Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

Annoying Virus? [RESOLVED]


  • This topic is locked This topic is locked

#1
KevinFF5

KevinFF5

    Member

  • Member
  • PipPip
  • 34 posts
Norton Antivirus Internet Worm Protector thing keeps popping up telling me something is trying to access my internet. I press block, and it pops up again really quickly. I press permit, and it pops up again, but not as quickly.

Path - C:Windows\system32\svchost.exe
File name - Microsoft Generic Host Process for Win32 S...

any suggestions...is it a virus?
  • 0

Advertisements


#2
tampabelle

tampabelle

    Member 5k

  • Retired Staff
  • 6,363 posts
Hi Kevin,

Chances are that it is a genuine windows process which is trying to access internet as you havent mentioned any other symptoms. A lot of scripts act through the file C:Windows\system32\svchost.exe to carry out their intended purposes.

However it cannot be ruled out that there is no infection on your PC. Can you post a Hijack This log as well as the log file from the firewall ?? I will take a look and tell you exactly what the issue is !!!!
  • 0

#3
KevinFF5

KevinFF5

    Member

  • Topic Starter
  • Member
  • PipPip
  • 34 posts
HJT Log:
Logfile of HijackThis v1.99.1
Scan saved at 11:57:18 AM, on 7/2/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\hkcmd.exe
C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe
C:\Program Files\Java\jre1.5.0_02\bin\jusched.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\PROGRA~1\PANICW~1\POP-UP~1\PSFree.exe
C:\Program Files\Common Files\Microsoft Shared\Works Shared\wkcalrem.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\iTunes\iTunes.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\AIM\aim.exe
C:\HJT\HijackThis.exe

R3 - URLSearchHook: AOLTBSearch Class - {EA756889-2338-43DB-8F07-D1CA6FB9C90D} - C:\Program Files\AOL\AOL Toolbar 2.0\aoltb.dll
O2 - BHO: AOL Toolbar Launcher - {7C554162-8CB7-45A4-B8F4-8EA1C75885F9} - C:\Program Files\AOL\AOL Toolbar 2.0\aoltb.dll
O2 - BHO: CNavExtBho Class - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: AOL Toolbar - {DE9C389F-3316-41A7-809B-AA305ED9D922} - C:\Program Files\AOL\AOL Toolbar 2.0\aoltb.dll
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [WorksFUD] C:\Program Files\Microsoft Works\wkfud.exe
O4 - HKLM\..\Run: [Microsoft Works Portfolio] C:\Program Files\Microsoft Works\WksSb.exe /AllUsers
O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_02\bin\jusched.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] C:\Program Files\iTunes\iTunesHelper.exe
O4 - HKLM\..\Run: [WildTangent CDA] "C:\Program Files\WildTangent\Apps\CDA\GameDrvr.exe" /startup "C:\Program Files\WildTangent\Apps\CDA\cdaEngine0500.dll"
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Spyware Cleaner] "C:\Program Files\Spyware Cleaner\SpywareCleaner.Exe" /boot
O4 - HKCU\..\Run: [PopUpStopperFreeEdition] "C:\PROGRA~1\PANICW~1\POP-UP~1\PSFree.exe"
O4 - HKCU\..\Run: [AIM] C:\Program Files\AIM\aim.exe -cnetwait.odl
O4 - Startup: LimeWire On Startup.lnk = C:\Program Files\LimeWire\LimeWire.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: Microsoft Works Calendar Reminders.lnk = ?
O8 - Extra context menu item: &AOL Toolbar Search - res://c:\program files\aol\aol toolbar 2.0\aoltbhtml.dll/search.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
O9 - Extra button: AOL Toolbar - {3369AF0D-62E9-4bda-8103-B4C75499B578} - C:\Program Files\AOL\AOL Toolbar 2.0\aoltb.dll
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O15 - Trusted Zone: http://www.neededware.com
O16 - DPF: {3A7FE611-1994-4EF1-A09F-99456752289D} - http://install.wildt...iveLauncher.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupd...b?1115290994280
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: SpywareCleanerService - Unknown owner - C:\Program Files\Spyware Cleaner\SCService.exe (file missing)
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe


did you also want the norton antivirus log? i scanned my computer and it says 0 viruses. i'm not quite sure how to post that.
  • 0

#4
tampabelle

tampabelle

    Member 5k

  • Retired Staff
  • 6,363 posts
Hi Kevin,


Your log looks quite good.

The log that I want to see is the log of the Norton Firewall. The firewall should be logging all activities. In case your default settings do not log the activities, you may log the activities for some time and then post the Firewall log here. If the event (i.e. the popup warning you) occurs then u can immediately terminate the logging and post the log here.

The last time I saw that in the logs, it was Windows looking for any updates. So it is likely to be harmless. I will confirm it after looking at the log :tazz:

I notice that you have installed Spyware Cleaner. Please read here about the good and the rogue anti-spyware programs.

I would strongly recommend that you uninstall this program. Instead you can use these programs -

SpywareBlaster and SpywareGuard are by JavaCool and both are free programs.
SpywareBlaster will prevent spyware from being installed and consumes no system resources.
SpywareGuard offers realtime protection from spyware installation and browser hijack attempts. Both have free ongoing updates.



Run Hijack This and click on scan. The following items need to be fixed -

O4 - HKCU\..\Run: [Spyware Cleaner] "C:\Program Files\Spyware Cleaner\SpywareCleaner.Exe" /boot
O15 - Trusted Zone: http://www.neededware.com
O23 - Service: SpywareCleanerService - Unknown owner - C:\Program Files\Spyware Cleaner\SCService.exe (file missing)


Close all windows other than Hijack This. Check the boxes next to above items and click on Fix checked.

Reboot the PC in Safe Mode (repeatedly tap the F8 key when the PC is starting up).

Open Add or Remove Programs (click on Start ---> Settings ---> Control panel. This should be the 3rd item). Uninstall or remove the following items -

Spyware Cleaner

Open Windows Explorer (right click on Start and then click on explore). Locate and delete the following folders and files -

C:\Program Files\Spyware Cleaner


Clear out the files in the Prefetch folder. Go to start> run> type into the box Prefetch and delete all the files in that folder. Dont delete the folder, only the files in it !!!!!!!!


Reboot the PC in Normal Mode.


Run Hijack This and post a fresh HJT log.
  • 0

#5
KevinFF5

KevinFF5

    Member

  • Topic Starter
  • Member
  • PipPip
  • 34 posts
Category: Worm detection
Date,Message,Details
7/2/2005 3:55:30 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
7/2/2005 3:55:30 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
7/1/2005 3:55:30 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
7/1/2005 3:55:29 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
6/30/2005 11:52:26 PM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
6/30/2005 11:52:25 PM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
6/30/2005 11:50:13 PM,Internet Worm Protection has been enabled.,Internet Worm Protection has been enabled.
6/30/2005 11:50:12 PM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
6/30/2005 11:50:12 PM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
6/30/2005 11:48:23 PM,Internet Worm Protection Signature File Version: 6/10/2005 Rev. 11. Internet Worm Protection Engine Version: 2.0.0.50609.,Internet Worm Protection Signature File Version: 6/10/2005 Rev. 11. Internet Worm Protection Engine Version: 2.0.0.50609.
6/30/2005 11:48:23 PM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
6/30/2005 11:48:23 PM,Internet Worm Protection has been enabled.,Internet Worm Protection has been enabled.
6/30/2005 11:26:24 PM,Internet Worm Protection has been enabled.,Internet Worm Protection has been enabled.
6/30/2005 11:26:22 PM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
6/30/2005 11:26:22 PM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
6/30/2005 11:24:28 PM,Internet Worm Protection Signature File Version: 6/10/2005 Rev. 11. Internet Worm Protection Engine Version: 2.0.0.50609.,Internet Worm Protection Signature File Version: 6/10/2005 Rev. 11. Internet Worm Protection Engine Version: 2.0.0.50609.
6/30/2005 11:24:28 PM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
6/30/2005 11:24:28 PM,Internet Worm Protection has been enabled.,Internet Worm Protection has been enabled.
6/27/2005 3:53:27 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
6/27/2005 3:53:26 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
6/26/2005 3:53:22 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
6/26/2005 3:53:22 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
6/25/2005 4:18:19 PM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
6/25/2005 4:18:19 PM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
6/25/2005 4:16:24 PM,Internet Worm Protection has been enabled.,Internet Worm Protection has been enabled.
6/25/2005 4:16:24 PM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
6/25/2005 4:16:23 PM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
6/25/2005 4:14:21 PM,Internet Worm Protection Signature File Version: 6/10/2005 Rev. 11. Internet Worm Protection Engine Version: 2.0.0.50609.,Internet Worm Protection Signature File Version: 6/10/2005 Rev. 11. Internet Worm Protection Engine Version: 2.0.0.50609.
6/25/2005 4:14:21 PM,Internet Worm Protection has been enabled.,Internet Worm Protection has been enabled.
6/25/2005 4:14:21 PM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
6/25/2005 3:53:25 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
6/25/2005 3:53:25 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
6/24/2005 3:53:20 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
6/24/2005 3:53:19 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
6/23/2005 3:53:20 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
6/23/2005 3:53:20 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
6/22/2005 3:53:21 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
6/22/2005 3:53:20 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
6/21/2005 3:53:20 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
6/21/2005 3:53:20 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
6/20/2005 7:53:26 PM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
6/20/2005 7:53:26 PM,Internet Worm Protection Signature File Version: 6/10/2005 Rev. 11. Internet Worm Protection Engine Version: 2.0.0.50609.,Internet Worm Protection Signature File Version: 6/10/2005 Rev. 11. Internet Worm Protection Engine Version: 2.0.0.50609.
6/20/2005 7:53:26 PM,Internet Worm Protection has been enabled.,Internet Worm Protection has been enabled.
6/20/2005 3:53:19 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
6/20/2005 3:53:19 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
6/19/2005 3:53:21 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
6/19/2005 3:53:21 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
6/18/2005 3:53:23 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
6/18/2005 3:53:23 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
6/17/2005 6:25:54 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
6/17/2005 6:25:54 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
6/17/2005 6:25:50 AM,Internet Worm Protection has been enabled.,Internet Worm Protection has been enabled.
6/17/2005 6:25:50 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
6/17/2005 6:25:49 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
6/17/2005 6:23:30 AM,Internet Worm Protection Signature File Version: 5/12/2005 Rev. 30. Internet Worm Protection Engine Version: 1.9.1.,Internet Worm Protection Signature File Version: 5/12/2005 Rev. 30. Internet Worm Protection Engine Version: 1.9.1.
6/17/2005 6:23:30 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
6/17/2005 6:23:30 AM,Internet Worm Protection has been enabled.,Internet Worm Protection has been enabled.
6/17/2005 3:08:27 AM,Internet Worm Protection Signature File Version: 5/12/2005 Rev. 30. Internet Worm Protection Engine Version: 1.9.1.,Internet Worm Protection Signature File Version: 5/12/2005 Rev. 30. Internet Worm Protection Engine Version: 1.9.1.
6/17/2005 3:08:27 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
6/17/2005 3:08:27 AM,Internet Worm Protection has been enabled.,Internet Worm Protection has been enabled.
6/16/2005 3:53:22 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
6/16/2005 3:53:22 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
6/15/2005 3:52:19 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
6/15/2005 3:52:19 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
6/14/2005 3:52:25 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
6/14/2005 3:52:25 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
6/13/2005 3:52:20 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
6/13/2005 3:52:20 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
6/12/2005 3:51:28 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
6/12/2005 3:51:27 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
6/11/2005 3:51:22 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
6/11/2005 3:51:22 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
6/10/2005 3:51:22 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
6/10/2005 3:51:22 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
6/9/2005 3:51:22 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
6/9/2005 3:51:22 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
6/8/2005 3:50:27 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
6/8/2005 3:50:26 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
6/7/2005 3:49:00 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
6/7/2005 3:49:00 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
6/6/2005 6:51:49 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
6/6/2005 6:51:49 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
6/6/2005 6:51:46 AM,Internet Worm Protection has been enabled.,Internet Worm Protection has been enabled.
6/6/2005 6:51:46 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
6/6/2005 6:51:45 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
6/6/2005 6:47:43 AM,Internet Worm Protection Signature File Version: 5/12/2005 Rev. 30. Internet Worm Protection Engine Version: 1.9.1.,Internet Worm Protection Signature File Version: 5/12/2005 Rev. 30. Internet Worm Protection Engine Version: 1.9.1.
6/6/2005 6:47:43 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
6/6/2005 6:47:43 AM,Internet Worm Protection has been enabled.,Internet Worm Protection has been enabled.
6/5/2005 3:45:30 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
6/5/2005 3:45:30 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
6/4/2005 3:44:27 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
6/4/2005 3:44:26 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
6/3/2005 3:44:21 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
6/3/2005 3:44:21 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
6/2/2005 3:43:22 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
6/2/2005 3:43:22 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
6/1/2005 3:41:25 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
6/1/2005 3:41:25 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
5/31/2005 3:40:25 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
5/31/2005 3:40:25 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
5/30/2005 3:40:26 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
5/30/2005 3:40:26 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
5/29/2005 3:40:24 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
5/29/2005 3:40:24 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
5/28/2005 3:40:28 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
5/28/2005 3:40:27 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
5/27/2005 3:39:25 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
5/27/2005 3:39:25 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
5/26/2005 3:39:21 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
5/26/2005 3:39:21 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
5/25/2005 3:39:20 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
5/25/2005 3:39:20 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
5/24/2005 3:39:20 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
5/24/2005 3:39:20 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
5/23/2005 3:39:21 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
5/23/2005 3:39:21 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
5/22/2005 3:39:24 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
5/22/2005 3:39:23 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
5/21/2005 3:39:21 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
5/21/2005 3:39:20 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
5/21/2005 3:11:37 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
5/21/2005 3:11:37 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
5/21/2005 3:09:18 AM,Internet Worm Protection has been enabled.,Internet Worm Protection has been enabled.
5/21/2005 3:09:17 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
5/21/2005 3:09:17 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
5/21/2005 3:07:53 AM,Internet Worm Protection Signature File Version: 5/12/2005 Rev. 30. Internet Worm Protection Engine Version: 1.9.1.,Internet Worm Protection Signature File Version: 5/12/2005 Rev. 30. Internet Worm Protection Engine Version: 1.9.1.
5/21/2005 3:07:53 AM,Internet Worm Protection has been enabled.,Internet Worm Protection has been enabled.
5/21/2005 3:07:53 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
5/20/2005 3:39:23 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
5/20/2005 3:39:23 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
5/19/2005 3:39:24 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
5/19/2005 3:39:23 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
5/18/2005 3:38:20 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
5/18/2005 3:38:20 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
5/17/2005 3:38:21 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
5/17/2005 3:38:20 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
5/16/2005 3:38:21 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
5/16/2005 3:38:20 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
5/15/2005 3:38:19 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
5/15/2005 3:38:19 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
5/14/2005 5:30:05 PM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
5/14/2005 5:30:05 PM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
5/14/2005 5:27:20 PM,Internet Worm Protection has been enabled.,Internet Worm Protection has been enabled.
5/14/2005 5:27:20 PM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
5/14/2005 5:27:20 PM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
5/14/2005 5:11:36 PM,Internet Worm Protection Signature File Version: 5/12/2005 Rev. 30. Internet Worm Protection Engine Version: 1.9.1.,Internet Worm Protection Signature File Version: 5/12/2005 Rev. 30. Internet Worm Protection Engine Version: 1.9.1.
5/14/2005 5:11:36 PM,Internet Worm Protection has been enabled.,Internet Worm Protection has been enabled.
5/14/2005 5:11:36 PM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
5/14/2005 3:38:21 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
5/14/2005 3:38:21 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
5/13/2005 11:38:37 PM,Internet Worm Protection Signature File Version: 5/12/2005 Rev. 30. Internet Worm Protection Engine Version: 1.9.1.,Internet Worm Protection Signature File Version: 5/12/2005 Rev. 30. Internet Worm Protection Engine Version: 1.9.1.
5/13/2005 11:38:37 PM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
5/13/2005 11:38:37 PM,Internet Worm Protection has been enabled.,Internet Worm Protection has been enabled.
5/13/2005 3:38:19 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
5/13/2005 3:38:19 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
5/12/2005 3:38:22 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
5/12/2005 3:38:21 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
5/11/2005 4:54:42 PM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
5/11/2005 4:54:42 PM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
5/11/2005 4:52:19 PM,Internet Worm Protection has been enabled.,Internet Worm Protection has been enabled.
5/11/2005 4:52:19 PM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
5/11/2005 4:52:19 PM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
5/11/2005 4:50:28 PM,Internet Worm Protection Signature File Version: 4/29/2005 Rev. 5. Internet Worm Protection Engine Version: 2.0.0.50113.,Internet Worm Protection Signature File Version: 4/29/2005 Rev. 5. Internet Worm Protection Engine Version: 2.0.0.50113.
5/11/2005 4:50:28 PM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
5/11/2005 4:50:28 PM,Internet Worm Protection has been enabled.,Internet Worm Protection has been enabled.
5/11/2005 7:30:50 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
5/11/2005 7:30:50 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
5/11/2005 7:29:07 AM,Internet Worm Protection has been enabled.,Internet Worm Protection has been enabled.
5/11/2005 7:29:07 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
5/11/2005 7:29:06 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
5/11/2005 7:22:59 AM,Internet Worm Protection Signature File Version: 4/29/2005 Rev. 5. Internet Worm Protection Engine Version: 2.0.0.50113.,Internet Worm Protection Signature File Version: 4/29/2005 Rev. 5. Internet Worm Protection Engine Version: 2.0.0.50113.
5/11/2005 7:22:59 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
5/11/2005 7:22:59 AM,Internet Worm Protection has been enabled.,Internet Worm Protection has been enabled.
5/11/2005 3:38:24 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
5/11/2005 3:38:23 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
5/10/2005 7:37:33 PM,Internet Worm Protection Signature File Version: 4/29/2005 Rev. 5. Internet Worm Protection Engine Version: 2.0.0.50113.,Internet Worm Protection Signature File Version: 4/29/2005 Rev. 5. Internet Worm Protection Engine Version: 2.0.0.50113.
5/10/2005 7:37:33 PM,Internet Worm Protection has been enabled.,Internet Worm Protection has been enabled.
5/10/2005 7:37:33 PM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
5/10/2005 3:37:22 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
5/10/2005 3:37:21 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
5/9/2005 3:37:21 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
5/9/2005 3:37:20 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
5/8/2005 7:34:02 PM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
5/8/2005 7:34:02 PM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
5/8/2005 7:31:34 PM,Internet Worm Protection has been enabled.,Internet Worm Protection has been enabled.
5/8/2005 7:31:34 PM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
5/8/2005 7:31:34 PM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
5/8/2005 7:30:48 PM,Internet Worm Protection has been enabled.,Internet Worm Protection has been enabled.
5/8/2005 7:30:48 PM,Internet Worm Protection Signature File Version: 12/9/2004 Rev. 18. Internet Worm Protection Engine Version: 1.8.6.,Internet Worm Protection Signature File Version: 12/9/2004 Rev. 18. Internet Worm Protection Engine Version: 1.8.6.
5/8/2005 7:30:48 PM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
5/8/2005 4:00:02 PM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
5/8/2005 4:00:02 PM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
5/8/2005 3:58:08 PM,Internet Worm Protection has been enabled.,Internet Worm Protection has been enabled.
5/8/2005 3:58:07 PM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
5/8/2005 3:58:07 PM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
5/8/2005 3:56:42 PM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
5/8/2005 3:56:42 PM,Internet Worm Protection Signature File Version: 12/9/2004 Rev. 18. Internet Worm Protection Engine Version: 1.8.6.,Internet Worm Protection Signature File Version: 12/9/2004 Rev. 18. Internet Worm Protection Engine Version: 1.8.6.
5/8/2005 3:56:42 PM,Internet Worm Protection has been enabled.,Internet Worm Protection has been enabled.
5/8/2005 1:06:56 PM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
5/8/2005 1:06:55 PM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
5/8/2005 1:05:14 PM,Internet Worm Protection has been enabled.,Internet Worm Protection has been enabled.
5/8/2005 1:05:13 PM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
5/8/2005 1:05:13 PM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
5/8/2005 1:03:42 PM,Internet Worm Protection Signature File Version: 12/9/2004 Rev. 18. Internet Worm Protection Engine Version: 1.8.6.,Internet Worm Protection Signature File Version: 12/9/2004 Rev. 18. Internet Worm Protection Engine Version: 1.8.6.
5/8/2005 1:03:42 PM,Internet Worm Protection has been enabled.,Internet Worm Protection has been enabled.
5/8/2005 1:03:42 PM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
5/8/2005 3:37:31 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
5/8/2005 3:37:30 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
5/7/2005 7:25:51 PM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
5/7/2005 7:25:50 PM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
5/7/2005 7:24:40 PM,Internet Worm Protection has been enabled.,Internet Worm Protection has been enabled.
5/7/2005 7:24:37 PM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
5/7/2005 7:24:37 PM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
5/7/2005 7:22:25 PM,Internet Worm Protection Signature File Version: 12/9/2004 Rev. 18. Internet Worm Protection Engine Version: 1.8.6.,Internet Worm Protection Signature File Version: 12/9/2004 Rev. 18. Internet Worm Protection Engine Version: 1.8.6.
5/7/2005 7:22:25 PM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
5/7/2005 7:22:25 PM,Internet Worm Protection has been enabled.,Internet Worm Protection has been enabled.
5/7/2005 3:47:33 PM,Internet Worm Protection has been enabled.,Internet Worm Protection has been enabled.
5/7/2005 3:47:32 PM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
5/7/2005 3:47:30 PM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
5/7/2005 3:45:19 PM,Internet Worm Protection Signature File Version: 12/9/2004 Rev. 18. Internet Worm Protection Engine Version: 1.8.6.,Internet Worm Protection Signature File Version: 12/9/2004 Rev. 18. Internet Worm Protection Engine Version: 1.8.6.
5/7/2005 3:45:19 PM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
5/7/2005 3:45:19 PM,Internet Worm Protection has been enabled.,Internet Worm Protection has been enabled.
5/7/2005 12:50:04 PM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
5/7/2005 12:50:04 PM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
5/7/2005 12:48:47 PM,Internet Worm Protection has been enabled.,Internet Worm Protection has been enabled.
5/7/2005 12:48:46 PM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
5/7/2005 12:48:46 PM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
5/7/2005 12:46:28 PM,Internet Worm Protection Signature File Version: 12/9/2004 Rev. 18. Internet Worm Protection Engine Version: 1.8.6.,Internet Worm Protection Signature File Version: 12/9/2004 Rev. 18. Internet Worm Protection Engine Version: 1.8.6.
5/7/2005 12:46:28 PM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
5/7/2005 12:46:28 PM,Internet Worm Protection has been enabled.,Internet Worm Protection has been enabled.
5/7/2005 3:37:18 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
5/7/2005 3:37:18 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
5/7/2005 12:49:50 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
5/7/2005 12:49:50 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
5/7/2005 12:47:04 AM,Internet Worm Protection has been enabled.,Internet Worm Protection has been enabled.
5/7/2005 12:47:03 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
5/7/2005 12:47:03 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
5/7/2005 12:46:24 AM,Internet Worm Protection Signature File Version: 12/9/2004 Rev. 18. Internet Worm Protection Engine Version: 1.8.6.,Internet Worm Protection Signature File Version: 12/9/2004 Rev. 18. Internet Worm Protection Engine Version: 1.8.6.
5/7/2005 12:46:24 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
5/7/2005 12:46:24 AM,Internet Worm Protection has been enabled.,Internet Worm Protection has been enabled.
5/6/2005 3:37:19 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
5/6/2005 3:37:19 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
5/5/2005 10:24:35 PM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
5/5/2005 10:24:35 PM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
5/5/2005 10:22:12 PM,Internet Worm Protection has been enabled.,Internet Worm Protection has been enabled.
5/5/2005 10:22:08 PM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
5/5/2005 10:22:08 PM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
5/5/2005 10:21:15 PM,Internet Worm Protection Signature File Version: 12/9/2004 Rev. 18. Internet Worm Protection Engine Version: 1.8.6.,Internet Worm Protection Signature File Version: 12/9/2004 Rev. 18. Internet Worm Protection Engine Version: 1.8.6.
5/5/2005 10:21:15 PM,Internet Worm Protection has been enabled.,Internet Worm Protection has been enabled.
5/5/2005 10:21:15 PM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
5/5/2005 5:40:08 PM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
5/5/2005 5:40:08 PM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
5/5/2005 5:37:21 PM,Internet Worm Protection has been enabled.,Internet Worm Protection has been enabled.
5/5/2005 5:37:20 PM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
5/5/2005 5:37:20 PM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
5/5/2005 5:36:43 PM,Internet Worm Protection Signature File Version: 12/9/2004 Rev. 18. Internet Worm Protection Engine Version: 1.8.6.,Internet Worm Protection Signature File Version: 12/9/2004 Rev. 18. Internet Worm Protection Engine Version: 1.8.6.
5/5/2005 5:36:43 PM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
5/5/2005 5:36:43 PM,Internet Worm Protection has been enabled.,Internet Worm Protection has been enabled.
5/5/2005 7:33:49 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
5/5/2005 7:33:49 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
5/5/2005 7:30:56 AM,Internet Worm Protection has been enabled.,Internet Worm Protection has been enabled.
5/5/2005 7:30:56 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
5/5/2005 7:30:56 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
5/5/2005 7:30:19 AM,Internet Worm Protection Signature File Version: 12/9/2004 Rev. 18. Internet Worm Protection Engine Version: 1.8.6.,Internet Worm Protection Signature File Version: 12/9/2004 Rev. 18. Internet Worm Protection Engine Version: 1.8.6.
5/5/2005 7:30:19 AM,Internet Worm Protection has been enabled.,Internet Worm Protection has been enabled.
5/5/2005 7:30:19 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
5/5/2005 3:37:18 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
5/5/2005 3:37:18 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
5/4/2005 10:33:02 PM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
5/4/2005 10:33:02 PM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
5/4/2005 10:30:22 PM,Internet Worm Protection has been enabled.,Internet Worm Protection has been enabled.
5/4/2005 10:30:21 PM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
5/4/2005 10:30:21 PM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
5/4/2005 10:29:40 PM,Internet Worm Protection Signature File Version: 12/9/2004 Rev. 18. Internet Worm Protection Engine Version: 1.8.6.,Internet Worm Protection Signature File Version: 12/9/2004 Rev. 18. Internet Worm Protection Engine Version: 1.8.6.
5/4/2005 10:29:40 PM,Internet Worm Protection has been enabled.,Internet Worm Protection has been enabled.
5/4/2005 10:29:40 PM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
5/4/2005 3:37:22 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
5/4/2005 3:37:22 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
5/3/2005 3:37:23 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
5/3/2005 3:37:22 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
5/2/2005 3:37:23 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
5/2/2005 3:37:23 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
5/1/2005 3:37:23 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
5/1/2005 3:37:23 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
4/30/2005 3:37:23 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
4/30/2005 3:37:23 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
4/29/2005 3:37:23 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
4/29/2005 3:37:23 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
4/28/2005 12:32:13 PM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
4/28/2005 12:32:13 PM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
4/28/2005 12:29:42 PM,Internet Worm Protection has been enabled.,Internet Worm Protection has been enabled.
4/28/2005 12:29:41 PM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
4/28/2005 12:29:40 PM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
4/28/2005 12:28:58 PM,Internet Worm Protection Signature File Version: 12/9/2004 Rev. 18. Internet Worm Protection Engine Version: 1.8.6.,Internet Worm Protection Signature File Version: 12/9/2004 Rev. 18. Internet Worm Protection Engine Version: 1.8.6.
4/28/2005 12:28:58 PM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
4/28/2005 12:28:58 PM,Internet Worm Protection has been enabled.,Internet Worm Protection has been enabled.
4/28/2005 3:36:19 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
4/28/2005 3:36:19 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
4/27/2005 3:36:21 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
4/27/2005 3:36:21 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
4/26/2005 3:36:19 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
4/26/2005 3:36:18 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
4/25/2005 3:36:18 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
4/25/2005 3:36:18 AM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
4/24/2005 4:45:45 PM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
4/24/2005 4:45:44 PM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
4/24/2005 4:43:12 PM,Internet Worm Protection has been enabled.,Internet Worm Protection has been enabled.
4/24/2005 4:43:12 PM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
4/24/2005 4:43:12 PM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
4/24/2005 4:42:18 PM,Internet Worm Protection Signature File Version: 12/9/2004 Rev. 18. Internet Worm Protection Engine Version: 1.8.6.,Internet Worm Protection Signature File Version: 12/9/2004 Rev. 18. Internet Worm Protection Engine Version: 1.8.6.
4/24/2005 4:42:18 PM,Internet Worm Protection is monitoring 3 signatures.,Internet Worm Protection is monitoring 3 signatures.
4/24/2005 4:42:18 PM,Internet Worm Protection has been enabled.,Internet Worm Protection has been enabled.

