/2004 12:24 PM]

[HKEY_USERS\.default\software\microsoft\windows\currentversion\runonce]
"RunNarrator"=Narrator.exe

[HKEY_USERS\.default\software\microsoft\windows\currentversion\run]
"Norton SystemWorks"="C:\Program Files\Norton SystemWorks\cfgwiz.exe" /GUID {05858CFD-5CC4-4ceb-AAAF-CF00BF39736A} /MODE CfgWiz

C:\Documents and Settings\All Users\Start Menu\Programs\Startup\
Adobe Reader Speed Launch.lnk - C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe [4/23/2008 3:38:16 AM]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sdauxservice"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sdcoreservice"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\vds]
@="Service"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{533C5B84-EC70-11D2-9505-00C04F79DEAF}]
@="Volume shadow copy"




-- End of Deckard's System Scanner: finished at 2008-07-28 19:30:54 ------------

[Mike]

Hi there,

Fix this line with Hijack This:
O16 - DPF: {E06E2E99-0AA1-11D4-ABA6-0060082AA75C} (GpcContainer Class) - https://meethere.web...bex/ieatgpc.cab

How is your PC running now?

[Jamila'sfilter]

Hi Mike:

How do I fix? Do I run DSS again?

My computer is running better, thanks. Sometimes applications seem to take a while to open, but on the whole much bettter.

Thanks

Jamila

[Mike]

The same way you did before,

Open Hijack This and do a scan only, put a checkmark next to

O16 - DPF: {E06E2E99-0AA1-11D4-ABA6-0060082AA75C} (GpcContainer Class) - https://meethere.web...bex/ieatgpc.cab

Then click Fix Checked. Exit Hijack This.

Since your PC is slower let's do one last scan and see if we got everything (another long one)

Go to Kaspersky website and perform an online antivirus scan.

• Read through the requirements and privacy statement and click on Accept button.
• It will start downloading and installing the scanner and virus definitions. You will be prompted to install an application from Kaspersky. Click Run.
• When the downloads have finished, click on Settings.
• Make sure these boxes are checked (ticked). If they are not, please tick them and click on the Save button:
  • Spyware, Adware, Dialers, and other potentially dangerous programs
    Archives
    Mail databases
• Click on My Computer under Scan.
• Once the scan is complete, it will display the results. Click on View Scan Report.
• You will see a list of infected items there. Click on Save Report As....
• Save this report to a convenient place. Change the Files of type to Text file (.txt) before clicking on the Save button.