[Ardent]

Logfile of HijackThis v1.99.1
Scan saved at 9:16:07 PM, on 1/11/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
C:\WINDOWS\system32\cisvc.exe
C:\WINDOWS\System32\CTsvcCDA.exe
C:\Program Files\NavNT\defwatch.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\wdfmgr.exe
C:\Program Files\GE\97769 Dual Scroll Optical Mouse\Amoumain.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\WINDOWS\Logi_MwX.Exe
C:\WINDOWS\System32\DSentry.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
C:\WINDOWS\DynDNS.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\system32\cidaemon.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\hijakthis\hijackthis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.yahoo.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
R3 - Default URLSearchHook is missing
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {4B5F2E08-6F39-479a-B547-B2026E4C7EDF} - (no file)
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: PCTools Site Guard - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - C:\PROGRA~1\SPYWAR~1\tools\iesdsg.dll
O2 - BHO: IEHelperObj Class - {6754A456-BAD9-11D4-93D3-00B0D03A2F91} - C:\PROGRA~1\Odigo\Bin\OdigoBHO.dll (file missing)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: PCTools Browser Monitor - {B56A7D7D-6927-48C8-A975-17DF180C71AC} - C:\PROGRA~1\SPYWAR~1\tools\iesdpb.dll
O2 - BHO: (no name) - {E3215F20-3212-11D6-9F8B-00D0B743919D} - (no file)
O3 - Toolbar: (no name) - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - (no file)
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [WheelMouse] Amoumain.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.Exe
O4 - HKLM\..\Run: [DVDSentry] C:\WINDOWS\System32\DSentry.exe
O4 - HKLM\..\Run: [Dimension4] C:\Program Files\D4\D4.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto
O4 - HKCU\..\Run: [DynDNS Updater] "C:\WINDOWS\DynDNS.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: &Google Search - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: &Translate English Word - res://C:\Program Files\Google\GoogleToolbar1.dll/cmwordtrans.html
O8 - Extra context menu item: Backward Links - res://C:\Program Files\Google\GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://C:\Program Files\Google\GoogleToolbar1.dll/cmcache.html
O8 - Extra context menu item: Similar Pages - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsimilar.html
O8 - Extra context menu item: Translate Page into English - res://C:\Program Files\Google\GoogleToolbar1.dll/cmtrans.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Spyware Doctor - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - C:\PROGRA~1\SPYWAR~1\tools\iesdpb.dll
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM95\aim.exe
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: Yahoo! Hearts - http://download.game...nts/y/ht1_x.cab
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zon...ry/msgrchkr.cab
O16 - DPF: {05D44720-58E3-49E6-BDF6-D00330E511D3} (StagingUI Object) - http://zone.msn.com/...UI.cab40641.cab
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zon...nt.cab27571.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage) - http://go.microsoft....204&clcid=0x409
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zon...MineSweeper.cab
O16 - DPF: {39B0684F-D7BF-4743-B050-FDC3F48F7E3B} (FilePlanet Download Control Class) - http://www.fileplane...DC_1_0_0_44.cab
O16 - DPF: {4E888414-DB8F-11D1-9CD9-00C04F98436A} (Microsoft.WinRep) - https://webresponse....iveX/winrep.cab
O16 - DPF: {70BA88C8-DAE8-4CE9-92BB-979C4A75F53B} -
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zon...StatsClient.cab
O16 - DPF: {90C9629E-CD32-11D3-BBFB-00105A1F0D68} (InstallShield International Setup Player) - http://www.installen...gine/isetup.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoft...free/asinst.cab
O16 - DPF: {9CCE3B43-4DE0-4236-A84E-108CA848EE6A} (WebCam Control) - http://webcamnow.com...tiveXWebCam.cab
O16 - DPF: {AB29A544-D6B4-4E36-A1F8-D3E34FC7B00A} - http://install.wildt...lim/install.cab
O16 - DPF: {AE1C01E3-0283-11D3-9B3F-00C04F8EF466} (HeartbeatCtl Class) - http://fdl.msn.com/z...s/heartbeat.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://zone.msn.com/...ro.cab34246.cab
O16 - DPF: {CA034DCC-A580-4333-B52F-15F98C42E04C} (Downloader Class) - http://www.stopzilla...ller/dwnldr.cab
O16 - DPF: {CAFEEFAC-0013-0001-0004-ABCDEFFEDCBA} (Java Plug-in) -
O16 - DPF: {CE28D5D2-60CF-4C7D-9FE8-0F47A3308078} (ActiveDataInfo Class) - https://www-secure.s...ta/SymAData.dll
O16 - DPF: {E5D419D6-A846-4514-9FAD-97E826C84822} (HeartbeatCtl Class) - http://fdl.msn.com/z...s/heartbeat.cab
O16 - DPF: {E77C0D62-882A-456F-AD8F-7C6C9569B8C7} (ActiveDataObj Class) - https://www-secure.s.../ActiveData.cab
O20 - Winlogon Notify: NavLogon - C:\WINDOWS\System32\NavLogon.dll
O20 - Winlogon Notify: PCANotify - C:\WINDOWS\SYSTEM32\PCANotify.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTsvcCDA.exe
O23 - Service: DefWatch - Symantec Corporation - C:\Program Files\NavNT\defwatch.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Intel® NMS (NMSSvc) - Intel Corporation - C:\WINDOWS\System32\NMSSvc.exe
O23 - Service: Norton AntiVirus Client (Norton AntiVirus Server) - Symantec Corporation - C:\Program Files\NavNT\rtvscan.exe

[Advertisements]

Did you do the apropos program in safe mode? Did you uninstall ad-watch? Disabled Spyware Doctor? PC Tools Site guard? It is not showing anything.

[coachwife6]

Did you do the apropos program in safe mode? Did you uninstall ad-watch? Disabled Spyware Doctor? PC Tools Site guard? It is not showing anything.

[Ardent]

Yes I finally got it to work but after looking at the log it didn't seem like much, is that wrong?
I couldn't find adwatch to uninstall from my add/remove in control panel and when you say disable you mean in msconfig right? is that under startup or services? I can't find any spyware doctor or PC tool site guard there. I tried opening spyware doctor to see if there was some kind of way to disable there but I get the "dll may be missisng or corrupt...."message so I don't know what to do . It doesn't show up anywhere that I can see. Is there something else I could do?

[coachwife6]

Is this your post also?

http://www.help2go.c...wtopic/t,17357/

[Ardent]

yes it is ...

[Ardent]

I was trying anything and everybody to try to figure out what was going on so I must have posted twice. OR it could have been one of those times when I couldn't log it so I tried to set up another account.

[coachwife6]

Did you try the suggestions in that other thread?

[Ardent]

No I don't think I did. In fact looking over it I don't remember seeing the posts. What I did do was update the driver but I can't remember if that was something you said or I read on this post. So no, other than updating the driver, I did not do anything on that post.... was there something there that might help?

Thanks again for the terrific assistance...do you think if we got rid of the virus you said I have that it would take care of the scanner problem?

[coachwife6]

can't find any spyware doctor

Early on you said you had bit the bullet and downloaded spyware doctor. And I see signs of it in your log.

Is it in add/remove programs? Can you uninstall it and reinstall it later?

Also, see if there is an entry for ContextPlus. If so, remove it. [let me know if you find it]

If you find it, let me know and don't proceed with the rest of the fix.

Download:

http://www.bleepingc...c/regsearch.zip

REboot into safe mode:

Download and extract the contents of the zip file.
Double-click the icon for RegSearch.exe to launch the program.
Enter a string to search for [adchannel ] and click "OK".
After completion Notepad will be opened with all the found instances of the string.
The resulting file is saved in the same location as RegSearch.exe.

[Ardent]

Didn't see any ContextPlus in my add remove but there was a entry for spyware doctor but when I tried to uninstall it it gave me a message that it couldn't find the uninstall dat or it was corrupt. In either case I can't get it to run anymore on my pc. I do have the lisc code for it so I can a new download of it. I did run the program you gave me and did a search for adchannel this is the result

REGEDIT4

; Registry Search by Bobbi Flekman
; Version: 1.0.2.1

; Results at 1/14/2006 9:57:51 PM for strings:
; 'adchannel'
; Strings excluded from search:
; (None)
; Search in:
; Registry Keys Registry Values Registry Data
; HKEY_LOCAL_MACHINE HKEY_USERS


; End Of The Log...

[Ardent]

I have a question if you have a moment. You did say I had a virus that could be causing or contributing to these problems. Is this the kind that could steal confidential information from me like bank account ect? How concerned should I be about what it is doing or has done ?

Thank you

[coachwife6]

Please run hijack this and put check marks next to these.

R3 - Default URLSearchHook is missing

O2 - BHO: (no name) - {4B5F2E08-6F39-479a-B547-B2026E4C7EDF} - (no file)

O2 - BHO: PCTools Site Guard - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - C:\PROGRA~1\SPYWAR~1\tools\iesdsg.dll
O2 - BHO: IEHelperObj Class - {6754A456-BAD9-11D4-93D3-00B0D03A2F91} - C:\PROGRA~1\Odigo\Bin\OdigoBHO.dll (file missing)
O2 - BHO: PCTools Browser Monitor - {B56A7D7D-6927-48C8-A975-17DF180C71AC} - C:\PROGRA~1\SPYWAR~1\tools\iesdpb.dll
O2 - BHO: (no name) - {E3215F20-3212-11D6-9F8B-00D0B743919D} - (no file)
O3 - Toolbar: (no name) - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - (no file)

Please download the Killbox by Option^Explicit.

Note: In the event you already have Killbox, this is a new version that I need you to download.

• Save it to your desktop.
• Please double-click Killbox.exe to run it.
• Select:
  • Delete on Reboot
  • then Click on the All Files button.
• Please copy the file paths below to the clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and choose copy):
  
  
  C:\My Downloads\cdcbase276.exe
  C:\Program Files\Canon\ZoomBrowser EX\Program\DatabaseManager.dll
  C:\Program Files\PestPatrol\Help.chm
  C:\WINDOWS\SbCIe0261.dll
  
• Return to Killbox, go to the File menu, and choose Paste from Clipboard.
  
• Click the red-and-white Delete File button. Click Yes at the Delete on Reboot prompt. Click OK at any PendingFileRenameOperations prompt (and please let me know if you receive this message!).

If your computer does not restart automatically, please restart it manually.

If you receive a message such as: "Component 'MsComCtl.ocx' or one of its dependencies not correctly registered: a file is missing or invalid." when trying to run Killbox, click here to download and run missingfilesetup.exe. Then try Killbox again.

Please do an online scan with Kaspersky WebScanner

Click on Kaspersky Online Scanner

You will be promted to install an ActiveX component from Kaspersky, Click Yes.

• The program will launch and then begin downloading the latest definition files:
• Once the files have been downloaded click on NEXT
  
• Now click on Scan Settings
• In the scan settings make that the following are selected:
  • Scan using the following Anti-Virus database:
  Extended (if available otherwise Standard)
  
  • Scan Options:
  Scan Archives
  Scan Mail Bases
• Click OK
• Now under select a target to scan:Select My Computer
• This will program will start and scan your system.
• The scan will take a while so be patient and let it run.
• Once the scan is complete it will display if your system has been infected.
  • Now click on the Save as Text button:
• Save the file to your desktop.
• Copy and paste that information in your next post.

You did say I had a virus that could be causing or contributing to these problems. Is this the kind that could steal confidential information from me like bank account ect? How concerned should I be about what it is doing or has done ?

I don't know what is wrong. It is always good to change your passwords if you are concerned. NOthing in your log raises my concerns about this, but your own vigilance is your best bet.

[Ardent]

Question do I do something after I put a check mark next to those files
in hijack, do I "fix them" ?

[coachwife6]

Please follow these more detailed instructions. I thought you had run hijack this again, so I did the abbreviated form. Sorry

Please go offline, close all browsers and any open Windows, making sure that only HijackThis is open. Scan and when it finishes, put an X in the boxes, only next to these following items, then click fix checked.

R3 - Default URLSearchHook is missing

O2 - BHO: (no name) - {4B5F2E08-6F39-479a-B547-B2026E4C7EDF} - (no file)

O2 - BHO: PCTools Site Guard - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - C:\PROGRA~1\SPYWAR~1\tools\iesdsg.dll
O2 - BHO: IEHelperObj Class - {6754A456-BAD9-11D4-93D3-00B0D03A2F91} - C:\PROGRA~1\Odigo\Bin\OdigoBHO.dll (file missing)
O2 - BHO: PCTools Browser Monitor - {B56A7D7D-6927-48C8-A975-17DF180C71AC} - C:\PROGRA~1\SPYWAR~1\tools\iesdpb.dll
O2 - BHO: (no name) - {E3215F20-3212-11D6-9F8B-00D0B743919D} - (no file)
O3 - Toolbar: (no name) - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - (no file)

Reboot your PC.


Please download the Killbox

Note: In the event you already have Killbox, this is a new version that I need you to download.

* Save it to your desktop.
* Please double-click Killbox.exe to run it.
* Select:
o Delete on Reboot
o then Click on the All Files button.
* Please copy the file paths below to the clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and choose copy):


C:\My Downloads\cdcbase276.exe
C:\Program Files\Canon\ZoomBrowser EX\Program\DatabaseManager.dll
C:\Program Files\PestPatrol\Help.chm
C:\WINDOWS\SbCIe0261.dll
* Return to Killbox, go to the File menu, and choose Paste from Clipboard.
* Click the red-and-white Delete File button. Click Yes at the Delete on Reboot prompt. Click OK at any PendingFileRenameOperations prompt (and please let me know if you receive this message!).

If you receive a message such as: "Component 'MsComCtl.ocx' or one of its dependencies not correctly registered: a file is missing or invalid." when trying to run Killbox, click hereto download and run missingfilesetup.exe. Then try Killbox again.

Please do an online scan with Kaspersky Webscanner

Click on Kaspersky Online Scanner

You will be promted to install an ActiveX component from Kaspersky, Click Yes.

* The program will launch and then begin downloading the latest definition files:
* Once the files have been downloaded click on NEXT
* Now click on Scan Settings
* In the scan settings make that the following are selected:
o Scan using the following Anti-Virus database:
Extended (if available otherwise Standard)
o Scan Options:
Scan Archives
Scan Mail Bases
* Click OK
* Now under select a target to scan:
Select My Computer
* This will program will start and scan your system.
* The scan will take a while so be patient and let it run.
* Once the scan is complete it will display if your system has been infected.
o Now click on the Save as Text button:
* Save the file to your desktop.
* Copy and paste that information in your next post.

[Ardent]

Well here it is. A question first. I see that I have quite a few viruses. How come my Norton antivirus didn't pick these up. I have thte latest dat files for it? Which bring me to a broader question, how can I tell what virus scan out there is a good one. There must be millions? any hints? Once again you help has been terrific!

-------------------------------------------------------------------------------
KASPERSKY ON-LINE SCANNER REPORT
Monday, January 16, 2006 10:57:44
Operating System: Microsoft Windows XP Home Edition, Service Pack 2 (Build 2600)
Kaspersky On-line Scanner version: 5.0.67.0
Kaspersky Anti-Virus database last update: 16/01/2006
Kaspersky Anti-Virus database records: 171478
-------------------------------------------------------------------------------

Scan Settings:
Scan using the following antivirus database: extended
Scan Archives: true
Scan Mail Bases: true

Scan Target - My Computer:
A:\
C:\
D:\
E:\
F:\
G:\
H:\
I:\
J:\

Scan Statistics:
Total number of scanned objects: 201463
Number of viruses found: 39
Number of infected objects: 115
Number of suspicious objects: 15
Duration of the scan process: 10311 sec

Infected Object Name - Virus Name
C:\!KillBox\SbCIe0261.dll Infected: not-a-virus:AdWare.Win32.SideStep.c
C:\backupfile\Outlook.pst/Personal Folders/Inbox/18 Aug 2004 15:31 from Postmaster:Undeliverable Mail.eml/[From "Thelma" <[email protected]>][Date Wed, 18 Aug 2004 08:28:29 -0800]/Info.com Infected: Email-Worm.Win32.Bagle.z
C:\backupfile\Outlook.pst/Personal Folders/Inbox/18 Aug 2004 15:31 from Postmaster:Undeliverable Mail.eml Infected: Email-Worm.Win32.Bagle.z
C:\backupfile\Outlook.pst/Personal Folders/Inbox/27 Jan 2004 21:37 from [email protected]:failure.eml/[From [email protected]][Date Tue, 27 Jan 2004 16:30:28 +0100]/UNNAMED/body.zip/body.htm .exe Infected: Email-Worm.Win32.Mydoom.a
C:\backupfile\Outlook.pst/Personal Folders/Inbox/27 Jan 2004 21:37 from [email protected]:failure.eml/[From [email protected]][Date Tue, 27 Jan 2004 16:30:28 +0100]/UNNAMED/body.zip Infected: Email-Worm.Win32.Mydoom.a
C:\backupfile\Outlook.pst/Personal Folders/Inbox/27 Jan 2004 21:37 from [email protected]:failure.eml/[From [email protected]][Date Tue, 27 Jan 2004 16:30:28 +0100]/UNNAMED Infected: Email-Worm.Win32.Mydoom.a
C:\backupfile\Outlook.pst/Personal Folders/Inbox/27 Jan 2004 21:37 from [email protected]:failure.eml Infected: Email-Worm.Win32.Mydoom.a
C:\backupfile\Outlook.pst/Personal Folders/Inbox/04 Oct 2004 15:15 from Postmaster:Undeliverable Mail.eml/[From "Thelma" <[email protected]>][Date Mon, 04 Oct 2004 08:12:42 -0800]/Half_Live.vbs Infected: Email-Worm.Win32.Bagle.z
C:\backupfile\Outlook.pst/Personal Folders/Inbox/04 Oct 2004 15:15 from Postmaster:Undeliverable Mail.eml Infected: Email-Worm.Win32.Bagle.z
C:\backupfile\Outlook.pst/Personal Folders/Inbox/07 Jan 2005 18:57 from Mail Delivery System:Mail delivery failed.eml/[From [email protected]][Date Fri, 7 Jan 2005 13:57:45 -0500]/UNNAMED/details.zip/data.rtf .scr Infected: Email-Worm.Win32.NetSky.q
C:\backupfile\Outlook.pst/Personal Folders/Inbox/07 Jan 2005 18:57 from Mail Delivery System:Mail delivery failed.eml/[From [email protected]][Date Fri, 7 Jan 2005 13:57:45 -0500]/UNNAMED/details.zip Infected: Email-Worm.Win32.NetSky.q
C:\backupfile\Outlook.pst/Personal Folders/Inbox/07 Jan 2005 18:57 from Mail Delivery System:Mail delivery failed.eml/[From [email protected]][Date Fri, 7 Jan 2005 13:57:45 -0500]/UNNAMED Infected: Email-Worm.Win32.NetSky.q
C:\backupfile\Outlook.pst/Personal Folders/Inbox/07 Jan 2005 18:57 from Mail Delivery System:Mail delivery failed.eml Infected: Email-Worm.Win32.NetSky.q
C:\backupfile\Outlook.pst/Personal Folders/School Board/18 Aug 2002 18:40 from dbohman:Learn more about how we use your .rtf Suspicious: Exploit.HTML.Iframe.FileDownload
C:\backupfile\Outlook.pst Infected: Exploit.HTML.Iframe.FileDownload
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\eXactAdvertisingBargainsBuddy1.zip/msexreg.exe Suspicious: Password-protected-EXE
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\eXactAdvertisingBargainsBuddy1.zip Suspicious: Password-protected-EXE
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\eXactAdvertisingBargainsBuddy120.zip/msexreg.exe Suspicious: Password-protected-EXE
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\eXactAdvertisingBargainsBuddy120.zip Suspicious: Password-protected-EXE
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\eXactAdvertisingBargainsBuddy148.zip/msexreg.exe Suspicious: Password-protected-EXE
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\eXactAdvertisingBargainsBuddy148.zip Suspicious: Password-protected-EXE
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\eXactAdvertisingBargainsBuddy176.zip/msexreg.exe Suspicious: Password-protected-EXE
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\eXactAdvertisingBargainsBuddy176.zip Suspicious: Password-protected-EXE
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\eXactAdvertisingBargainsBuddy37.zip/msexreg.exe Suspicious: Password-protected-EXE
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\eXactAdvertisingBargainsBuddy37.zip Suspicious: Password-protected-EXE
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\eXactAdvertisingBargainsBuddy65.zip/msexreg.exe Suspicious: Password-protected-EXE
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\eXactAdvertisingBargainsBuddy65.zip Suspicious: Password-protected-EXE
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\eXactAdvertisingBargainsBuddy93.zip/msexreg.exe Suspicious: Password-protected-EXE
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\eXactAdvertisingBargainsBuddy93.zip Suspicious: Password-protected-EXE
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\032C0000.VBN Infected: Virus.Win32.HLLP.Hantaner.a
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04DC0000.VBN/Setup.exe Infected: Email-Worm.Win32.VB.an
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04DC0000.VBN Infected: Email-Worm.Win32.VB.an
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04DC0001.VBN/Setup.exe Infected: Email-Worm.Win32.VB.an
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04DC0001.VBN Infected: Email-Worm.Win32.VB.an
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\07200000.VBN Infected: Virus.Win32.HLLP.Hantaner.a
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\09F40000.VBN/Setup.exe Infected: Email-Worm.Win32.VB.an
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\09F40000.VBN Infected: Email-Worm.Win32.VB.an
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\09F40001.VBN/Setup.exe Infected: Email-Worm.Win32.VB.an
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\09F40001.VBN Infected: Email-Worm.Win32.VB.an
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0B480000.VBN/Program Files/Common Files/updmgr/updmgr.exe Infected: Trojan-Downloader.Win32.Keenval
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0B480000.VBN/Program Files/Common Files/updmgr/simgr.exe Infected: Trojan-Downloader.Win32.Keenval
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0B480000.VBN/Program Files/Common Files/updmgr/rvupdmgr.exe Infected: Trojan-Downloader.Win32.Keenval
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0B480000.VBN/Program Files/common files/dpi/dpi.exe Infected: not-a-virus:NetTool.Win32.Dpi
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0B480000.VBN/WINDOWS/system32/pcs/init.dll Infected: not-a-virus:AdWare.Win32.DelphinMediaViewer.h
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0B480000.VBN/WINDOWS/system32/pcs/pcsvc.dll Infected: not-a-virus:AdWare.Win32.DelphinMediaViewer.a
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0B480000.VBN/WINDOWS/system32/pcs/pcsvc.exe Infected: not-a-virus:AdWare.Win32.DelphinMediaViewer.a
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0B480000.VBN/WINDOWS/system32/pcs/pcsvcAccess.ocx Infected: not-a-virus:AdWare.Win32.DelphinMediaViewer.a
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0B480000.VBN/Program Files/bargain buddy/bin/apuc.dll Infected: not-a-virus:AdWare.Win32.BargainBuddy.e
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0B480000.VBN/Program Files/incredifind/BHO/IncFindBHO150.dll Infected: Trojan-Downloader.Win32.Keenval
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0B480000.VBN/Program Files/ezula/mmod.exe Infected: not-a-virus:AdWare.Win32.EZula.z
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0B480000.VBN/Program Files/ezula/chcon.dll Infected: not-a-virus:AdWare.Win32.EZula.ae
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0B480000.VBN/Program Files/ezula/eabh.dll Infected: not-a-virus:AdWare.Win32.EZula.g
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0B480000.VBN/Program Files/ezula/seng.dll Infected: not-a-virus:AdWare.Win32.EZula.g
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0B480000.VBN/WINDOWS/ezinstall.exe/WISE0001.BIN Infected: not-a-virus:AdWare.Win32.EZula.ak
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0B480000.VBN/WINDOWS/ezinstall.exe Infected: not-a-virus:AdWare.Win32.EZula.ak
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0B480000.VBN/WINDOWS/system32/ezstub.exe Infected: not-a-virus:AdWare.Win32.EZula.by
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0B480000.VBN/Program Files/ezula/chcon.to_be_deleted_x Infected: not-a-virus:AdWare.Win32.EZula.ae
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0B480000.VBN/Program Files/navexcel/navhelper/v2.0.4/nhelper.dll Infected: not-a-virus:AdWare.Win32.NavExcel
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0B480000.VBN/Program Files/navexcel/NavHelper/v2.0.4a/v2.0.4a.cab/NHelper.dll Infected: not-a-virus:AdWare.Win32.NavExcel.l
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0B480000.VBN/Program Files/navexcel/NavHelper/v2.0.4a/v2.0.4a.cab/NHUninstaller.exe Infected: not-a-virus:AdWare.Win32.NavExcel
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0B480000.VBN/Program Files/navexcel/NavHelper/v2.0.4a/v2.0.4a.cab/NHUpdater.exe Infected: not-a-virus:AdWare.Win32.NavExcel
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0B480000.VBN/Program Files/navexcel/NavHelper/v2.0.4a/v2.0.4a.cab Infected: not-a-virus:AdWare.Win32.NavExcel
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0B480000.VBN/Program Files/navexcel/NavHelper/v2.0.4a/NHUninstaller.exe Infected: not-a-virus:AdWare.Win32.NavExcel
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0B480000.VBN/Program Files/navexcel/NavHelper/v2.0.4a/NHUpdater.exe Infected: not-a-virus:AdWare.Win32.NavExcel
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0B480000.VBN/Program Files/navexcel/NavHelper/v2.0.4a/NHelper.dll Infected: not-a-virus:AdWare.Win32.NavExcel.l
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0B480000.VBN/Program Files/navexcel/NavHelper/v2.0.4/nhelper.to_be_deleted_x Infected: not-a-virus:AdWare.Win32.NavExcel
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0B480000.VBN/Program Files/save/save.exe Infected: not-a-virus:AdWare.Win32.SaveNow.c
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0B480000.VBN/Program Files/save/saveuninst.exe Infected: not-a-virus:AdWare.Win32.SaveNow.af
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0B480000.VBN/Program Files/clocksync/Sync.exe Infected: not-a-virus:AdWare.Win32.SaveNow.v
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0B480000.VBN/Program Files/clocksync/Uninst.exe Infected: not-a-virus:AdWare.Win32.SaveNow.v
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0B480000.VBN Infected: not-a-virus:AdWare.Win32.SaveNow.v
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0B480002.VBN/Documents and Settings/Mark/Local Settings/Temp/temp.fr1F04/Program Files/common files/dpi/dpi.exe Infected: not-a-virus:NetTool.Win32.Dpi
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0B480002.VBN/Documents and Settings/Mark/Local Settings/Temp/temp.fr1F04/WINDOWS/system32/pcs/init.dll Infected: not-a-virus:AdWare.Win32.DelphinMediaViewer.h
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0B480002.VBN/Documents and Settings/Mark/Local Settings/Temp/temp.fr1F04/WINDOWS/system32/pcs/pcsvc.dll Infected: not-a-virus:AdWare.Win32.DelphinMediaViewer.a
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0B480002.VBN/Documents and Settings/Mark/Local Settings/Temp/temp.fr1F04/WINDOWS/system32/pcs/pcsvc.exe Infected: not-a-virus:AdWare.Win32.DelphinMediaViewer.a
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0B480002.VBN/Documents and Settings/Mark/Local Settings/Temp/temp.fr1F04/WINDOWS/system32/pcs/pcsvcAccess.ocx Infected: not-a-virus:AdWare.Win32.DelphinMediaViewer.a
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0B480002.VBN/Documents and Settings/Mark/Local Settings/Temp/temp.fr1F04/Program Files/common files/updmgr/rvupdmgr.exe Infected: Trojan-Downloader.Win32.Keenval
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0B480002.VBN/Documents and Settings/Mark/Local Settings/Temp/temp.fr1F04/Program Files/common files/updmgr/simgr.exe Infected: Trojan-Downloader.Win32.Keenval
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0B480002.VBN/Documents and Settings/Mark/Local Settings/Temp/temp.fr1F04/Program Files/common files/updmgr/updmgr.exe Infected: Trojan-Downloader.Win32.Keenval
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0B480002.VBN/Documents and Settings/Mark/Local Settings/Temp/temp.fr1F04/Program Files/incredifind/BHO/IncFindBHO150.dll Infected: Trojan-Downloader.Win32.Keenval
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0B480002.VBN/Documents and Settings/Mark/Local Settings/Temp/temp.fr1F04 Infected: Trojan-Downloader.Win32.Keenval
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0B480002.VBN/Documents and Settings/Mark/Local Settings/Temp/temp.fr6D46/Program Files/common files/dpi/dpi.exe Infected: not-a-virus:NetTool.Win32.Dpi
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0B480002.VBN/Documents and Settings/Mark/Local Settings/Temp/temp.fr6D46/WINDOWS/system32/pcs/init.dll Infected: not-a-virus:AdWare.Win32.DelphinMediaViewer.h
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0B480002.VBN/Documents and Settings/Mark/Local Settings/Temp/temp.fr6D46/WINDOWS/system32/pcs/pcsvc.dll Infected: not-a-virus:AdWare.Win32.DelphinMediaViewer.a
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0B480002.VBN/Documents and Settings/Mark/Local Settings/Temp/temp.fr6D46/WINDOWS/system32/pcs/pcsvc.exe Infected: not-a-virus:AdWare.Win32.DelphinMediaViewer.a
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0B480002.VBN/Documents and Settings/Mark/Local Settings/Temp/temp.fr6D46/WINDOWS/system32/pcs/pcsvcAccess.ocx Infected: not-a-virus:AdWare.Win32.DelphinMediaViewer.a
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0B480002.VBN/Documents and Settings/Mark/Local Settings/Temp/temp.fr6D46 Infected: not-a-virus:AdWare.Win32.DelphinMediaViewer.a
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0B480002.VBN/Documents and Settings/Mark/Local Settings/Temp/temp.frA8A2/WINDOWS/iClearSearch/aaaP026.exe Infected: Backdoor.Win32.Ruledor.c
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0B480002.VBN/Documents and Settings/Mark/Local Settings/Temp/temp.frA8A2 Infected: Backdoor.Win32.Ruledor.c
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0B480002.VBN/Documents and Settings/Mark/Local Settings/Temp/temp.frF65B/WINDOWS/system32/dp-him.exe Infected: Trojan-Downloader.Win32.Agent.ac
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0B480002.VBN/Documents and Settings/Mark/Local Settings/Temp/temp.frF65B/WINDOWS/system32/IEHost.EXE Infected: Trojan-Downloader.Win32.Turown.i
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0B480002.VBN/Documents and Settings/Mark/Local Settings/Temp/temp.frF65B/WINDOWS/system32/swrt01.dll Infected: not-a-virus:AdWare.Win32.VirtualBouncer.g
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0B480002.VBN/Documents and Settings/Mark/Local Settings/Temp/temp.frF65B Infected: not-a-virus:AdWare.Win32.VirtualBouncer.g
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0B480002.VBN Infected: not-a-virus:AdWare.Win32.VirtualBouncer.g
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0CB40000.VBN/Setup.exe Infected: Email-Worm.Win32.VB.an
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0CB40000.VBN Infected: Email-Worm.Win32.VB.an
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0CB40001.VBN/Setup.exe Infected: Email-Worm.Win32.VB.an
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0CB40001.VBN Infected: Email-Worm.Win32.VB.an
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0CC00000.VBN/BlackBox.class Infected: Trojan.Java.ClassLoader.z
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0CC00000.VBN/VB.class Infected: Trojan.Java.ClassLoader.ak
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0CC00000.VBN/Beyond.class Infected: Trojan-Downloader.Java.OpenConnection.v
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0CC00000.VBN Infected: Trojan-Downloader.Java.OpenConnection.v
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0DBC0000.VBN Infected: Trojan-Downloader.Win32.Skoob.a
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0DD40000.VBN Infected: Trojan-Downloader.Win32.Dluca.i
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0DD40002.VBN Infected: Trojan-Downloader.Win32.Dluca.i
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0EF80000.VBN/Setup.exe Infected: Email-Worm.Win32.VB.an
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0EF80000.VBN Infected: Email-Worm.Win32.VB.an
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0EF80001.VBN/Setup.exe Infected: Email-Worm.Win32.VB.an
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0EF80001.VBN Infected: Email-Worm.Win32.VB.an
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\13FC0000.VBN/Setup.exe Infected: Email-Worm.Win32.VB.an
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\13FC0000.VBN Infected: Email-Worm.Win32.VB.an
C:\Documents and Settings\All Users\Documents\hl1110.exe/WISE0025.BIN Infected: not-a-virus:Server-Proxy.Win32.Hltv
C:\Documents and Settings\All Users\Documents\hl1110.exe Infected: not-a-virus:Server-Proxy.Win32.Hltv
C:\My Downloads\applications\areslite181.exe/data0017/NHInstall.exe Infected: not-a-virus:AdWare.Win32.NavExcel.d
C:\My Downloads\applications\areslite181.exe/data0017/v2.0.4b.cab/NHelper.dll Infected: not-a-virus:AdWare.Win32.NavExcel.g
C:\My Downloads\applications\areslite181.exe/data0017/v2.0.4b.cab/NHUninstaller.exe Infected: not-a-virus:AdWare.Win32.NavExcel
C:\My Downloads\applications\areslite181.exe/data0017/v2.0.4b.cab/NHUpdater.exe Infected: not-a-virus:AdWare.Win32.NavExcel.b
C:\My Downloads\applications\areslite181.exe/data0017/v2.0.4b.cab Infected: not-a-virus:AdWare.Win32.NavExcel.b
C:\My Downloads\applications\areslite181.exe/data0017 Infected: not-a-virus:AdWare.Win32.NavExcel.b
C:\My Downloads\applications\areslite181.exe/data0018 Infected: not-a-virus:AdWare.Win32.NavExcel.i
C:\My Downloads\applications\areslite181.exe Infected: not-a-virus:AdWare.Win32.NavExcel.i
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP182\A0012310.dll Infected: not-a-virus:AdWare.Win32.SideStep.c
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP182\A0012311.exe Infected: not-a-virus:AdWare.Win32.EZula.bh
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP276\A0032791.dll Infected: not-a-virus:AdWare.Win32.SideStep.c
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP276\A0032792.exe Infected: not-a-virus:AdWare.Win32.EZula.bh
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP276\A0040714.dll Infected: Trojan.Win32.Crypt.t
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP278\A0042975.dll Infected: not-a-virus:AdWare.Win32.SideStep.c
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP278\A0042976.exe Infected: not-a-virus:AdWare.Win32.EZula.bh
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP290\A0056525.dll Infected: not-a-virus:AdWare.Win32.SideStep.c
C:\WINDOWS\ttil_sbc.exe Infected: not-a-virus:AdWare.Win32.EZula.bh

Scan process completed.