Category: Activities
Date,Message,Details
7/2/2005 6:30:38 PM,Unused port blocking has blocked communications.,"Unused port blocking has blocked communications. Inbound TCP connection. Remote address,local service is (70.245.33.19,6346)."
7/2/2005 6:30:32 PM,Unused port blocking has blocked communications.,"Unused port blocking has blocked communications. Inbound TCP connection. Remote address,local service is (70.245.33.19,6346)."
7/2/2005 6:30:29 PM,Unused port blocking has blocked communications.,"Unused port blocking has blocked communications. Inbound TCP connection. Remote address,local service is (70.245.33.19,6346)."
7/2/2005 6:30:05 PM,The new firewall rule does not affect this connection. Default action is to "block" communications.,"The new firewall rule does not affect this connection. Default action is to ""block"" communications. Inbound UDP packet. Local address,service is (0.0.0.0,1026). Remote address,service is (221.211.255.10,32776). Process name is ""C:\WINDOWS\System32\svchost.exe""."
7/2/2005 6:30:05 PM,Internet Worm Protection configuration updated: 96 rules.,Internet Worm Protection configuration updated: 96 rules.
7/2/2005 6:30:05 PM,Internet Worm Protection configuration updated: 96 rules.,Internet Worm Protection configuration updated: 96 rules.
7/2/2005 6:30:05 PM,Internet Worm Protection configuration updated: 88 rules.,Internet Worm Protection configuration updated: 88 rules.
7/2/2005 6:30:05 PM,Internet Worm Protection configuration updated: 76 rules.,Internet Worm Protection configuration updated: 76 rules.
7/2/2005 6:30:05 PM,Internet Worm Protection configuration updated: 87 rules.,Internet Worm Protection configuration updated: 87 rules.
7/2/2005 6:30:05 PM,Internet Worm Protection configuration updated: 86 rules.,Internet Worm Protection configuration updated: 86 rules.
7/2/2005 6:30:05 PM,Internet Worm Protection configuration updated: 81 rules.,Internet Worm Protection configuration updated: 81 rules.
7/2/2005 6:30:05 PM,Internet Worm Protection configuration updated: 75 rules.,Internet Worm Protection configuration updated: 75 rules.
7/2/2005 6:30:05 PM,Internet Worm Protection configuration updated: 74 rules.,Internet Worm Protection configuration updated: 74 rules.
7/2/2005 6:30:00 PM,The new firewall rule does not affect this connection. Default action is to "block" communications.,"The new firewall rule does not affect this connection. Default action is to ""block"" communications. Inbound UDP packet. Local address,service is (0.0.0.0,1027). Remote address,service is (222.189.38.22,33358). Process name is ""C:\WINDOWS\System32\svchost.exe""."
7/2/2005 6:30:00 PM,Internet Worm Protection configuration updated: 96 rules.,Internet Worm Protection configuration updated: 96 rules.
7/2/2005 6:30:00 PM,Internet Worm Protection configuration updated: 96 rules.,Internet Worm Protection configuration updated: 96 rules.
7/2/2005 6:30:00 PM,Internet Worm Protection configuration updated: 88 rules.,Internet Worm Protection configuration updated: 88 rules.
7/2/2005 6:30:00 PM,Internet Worm Protection configuration updated: 86 rules.,Internet Worm Protection configuration updated: 86 rules.
7/2/2005 6:30:00 PM,Internet Worm Protection configuration updated: 87 rules.,Internet Worm Protection configuration updated: 87 rules.
7/2/2005 6:30:00 PM,Internet Worm Protection configuration updated: 76 rules.,Internet Worm Protection configuration updated: 76 rules.
7/2/2005 6:30:00 PM,Internet Worm Protection configuration updated: 81 rules.,Internet Worm Protection configuration updated: 81 rules.
7/2/2005 6:30:00 PM,Internet Worm Protection configuration updated: 75 rules.,Internet Worm Protection configuration updated: 75 rules.
7/2/2005 6:30:00 PM,Internet Worm Protection configuration updated: 74 rules.,Internet Worm Protection configuration updated: 74 rules.
7/2/2005 6:29:15 PM,Unused port blocking has blocked communications.,"Unused port blocking has blocked communications. Inbound TCP connection. Remote address,local service is (82.139.8.126,37008)."
7/2/2005 6:29:10 PM,Unused port blocking has blocked communications.,"Unused port blocking has blocked communications. Inbound TCP connection. Remote address,local service is (82.139.8.126,37008)."
7/2/2005 6:29:07 PM,Unused port blocking has blocked communications.,"Unused port blocking has blocked communications. Inbound TCP connection. Remote address,local service is (82.139.8.126,37008)."
7/2/2005 6:28:50 PM,"Rule ""Implicit block rule"" blocked (61.152.158.124,1026).","Rule ""Implicit block rule"" blocked (61.152.158.124,1026). Inbound UDP packet. Local address,service is (0.0.0.0,1026). Remote address,service is (61.152.158.124,33458). Process name is ""C:\WINDOWS\System32\svchost.exe""."
7/2/2005 6:28:50 PM,"Rule ""Implicit block rule"" blocked (61.152.158.124,1027).","Rule ""Implicit block rule"" blocked (61.152.158.124,1027). Inbound UDP packet. Local address,service is (0.0.0.0,1027). Remote address,service is (61.152.158.124,33458). Process name is ""C:\WINDOWS\System32\svchost.exe""."
7/2/2005 6:26:53 PM,Unused port blocking has blocked communications.,"Unused port blocking has blocked communications. Inbound TCP connection. Remote address,local service is (82.139.8.126,37008)."
7/2/2005 6:26:47 PM,Unused port blocking has blocked communications.,"Unused port blocking has blocked communications. Inbound TCP connection. Remote address,local service is (82.139.8.126,37008)."
7/2/2005 6:26:44 PM,Unused port blocking has blocked communications.,"Unused port blocking has blocked communications. Inbound TCP connection. Remote address,local service is (82.139.8.126,37008)."
7/2/2005 6:25:27 PM,An instance of "C:\Program Files\Internet Explorer\iexplore.exe" is preparing to access the Internet.,An instance of "C:\Program Files\Internet Explorer\iexplore.exe" is preparing to access the Internet.
7/2/2005 6:23:27 PM,Unused port blocking has blocked communications.,"Unused port blocking has blocked communications. Inbound TCP connection. Remote address,local service is (82.139.8.126,37008)."
7/2/2005 6:23:21 PM,Unused port blocking has blocked communications.,"Unused port blocking has blocked communications. Inbound TCP connection. Remote address,local service is (82.139.8.126,37008)."
7/2/2005 6:23:18 PM,Unused port blocking has blocked communications.,"Unused port blocking has blocked communications. Inbound TCP connection. Remote address,local service is (82.139.8.126,37008)."
7/2/2005 6:23:03 PM,"Rule ""Implicit block rule"" blocked (222.241.95.69,1026).","Rule ""Implicit block rule"" blocked (222.241.95.69,1026). Inbound UDP packet. Local address,service is (0.0.0.0,1026). Remote address,service is (222.241.95.69,32815). Process name is ""C:\WINDOWS\System32\svchost.exe""."
7/2/2005 6:21:17 PM,"Rule ""Implicit block rule"" blocked (70.85.177.154,1026).","Rule ""Implicit block rule"" blocked (70.85.177.154,1026). Inbound UDP packet. Local address,service is (0.0.0.0,1026). Remote address,service is (70.85.177.154,38645). Process name is ""C:\WINDOWS\System32\svchost.exe""."
7/2/2005 6:21:17 PM,"Rule ""Implicit block rule"" blocked (70.85.177.154,1027).","Rule ""Implicit block rule"" blocked (70.85.177.154,1027). Inbound UDP packet. Local address,service is (0.0.0.0,1027). Remote address,service is (70.85.177.154,38645). Process name is ""C:\WINDOWS\System32\svchost.exe""."
7/2/2005 6:18:55 PM,"Rule ""Implicit block rule"" blocked (221.211.255.12,1027).","Rule ""Implicit block rule"" blocked (221.211.255.12,1027). Inbound UDP packet. Local address,service is (0.0.0.0,1027). Remote address,service is (221.211.255.12,37201). Process name is ""C:\WINDOWS\System32\svchost.exe""."
7/2/2005 6:16:37 PM,"Rule ""Implicit block rule"" blocked (61.172.240.137,1026).","Rule ""Implicit block rule"" blocked (61.172.240.137,1026). Inbound UDP packet. Local address,service is (0.0.0.0,1026). Remote address,service is (61.172.240.137,32930). Process name is ""C:\WINDOWS\System32\svchost.exe""."
7/2/2005 6:15:49 PM,Unused port blocking has blocked communications.,"Unused port blocking has blocked communications. Inbound TCP connection. Remote address,local service is (82.139.8.126,37008)."
7/2/2005 6:15:43 PM,Unused port blocking has blocked communications.,"Unused port blocking has blocked communications. Inbound TCP connection. Remote address,local service is (82.139.8.126,37008)."
7/2/2005 6:15:40 PM,Unused port blocking has blocked communications.,"Unused port blocking has blocked communications. Inbound TCP connection. Remote address,local service is (82.139.8.126,37008)."
7/2/2005 6:15:35 PM,Unused port blocking has blocked communications.,"Unused port blocking has blocked communications. Inbound TCP connection. Remote address,local service is (211.137.99.247,4899)."
7/2/2005 6:13:34 PM,Unused port blocking has blocked communications.,"Unused port blocking has blocked communications. Inbound TCP connection. Remote address,local service is (216.117.189.25,2301)."
7/2/2005 6:12:59 PM,Unused port blocking has blocked communications.,"Unused port blocking has blocked communications. Inbound TCP connection. Remote address,local service is (82.139.8.126,37008)."
7/2/2005 6:12:53 PM,Unused port blocking has blocked communications.,"Unused port blocking has blocked communications. Inbound TCP connection. Remote address,local service is (82.139.8.126,37008)."
7/2/2005 6:12:50 PM,Unused port blocking has blocked communications.,"Unused port blocking has blocked communications. Inbound TCP connection. Remote address,local service is (82.139.8.126,37008)."
7/2/2005 6:07:11 PM,"Rule ""Implicit block rule"" blocked (61.53.154.89,1026).","Rule ""Implicit block rule"" blocked (61.53.154.89,1026). Inbound UDP packet. Local address,service is (0.0.0.0,1026). Remote address,service is (61.53.154.89,54108). Process name is ""C:\WINDOWS\System32\svchost.exe""."
7/2/2005 6:07:11 PM,"Rule ""Implicit block rule"" blocked (61.53.154.89,1027).","Rule ""Implicit block rule"" blocked (61.53.154.89,1027). Inbound UDP packet. Local address,service is (0.0.0.0,1027). Remote address,service is (61.53.154.89,54108). Process name is ""C:\WINDOWS\System32\svchost.exe""."
7/2/2005 6:06:55 PM,Unused port blocking has blocked communications.,"Unused port blocking has blocked communications. Inbound TCP connection. Remote address,local service is (82.139.8.126,37008)."
7/2/2005 6:06:52 PM,"Rule ""Implicit block rule"" blocked (222.241.95.69,1027).","Rule ""Implicit block rule"" blocked (222.241.95.69,1027). Inbound UDP packet. Local address,service is (0.0.0.0,1027). Remote address,service is (222.241.95.69,32815). Process name is ""C:\WINDOWS\System32\svchost.exe""."
7/2/2005 6:06:50 PM,Unused port blocking has blocked communications.,"Unused port blocking has blocked communications. Inbound TCP connection. Remote address,local service is (82.139.8.126,37008)."
7/2/2005 6:06:47 PM,Unused port blocking has blocked communications.,"Unused port blocking has blocked communications. Inbound TCP connection. Remote address,local service is (82.139.8.126,37008)."
7/2/2005 6:04:44 PM,Unused port blocking has blocked communications.,"Unused port blocking has blocked communications. Inbound TCP connection. Remote address,local service is (219.153.10.185,socks(1080))."
7/2/2005 6:04:27 PM,Unused port blocking has blocked communications.,"Unused port blocking has blocked communications. Inbound TCP connection. Remote address,local service is (220.79.196.141,4899)."
7/2/2005 6:03:31 PM,"Rule ""Implicit block rule"" blocked (218.92.13.74,1026).","Rule ""Implicit block rule"" blocked (218.92.13.74,1026). Inbound UDP packet. Local address,service is (0.0.0.0,1026). Remote address,service is (218.92.13.74,32786). Process name is ""C:\WINDOWS\System32\svchost.exe""."
7/2/2005 6:03:31 PM,"Rule ""Implicit block rule"" blocked (218.92.13.74,1027).","Rule ""Implicit block rule"" blocked (218.92.13.74,1027). Inbound UDP packet. Local address,service is (0.0.0.0,1027). Remote address,service is (218.92.13.74,32786). Process name is ""C:\WINDOWS\System32\svchost.exe""."
7/2/2005 6:03:14 PM,Unused port blocking has blocked communications.,"Unused port blocking has blocked communications. Inbound TCP connection. Remote address,local service is (82.139.8.126,37008)."
7/2/2005 6:03:08 PM,Unused port blocking has blocked communications.,"Unused port blocking has blocked communications. Inbound TCP connection. Remote address,local service is (82.139.8.126,37008)."
7/2/2005 6:03:05 PM,Unused port blocking has blocked communications.,"Unused port blocking has blocked communications. Inbound TCP connection. Remote address,local service is (82.139.8.126,37008)."
7/2/2005 6:01:06 PM,"Rule ""Implicit block rule"" blocked (222.241.95.3,1027).","Rule ""Implicit block rule"" blocked (222.241.95.3,1027). Inbound UDP packet. Local address,service is (0.0.0.0,1027). Remote address,service is (222.241.95.3,54691). Process name is ""C:\WINDOWS\System32\svchost.exe""."
7/2/2005 6:01:06 PM,"Rule ""Implicit block rule"" blocked (222.241.95.3,1026).","Rule ""Implicit block rule"" blocked (222.241.95.3,1026). Inbound UDP packet. Local address,service is (0.0.0.0,1026). Remote address,service is (222.241.95.3,54689). Process name is ""C:\WINDOWS\System32\svchost.exe""."
7/2/2005 6:01:01 PM,"Rule ""Implicit block rule"" blocked (222.136.251.121,1026).","Rule ""Implicit block rule"" blocked (222.136.251.121,1026). Inbound UDP packet. Local address,service is (0.0.0.0,1026). Remote address,service is (222.136.251.121,37892). Process name is ""C:\WINDOWS\System32\svchost.exe""."
7/2/2005 6:00:21 PM,Unused port blocking has blocked communications.,"Unused port blocking has blocked communications. Inbound TCP connection. Remote address,local service is (216.117.189.25,3128)."
7/2/2005 5:59:46 PM,Unused port blocking has blocked communications.,"Unused port blocking has blocked communications. Inbound TCP connection. Remote address,local service is (82.139.8.126,37008)."
7/2/2005 5:59:40 PM,Unused port blocking has blocked communications.,"Unused port blocking has blocked communications. Inbound TCP connection. Remote address,local service is (82.139.8.126,37008)."
7/2/2005 5:59:37 PM,Unused port blocking has blocked communications.,"Unused port blocking has blocked communications. Inbound TCP connection. Remote address,local service is (82.139.8.126,37008)."
7/2/2005 5:58:51 PM,"Rule ""Implicit block rule"" blocked (221.211.255.10,1026).","Rule ""Implicit block rule"" blocked (221.211.255.10,1026). Inbound UDP packet. Local address,service is (0.0.0.0,1026). Remote address,service is (221.211.255.10,32774). Process name is ""C:\WINDOWS\System32\svchost.exe""."
7/2/2005 5:57:57 PM,"Rule ""Implicit block rule"" blocked (222.47.183.141,1027).","Rule ""Implicit block rule"" blocked (222.47.183.141,1027). Inbound UDP packet. Local address,service is (0.0.0.0,1027). Remote address,service is (222.47.183.141,51488). Process name is ""C:\WINDOWS\System32\svchost.exe""."
7/2/2005 5:57:57 PM,"Rule ""Implicit block rule"" blocked (222.47.183.141,1026).","Rule ""Implicit block rule"" blocked (222.47.183.141,1026). Inbound UDP packet. Local address,service is (0.0.0.0,1026). Remote address,service is (222.47.183.141,49970). Process name is ""C:\WINDOWS\System32\svchost.exe""."
7/2/2005 5:56:50 PM,"Rule ""Implicit block rule"" blocked (212.87.29.133,1027).","Rule ""Implicit block rule"" blocked (212.87.29.133,1027). Inbound UDP packet. Local address,service is (0.0.0.0,1027). Remote address,service is (212.87.29.133,3583). Process name is ""C:\WINDOWS\System32\svchost.exe""."
7/2/2005 5:56:50 PM,"Rule ""Implicit block rule"" blocked (212.229.252.100,1026).","Rule ""Implicit block rule"" blocked (212.229.252.100,1026). Inbound UDP packet. Local address,service is (0.0.0.0,1026). Remote address,service is (212.229.252.100,7776). Process name is ""C:\WINDOWS\System32\svchost.exe""."
7/2/2005 5:54:15 PM,"Rule ""Implicit block rule"" blocked (221.211.255.12,1026).","Rule ""Implicit block rule"" blocked (221.211.255.12,1026). Inbound UDP packet. Local address,service is (0.0.0.0,1026). Remote address,service is (221.211.255.12,56452). Process name is ""C:\WINDOWS\System32\svchost.exe""."
7/2/2005 5:51:40 PM,Unused port blocking has blocked communications.,"Unused port blocking has blocked communications. Inbound TCP connection. Remote address,local service is (82.139.8.126,37008)."
7/2/2005 5:51:34 PM,Unused port blocking has blocked communications.,"Unused port blocking has blocked communications. Inbound TCP connection. Remote address,local service is (82.139.8.126,37008)."
7/2/2005 5:51:31 PM,Unused port blocking has blocked communications.,"Unused port blocking has blocked communications. Inbound TCP connection. Remote address,local service is (82.139.8.126,37008)."
7/2/2005 5:50:36 PM,"Rule ""Implicit block rule"" blocked (222.189.38.18,1026).","Rule ""Implicit block rule"" blocked (222.189.38.18,1026). Inbound UDP packet. Local address,service is (0.0.0.0,1026). Remote address,service is (222.189.38.18,33259). Process name is ""C:\WINDOWS\System32\svchost.exe""."
7/2/2005 5:50:36 PM,"Rule ""Implicit block rule"" blocked (222.189.38.18,1027).","Rule ""Implicit block rule"" blocked (222.189.38.18,1027). Inbound UDP packet. Local address,service is (0.0.0.0,1027). Remote address,service is (222.189.38.18,33259). Process name is ""C:\WINDOWS\System32\svchost.exe""."
7/2/2005 5:50:22 PM,Unused port blocking has blocked communications.,"Unused port blocking has blocked communications. Inbound TCP connection. Remote address,local service is (82.139.8.126,37008)."
7/2/2005 5:50:16 PM,Unused port blocking has blocked communications.,"Unused port blocking has blocked communications. Inbound TCP connection. Remote address,local service is (82.139.8.126,37008)."
7/2/2005 5:50:13 PM,Unused port blocking has blocked communications.,"Unused port blocking has blocked communications. Inbound TCP connection. Remote address,local service is (82.139.8.126,37008)."
7/2/2005 5:48:06 PM,"Rule ""Implicit block rule"" blocked (222.189.38.30,1027).","Rule ""Implicit block rule"" blocked (222.189.38.30,1027). Inbound UDP packet. Local address,service is (0.0.0.0,1027). Remote address,service is (222.189.38.30,32865). Process name is ""C:\WINDOWS\System32\svchost.exe""."
7/2/2005 5:48:06 PM,"Rule ""Implicit block rule"" blocked
  • 0

#6
KevinFF5

KevinFF5

    Member

  • Topic Starter
  • Member
  • PipPip
  • 34 posts
when i rebooted in safe mode and went to add or remove programs, spyware cleaner wasn't on the list. also the spyware cleaner folder wasn't there.

i fixed the spyware cleaner stuff on HJT here is a new log:
Logfile of HijackThis v1.99.1
Scan saved at 6:50:09 PM, on 7/2/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\hkcmd.exe
C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe
C:\Program Files\Java\jre1.5.0_02\bin\jusched.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\PROGRA~1\PANICW~1\POP-UP~1\PSFree.exe
C:\Program Files\AIM\aim.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
C:\Program Files\Common Files\Microsoft Shared\Works Shared\wkcalrem.exe
C:\Program Files\LimeWire\LimeWire.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Messenger\msmsgs.exe
C:\HJT\HijackThis.exe

R3 - URLSearchHook: AOLTBSearch Class - {EA756889-2338-43DB-8F07-D1CA6FB9C90D} - C:\Program Files\AOL\AOL Toolbar 2.0\aoltb.dll
O2 - BHO: AOL Toolbar Launcher - {7C554162-8CB7-45A4-B8F4-8EA1C75885F9} - C:\Program Files\AOL\AOL Toolbar 2.0\aoltb.dll
O2 - BHO: CNavExtBho Class - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: AOL Toolbar - {DE9C389F-3316-41A7-809B-AA305ED9D922} - C:\Program Files\AOL\AOL Toolbar 2.0\aoltb.dll
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [WorksFUD] C:\Program Files\Microsoft Works\wkfud.exe
O4 - HKLM\..\Run: [Microsoft Works Portfolio] C:\Program Files\Microsoft Works\WksSb.exe /AllUsers
O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_02\bin\jusched.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] C:\Program Files\iTunes\iTunesHelper.exe
O4 - HKLM\..\Run: [WildTangent CDA] "C:\Program Files\WildTangent\Apps\CDA\GameDrvr.exe" /startup "C:\Program Files\WildTangent\Apps\CDA\cdaEngine0500.dll"
O4 - HKLM\..\Run: [UserFaultCheck] %systemroot%\system32\dumprep 0 -u
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [PopUpStopperFreeEdition] "C:\PROGRA~1\PANICW~1\POP-UP~1\PSFree.exe"
O4 - HKCU\..\Run: [AIM] C:\Program Files\AIM\aim.exe -cnetwait.odl
O4 - Startup: LimeWire On Startup.lnk = C:\Program Files\LimeWire\LimeWire.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: Microsoft Works Calendar Reminders.lnk = ?
O8 - Extra context menu item: &AOL Toolbar Search - res://c:\program files\aol\aol toolbar 2.0\aoltbhtml.dll/search.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
O9 - Extra button: AOL Toolbar - {3369AF0D-62E9-4bda-8103-B4C75499B578} - C:\Program Files\AOL\AOL Toolbar 2.0\aoltb.dll
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {3A7FE611-1994-4EF1-A09F-99456752289D} - http://install.wildt...iveLauncher.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupd...b?1115290994280
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
  • 0

#7
KevinFF5

KevinFF5

    Member

  • Topic Starter
  • Member
  • PipPip
  • 34 posts
good news. i don't know what you did but the norton internet protection thing stopped popping up. thanks.
  • 0

#8
tampabelle

tampabelle

    Member 5k

  • Retired Staff
  • 6,363 posts
Hi,


Your HJT log is clean.


The Firewall is blocking the connection with some sites based in China

descr: China Telecom
descr: A12,Xin-Jie-Kou-Wai Street
descr: Beijing 100088
country: CN


Any idea if your PC should be accessing this site ???
  • 0

#9
KevinFF5

KevinFF5

    Member

  • Topic Starter
  • Member
  • PipPip
  • 34 posts
no idea what that is
  • 0

#10
tampabelle

tampabelle

    Member 5k

  • Retired Staff
  • 6,363 posts
Hi Kevin,

I was just crossing my fingers that you were in China :tazz: ;) Would have made life easier for me.


Can you go to Panda and do an online scan??

Save the scan report and post it here
  • 0

Advertisements


#11
KevinFF5

KevinFF5

    Member

  • Topic Starter
  • Member
  • PipPip
  • 34 posts
Incident Status Location

Adware:Adware/SaveNow No disinfected Windows Registry
Adware:Adware/Ndware No disinfected C:\WINDOWS\Downloaded Program Files\CONFLICT.1\epx30102.exe
Adware:Adware/Ndware No disinfected C:\WINDOWS\system32\gvija.exe
Adware:Adware/Neededware No disinfected C:\WINDOWS\system32\hzurndw30101lib.dll
  • 0

#12
tampabelle

tampabelle

    Member 5k

  • Retired Staff
  • 6,363 posts
Hi Kevin,

Please copy the following in a text file in Notepad and save it as 1.bat (make sure the save as Type is set to All Files) -

@echo off

attrib -a -h -r -s C:\WINDOWS\Downloaded Program Files\CONFLICT.1\epx30102.exe
attrib -a -h -r -s C:\WINDOWS\system32\gvija.exe
attrib -a -h -r -s C:\WINDOWS\system32\hzurndw30101lib.dll

del /q C:\WINDOWS\Downloaded Program Files\CONFLICT.1\epx30102.exe
del /q C:\WINDOWS\system32\gvija.exe
del /q C:\WINDOWS\system32\hzurndw30101lib.dll


Reboot the PC in Safe Mode.

Run 1.bat.

Reboot the PC in Normal Mode and post a fresh HJT log. Also let me know how the PC is behaving
  • 0

#13
KevinFF5

KevinFF5

    Member

  • Topic Starter
  • Member
  • PipPip
  • 34 posts
i didnt know if i was supposed to be "quote" in it or not, but i didnt.

Logfile of HijackThis v1.99.1
Scan saved at 3:18:32 AM, on 7/7/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\hkcmd.exe
C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe
C:\Program Files\Java\jre1.5.0_02\bin\jusched.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\PROGRA~1\PANICW~1\POP-UP~1\PSFree.exe
C:\Program Files\AIM\aim.exe
C:\Program Files\Common Files\Microsoft Shared\Works Shared\wkcalrem.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Messenger\msmsgs.exe
C:\HJT\HijackThis.exe

R3 - URLSearchHook: AOLTBSearch Class - {EA756889-2338-43DB-8F07-D1CA6FB9C90D} - C:\Program Files\AOL\AOL Toolbar 2.0\aoltb.dll
O2 - BHO: AOL Toolbar Launcher - {7C554162-8CB7-45A4-B8F4-8EA1C75885F9} - C:\Program Files\AOL\AOL Toolbar 2.0\aoltb.dll
O2 - BHO: CNavExtBho Class - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: AOL Toolbar - {DE9C389F-3316-41A7-809B-AA305ED9D922} - C:\Program Files\AOL\AOL Toolbar 2.0\aoltb.dll
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [WorksFUD] C:\Program Files\Microsoft Works\wkfud.exe
O4 - HKLM\..\Run: [Microsoft Works Portfolio] C:\Program Files\Microsoft Works\WksSb.exe /AllUsers
O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_02\bin\jusched.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] C:\Program Files\iTunes\iTunesHelper.exe
O4 - HKLM\..\Run: [WildTangent CDA] "C:\Program Files\WildTangent\Apps\CDA\GameDrvr.exe" /startup "C:\Program Files\WildTangent\Apps\CDA\cdaEngine0500.dll"
O4 - HKLM\..\Run: [UserFaultCheck] %systemroot%\system32\dumprep 0 -u
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [PopUpStopperFreeEdition] "C:\PROGRA~1\PANICW~1\POP-UP~1\PSFree.exe"
O4 - HKCU\..\Run: [AIM] C:\Program Files\AIM\aim.exe -cnetwait.odl
O4 - Startup: LimeWire On Startup.lnk = C:\Program Files\LimeWire\LimeWire.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: Microsoft Works Calendar Reminders.lnk = ?
O8 - Extra context menu item: &AOL Toolbar Search - res://c:\program files\aol\aol toolbar 2.0\aoltbhtml.dll/search.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
O9 - Extra button: AOL Toolbar - {3369AF0D-62E9-4bda-8103-B4C75499B578} - C:\Program Files\AOL\AOL Toolbar 2.0\aoltb.dll
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {3A7FE611-1994-4EF1-A09F-99456752289D} - http://install.wildt...iveLauncher.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupd...b?1115290994280
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://www.pandasoft.../as5/asinst.cab
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
  • 0

#14
tampabelle

tampabelle

    Member 5k

  • Retired Staff
  • 6,363 posts
Hi Kevin,

The reason I put it in Quotes is so that the text can be clearly demarked and there is no confusion on which text should be copied into the text file.

Do do the steps outlined in my previous post.

Let me know how your PC is behaving
  • 0

#15
KevinFF5

KevinFF5

    Member

  • Topic Starter
  • Member
  • PipPip
  • 34 posts
itunes won't open, other than that it's fine
  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP