Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

Need some help wiht malware [RESOLVED]


  • This topic is locked This topic is locked

#1
Paronga

Paronga

    Member

  • Member
  • PipPip
  • 14 posts
Hi guys, im trying to fix my parents computer and the backround is a HTML document saying "warning spyware blah blah"

I tried fixing it myself but i dont know whats wrong. I got a hijackthis Log for ya'll to look at, and hope ya can help me.

Thanks alot in advanced....and here is my log:


Logfile of HijackThis v1.99.1
Scan saved at 12:05:35 AM, on 18/09/2005
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\DVDRAMSV.exe
C:\PROGRA~1\Iomega\System32\AppServices.exe
C:\Program Files\Norton SystemWorks\Norton AntiVirus\navapsvc.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\System32\taskmgr.exe
C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe
C:\Hijack This\HijackThis.exe

O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton SystemWorks\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton SystemWorks\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_04\bin\npjpi142_04.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_04\bin\npjpi142_04.dll
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE (file missing)
O9 - Extra 'Tools' menuitem: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE (file missing)
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {1754A1BA-A1DF-4F10-B199-AA55AA1A120F} (InstallerBehaviorFactory Class) - https://signup.msn.c...es/MsnInstC.cab
O16 - DPF: {54C75FB0-6B8B-4278-BF7B-77036F15A69E} - http://akamai.downlo..._1041_EN_XP.cab
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.syma...n/bin/cabsa.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://www.pandasoft.../as5/asinst.cab
O18 - Filter: text/html - {B87CD6FC-7E75-400F-820E-38C437939851} - C:\Documents and Settings\Effi\Local Settings\Application Data\microsoft\internet explorer\V0.34.dat
O23 - Service: DVD-RAM_Service - Matsushita Electric Industrial Co., Ltd. - C:\WINDOWS\System32\DVDRAMSV.exe
O23 - Service: Iomega App Services - Iomega Corporation - C:\PROGRA~1\Iomega\System32\AppServices.exe
O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Norton AntiVirus Auto Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton SystemWorks\Norton AntiVirus\navapsvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe


Thanks for your time.
  • 0

Advertisements


#2
Paronga

Paronga

    Member

  • Topic Starter
  • Member
  • PipPip
  • 14 posts
Some out there must be able to help me? its kinda urgent as it is thier business computer. Thanks alot. if needed ill go reboot the comptuer and get a fresh HJthis lg for al of you to look at and a SS of the problem.

Thank you.

-Paronga
  • 0

#3
Paronga

Paronga

    Member

  • Topic Starter
  • Member
  • PipPip
  • 14 posts
Here is the fesh HJthis log after a reboot:


Logfile of HijackThis v1.99.1
Scan saved at 10:38:10 AM, on 18/09/2005
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\DVDRAMSV.exe
C:\PROGRA~1\Iomega\System32\AppServices.exe
C:\Program Files\Norton SystemWorks\Norton AntiVirus\navapsvc.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\userinit.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\Hijack This\HijackThis.exe

O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton SystemWorks\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton SystemWorks\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_04\bin\npjpi142_04.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_04\bin\npjpi142_04.dll
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {1754A1BA-A1DF-4F10-B199-AA55AA1A120F} (InstallerBehaviorFactory Class) - https://signup.msn.c...es/MsnInstC.cab
O16 - DPF: {54C75FB0-6B8B-4278-BF7B-77036F15A69E} - http://akamai.downlo..._1041_EN_XP.cab
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.syma...n/bin/cabsa.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://www.pandasoft.../as5/asinst.cab
O18 - Filter: text/html - {B87CD6FC-7E75-400F-820E-38C437939851} - C:\Documents and Settings\Effi\Local Settings\Application Data\microsoft\internet explorer\V0.34.dat
O23 - Service: DVD-RAM_Service - Matsushita Electric Industrial Co., Ltd. - C:\WINDOWS\System32\DVDRAMSV.exe
O23 - Service: Iomega App Services - Iomega Corporation - C:\PROGRA~1\Iomega\System32\AppServices.exe
O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Norton AntiVirus Auto Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton SystemWorks\Norton AntiVirus\navapsvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe


And Here is a screen shot of my desktop so you can see what im talking about.

Thank you very much.

-Paronga
  • 0

#4
John_L

John_L

    Visiting Staff

  • Member
  • PipPipPipPip
  • 1,398 posts
Hello Paronga :tazz:

I don't see a heck of a lot wrong here lets just run a couple of tools and see what that shows us.

Make sure to read all the way through the instructions before going ahead.

Please download ewido security suite it is a free version of the program.
  • Install ewido security suite
  • When installing, under "Additional Options" uncheck..
    • Install background guard
    • Install scan via context menu
  • Launch ewido, there should be an icon on your desktop, double-click it.
  • The program will now open to the main screen.
  • When you run ewido for the first time, you may get a warning "Database could not be found!". Click OK. We will fix this in a moment.
  • You will need to update ewido to the latest definition files.
    • On the left hand side of the main screen click update.
    • Then click on Start Update.
  • The update will start and a progress bar will show the updates being installed.
    (the status bar at the bottom will display ("Update successful")
If you are having problems with the updater, you can use this link to manually update ewido.
ewido manual updates

Once the updates are installed do the following:
  • Click on scanner
  • Click on Complete System Scan and the scan will begin.
  • You will be prompted to clean the first infection.
  • Select "Perform action on all infections", then proceed.
  • Once the scan has completed, there will be a button located on the bottom of the screen named Save report
  • Click Save report.
  • Save the report .txt file to your desktop or a location where you can find it easily.
Close ewido security suite.

And this as well.

Step 1:
Download the eScan Antivirus Toolkit Here. Save it to the Desktop, it is roughly 10MB in size.
Before running the program we need to update the signature files first in Step 2.

Step 2:
Updating the eScan Antivirus Toolkit with the latest files:

1.) Double-click on the mwav.exe file saved to the Desktop; it will extract the program files to a new folder called Kaspersky at the root of the C:\drive. (C:\Kaspersky.)

2.) Double-click on My Computer, double-click on the Hard Drive (usually the C:\drive), find and double-click on the Kaspersky folder; inside the Kaspersky folder, find and double-click on the kavupd.exe file. Double-clicking on the kavupd.exe file opens the Windows command prompt (DOS screen) and updates the program with all the latest signature files.

3.) After the update is complete, the bottom of the command prompt will read "Press any key to continue", click any key to close the screen.

Please do not run a scan with the eScan Antivirus Toolkit utility yet.

Step 3:
Please reboot into Safe Mode. Detailed instructions on how to boot into Safe Mode Here.

Step 4:
From Safe Mode, run the eScan Antivirus Toolkit. Please follow these instructions:

1.) To run the eScan Antivirus Toolkit program, look for a file called mwavscan.com inside the C:\Kaspersky folder.

2.) Double-click on the mwavscan.com file; this will open the eScan program.

3.) With the eScan interface on your Desktop, make sure that these boxes under Scan Option are checked : Memory, Registry, Startup Folders, System Folders, Services.

4.) Check the Drive box, this will give you access to the other Drive box (radio button) below it, check this second Drive box as well, now a large window across from the second Drive box appears. In this window use the drop-down arrow and choose the drive letter of your hard drive, usually C:\.

5.) Below these boxes, make sure the box Scan All Files is checked, not Program Files.

6.) Click the Scan Clean button and let the utility run until it completes a thorough scan of your hard drive. When the scan has finished it will read Scan Completed. Do not Exit the tool just yet.

7.) Open a new NotePad file (click on "Start" >> "All Programs" >>"Accessories" >> "NotePad"), then Copy/Paste the content of the Virus Log Information window into that file, and save it. eScan also creates a full log inside the C:\Kaspersky folder (named mwav.log), but it is huge and cannot be posted on a forum. Please post the content of the log you have saved (into NotePad) in your next reply, once all steps are completed.

Reboot your computer into normal Windows.

When this is complete provide me with a ewido log report and a escan log and finally a new hijack log, good luck :)
  • 0

#5
Paronga

Paronga

    Member

  • Topic Starter
  • Member
  • PipPip
  • 14 posts
---------------------------------------------------------
ewido security suite - Scan report
---------------------------------------------------------

+ Created on: 12:13:53 PM, 18/09/2005
+ Report-Checksum: DEC28F80

+ Scan result:

HKU\S-1-5-21-823518204-790525478-725345543-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\CLSID\{0656A137-B161-CADD-9777-E37A75727E78} -> Dialer.Generic : Cleaned with backup
[1920] C:\WINDOWS\System32\thun32.dll -> TrojanProxy.Small.bk : Cleaned with backup
C:\Documents and Settings\All Users\Documents\New WinRAR archive.rar/instkmgr.dll -> Backdoor.PPdoor.v : Cleaned with backup
C:\Documents and Settings\All Users\Documents\New WinRAR archive.rar/tftppdec.exe -> Trojan.Agent.ee : Cleaned with backup
:mozilla.9:C:\Documents and Settings\Effi\Application Data\Mozilla\Firefox\Profiles\d2g91be7.default\cookies.txt -> Spyware.Cookie.Tribalfusion : Cleaned with backup
C:\WINDOWS\augmrim.exe -> Spyware.Hijacker.Generic : Cleaned with backup
C:\WINDOWS\eg_auth_1041.dll -> Trojan.Wintrim : Cleaned with backup
C:\WINDOWS\juenqwg.exe -> Spyware.Hijacker.Generic : Cleaned with backup
C:\WINDOWS\p2esocks_1041.dll -> Trojan.Wintrim : Cleaned with backup
C:\WINDOWS\system32\combo.exe -> Worm.Bagz.j : Cleaned with backup
C:\WINDOWS\system32\combop.exe -> Trojan.Small.ej : Cleaned with backup
C:\WINDOWS\system32\d3dxof.exe -> TrojanDownloader.Agent.am : Cleaned with backup
C:\WINDOWS\system32\dnalocmg.exe -> TrojanDropper.Agent.lg : Cleaned with backup
C:\WINDOWS\system32\dxvid.exe -> TrojanDownloader.Agent.qb : Cleaned with backup
C:\WINDOWS\system32\flsmngr.dll -> Spyware.Hijacker.Generic : Cleaned with backup
C:\WINDOWS\system32\fltmgr.dll -> Backdoor.Agent.lg : Cleaned with backup
C:\WINDOWS\system32\fvp.dll -> TrojanDownloader.Agent.oc : Cleaned with backup
C:\WINDOWS\system32\gpbaaaaa.exe -> TrojanDropper.Agent.ii : Cleaned with backup
C:\WINDOWS\system32\mxhaaaaa.exe -> Spyware.Hijacker.Generic : Cleaned with backup
C:\WINDOWS\system32\mxwaaaaa.exe -> Trojan.LowZones.bm : Cleaned with backup
C:\WINDOWS\system32\scombo.exe -> Worm.Bagz.j : Cleaned with backup
C:\WINDOWS\system32\scombop.exe -> Trojan.Small.ej : Cleaned with backup
C:\WINDOWS\system32\srpcsrv32.dll -> TrojanDownloader.Adload.g : Cleaned with backup
C:\WINDOWS\system32\thun32.dll -> TrojanProxy.Small.bk : Cleaned with backup
C:\WINDOWS\system32\txfdb32.dll -> TrojanDownloader.Adload.g : Cleaned with backup
C:\WINDOWS\system32\vuikjgcf.exe -> TrojanDropper.Small.wv : Cleaned with backup
C:\WINDOWS\system32\wldr.dll -> TrojanProxy.Small.bo : Cleaned with backup


::Report End




File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\002A4A25 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\007330D1 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\007A04CA infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\008058C3 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\008402BF infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\00E1795C infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\01307CDE infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\013A7AD3 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\01A55084 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\02101FE2 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\02191DD7 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\021D47D4 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\022071D0 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\022645C9 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\02304DC0 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\023A4BB6 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\02411FAE infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\024773A7 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\024B1DA4 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\024E47A0 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\02541B99 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\02584595 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\025B6F92 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0261438B infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\026C51A9 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\029C42B3 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\02C0108B infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\02E03467 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\03072C3C infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\031902EB infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0325261C infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\032F2411 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0335780A infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\03382206 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\033C4C03 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\033F75FF infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\034549F8 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\034973F4 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\034C1DF1 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\034F47ED infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\03561BE6 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\035945E2 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\03BF6033 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\04696778 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0530689D infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\057714F9 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\058A10E3 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\059738D5 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\05A136CA infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\05B21A1D infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\05B532B5 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\05BB1813 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\05C25AA6 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\05D22C94 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\05FE3DBB infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\06A51B04 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\06F011AD infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\06FA0FA2 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\07113A74 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\071B3869 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\07201931 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\07210C62 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0728605B infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\072E3453 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\07325E50 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\07383249 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\073C5C45 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0742303E infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\07455A3A infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\074C2E33 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\074F5830 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\07562C28 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\075C0021 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0763541A infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\07667E16 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\076C1C28 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\076C520F infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\07707C0C infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\07732608 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\077A7A01 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\077D23FD infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\07804DFA infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\078721F2 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\078A4BEF infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\078D75EB infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\07901FE8 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\079773E0 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\079A1DDD infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\079D47D9 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\07A41BD2 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\07A745CF infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\07AE19C7 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\07B143C4 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\07B46DC0 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\07B817BD infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\07BE6BB5 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\07C115B2 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\07C53FAE infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\07C869AB infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\07CE3DA3 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\07D267A0 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\07D83B99 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\07DF0F91 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\07E2398E infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\07E90D87 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\07EC3783 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\07F20B7C infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\07F63578 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\07F95F75 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\07FC0971 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\07FF336D infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\08060766 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\08093163 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\080C5B5F infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\08132F58 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\08165954 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\081A0351 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0820574A infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\08230146 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0826755B infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\087A629A infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0883608F infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\088A3488 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\088D5E84 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\08910881 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\08E72287 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0967041E infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\099A27C2 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\09A95472 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\09B35268 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0A994294 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0AA61A9B infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0AAD3E7F infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0B2209AF infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0B324282 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0B3F6A73 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0C5216C4 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0CFC1E09 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0D1D2B15 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\11317104 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\114142F2 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\11446CEF infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\114B40E8 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\114E6AE4 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\11553EDD infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\115868D9 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\115B12D6 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\116266CE infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\116510CB infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\11683AC7 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\116F0EC0 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\117238BD infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\11790CB5 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\117C36B2 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\117F60AE infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\11820AAB infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\11895EA3 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\118C08A0 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\1190329C infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\11960695 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\11993091 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\119D5A8E infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\11A0048A infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\11A65883 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\11AA027F infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\11AD2C7C infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\11B30075 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\11B72A71 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\11BA546D infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\11BD7E6A infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\11C45263 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\11C77C5F infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\11CE5058 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\11D42451 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\11DE2246 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\11E14C42 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\11E8203B infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\11EB4A38 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\11EE7434 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\11F21E30 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\11F87229 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\11FB1C26 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\11FF4622 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\1202701E infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\12084417 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\120C6E14 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\120F1810 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\1212420C infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\12191605 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\121C4002 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\121F69FE infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\12263DF7 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\122967F3 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\12303BEC infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\123365E9 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\12360FE5 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\123939E1 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\12400DDA infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\124337D7 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\124661D3 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\12677291 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\126E468A infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\12741A82 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\127B6E7B infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\137A30C4 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\142F45FC infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\146A39BB infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\14700DB4 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\147D35A5 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\1484099E infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\148B5D97 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\148E0794 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\14902193 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\14980589 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\149B2F85 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\14A52D7A infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\14BE2483 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\14BF7D5E infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\14C2275A infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\14C55156 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\14C72279 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\14CB4C75 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\14CC254F infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\14CF4F4C infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\14D1206E infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\14D27948 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\14D44A6A infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\14D62344 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\14D87467 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\14DC773D infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\14DE485F infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\14DF213A infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\153E0463 infected by "Email-Worm.Win32.NetSky.d" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\15BF5842 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\15CC0034 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\15D3542D infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\15D67E29 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\15D92826 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\15E07C1E infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\15E3261B infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\15E65017 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\15EA7A14 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\15F04E0C infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\15F37809 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\15F72205 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\15FD75FE infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\16001FFA infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\160449F7 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\160773F3 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\168D67B8 infected by "Email-Worm.Win32.Sober.g" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\16EB0E65 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\16F2625E infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\18634643 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\1877422E infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\187E1626 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\18814023 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\1887141C infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\188E6815 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\18911211 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\1898660A infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\189B1006 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\18A263FF infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\18A50DFB infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\18AB61F4 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\18AF0BF1 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\18B55FE9 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\18BC33E2 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\18C207DB infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\18C95BD4 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\18CF2FCD infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\18D359C9 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\18D92DC2 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\18DC57BE infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\18E32BB7 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\18E97FB0 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\18ED29AC infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\18F37DA5 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\18FA519E infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\19002597 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\19077990 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\190D4D88 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\19142181 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\191A757A infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\191E1F76 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\1924736F infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\192B4768 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\19311B61 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\19386F5A infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\193E4352 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\1945174B infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\19484148 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\194B6B44 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\195F672F infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\1962112B infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\19696524 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\196F391D infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\19736319 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\197C610E infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\19865F03 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\198D32FC infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\199306F5 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\199A5AEE infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\19A02EE7 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\19AA2CDC infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\19B100D5 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\19CE7AB4 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\19D124B1 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\19D878AA infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\19DB22A6 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\19E2769F infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\19E5209B infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\19EB7494 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\19F2488D infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\19F81C86 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\19FF707E infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\1A021A7B infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\1A0454F9 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\1A096E74 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\1A0C1870 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\1A0E52EE infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\1A0F426C infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\1A161665 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\1A194062 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\1A1C6A5E infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\1A1F0B94 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\1A233E57 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\1A291250 infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\1A2D3C4C infected by "Email-Worm.Win32.Swen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\1A331045 infected by "Email-Worm.Win32.Swe
  • 0

#6
John_L

John_L

    Visiting Staff

  • Member
  • PipPipPipPip
  • 1,398 posts
Ok now thats done please show me a new hijack log :tazz:
  • 0

#7
Paronga

Paronga

    Member

  • Topic Starter
  • Member
  • PipPip
  • 14 posts
oops thoguth i did.

Here it is:

Logfile of HijackThis v1.99.1
Scan saved at 4:47:25 PM, on 18/09/2005
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\System32\DVDRAMSV.exe
C:\Documents and Settings\Effi\Desktop\Malware cleenup\security suite\ewidoctrl.exe
C:\PROGRA~1\Iomega\System32\AppServices.exe
C:\Program Files\Norton SystemWorks\Norton AntiVirus\navapsvc.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Hijack This\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\DOCUME~1\Effi\Desktop\MALWAR~1\SPYBOT~1\SDHelper.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton SystemWorks\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton SystemWorks\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_04\bin\npjpi142_04.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_04\bin\npjpi142_04.dll
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {1754A1BA-A1DF-4F10-B199-AA55AA1A120F} (InstallerBehaviorFactory Class) - https://signup.msn.c...es/MsnInstC.cab
O16 - DPF: {54C75FB0-6B8B-4278-BF7B-77036F15A69E} - http://akamai.downlo..._1041_EN_XP.cab
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.syma...n/bin/cabsa.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai...all/xscan53.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://www.pandasoft.../as5/asinst.cab
O23 - Service: DVD-RAM_Service - Matsushita Electric Industrial Co., Ltd. - C:\WINDOWS\System32\DVDRAMSV.exe
O23 - Service: ewido security suite control - ewido networks - C:\Documents and Settings\Effi\Desktop\Malware cleenup\security suite\ewidoctrl.exe
O23 - Service: Iomega App Services - Iomega Corporation - C:\PROGRA~1\Iomega\System32\AppServices.exe
O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Norton AntiVirus Auto Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton SystemWorks\Norton AntiVirus\navapsvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
  • 0

#8
John_L

John_L

    Visiting Staff

  • Member
  • PipPipPipPip
  • 1,398 posts
Ok good one more thing to dump.

Fire up hijack this, press scan only and place a check next to this.

O16 - DPF: {54C75FB0-6B8B-4278-BF7B-77036F15A69E} - http://akamai.downlo..._1041_EN_XP.cab

Close all browsers and windows and click fix on hijack this.

Reboot and show me a new log. :tazz:
  • 0

#9
Paronga

Paronga

    Member

  • Topic Starter
  • Member
  • PipPip
  • 14 posts
New log:

Logfile of HijackThis v1.99.1
Scan saved at 4:58:29 PM, on 18/09/2005
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\System32\DVDRAMSV.exe
C:\Documents and Settings\Effi\Desktop\Malware cleenup\security suite\ewidoctrl.exe
C:\PROGRA~1\Iomega\System32\AppServices.exe
C:\Program Files\Norton SystemWorks\Norton AntiVirus\navapsvc.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Hijack This\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\DOCUME~1\Effi\Desktop\MALWAR~1\SPYBOT~1\SDHelper.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton SystemWorks\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton SystemWorks\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_04\bin\npjpi142_04.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_04\bin\npjpi142_04.dll
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {1754A1BA-A1DF-4F10-B199-AA55AA1A120F} (InstallerBehaviorFactory Class) - https://signup.msn.c...es/MsnInstC.cab
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.syma...n/bin/cabsa.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai...all/xscan53.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://www.pandasoft.../as5/asinst.cab
O23 - Service: DVD-RAM_Service - Matsushita Electric Industrial Co., Ltd. - C:\WINDOWS\System32\DVDRAMSV.exe
O23 - Service: ewido security suite control - ewido networks - C:\Documents and Settings\Effi\Desktop\Malware cleenup\security suite\ewidoctrl.exe
O23 - Service: Iomega App Services - Iomega Corporation - C:\PROGRA~1\Iomega\System32\AppServices.exe
O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Norton AntiVirus Auto Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton SystemWorks\Norton AntiVirus\navapsvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
  • 0

#10
John_L

John_L

    Visiting Staff

  • Member
  • PipPipPipPip
  • 1,398 posts
Please run this tool.

Please RIGHT-CLICK HERE to download Silent Runner's.
  • Save it to the desktop.
  • Run Silent Runner's by doubleclicking the "Silent Runners" icon on your desktop.
  • You will see a text file appear on the desktop - it's not done, let it run (it won't appear to be doing anything!)
  • Once you receive the prompt All Done!, open the text file on the desktop, copy that entire log, and paste it here.
*NOTE* If you receive any warning message about scripts, please choose to allow the script to run.
  • 0

#11
Paronga

Paronga

    Member

  • Topic Starter
  • Member
  • PipPip
  • 14 posts
here it is. It looks like a handy tool:

"Silent Runners.vbs", revision 40.1, http://www.silentrunners.org/
Operating System: Windows XP
Output limited to non-default values, except where indicated by "{++}"


Startup items buried in registry:
---------------------------------

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ {++}
"SoundMan" = "SOUNDMAN.EXE" ["Avance Logic, Inc."]
"NvCplDaemon" = "RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup" [MS]

HKLM\Software\Microsoft\Active Setup\Installed Components\
>{881dd1c5-3dcf-431b-b061-f3f88e8be88a}\(Default) = "Outlook Express"
\StubPath = "C:\WINDOWS\system32\shmgrate.exe OCInstallUserConfigOE" [MS]

HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\
{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}\(Default) = "AcroIEHlprObj Class" [from CLSID]
-> {CLSID}\InProcServer32\(Default) = "C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx" [empty string]
{53707962-6F74-2D53-2644-206D7942484F}\(Default) = (no title provided)
-> {CLSID}\InProcServer32\(Default) = "C:\DOCUME~1\Effi\Desktop\MALWAR~1\SPYBOT~1\SDHelper.dll" ["Safer Networking Limited"]
{5CA3D70E-1895-11CF-8E15-001234567890}\(Default) = "DriveLetterAccess" [from CLSID]
-> {CLSID}\InProcServer32\(Default) = "C:\WINDOWS\system32\dla\tfswshx.dll" ["VERITAS Software, Inc."]
{BDF3E430-B101-42AD-A544-FADC6B084872}\(Default) = "NAV Helper"
-> {CLSID}\InProcServer32\(Default) = "C:\Program Files\Norton SystemWorks\Norton AntiVirus\NavShExt.dll" ["Symantec Corporation"]

HKLM\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\
"{88895560-9AA2-1069-930E-00AA0030EBC8}" = "HyperTerminal Icon Ext"
-> {CLSID}\InProcServer32\(Default) = "C:\WINDOWS\LastGood\System32\hticons.dll" ["Hilgraeve, Inc."]
"{1CDB2949-8F65-4355-8456-263E7C208A5D}" = "Desktop Explorer"
-> {CLSID}\InProcServer32\(Default) = "C:\WINDOWS\System32\nvshell.dll" ["NVIDIA Corporation"]
"{1E9B04FB-F9E5-4718-997B-B8DA88302A47}" = "Desktop Explorer Menu"
-> {CLSID}\InProcServer32\(Default) = "C:\WINDOWS\System32\nvshell.dll" ["NVIDIA Corporation"]
"{5CA3D70E-1895-11CF-8E15-001234567890}" = "DriveLetterAccess"
-> {CLSID}\InProcServer32\(Default) = "C:\WINDOWS\system32\dla\tfswshx.dll" ["VERITAS Software, Inc."]
"{0006F045-0000-0000-C000-000000000046}" = "Microsoft Outlook Custom Icon Handler"
-> {CLSID}\InProcServer32\(Default) = "C:\PROGRA~1\MICROS~2\Office\OLKFSTUB.DLL" [MS]
"{42042206-2D85-11D3-8CFF-005004838597}" = "Microsoft Office HTML Icon Handler"
-> {CLSID}\InProcServer32\(Default) = "C:\Program Files\Common Files\Microsoft Shared\Access Runtime\Office10\msohev.dll" [MS]
"{57C51AF9-DEF7-11D3-A801-00C04F163490}" = "Ghost Shell Extension"
-> {CLSID}\InProcServer32\(Default) = "C:\Program Files\Norton SystemWorks\Norton Ghost\GhoShExt.dll" ["Symantec Corporation"]
"{c7745760-8ead-11ce-b750-02608ca5202c}" = "IomegaWare Shell Extension"
-> {CLSID}\InProcServer32\(Default) = "C:\Program Files\Iomega\Shell\ImgMenu.dll" ["Iomega Corp."]
"{c7745761-8ead-11ce-b750-02608ca5202c}" = "IomegaWare Shell Extension"
-> {CLSID}\InProcServer32\(Default) = "C:\Program Files\Iomega\Shell\ImgProp.dll" ["Iomega Corp."]
"{B41DB860-8EE4-11D2-9906-E49FADC173CA}" = "WinRAR shell extension"
-> {CLSID}\InProcServer32\(Default) = "C:\Program Files\WinRAR\rarext.dll" [null data]
"{A70C977A-BF00-412C-90B7-034C51DA2439}" = "NvCpl DesktopContext Class"
-> {CLSID}\InProcServer32\(Default) = "C:\WINDOWS\System32\nvcpl.dll" ["NVIDIA Corporation"]
"{FFB699E0-306A-11d3-8BD1-00104B6F7516}" = "Play on my TV helper"
-> {CLSID}\InProcServer32\(Default) = "C:\WINDOWS\System32\nvcpl.dll" ["NVIDIA Corporation"]
"{1E9B04FB-F9E5-4718-997B-B8DA88302A48}" = "nView Desktop Context Menu"
-> {CLSID}\InProcServer32\(Default) = "C:\WINDOWS\System32\nvshell.dll" ["NVIDIA Corporation"]
"{EBDF1F20-C829-11D1-8233-FF20AF3E97A9}" = "TrojanHunter Menu Shell Extension"
-> {CLSID}\InProcServer32\(Default) = "C:\DOCUME~1\Effi\Desktop\MALWAR~1\TROJAN~1.2\contmenu.dll" [null data]

HKLM\Software\Classes\*\shellex\ContextMenuHandlers\
Symantec.Norton.Antivirus.IEContextMenu\(Default) = "{5345A4D5-41EB-4A2F-9616-CE1D4F6C35B2}"
-> {CLSID}\InProcServer32\(Default) = "C:\Program Files\Norton SystemWorks\Norton AntiVirus\NavShExt.dll" ["Symantec Corporation"]
TrojanHunter\(Default) = "{EBDF1F20-C829-11D1-8233-FF20AF3E97A9}"
-> {CLSID}\InProcServer32\(Default) = "C:\DOCUME~1\Effi\Desktop\MALWAR~1\TROJAN~1.2\contmenu.dll" [null data]
WinRAR\(Default) = "{B41DB860-8EE4-11D2-9906-E49FADC173CA}"
-> {CLSID}\InProcServer32\(Default) = "C:\Program Files\WinRAR\rarext.dll" [null data]

HKLM\Software\Classes\Directory\shellex\ContextMenuHandlers\
TrojanHunter\(Default) = "{EBDF1F20-C829-11D1-8233-FF20AF3E97A9}"
-> {CLSID}\InProcServer32\(Default) = "C:\DOCUME~1\Effi\Desktop\MALWAR~1\TROJAN~1.2\contmenu.dll" [null data]
WinRAR\(Default) = "{B41DB860-8EE4-11D2-9906-E49FADC173CA}"
-> {CLSID}\InProcServer32\(Default) = "C:\Program Files\WinRAR\rarext.dll" [null data]

HKLM\Software\Classes\Folder\shellex\ContextMenuHandlers\
Symantec.Norton.Antivirus.IEContextMenu\(Default) = "{5345A4D5-41EB-4A2F-9616-CE1D4F6C35B2}"
-> {CLSID}\InProcServer32\(Default) = "C:\Program Files\Norton SystemWorks\Norton AntiVirus\NavShExt.dll" ["Symantec Corporation"]
TrojanHunter\(Default) = "{EBDF1F20-C829-11D1-8233-FF20AF3E97A9}"
-> {CLSID}\InProcServer32\(Default) = "C:\DOCUME~1\Effi\Desktop\MALWAR~1\TROJAN~1.2\contmenu.dll" [null data]
WinRAR\(Default) = "{B41DB860-8EE4-11D2-9906-E49FADC173CA}"
-> {CLSID}\InProcServer32\(Default) = "C:\Program Files\WinRAR\rarext.dll" [null data]


Active Desktop and Wallpaper:
-----------------------------

Active Desktop is enabled at this entry:
HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellState

HKCU\Software\Microsoft\Internet Explorer\Desktop\General\
"Wallpaper" = "%APPDATA%\Microsoft\Internet Explorer\Internet Explorer Wallpaper.bmp"

Active Desktop web content:

HKCU\Software\Microsoft\Internet Explorer\Desktop\Components\0\
"FriendlyName" = "Security"
"Source" = "C:\WINDOWS\Web\desktop.html"
"SubscribedURL" = "C:\WINDOWS\Web\desktop.html"


Enabled Screen Saver:
---------------------

HKCU\Control Panel\Desktop\
"SCRNSAVE.EXE" = "C:\WINDOWS\PORTAD~1.SCR" (Port Adelaide Power.scr) ["ScreenTime Media"]


Enabled Scheduled Tasks:
------------------------

"Norton AntiVirus - Scan my computer" -> launches: "C:\PROGRA~1\NORTON~1\NORTON~1\NAVW32.exe /task:C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec\NORTON~1\Tasks\mycomp.sca" ["Symantec Corporation"]
"Norton SystemWorks One Button Checkup" -> launches: "C:\Program Files\Norton SystemWorks\OBC.exe /CUSTOM /SCHEDULE" ["Symantec Corporation"]
"Symantec NetDetect" -> launches: "C:\Program Files\Symantec\LiveUpdate\NDETECT.EXE" ["Symantec Corporation"]


Winsock2 Service Provider DLLs:
-------------------------------

Namespace Service Providers

HKLM\System\CurrentControlSet\Services\Winsock2\Parameters\NameSpace_Catalog5\Catalog_Entries\ {++}
000000000001\LibraryPath = "%SystemRoot%\System32\mswsock.dll" [MS]
000000000002\LibraryPath = "%SystemRoot%\System32\winrnr.dll" [MS]
000000000003\LibraryPath = "%SystemRoot%\System32\mswsock.dll" [MS]

Transport Service Providers

HKLM\System\CurrentControlSet\Services\Winsock2\Parameters\Protocol_Catalog9\Catalog_Entries\ {++}
0000000000##\PackedCatalogItem (contains) DLL [Company Name], (at) ## range:
%SystemRoot%\system32\mswsock.dll [MS], 01 - 03, 06 - 15
%SystemRoot%\system32\rsvpsp.dll [MS], 04 - 05


Toolbars, Explorer Bars, Extensions:
------------------------------------

Toolbars

HKCU\Software\Microsoft\Internet Explorer\Toolbar\ShellBrowser\
"{42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6}" = "Norton AntiVirus" [from CLSID]
-> {CLSID}\InProcServer32\(Default) = "C:\Program Files\Norton SystemWorks\Norton AntiVirus\NavShExt.dll" ["Symantec Corporation"]

HKLM\Software\Microsoft\Internet Explorer\Toolbar\
"{42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6}" = "Norton AntiVirus"
-> {CLSID}\InProcServer32\(Default) = "C:\Program Files\Norton SystemWorks\Norton AntiVirus\NavShExt.dll" ["Symantec Corporation"]

Extensions (Tools menu items, main toolbar menu buttons)

HKLM\Software\Microsoft\Internet Explorer\Extensions\
{08B0E5C0-4FCB-11CF-AAA5-00401C608501}\
"MenuText" = "Sun Java Console"
"CLSIDExtension" = "{08B0E5C0-4FCB-11CF-AAA5-00401C608501}"


Running Services (Display Name, Service Name, Path {Service DLL}):
------------------------------------------------------------------

DVD-RAM_Service, DVD-RAM_Service, "C:\WINDOWS\System32\DVDRAMSV.exe" ["Matsushita Electric Industrial Co., Ltd."]
ewido security suite control, ewido security suite control, "C:\Documents and Settings\Effi\Desktop\Malware cleenup\security suite\ewidoctrl.exe" ["ewido networks"]
Iomega App Services, Iomega App Services, ""C:\PROGRA~1\Iomega\System32\AppServices.exe"" ["Iomega Corporation"]
Norton AntiVirus Auto Protect Service, navapsvc, "C:\Program Files\Norton SystemWorks\Norton AntiVirus\navapsvc.exe" ["Symantec Corporation"]
NVIDIA Display Driver Service, NVSvc, "C:\WINDOWS\System32\nvsvc32.exe" ["NVIDIA Corporation"]


Keyboard Driver Filters:
------------------------

HKLM\System\CurrentControlSet\Control\Class\{4D36E96B-E325-11CE-BFC1-08002BE10318}\
"UpperFilters" = INFECTION WARNING! "Lkbdflt2" ["Logitech, Inc."]


----------
+ This report excludes default entries except where indicated.
+ To see *everywhere* the script checks and *everything* it finds,
launch it from a command prompt or a shortcut with the -all parameter.
+ To search all directories of local fixed drives for DESKTOP.INI
DLL launch points and all Registry CLSIDs for dormant Explorer Bars,
use the -supp parameter or answer "No" at the first message box.
---------- (total run time: 51 seconds, including 18 seconds for message boxes)
  • 0

#12
Paronga

Paronga

    Member

  • Topic Starter
  • Member
  • PipPip
  • 14 posts
Thank all of you guys here at geekstogo. It all seems to be abck to normal.

Thank you very much!

-Paronga
  • 0

#13
John_L

John_L

    Visiting Staff

  • Member
  • PipPipPipPip
  • 1,398 posts
Your very welcome, glad we could help :tazz:
  • 0

#14
John_L

John_L

    Visiting Staff

  • Member
  • PipPipPipPip
  • 1,398 posts
Since this issue appears to be resolved ... this Topic has been closed. Glad we could help. :tazz:

If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread.

Everyone else please begin a New Topic.
  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP