all done, and here is the kaspersky scan result:
-------------------------------------------------------------------------------
KASPERSKY ON-LINE SCANNER REPORT
Tuesday, September 20, 2005 18:31:47
Operating System: Microsoft Windows XP Home Edition, Service Pack 2 (Build 2600)
Kaspersky On-line Scanner version: 5.0.67.0
Kaspersky Anti-Virus database last update: 20/09/2005
Kaspersky Anti-Virus database records: 141205
-------------------------------------------------------------------------------
Scan Settings:
Scan using the following antivirus database: standard
Scan Archives: true
Scan Mail Bases: true
Scan Target - My Computer:
A:\
C:\
D:\
E:\
F:\
G:\
H:\
I:\
Scan Statistics:
Total number of scanned objects: 143432
Number of viruses found: 34
Number of infected objects: 276
Number of suspicious objects: 30
Duration of the scan process: 5664 sec
Infected Object Name - Virus Name
C:\Documents and Settings\Owner\Local Settings\Application Data\Identities\{4F81C085-2651-4FE1-B186-FE401F94AA32}\Microsoft\Outlook Express\Deleted Items.dbx/[From <[email protected]>][Date Mon, 2 May 2005 07:25:58 -0800]/UNNAMED/document.zip/document.txt .scr Infected: Email-Worm.Win32.Mabutu.a
C:\Documents and Settings\Owner\Local Settings\Application Data\Identities\{4F81C085-2651-4FE1-B186-FE401F94AA32}\Microsoft\Outlook Express\Deleted Items.dbx/[From <[email protected]>][Date Mon, 2 May 2005 07:25:58 -0800]/UNNAMED/document.zip Infected: Email-Worm.Win32.Mabutu.a
C:\Documents and Settings\Owner\Local Settings\Application Data\Identities\{4F81C085-2651-4FE1-B186-FE401F94AA32}\Microsoft\Outlook Express\Deleted Items.dbx/[From <[email protected]>][Date Mon, 2 May 2005 07:25:58 -0800]/UNNAMED Infected: Email-Worm.Win32.Mabutu.a
C:\Documents and Settings\Owner\Local Settings\Application Data\Identities\{4F81C085-2651-4FE1-B186-FE401F94AA32}\Microsoft\Outlook Express\Deleted Items.dbx/[From LaSalle Bank Corporation <[email protected]>][Date Sun, 26 Jun 2005 05:45:10 +0100]/UNNAMED/html Suspicious: Trojan-Spy.HTML.Fraud.gen
C:\Documents and Settings\Owner\Local Settings\Application Data\Identities\{4F81C085-2651-4FE1-B186-FE401F94AA32}\Microsoft\Outlook Express\Deleted Items.dbx/[From LaSalle Bank Corporation <[email protected]>][Date Sun, 26 Jun 2005 05:45:10 +0100]/UNNAMED Suspicious: Trojan-Spy.HTML.Fraud.gen
C:\Documents and Settings\Owner\Local Settings\Application Data\Identities\{4F81C085-2651-4FE1-B186-FE401F94AA32}\Microsoft\Outlook Express\Deleted Items.dbx Infected: Trojan-Spy.HTML.Fraud.gen
C:\Documents and Settings\Owner\Local Settings\Application Data\Identities\{4F81C085-2651-4FE1-B186-FE401F94AA32}\Microsoft\Outlook Express\Sent Items.dbx/[From Smith Barney=20][Date Mon, 15 Nov 2004 13:05:22 -0800]/html Suspicious: Trojan-Spy.HTML.Fraud.gen
C:\Documents and Settings\Owner\Local Settings\Application Data\Identities\{4F81C085-2651-4FE1-B186-FE401F94AA32}\Microsoft\Outlook Express\Sent Items.dbx/[From <[email protected]>][Date Sun, 21 Nov 2004 11:02:45 -0800]/UNNAMED/UNNAMED/html Suspicious: Trojan-Spy.HTML.Fraud.gen
C:\Documents and Settings\Owner\Local Settings\Application Data\Identities\{4F81C085-2651-4FE1-B186-FE401F94AA32}\Microsoft\Outlook Express\Sent Items.dbx/[From <[email protected]>][Date Sun, 21 Nov 2004 11:02:45 -0800]/UNNAMED/UNNAMED Suspicious: Trojan-Spy.HTML.Fraud.gen
C:\Documents and Settings\Owner\Local Settings\Application Data\Identities\{4F81C085-2651-4FE1-B186-FE401F94AA32}\Microsoft\Outlook Express\Sent Items.dbx/[From <[email protected]>][Date Sun, 21 Nov 2004 11:02:45 -0800]/UNNAMED Suspicious: Trojan-Spy.HTML.Fraud.gen
C:\Documents and Settings\Owner\Local Settings\Application Data\Identities\{4F81C085-2651-4FE1-B186-FE401F94AA32}\Microsoft\Outlook Express\Sent Items.dbx/[From <[email protected]>][Date Wed, 24 Nov 2004 12:03:15 -0800]/UNNAMED/UNNAMED/html Suspicious: Trojan-Spy.HTML.Fraud.gen
C:\Documents and Settings\Owner\Local Settings\Application Data\Identities\{4F81C085-2651-4FE1-B186-FE401F94AA32}\Microsoft\Outlook Express\Sent Items.dbx/[From <[email protected]>][Date Wed, 24 Nov 2004 12:03:15 -0800]/UNNAMED/UNNAMED Suspicious: Trojan-Spy.HTML.Fraud.gen
C:\Documents and Settings\Owner\Local Settings\Application Data\Identities\{4F81C085-2651-4FE1-B186-FE401F94AA32}\Microsoft\Outlook Express\Sent Items.dbx/[From <[email protected]>][Date Wed, 24 Nov 2004 12:03:15 -0800]/UNNAMED Suspicious: Trojan-Spy.HTML.Fraud.gen
C:\Documents and Settings\Owner\Local Settings\Application Data\Identities\{4F81C085-2651-4FE1-B186-FE401F94AA32}\Microsoft\Outlook Express\Sent Items.dbx/[From <[email protected]>][Date Tue, 14 Dec 2004 18:19:05 -0800]/UNNAMED/html Suspicious: Trojan-Spy.HTML.Fraud.gen
C:\Documents and Settings\Owner\Local Settings\Application Data\Identities\{4F81C085-2651-4FE1-B186-FE401F94AA32}\Microsoft\Outlook Express\Sent Items.dbx/[From <[email protected]>][Date Tue, 14 Dec 2004 18:19:05 -0800]/UNNAMED Suspicious: Trojan-Spy.HTML.Fraud.gen
C:\Documents and Settings\Owner\Local Settings\Application Data\Identities\{4F81C085-2651-4FE1-B186-FE401F94AA32}\Microsoft\Outlook Express\Sent Items.dbx/[From <[email protected]>][Date Sat, 18 Dec 2004 11:15:11 -0800]/UNNAMED/UNNAMED/html Suspicious: Trojan-Spy.HTML.Fraud.gen
C:\Documents and Settings\Owner\Local Settings\Application Data\Identities\{4F81C085-2651-4FE1-B186-FE401F94AA32}\Microsoft\Outlook Express\Sent Items.dbx/[From <[email protected]>][Date Sat, 18 Dec 2004 11:15:11 -0800]/UNNAMED/UNNAMED Suspicious: Trojan-Spy.HTML.Fraud.gen
C:\Documents and Settings\Owner\Local Settings\Application Data\Identities\{4F81C085-2651-4FE1-B186-FE401F94AA32}\Microsoft\Outlook Express\Sent Items.dbx/[From <[email protected]>][Date Sat, 18 Dec 2004 11:15:11 -0800]/UNNAMED Suspicious: Trojan-Spy.HTML.Fraud.gen
C:\Documents and Settings\Owner\Local Settings\Application Data\Identities\{4F81C085-2651-4FE1-B186-FE401F94AA32}\Microsoft\Outlook Express\Sent Items.dbx Suspicious: Trojan-Spy.HTML.Fraud.gen
C:\Documents and Settings\Owner\Local Settings\Application Data\Identities\{A2215423-984B-4988-8B69-54CEE7D83A74}\Microsoft\Outlook Express\Phase002 (3).dbx/[From PayPal Account Review Department <[email protected]>][Date 1 Sep 2005 17:13:15 -0000]/html/UNNAMED Suspicious: Trojan-Spy.HTML.Fraud.gen
C:\Documents and Settings\Owner\Local Settings\Application Data\Identities\{A2215423-984B-4988-8B69-54CEE7D83A74}\Microsoft\Outlook Express\Phase002 (3).dbx/[From PayPal Account Review Department <[email protected]>][Date 1 Sep 2005 17:13:15 -0000]/html Suspicious: Trojan-Spy.HTML.Fraud.gen
C:\Documents and Settings\Owner\Local Settings\Application Data\Identities\{A2215423-984B-4988-8B69-54CEE7D83A74}\Microsoft\Outlook Express\Phase002 (3).dbx/[From PayPal Account Review Department <[email protected]>][Date 1 Sep 2005 17:13:15 -0000]/html/UNNAMED Suspicious: Trojan-Spy.HTML.Fraud.gen
C:\Documents and Settings\Owner\Local Settings\Application Data\Identities\{A2215423-984B-4988-8B69-54CEE7D83A74}\Microsoft\Outlook Express\Phase002 (3).dbx/[From PayPal Account Review Department <[email protected]>][Date 1 Sep 2005 17:13:15 -0000]/html Suspicious: Trojan-Spy.HTML.Fraud.gen
C:\Documents and Settings\Owner\Local Settings\Application Data\Identities\{A2215423-984B-4988-8B69-54CEE7D83A74}\Microsoft\Outlook Express\Phase002 (3).dbx Suspicious: Trojan-Spy.HTML.Fraud.gen
C:\Program Files\Norton AntiVirus\Quarantine\001B073A Infected: Email-Worm.Win32.Bagle.z
C:\Program Files\Norton AntiVirus\Quarantine\002D6B48 Infected: Email-Worm.Win32.Bagle.ah
C:\Program Files\Norton AntiVirus\Quarantine\005814F7 Infected: Email-Worm.Win32.Bagle.z
C:\Program Files\Norton AntiVirus\Quarantine\00A30D9A Infected: Email-Worm.Win32.Bagle.ah
C:\Program Files\Norton AntiVirus\Quarantine\00AE710C Infected: Trojan.JS.StartPage.u
C:\Program Files\Norton AntiVirus\Quarantine\00C170FC Infected: Email-Worm.Win32.Klez.h
C:\Program Files\Norton AntiVirus\Quarantine\0278662B Infected: Email-Worm.Win32.Bagle.z
C:\Program Files\Norton AntiVirus\Quarantine\03B57979 Infected: Email-Worm.Win32.Bagle.z
C:\Program Files\Norton AntiVirus\Quarantine\04252FF1 Infected: Email-Worm.Win32.Bagle.z
C:\Program Files\Norton AntiVirus\Quarantine\0435444B.class Infected: Exploit.Java.Bytverify
C:\Program Files\Norton AntiVirus\Quarantine\049A6786 Infected: Email-Worm.Win32.Klez.h
C:\Program Files\Norton AntiVirus\Quarantine\05377A76 Infected: Email-Worm.Win32.Klez.h
C:\Program Files\Norton AntiVirus\Quarantine\07032231 Infected: Email-Worm.Win32.Bagle.z
C:\Program Files\Norton AntiVirus\Quarantine\07E349F8 Infected: Email-Worm.Win32.Bagle.y
C:\Program Files\Norton AntiVirus\Quarantine\08154722 Infected: Email-Worm.Win32.Klez.h
C:\Program Files\Norton AntiVirus\Quarantine\0895751D Infected: Email-Worm.Win32.Bagle.gen
C:\Program Files\Norton AntiVirus\Quarantine\09247B5B/[From "Hafpak" <[email protected]>][Date Mon, 28 Feb 2005 06:54:28 +0100]/wsd01.cpl Infected: Email-Worm.Win32.Bagle.at
C:\Program Files\Norton AntiVirus\Quarantine\09247B5B Infected: Email-Worm.Win32.Bagle.at
C:\Program Files\Norton AntiVirus\Quarantine\092545C4 Infected: Email-Worm.Win32.Bagle.z
C:\Program Files\Norton AntiVirus\Quarantine\0A4A3A3D Infected: Email-Worm.Win32.NetSky.q
C:\Program Files\Norton AntiVirus\Quarantine\0B405CFF.js Infected: Trojan-Downloader.JS.Psyme.d
C:\Program Files\Norton AntiVirus\Quarantine\0B4306FB.php Infected: Trojan-Downloader.JS.Small.d
C:\Program Files\Norton AntiVirus\Quarantine\0B5702E5.class Infected: Trojan.Java.ClassLoader.d
C:\Program Files\Norton AntiVirus\Quarantine\0C627E5D Infected: Email-Worm.Win32.Bagle.z
C:\Program Files\Norton AntiVirus\Quarantine\0C6C73B4.class Infected: Trojan.Java.ClassLoader.f
C:\Program Files\Norton AntiVirus\Quarantine\0C6C73B4.htm Infected: Exploit.HTML.Mht
C:\Program Files\Norton AntiVirus\Quarantine\0C7347AD.htm Infected: Exploit.HTML.Mht
C:\Program Files\Norton AntiVirus\Quarantine\0CAE0559 Infected: Email-Worm.Win32.Bagle.z
C:\Program Files\Norton AntiVirus\Quarantine\0DAA1B06 Infected: Email-Worm.Win32.Bagle.z
C:\Program Files\Norton AntiVirus\Quarantine\0DB03050.class Infected: Trojan.Java.ClassLoader.c
C:\Program Files\Norton AntiVirus\Quarantine\0EA6411E Infected: Trojan-Downloader.Win32.Small.vs
C:\Program Files\Norton AntiVirus\Quarantine\0F262E6F Infected: Email-Worm.Win32.Bagle.y
C:\Program Files\Norton AntiVirus\Quarantine\103C3883 Infected: Email-Worm.Win32.Bagle.z
C:\Program Files\Norton AntiVirus\Quarantine\10FC5BD7 Infected: Email-Worm.Win32.Bagle.z
C:\Program Files\Norton AntiVirus\Quarantine\11F6219C.class Infected: Exploit.Java.Bytverify
C:\Program Files\Norton AntiVirus\Quarantine\11F6219C.html Infected: Exploit.HTML.Mht
C:\Program Files\Norton AntiVirus\Quarantine\134776E6 Infected: Email-Worm.Win32.Bagle.z
C:\Program Files\Norton AntiVirus\Quarantine\135A0215.js Infected: Trojan-Downloader.JS.Psyme.d
C:\Program Files\Norton AntiVirus\Quarantine\13AA7BD3 Infected: Email-Worm.Win32.Bagle.ah
C:\Program Files\Norton AntiVirus\Quarantine\14254D0D Infected: Email-Worm.Win32.Bagle.gen
C:\Program Files\Norton AntiVirus\Quarantine\145F20F5.js Infected: Trojan-Downloader.JS.Psyme.d
C:\Program Files\Norton AntiVirus\Quarantine\14851791 Infected: Email-Worm.Win32.Bagle.z
C:\Program Files\Norton AntiVirus\Quarantine\149016BF.class Infected: Trojan.Java.ClassLoader.f
C:\Program Files\Norton AntiVirus\Quarantine\149016BF.htm Infected: Exploit.HTML.Mht
C:\Program Files\Norton AntiVirus\Quarantine\149340BC.class Infected: Exploit.Java.Bytverify
C:\Program Files\Norton AntiVirus\Quarantine\152D5660.class Infected: Exploit.Java.Bytverify
C:\Program Files\Norton AntiVirus\Quarantine\154D19EF.htm Infected: Exploit.HTML.Mht
C:\Program Files\Norton AntiVirus\Quarantine\155043EB.class Infected: Trojan-Downloader.Java.OpenConnection.b
C:\Program Files\Norton AntiVirus\Quarantine\155717E4.js Infected: Trojan-Downloader.JS.Psyme.d
C:\Program Files\Norton AntiVirus\Quarantine\16005026 Infected: Email-Worm.Win32.Bagle.z
C:\Program Files\Norton AntiVirus\Quarantine\16BF1D42 Infected: Email-Worm.Win32.Bagle.z
C:\Program Files\Norton AntiVirus\Quarantine\16CF6264.dat Infected: Exploit.Win32.MS04-028.gen
C:\Program Files\Norton AntiVirus\Quarantine\181406F2 Infected: Email-Worm.Win32.Bagle.z
C:\Program Files\Norton AntiVirus\Quarantine\183D2118.class Infected: Trojan.Java.Shiwow
C:\Program Files\Norton AntiVirus\Quarantine\18627B0C.scr Infected: Email-Worm.Win32.NetSky.q
C:\Program Files\Norton AntiVirus\Quarantine\189046DA.scr Infected: Email-Worm.Win32.NetSky.q
C:\Program Files\Norton AntiVirus\Quarantine\189356FC Infected: Email-Worm.Win32.Klez.h
C:\Program Files\Norton AntiVirus\Quarantine\189B144C.class Infected: Trojan-Downloader.Java.OpenConnection.b
C:\Program Files\Norton AntiVirus\Quarantine\189B144C.htm Infected: Exploit.HTML.Mht
C:\Program Files\Norton AntiVirus\Quarantine\189C6437 Infected: Email-Worm.Win32.Bagle.gen
C:\Program Files\Norton AntiVirus\Quarantine\18F0592B Infected: Email-Worm.Win32.Bagle.gen
C:\Program Files\Norton AntiVirus\Quarantine\19AD29F9 Infected: Email-Worm.Win32.Klez.h
C:\Program Files\Norton AntiVirus\Quarantine\19C40AB5 Infected: Email-Worm.Win32.Bagle.y
C:\Program Files\Norton AntiVirus\Quarantine\19D223DF Infected: Email-Worm.Win32.Bagle.z
C:\Program Files\Norton AntiVirus\Quarantine\1AF73577 Infected: Email-Worm.Win32.Bagle.z
C:\Program Files\Norton AntiVirus\Quarantine\1B01336C Infected: Email-Worm.Win32.Bagle.y
C:\Program Files\Norton AntiVirus\Quarantine\1B0B3161 Infected: Email-Worm.Win32.Bagle.z
C:\Program Files\Norton AntiVirus\Quarantine\1B53034F.class Infected: Trojan.Java.ClassLoader.l
C:\Program Files\Norton AntiVirus\Quarantine\1B562D4B.class Infected: Exploit.Java.Bytverify
C:\Program Files\Norton AntiVirus\Quarantine\1B5C0144.js Infected: Trojan-Downloader.JS.Psyme.m
C:\Program Files\Norton AntiVirus\Quarantine\1B78057E Infected: Email-Worm.Win32.Bagle.z
C:\Program Files\Norton AntiVirus\Quarantine\1B780CB6 Infected: Email-Worm.Win32.Bagle.y
C:\Program Files\Norton AntiVirus\Quarantine\1B9E4EFA Infected: Email-Worm.Win32.Bagle.z
C:\Program Files\Norton AntiVirus\Quarantine\1CC434D4 Infected: Email-Worm.Win32.Klez.h
C:\Program Files\Norton AntiVirus\Quarantine\1CCF4F68 Infected: Email-Worm.Win32.Bagle.z
C:\Program Files\Norton AntiVirus\Quarantine\1DF36CE9 Infected: Email-Worm.Win32.Bagle.z
C:\Program Files\Norton AntiVirus\Quarantine\1E9903F7 Infected: Email-Worm.Win32.Bagle.z
C:\Program Files\Norton AntiVirus\Quarantine\1F5D39B3.class Infected: Exploit.Java.Bytverify
C:\Program Files\Norton AntiVirus\Quarantine\1F980231.class Infected: Exploit.Java.Bytverify
C:\Program Files\Norton AntiVirus\Quarantine\1FE113D3 Infected: Email-Worm.Win32.Bagle.z
C:\Program Files\Norton AntiVirus\Quarantine\1FFA23FD.class Infected: Trojan.Java.ClassLoader.c
C:\Program Files\Norton AntiVirus\Quarantine\20C06F0B Infected: Email-Worm.Win32.Bagle.z
C:\Program Files\Norton AntiVirus\Quarantine\20F838CE Infected: Email-Worm.Win32.Bagle.y
C:\Program Files\Norton AntiVirus\Quarantine\21084D71 Infected: Email-Worm.Win32.Bagle.z
C:\Program Files\Norton AntiVirus\Quarantine\21E4221F Infected: Email-Worm.Win32.Bagle.z
C:\Program Files\Norton AntiVirus\Quarantine\23903096 Infected: Email-Worm.Win32.Bagle.ah
C:\Program Files\Norton AntiVirus\Quarantine\23B941AC Infected: Email-Worm.Win32.Bagle.z
C:\Program Files\Norton AntiVirus\Quarantine\2464370A Infected: Email-Worm.Win32.Bagle.z
C:\Program Files\Norton AntiVirus\Quarantine\24C00BF1 Infected: Email-Worm.Win32.Klez.h
C:\Program Files\Norton AntiVirus\Quarantine\25562AFE Infected: Email-Worm.Win32.Bagle.ah
C:\Program Files\Norton AntiVirus\Quarantine\26FA1E43 Infected: Email-Worm.Win32.Bagle.z
C:\Program Files\Norton AntiVirus\Quarantine\278A7B36.class Infected: Exploit.Java.Bytverify
C:\Program Files\Norton AntiVirus\Quarantine\27CB31F7 Infected: Email-Worm.Win32.Bagle.ah
C:\Program Files\Norton AntiVirus\Quarantine\28732453/[From "Hafpak" <[email protected]>][Date Tue, 01 Mar 2005 11:27:40 +0100]/siupd02.cpl Infected: Email-Worm.Win32.Bagle.at
C:\Program Files\Norton AntiVirus\Quarantine\28732453 Infected: Email-Worm.Win32.Bagle.at
C:\Program Files\Norton AntiVirus\Quarantine\28846E88 Infected: Email-Worm.Win32.Bagle.ah
C:\Program Files\Norton AntiVirus\Quarantine\28B96DD1.class Infected: Exploit.Java.Bytverify
C:\Program Files\Norton AntiVirus\Quarantine\28F46347 Infected: Email-Worm.Win32.Bagle.z
C:\Program Files\Norton AntiVirus\Quarantine\29784B3E Infected: Email-Worm.Win32.Bagle.gen
C:\Program Files\Norton AntiVirus\Quarantine\29CF134B/Informations.txt .exe Infected: Email-Worm.Win32.NetSky.aa
C:\Program Files\Norton AntiVirus\Quarantine\29CF134B Infected: Email-Worm.Win32.NetSky.aa
C:\Program Files\Norton AntiVirus\Quarantine\2A3172BA Infected: Email-Worm.Win32.Bagle.z
C:\Program Files\Norton AntiVirus\Quarantine\2A4F0037.class Infected: Trojan.Java.ClassLoader.f
C:\Program Files\Norton AntiVirus\Quarantine\2A9E0DFA Infected: Email-Worm.Win32.Bagle.z
C:\Program Files\Norton AntiVirus\Quarantine\2AE464D7 Infected: Email-Worm.Win32.Bagle.z
C:\Program Files\Norton AntiVirus\Quarantine\2B1520DD Infected: Email-Worm.Win32.Klez.h
C:\Program Files\Norton AntiVirus\Quarantine\2C501415.class Infected: Exploit.Java.Bytverify
C:\Program Files\Norton AntiVirus\Quarantine\2D1373CD Infected: Email-Worm.Win32.Bagle.ba
C:\Program Files\Norton AntiVirus\Quarantine\2FB821E2/balecolu.scr Suspicious: Password-protected-EXE
C:\Program Files\Norton AntiVirus\Quarantine\2FB821E2 Suspicious: Password-protected-EXE
C:\Program Files\Norton AntiVirus\Quarantine\301C7B11 Infected: Email-Worm.Win32.Bagle.ah
C:\Program Files\Norton AntiVirus\Quarantine\30CE6FBC Infected: Email-Worm.Win32.Bagle.y
C:\Program Files\Norton AntiVirus\Quarantine\31A2076C Infected: Email-Worm.Win32.Bagle.z
C:\Program Files\Norton AntiVirus\Quarantine\31D05339 Infected: Email-Worm.Win32.Bagle.z
C:\Program Files\Norton AntiVirus\Quarantine\31DA512F Infected: Email-Worm.Win32.Bagle.z
C:\Program Files\Norton AntiVirus\Quarantine\32C931C8 Infected: Email-Worm.Win32.Bagle.gen
C:\Program Files\Norton AntiVirus\Quarantine\32F812D5 Infected: Email-Worm.Win32.NetSky.d
C:\Program Files\Norton AntiVirus\Quarantine\340A2660 Infected: Email-Worm.Win32.Bagle.z
C:\Program Files\Norton AntiVirus\Quarantine\34311E34 Infected: Email-Worm.Win32.Bagle.y
C:\Program Files\Norton AntiVirus\Quarantine\343B1C2A Infected: Email-Worm.Win32.Bagle.z
C:\Program Files\Norton AntiVirus\Quarantine\34F50C95 Infected: Email-Worm.Win32.Bagle.ah
C:\Program Files\Norton AntiVirus\Quarantine\35A441D7 Infected: Email-Worm.Win32.Bagle.z
C:\Program Files\Norton AntiVirus\Quarantine\36D3435E/[From "Hafpak" <[email protected]>][Date Mon, 28 Feb 2005 13:30:20 +0100]/siupd02.cpl Infected: Email-Worm.Win32.Bagle.at
C:\Program Files\Norton AntiVirus\Quarantine\36D3435E Infected: Email-Worm.Win32.Bagle.at
C:\Program Files\Norton AntiVirus\Quarantine\3756763F Infected: Email-Worm.Win32.Klez.h
C:\Program Files\Norton AntiVirus\Quarantine\37AA5FF6 Infected: Email-Worm.Win32.Bagle.z
C:\Program Files\Norton AntiVirus\Quarantine\37E05014.htm Infected: Trojan-Downloader.JS.Small.d
C:\Program Files\Norton AntiVirus\Quarantine\38042EE2 Infected: Email-Worm.Win32.Bagle.z
C:\Program Files\Norton AntiVirus\Quarantine\38480B03/Important.txt .exe Infected: Email-Worm.Win32.NetSky.aa
C:\Program Files\Norton AntiVirus\Quarantine\38480B03 Infected: Email-Worm.Win32.NetSky.aa
C:\Program Files\Norton AntiVirus\Quarantine\388566DD Infected: Email-Worm.Win32.Bagle.z
C:\Program Files\Norton AntiVirus\Quarantine\3DF21707 Infected: Email-Worm.Win32.Bagle.gen
C:\Program Files\Norton AntiVirus\Quarantine\3F0C25EB Infected: Email-Worm.Win32.Bagle.y
C:\Program Files\Norton AntiVirus\Quarantine\404F2568 Infected: Email-Worm.Win32.Bagle.z
C:\Program Files\Norton AntiVirus\Quarantine\40655124 Infected: Email-Worm.Win32.Bagle.ah
C:\Program Files\Norton AntiVirus\Quarantine\406F6AFD Infected: Email-Worm.Win32.Bagle.z
C:\Program Files\Norton AntiVirus\Quarantine\409C1A2A Infected: Email-Worm.Win32.Klez.h
C:\Program Files\Norton AntiVirus\Quarantine\40A25EE2 Infected: Email-Worm.Win32.Bagle.ah
C:\Program Files\Norton AntiVirus\Quarantine\411A209B Infected: Email-Worm.Win32.Bagle.z
C:\Program Files\Norton AntiVirus\Quarantine\41674A8A.htm Infected: Exploit.HTML.Mht
C:\Program Files\Norton AntiVirus\Quarantine\41CC5213/zobyhyna.exe Suspicious: Password-protected-EXE
C:\Program Files\Norton AntiVirus\Quarantine\41CC5213 Suspicious: Password-protected-EXE
C:\Program Files\Norton AntiVirus\Quarantine\42B774D9 Infected: Email-Worm.Win32.Bagle.ba
C:\Program Files\Norton AntiVirus\Quarantine\445110A5 Infected: Email-Worm.Win32.Bagle.y
C:\Program Files\Norton AntiVirus\Quarantine\44B85A8C Infected: Email-Worm.Win32.Bagle.z
C:\Program Files\Norton AntiVirus\Quarantine\45261A22 Infected: Email-Worm.Win32.Klez.h
C:\Program Files\Norton AntiVirus\Quarantine\454A0A08 Infected: Email-Worm.Win32.Bagle.z
C:\Program Files\Norton AntiVirus\Quarantine\46330767 Infected: Email-Worm.Win32.Bagle.ah
C:\Program Files\Norton AntiVirus\Quarantine\463941B0 Infected: Trojan-Dropper.Win32.Small.hx
C:\Program Files\Norton AntiVirus\Quarantine\46987E07 Infected: Email-Worm.Win32.Klez.h
C:\Program Files\Norton AntiVirus\Quarantine\483771D6.dll Infected: Trojan.Win32.StartPage.is
C:\Program Files\Norton AntiVirus\Quarantine\4A6D4FD7 Infected: Email-Worm.Win32.Bagle.z
C:\Program Files\Norton AntiVirus\Quarantine\4BBC6FBA Infected: Email-Worm.Win32.Bagle.z
C:\Program Files\Norton AntiVirus\Quarantine\4CC500F4 Infected: Email-Worm.Win32.Bagle.z
C:\Program Files\Norton AntiVirus\Quarantine\4D076A11 Infected: Email-Worm.Win32.Bagle.ah
C:\Program Files\Norton AntiVirus\Quarantine\4E1E512D Infected: Email-Worm.Win32.Bagle.z
C:\Program Files\Norton AntiVirus\Quarantine\4E3A014C Infected: Email-Worm.Win32.Bagle.z
C:\Program Files\Norton AntiVirus\Quarantine\4E3B4B0C Infected: Email-Worm.Win32.Bagle.z
C:\Program Files\Norton AntiVirus\Quarantine\4E75750B Infected: Email-Worm.Win32.Bagle.z
C:\Program Files\Norton AntiVirus\Quarantine\4E871064 Infected: Email-Worm.Win32.Bagle.gen
C:\Program Files\Norton AntiVirus\Quarantine\4E8F44EE Infected: Email-Worm.Win32.Bagle.gen
C:\Program Files\Norton AntiVirus\Quarantine\4ECB23AB Infected: Email-Worm.Win32.Bagle.ah
C:\Program Files\Norton AntiVirus\Quarantine\4ECE77BE Infected: Email-Worm.Win32.Bagle.z
C:\Program Files\Norton AntiVirus\Quarantine\4FB4697A Infected: Email-Worm.Win32.Bagle.z
C:\Program Files\Norton AntiVirus\Quarantine\50551D73 Infected: Email-Worm.Win32.Bagle.z
C:\Program Files\Norton AntiVirus\Quarantine\51C22E1A Infected: Email-Worm.Win32.Bagle.gen
C:\Program Files\Norton AntiVirus\Quarantine\51F67083/[From [email protected]][Date Tue, 10 May 2005 12:33:23 +0200]/UNNAMED/html Suspicious: Exploit.HTML.Iframe.FileDownload
C:\Program Files\Norton AntiVirus\Quarantine\51F67083/[From [email protected]][Date Tue, 10 May 2005 12:33:23 +0200]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload
C:\Program Files\Norton AntiVirus\Quarantine\51F67083 Suspicious: Exploit.HTML.Iframe.FileDownload
C:\Program Files\Norton AntiVirus\Quarantine\52B70563.class Infected: Exploit.Java.Bytverify
C:\Program Files\Norton AntiVirus\Quarantine\545247EA/data.rtf .scr Infected: Email-Worm.Win32.NetSky.q
C:\Program Files\Norton AntiVirus\Quarantine\545247EA Infected: Email-Worm.Win32.NetSky.q
C:\Program Files\Norton AntiVirus\Quarantine\548A32FA Infected: Email-Worm.Win32.Bagle.z
C:\Program Files\Norton AntiVirus\Quarantine\56693F80 Infected: Email-Worm.Win32.Bagle.ah
C:\Program Files\Norton AntiVirus\Quarantine\57774D3E Infected: Email-Worm.Win32.Bagle.ah
C:\Program Files\Norton AntiVirus\Quarantine\585A15F8 Infected: Email-Worm.Win32.Bagle.gen
C:\Program Files\Norton AntiVirus\Quarantine\59762948 Infected: Email-Worm.Win32.Bagle.ah
C:\Program Files\Norton AntiVirus\Quarantine\5A5C62CE Infected: Email-Worm.Win32.Bagle.gen
C:\Program Files\Norton AntiVirus\Quarantine\5A89184B Infected: Email-Worm.Win32.Bagle.y
C:\Program Files\Norton AntiVirus\Quarantine\5AF5345F.class Infected: Trojan.Java.ClassLoader.c
C:\Program Files\Norton AntiVirus\Quarantine\5B5D674A Infected: Email-Worm.Win32.Bagle.z
C:\Program Files\Norton AntiVirus\Quarantine\5BCF1AA1 Infected: Email-Worm.Win32.Bagle.gen
C:\Program Files\Norton AntiVirus\Quarantine\5C794864.scr Infected: Email-Worm.Win32.NetSky.q
C:\Program Files\Norton AntiVirus\Quarantine\5CBC141B Infected: Email-Worm.Win32.Bagle.z
C:\Program Files\Norton AntiVirus\Quarantine\5D8125ED Infected: Email-Worm.Win32.Bagle.y
C:\Program Files\Norton AntiVirus\Quarantine\5DBE6E7F Infected: Email-Worm.Win32.Bagle.y
C:\Program Files\Norton AntiVirus\Quarantine\5ECA6F35 Infected: Email-Worm.Win32.Bagle.z
C:\Program Files\Norton AntiVirus\Quarantine\5F6C2A65 Infected: Email-Worm.Win32.Bagle.z
C:\Program Files\Norton AntiVirus\Quarantine\61CC6C27.class Infected: Trojan-Downloader.Java.OpenConnection.v
C:\Program Files\Norton AntiVirus\Quarantine\620F2647 Infected: Email-Worm.Win32.Bagle.z
C:\Program Files\Norton AntiVirus\Quarantine\634F4AA5.class Infected: Trojan.Java.Shiwow
C:\Program Files\Norton AntiVirus\Quarantine\64D25119 Infected: Email-Worm.Win32.Bagle.ah
C:\Program Files\Norton AntiVirus\Quarantine\65527FE6 Infected: Email-Worm.Win32.Bagle.z
C:\Program Files\Norton AntiVirus\Quarantine\66002CA4 Infected: Email-Worm.Win32.Bagle.gen
C:\Program Files\Norton AntiVirus\Quarantine\66016FB3.class Infected: Trojan.Java.ClassLoader.Dummy.a
C:\Program Files\Norton AntiVirus\Quarantine\66D6297C Infected: Trojan.JS.StartPage.u
C:\Program Files\Norton AntiVirus\Quarantine\676C78D6.class Infected: Trojan.Java.ClassLoader.c
C:\Program Files\Norton AntiVirus\Quarantine\67E61DF2 Infected: Email-Worm.Win32.Bagle.ah
C:\Program Files\Norton AntiVirus\Quarantine\68074778/details.txt .pif Infected: Email-Worm.Win32.NetSky.q
C:\Program Files\Norton AntiVirus\Quarantine\68074778 Infected: Email-Worm.Win32.NetSky.q
C:\Program Files\Norton AntiVirus\Quarantine\68CB5934 Infected: Email-Worm.Win32.Bagle.y
C:\Program Files\Norton AntiVirus\Quarantine\68D45326 Infected: Email-Worm.Win32.NetSky.aa
C:\Program Files\Norton AntiVirus\Quarantine\6A0A1D26 Infected: Email-Worm.Win32.Bagle.z
C:\Program Files\Norton AntiVirus\Quarantine\6A5C22C5.class Infected: Exploit.Java.Bytverify
C:\Program Files\Norton AntiVirus\Quarantine\6ADA5ECD/Part-2.txt .exe Infected: Email-Worm.Win32.NetSky.aa
C:\Program Files\Norton AntiVirus\Quarantine\6ADA5ECD Infected: Email-Worm.Win32.NetSky.aa
C:\Program Files\Norton AntiVirus\Quarantine\6B431650 Infected: Email-Worm.Win32.Bagle.ah
C:\Program Files\Norton AntiVirus\Quarantine\6CE92078 Infected: Email-Worm.Win32.Bagle.ah
C:\Program Files\Norton AntiVirus\Quarantine\6CF56AB7.class Infected: Trojan.Java.Shiwow
C:\Program Files\Norton AntiVirus\Quarantine\6D4C42D8/[From "Hafpak" <[email protected]>][Date Tue, 01 Mar 2005 18:33:27 +0100]/wsd01.cpl Infected: Email-Worm.Win32.Bagle.at
C:\Program Files\Norton AntiVirus\Quarantine\6D4C42D8 Infected: Email-Worm.Win32.Bagle.at
C:\Program Files\Norton AntiVirus\Quarantine\6D7F157F Infected: Email-Worm.Win32.Bagle.y
C:\Program Files\Norton AntiVirus\Quarantine\6DBF14B1 Infected: Email-Worm.Win32.Bagle.z
C:\Program Files\Norton AntiVirus\Quarantine\6DD91DDC.scr Infected: Email-Worm.Win32.NetSky.q
C:\Program Files\Norton AntiVirus\Quarantine\6ED476E6 Infected: Email-Worm.Win32.Bagle.z
C:\Program Files\Norton AntiVirus\Quarantine\6EF170C6 Infected: Email-Worm.Win32.Bagle.z
C:\Program Files\Norton AntiVirus\Quarantine\6EF844BF Infected: Email-Worm.Win32.Bagle.z
C:\Program Files\Norton AntiVirus\Quarantine\6EFE18B7 Infected: Email-Worm.Win32.Bagle.gen
C:\Program Files\Norton AntiVirus\Quarantine\6F056CB0 Infected: Email-Worm.Win32.Bagle.gen
C:\Program Files\Norton AntiVirus\Quarantine\6F0B40A9 Infected: Email-Worm.Win32.Bagle.z
C:\Program Files\Norton AntiVirus\Quarantine\6F1214A2 Infected: Email-Worm.Win32.Bagle.z
C:\Program Files\Norton AntiVirus\Quarantine\70CC54B7 Infected: Email-Worm.Win32.Bagle.ba
C:\Program Files\Norton AntiVirus\Quarantine\70ED1D3E Infected: Email-Worm.Win32.Bagle.z
C:\Program Files\Norton AntiVirus\Quarantine\726C0897 Infected: Email-Worm.Win32.Bagle.gen
C:\Program Files\Norton AntiVirus\Quarantine\72A9641D Infected: Email-Worm.Win32.Bagle.z
C:\Program Files\Norton AntiVirus\Quarantine\72F50EF4 Infected: Email-Worm.Win32.NetSky.c
C:\Program Files\Norton AntiVirus\Quarantine\731421C3 Infected: Email-Worm.Win32.Bagle.z
C:\Program Files\Norton AntiVirus\Quarantine\73235AC2 Infected: Email-Worm.Win32.NetSky.c
C:\Program Files\Norton AntiVirus\Quarantine\73292EBA Infected: Email-Worm.Win32.NetSky.c
C:\Program Files\Norton AntiVirus\Quarantine\736E206F Infected: Email-Worm.Win32.NetSky.c
C:\Program Files\Norton AntiVirus\Quarantine\73781E64/card.rtf.com Infected: Email-Worm.Win32.NetSky.c
C:\Program Files\Norton AntiVirus\Quarantine\73781E64 Infected: Email-Worm.Win32.NetSky.c
C:\Program Files\Norton AntiVirus\Quarantine\737E725D Infected: Email-Worm.Win32.NetSky.c
C:\Program Files\Norton AntiVirus\Quarantine\73854656 Infected: Email-Worm.Win32.NetSky.c
C:\Program Files\Norton AntiVirus\Quarantine\73887052/topseller.txt.com Infected: Email-Worm.Win32.NetSky.c
C:\Program Files\Norton AntiVirus\Quarantine\73887052 Infected: Email-Worm.Win32.NetSky.c
C:\Program Files\Norton AntiVirus\Quarantine\738B1A4F/message.txt.com Infected: Email-Worm.Win32.NetSky.c
C:\Program Files\Norton AntiVirus\Quarantine\738B1A4F Infected: Email-Worm.Win32.NetSky.c
C:\Program Files\Norton AntiVirus\Quarantine\73926E47 Infected: Email-Worm.Win32.NetSky.c
C:\Program Files\Norton AntiVirus\Quarantine\73951844/mails.exe Infected: Email-Worm.Win32.NetSky.c
C:\Program Files\Norton AntiVirus\Quarantine\73951844 Infected: Email-Worm.Win32.NetSky.c
C:\Program Files\Norton AntiVirus\Quarantine\739C6C3D/release.doc.pif Infected: Email-Worm.Win32.NetSky.c
C:\Program Files\Norton AntiVirus\Quarantine\739C6C3D Infected: Email-Worm.Win32.NetSky.c
C:\Program Files\Norton AntiVirus\Quarantine\739F1639 Infected: Email-Worm.Win32.NetSky.c
C:\Program Files\Norton AntiVirus\Quarantine\73A66A32 Infected: Email-Worm.Win32.NetSky.c
C:\Program Files\Norton AntiVirus\Quarantine\73A9142E Infected: Email-Worm.Win32.NetSky.c
C:\Program Files\Norton AntiVirus\Quarantine\73E05DF1 Infected: Email-Worm.Win32.Klez.h
C:\Program Files\Norton AntiVirus\Quarantine\73F12FDF Infected: Email-Worm.Win32.Klez.h
C:\Program Files\Norton AntiVirus\Quarantine\73F703D8/mydate.txt.scr Infected: Email-Worm.Win32.NetSky.c
C:\Program Files\Norton AntiVirus\Quarantine\73F703D8 Infected: Email-Worm.Win32.NetSky.c
C:\Program Files\Norton AntiVirus\Quarantine\73FA2DD4/friend.scr Infected: Email-Worm.Win32.NetSky.c
C:\Program Files\Norton AntiVirus\Quarantine\73FA2DD4 Infected: Email-Worm.Win32.NetSky.c
C:\Program Files\Norton AntiVirus\Quarantine\74042BCA Infected: Email-Worm.Win32.Klez.h
C:\Program Files\Norton AntiVirus\Quarantine\742714E3 Infected: Email-Worm.Win32.NetSky.q
C:\Program Files\Norton AntiVirus\Quarantine\743C758D Infected: Email-Worm.Win32.Klez.h
C:\Program Files\Norton AntiVirus\Quarantine\746351FA Infected: Email-Worm.Win32.Bagle.z
C:\Program Files\Norton AntiVirus\Quarantine\74AB0912 Infected: Email-Worm.Win32.Klez.h
C:\Program Files\Norton AntiVirus\Quarantine\74B50708 Infected: Email-Worm.Win32.Klez.h
C:\Program Files\Norton AntiVirus\Quarantine\74C558F6 Infected: Email-Worm.Win32.Klez.h
C:\Program Files\Norton AntiVirus\Quarantine\7584621E Infected: Email-Worm.Win32.Bagle.z
C:\Program Files\Norton AntiVirus\Quarantine\7596456F Infected: Email-Worm.Win32.Bagle.z
C:\Program Files\Norton AntiVirus\Quarantine\75C4628C Infected: Email-Worm.Win32.Bagle.z
C:\Program Files\Norton AntiVirus\Quarantine\761B6D4E Infected: Email-Worm.Win32.Bagle.z
C:\Program Files\Norton AntiVirus\Quarantine\76E84A23 Infected: Email-Worm.Win32.Bagle.gen
C:\Program Files\Norton AntiVirus\Quarantine\76EF55FD Infected: Email-Worm.Win32.Bagle.ah
C:\Program Files\Norton AntiVirus\Quarantine\783A4260 Infected: Email-Worm.Win32.Bagle.gen
C:\Program Files\Norton AntiVirus\Quarantine\790B1594 Infected: Email-Worm.Win32.Bagle.z
C:\Program Files\Norton AntiVirus\Quarantine\797244A8 Infected: Email-Worm.Win32.Bagle.ah
C:\Program Files\Norton AntiVirus\Quarantine\79AA6EEC.class Infected: Trojan.Java.Needy.c
C:\Program Files\Norton AntiVirus\Quarantine\7A55041C Infected: Email-Worm.Win32.Bagle.y
C:\Program Files\Norton AntiVirus\Quarantine\7BC33275 Infected: Email-Worm.Win32.Bagle.ah
C:\Program Files\Norton AntiVirus\Quarantine\7BF91E48/[From [email protected]][Date Mon, 9 May 2005 22:10:26 +0200]/UNNAMED/html Suspicious: Exploit.HTML.Iframe.FileDownload
C:\Program Files\Norton AntiVirus\Quarantine\7BF91E48/[From [email protected]][Date Mon, 9 May 2005 22:10:26 +0200]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload
C:\Program Files\Norton AntiVirus\Quarantine\7BF91E48 Suspicious: Exploit.HTML.Iframe.FileDownload
C:\Program Files\Norton AntiVirus\Quarantine\7D0D0501 Infected: Email-Worm.Win32.Bagle.z
C:\Program Files\Norton AntiVirus\Quarantine\7D7B51A5 Infected: Email-Worm.Win32.Bagle.ah
C:\Program Files\Norton AntiVirus\Quarantine\7E0B3B86.class Infected: Trojan.Java.ClassLoader.f
C:\Program Files\Norton AntiVirus\Quarantine\7E1D237A/[From "Hafpak" <[email protected]>][Date Wed, 02 Mar 2005 15:41:15 +0100]/viupd02.cpl Infected: Email-Worm.Win32.Bagle.at
C:\Program Files\Norton AntiVirus\Quarantine\7E1D237A Infected: Email-Worm.Win32.Bagle.at
C:\Program Files\Norton AntiVirus\Quarantine\7EFF475F Infected: Email-Worm.Win32.Bagle.z
C:\Program Files\Norton AntiVirus\Quarantine\7F174C1E/[From "Hafpak" <[email protected]>][Date Wed, 02 Mar 2005 11:40:37 +0100]/Jol03.cpl Infected: Email-Worm.Win32.Bagle.at
C:\Program Files\Norton AntiVirus\Quarantine\7F174C1E Infected: Email-Worm.Win32.Bagle.at
Scan process completed.
and here be the new hijackThis log:
Logfile of HijackThis v1.99.1
Scan saved at 6:48:56 PM, on 9/20/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\Ati2evxx.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\System32\svchost.exe
C:\WINNT\system32\spoolsv.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe
C:\Program Files\ewido\security suite\ewidoctrl.exe
C:\Program Files\ewido\security suite\ewidoguard.exe
C:\Program Files\Ahead\InCD\InCDsrv.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\WINNT\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINNT\wanmpsvc.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
C:\Program Files\Norton AntiVirus\SAVScan.exe
C:\WINNT\system32\Ati2evxx.exe
C:\WINNT\Explorer.EXE
C:\WINNT\system32\CTHELPER.EXE
C:\Program Files\Ahead\InCD\InCD.exe
C:\WINNT\system32\spool\drivers\w32x86\3\hpztsb10.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\WINNT\system32\ctfmon.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe
C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\ATI Multimedia\main\ATIDtct.EXE
C:\Program Files\ATI Multimedia\RemCtrl\ATIRW.exe
C:\Program Files\ATI Technologies\ATI.ACE\CLI.exe
C:\WINNT\system32\rundll32.exe
C:\Program Files\Outlook Express\msimn.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Winamp\Winamp.exe
C:\Program Files\Windows NT\Accessories\WORDPAD.EXE
C:\Documents and Settings\Owner\Desktop\allfolder\apps\HijackThis.exe
F2 - REG:system.ini: UserInit=C:\WINNT\System32\Userinit.exe
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [IgfxTray] C:\WINNT\System32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINNT\System32\hkcmd.exe
O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE
O4 - HKLM\..\Run: [InCD] C:\Program Files\Ahead\InCD\InCD.exe
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINNT\system32\spool\drivers\w32x86\3\hpztsb10.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINNT\system32\NeroCheck.exe
O4 - HKLM\..\Run: [iTunesHelper] C:\Program Files\iTunes\iTunesHelper.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [AIM] C:\Program Files\AIM\aim.exe -cnetwait.odl
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINNT\system32\ctfmon.exe
O4 - HKCU\..\Run: [Steam] C:\Program Files\Valve\Steam\\Steam.exe -silent
O4 - HKCU\..\Run: [ATI Launchpad] "C:\Program Files\ATI Multimedia\main\launchpd.exe"
O4 - HKCU\..\Run: [ATI DeviceDetect] C:\Program Files\ATI Multimedia\main\ATIDtct.EXE
O4 - HKCU\..\Run: [ATI Remote Control] C:\Program Files\ATI Multimedia\RemCtrl\ATIRW.exe
O4 - Startup: PowerReg Scheduler V3.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: ATI CATALYST System Tray.lnk = C:\Program Files\ATI Technologies\ATI.ACE\CLI.exe
O4 - Global Startup: Cisco Systems VPN Client.lnk = C:\Program Files\Cisco Systems\VPN Client\ipsecdialer.exe
O4 - Global Startup: Perstray.lnk = ?
O9 - Extra button: ATI TV - {44226DFF-747E-4edc-B30C-78752E50CD0C} - C:\Program Files\ATI Multimedia\tv\EXPLBAR.DLL
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINNT\System32\Shdocvw.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {01111F00-3E00-11D2-8470-0060089874ED} (Support.com Installer) - http://supportsoft.a...ad/tgctlins.cab
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky...can_unicode.cab
O16 - DPF: {0F04992B-E661-4DB9-B223-903AB628225D} (DoMoreRunExe.DoMoreRun) - file://C:\Program Files\Gateway\Do More\DoMoreRunExe.CAB
O16 - DPF: {39B0684F-D7BF-4743-B050-FDC3F48F7E3B} (FilePlanet Download Control Class) - http://www.fileplane...DC_1_0_0_44.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.micros...b?1126239552038
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://www.pandasoft...free/asinst.cab
O20 - Winlogon Notify: igfxcui - C:\WINNT\SYSTEM32\igfxsrvc.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINNT\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINNT\system32\ati2sgag.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: Cisco Systems, Inc. VPN Service (CVPND) - Cisco Systems, Inc. - C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido\security suite\ewidoctrl.exe
O23 - Service: ewido security suite guard - ewido networks - C:\Program Files\ewido\security suite\ewidoguard.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: InCD File System Service (InCDsrv) - AHEAD Software - C:\Program Files\Ahead\InCD\InCDsrv.exe
O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Macromedia Licensing Service - Unknown owner - C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe
O23 - Service: Norton AntiVirus Auto Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
O23 - Service: Intel NCS NetService (NetSvc) - Intel® Corporation - C:\Program Files\Intel\NCS\Sync\NetSvc.exe
O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: SmartLinkService (SLService) - - C:\WINNT\SYSTEM32\slserv.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
O23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - C:\WINNT\wanmpsvc.exe
O23 - Service: X10 Device Network Service (x10nets) - Unknown owner - C:\PROGRA~1\ATIMUL~1\RemCtrl\x10nets.exe (file missing)