Malwarebytes Anti-Malware (Trial) 1.60.0.1800 www.malwarebytes.org Database version: v2012.01.22.03 Windows XP Service Pack 3 x86 NTFS Internet Explorer 8.0.6001.18702 Administrator :: WA68A7S1J249 [administrator] Protection: Enabled 01/22/12 10:20:47 AM mbam-log-2012-01-22 (10-20-47).txt Scan type: Full scan Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM Scan options disabled: P2P Objects scanned: 251036 Time elapsed: 1 hour(s), 25 minute(s), 35 second(s) Memory Processes Detected: 0 (No malicious items detected) Memory Modules Detected: 0 (No malicious items detected) Registry Keys Detected: 0 (No malicious items detected) Registry Values Detected: 0 (No malicious items detected) Registry Data Items Detected: 0 (No malicious items detected) Folders Detected: 0 (No malicious items detected) Files Detected: 4496 C:\System Volume Information\_restore{878404FC-4381-422D-A300-E1596B8D4945}\RP289\A0184947.dll (PUP.FunWebProducts) -> No action taken. C:\System Volume Information\_restore{878404FC-4381-422D-A300-E1596B8D4945}\RP276\A0174396.dll (PUP.FunWebProducts) -> No action taken. C:\System Volume Information\_restore{878404FC-4381-422D-A300-E1596B8D4945}\RP276\A0174397.dll (PUP.FunWebProducts) -> No action taken. C:\Program Files\BearShare Applications\Gallery .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Program Files\BearShare Applications\Lagu - Server .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Program Files\BearShare Applications\Love Song .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Program Files\BearShare Applications\THe Best Ungu .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Program Files\BearShare Applications\Windows Vista setup .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Program Files\iTunes\iTunes.Resources\da.lproj\DownloadsPlacard.nib\THe Best Ungu .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Program Files\iTunes\iTunes.Resources\da.lproj\DownloadsPlacard.nib\Windows Vista setup .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Program Files\iTunes\iTunes.Resources\da.lproj\DownloadsPlacard.nib\Gallery .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Program Files\iTunes\iTunes.Resources\da.lproj\DownloadsPlacard.nib\Lagu - Server .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Program Files\iTunes\iTunes.Resources\da.lproj\DownloadsPlacard.nib\Love Song .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Program Files\iTunes\iTunes.Resources\de.lproj\DownloadsPlacard.nib\THe Best Ungu .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Program Files\iTunes\iTunes.Resources\de.lproj\DownloadsPlacard.nib\Windows Vista setup .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Program Files\iTunes\iTunes.Resources\de.lproj\DownloadsPlacard.nib\Gallery .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Program Files\iTunes\iTunes.Resources\de.lproj\DownloadsPlacard.nib\Lagu - Server .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Program Files\iTunes\iTunes.Resources\en.lproj\DownloadsPlacard.nib\THe Best Ungu .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Program Files\iTunes\iTunes.Resources\en.lproj\DownloadsPlacard.nib\Lagu - Server .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Program Files\iTunes\iTunes.Resources\en.lproj\DownloadsPlacard.nib\Love Song .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Program Files\iTunes\iTunes.Resources\nl.lproj\DownloadsPlacard.nib\THe Best Ungu .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Program Files\iTunes\iTunes.Resources\nl.lproj\DownloadsPlacard.nib\Windows Vista setup .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Program Files\iTunes\iTunes.Resources\nl.lproj\DownloadsPlacard.nib\Gallery .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Program Files\iTunes\iTunes.Resources\nl.lproj\DownloadsPlacard.nib\Lagu - Server .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Program Files\iTunes\iTunes.Resources\it.lproj\DownloadsPlacard.nib\THe Best Ungu .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Program Files\iTunes\iTunes.Resources\it.lproj\DownloadsPlacard.nib\Windows Vista setup .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Program Files\iTunes\iTunes.Resources\it.lproj\DownloadsPlacard.nib\Gallery .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Program Files\iTunes\iTunes.Resources\it.lproj\DownloadsPlacard.nib\Lagu - Server .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Program Files\iTunes\iTunes.Resources\it.lproj\DownloadsPlacard.nib\Love Song .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Program Files\iTunes\iTunes.Resources\ja.lproj\DownloadsPlacard.nib\THe Best Ungu .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Program Files\iTunes\iTunes.Resources\ja.lproj\DownloadsPlacard.nib\Windows Vista setup .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Program Files\iTunes\iTunes.Resources\ja.lproj\DownloadsPlacard.nib\Gallery .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Program Files\iTunes\iTunes.Resources\ja.lproj\DownloadsPlacard.nib\Lagu - Server .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Program Files\iTunes\iTunes.Resources\ja.lproj\DownloadsPlacard.nib\Love Song .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Program Files\iTunes\iTunes.Resources\ko.lproj\DownloadsPlacard.nib\Windows Vista setup .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Program Files\iTunes\iTunes.Resources\ko.lproj\DownloadsPlacard.nib\Gallery .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Program Files\iTunes\iTunes.Resources\ko.lproj\DownloadsPlacard.nib\Lagu - Server .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Program Files\iTunes\iTunes.Resources\nb.lproj\DownloadsPlacard.nib\THe Best Ungu .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Program Files\iTunes\iTunes.Resources\nb.lproj\DownloadsPlacard.nib\Windows Vista setup .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Program Files\iTunes\iTunes.Resources\nb.lproj\DownloadsPlacard.nib\Lagu - Server .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Program Files\iTunes\iTunes.Resources\nb.lproj\DownloadsPlacard.nib\Love Song .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Program Files\iTunes\iTunes.Resources\en_GB.lproj\DownloadsPlacard.nib\THe Best Ungu .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Program Files\iTunes\iTunes.Resources\en_GB.lproj\DownloadsPlacard.nib\Windows Vista setup .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Program Files\iTunes\iTunes.Resources\en_GB.lproj\DownloadsPlacard.nib\Gallery .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Program Files\iTunes\iTunes.Resources\en_GB.lproj\DownloadsPlacard.nib\Lagu - Server .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Program Files\iTunes\iTunes.Resources\es.lproj\DownloadsPlacard.nib\THe Best Ungu .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Program Files\iTunes\iTunes.Resources\es.lproj\DownloadsPlacard.nib\Windows Vista setup .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Program Files\iTunes\iTunes.Resources\es.lproj\DownloadsPlacard.nib\Gallery .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Program Files\iTunes\iTunes.Resources\es.lproj\DownloadsPlacard.nib\Lagu - Server .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Program Files\iTunes\iTunes.Resources\fi.lproj\DownloadsPlacard.nib\THe Best Ungu .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Program Files\iTunes\iTunes.Resources\fi.lproj\DownloadsPlacard.nib\Windows Vista setup .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Program Files\iTunes\iTunes.Resources\fi.lproj\DownloadsPlacard.nib\Gallery .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Program Files\iTunes\iTunes.Resources\fi.lproj\DownloadsPlacard.nib\Lagu - Server .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Program Files\iTunes\iTunes.Resources\fi.lproj\DownloadsPlacard.nib\Love Song .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Program Files\iTunes\iTunes.Resources\fr.lproj\DownloadsPlacard.nib\THe Best Ungu .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Program Files\iTunes\iTunes.Resources\fr.lproj\DownloadsPlacard.nib\Windows Vista setup .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Program Files\iTunes\iTunes.Resources\fr.lproj\DownloadsPlacard.nib\Gallery .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Program Files\iTunes\iTunes.Resources\pl.lproj\DownloadsPlacard.nib\THe Best Ungu .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Program Files\iTunes\iTunes.Resources\pl.lproj\DownloadsPlacard.nib\Windows Vista setup .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Program Files\iTunes\iTunes.Resources\pl.lproj\DownloadsPlacard.nib\Gallery .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Program Files\iTunes\iTunes.Resources\pl.lproj\DownloadsPlacard.nib\Lagu - Server .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Program Files\iTunes\iTunes.Resources\pl.lproj\DownloadsPlacard.nib\Love Song .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Program Files\iTunes\iTunes.Resources\pt.lproj\DownloadsPlacard.nib\THe Best Ungu .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Program Files\iTunes\iTunes.Resources\pt.lproj\DownloadsPlacard.nib\Windows Vista setup .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Program Files\iTunes\iTunes.Resources\pt.lproj\DownloadsPlacard.nib\Gallery .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Program Files\iTunes\iTunes.Resources\pt.lproj\DownloadsPlacard.nib\Lagu - Server .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Program Files\iTunes\iTunes.Resources\pt.lproj\DownloadsPlacard.nib\Love Song .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Program Files\iTunes\iTunes.Resources\pt_PT.lproj\DownloadsPlacard.nib\THe Best Ungu .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Program Files\iTunes\iTunes.Resources\pt_PT.lproj\DownloadsPlacard.nib\Windows Vista setup .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Program Files\iTunes\iTunes.Resources\pt_PT.lproj\DownloadsPlacard.nib\Gallery .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Program Files\iTunes\iTunes.Resources\pt_PT.lproj\DownloadsPlacard.nib\Lagu - Server .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Program Files\iTunes\iTunes.Resources\pt_PT.lproj\DownloadsPlacard.nib\Love Song .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Program Files\iTunes\iTunes.Resources\ru.lproj\DownloadsPlacard.nib\THe Best Ungu .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Program Files\iTunes\iTunes.Resources\ru.lproj\DownloadsPlacard.nib\Windows Vista setup .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Program Files\iTunes\iTunes.Resources\ru.lproj\DownloadsPlacard.nib\Gallery .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Program Files\iTunes\iTunes.Resources\ru.lproj\DownloadsPlacard.nib\Love Song .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Program Files\iTunes\iTunes.Resources\sv.lproj\DownloadsPlacard.nib\THe Best Ungu .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Program Files\iTunes\iTunes.Resources\sv.lproj\DownloadsPlacard.nib\Windows Vista setup .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Program Files\iTunes\iTunes.Resources\sv.lproj\DownloadsPlacard.nib\Gallery .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Program Files\iTunes\iTunes.Resources\sv.lproj\DownloadsPlacard.nib\Love Song .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Program Files\iTunes\iTunes.Resources\zh_CN.lproj\DownloadsPlacard.nib\THe Best Ungu .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Program Files\iTunes\iTunes.Resources\zh_CN.lproj\DownloadsPlacard.nib\Windows Vista setup .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Program Files\iTunes\iTunes.Resources\zh_CN.lproj\DownloadsPlacard.nib\Gallery .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Program Files\iTunes\iTunes.Resources\zh_CN.lproj\DownloadsPlacard.nib\Lagu - Server .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Program Files\iTunes\iTunes.Resources\zh_CN.lproj\DownloadsPlacard.nib\Love Song .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Program Files\iTunes\iTunes.Resources\zh_TW.lproj\DownloadsPlacard.nib\THe Best Ungu .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Program Files\iTunes\iTunes.Resources\zh_TW.lproj\DownloadsPlacard.nib\Windows Vista setup .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Program Files\iTunes\iTunes.Resources\zh_TW.lproj\DownloadsPlacard.nib\Gallery .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Program Files\iTunes\iTunes.Resources\zh_TW.lproj\DownloadsPlacard.nib\Lagu - Server .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Program Files\iTunes\iTunes.Resources\zh_TW.lproj\DownloadsPlacard.nib\Love Song .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Program Files\ezt\Downloads\Lagu - Server .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Program Files\ezt\Downloads\Love Song .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Program Files\ezt\Downloads\THe Best Ungu .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Program Files\ezt\Downloads\Windows Vista setup .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Program Files\Common Files\Avanquest software Shared\Gallery .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Program Files\Common Files\Avanquest software Shared\Lagu - Server .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Program Files\Common Files\Avanquest software Shared\Love Song .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Program Files\Common Files\Avanquest software Shared\Windows Vista setup .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Program Files\Common Files\Symantec Shared\Gallery .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Program Files\Common Files\Symantec Shared\THe Best Ungu .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Program Files\Common Files\Symantec Shared\Windows Vista setup .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Program Files\Common Files\Symantec Shared\Lagu - Server .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Program Files\Common Files\Symantec Shared\Love Song .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Program Files\Common Files\xing shared\Gallery .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Program Files\Common Files\xing shared\Windows Vista setup .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Program Files\Movie Maker\Shared\Lagu - Server .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Program Files\Movie Maker\Shared\Love Song .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Program Files\Movie Maker\Shared\THe Best Ungu .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Program Files\Movie Maker\Shared\Windows Vista setup .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Qoobox\Quarantine\C\Documents and Settings\Administrator\Desktop\BISHOP FOR CODY .scr.vir (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Qoobox\Quarantine\C\Documents and Settings\Administrator\Start Menu\Programs\Startup\sql.cmd.vir (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Qoobox\Quarantine\C\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\Gallery .scr.vir (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Qoobox\Quarantine\C\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\Love Song .scr.vir (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Qoobox\Quarantine\C\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\THe Best Ungu .scr.vir (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Qoobox\Quarantine\C\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\Windows Vista setup .scr.vir (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Qoobox\Quarantine\C\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate\Downloads\Lagu - Server .scr.vir (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Qoobox\Quarantine\C\Program Files\Common Files\Microsoft Shared\Gallery .scr.vir (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Qoobox\Quarantine\C\Program Files\Common Files\Microsoft Shared\Lagu - Server .scr.vir (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Qoobox\Quarantine\C\Program Files\Common Files\Microsoft Shared\THe Best Ungu .scr.vir (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Qoobox\Quarantine\C\Program Files\Common Files\Microsoft Shared\Windows Vista setup .scr.vir (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Qoobox\Quarantine\C\WINDOWS\Downloaded Program Files\Gallery .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Qoobox\Quarantine\C\WINDOWS\Downloaded Program Files\Gallery .scr.vir (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Qoobox\Quarantine\C\WINDOWS\Downloaded Program Files\Lagu - Server .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Qoobox\Quarantine\C\WINDOWS\Downloaded Program Files\Lagu - Server .scr.vir (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Qoobox\Quarantine\C\WINDOWS\Downloaded Program Files\Love Song .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Qoobox\Quarantine\C\WINDOWS\Downloaded Program Files\Love Song .scr.vir (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Qoobox\Quarantine\C\WINDOWS\Downloaded Program Files\THe Best Ungu .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Qoobox\Quarantine\C\WINDOWS\Downloaded Program Files\THe Best Ungu .scr.vir (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Qoobox\Quarantine\C\WINDOWS\Downloaded Program Files\Windows Vista setup .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Qoobox\Quarantine\C\WINDOWS\Downloaded Program Files\Windows Vista setup .scr.vir (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Qoobox\Quarantine\C\WINDOWS\M13616\Ja178143bLay.com.vir (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Qoobox\Quarantine\C\WINDOWS\system32\X40224go\Z016276cie.cmd.vir (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Qoobox\Quarantine\C\WINDOWS\system32\X40224go\Z16276cie.cmd.vir (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Qoobox\Quarantine\Replicators\3653C2B200CC4FDFEAD0116E13E78103 (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\System Volume Information\_restore{878404FC-4381-422D-A300-E1596B8D4945}\RP278\A0175401.exe (Worm.Moonlight.H) -> Quarantined and deleted successfully. THESE CONTINUE THRU C:\System Volume Information\_restore{878404FC-4381-422D-A300-E1596B8D4945}\RP256\A0147560.exe (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\WINDOWS\pchealth\UploadLB\Gallery .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\WINDOWS\pchealth\UploadLB\Lagu - Server .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\WINDOWS\pchealth\UploadLB\Love Song .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\WINDOWS\pchealth\UploadLB\Windows Vista setup .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\WINDOWS\SoftwareDistribution\AuthCabs\Downloaded\Gallery .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\WINDOWS\SoftwareDistribution\AuthCabs\Downloaded\Lagu - Server .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\WINDOWS\SoftwareDistribution\AuthCabs\Downloaded\Love Song .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\WINDOWS\SoftwareDistribution\AuthCabs\Downloaded\THe Best Ungu .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\WINDOWS\SoftwareDistribution\AuthCabs\Downloaded\Windows Vista setup .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\WINDOWS\SoftwareDistribution\Download\Love Song .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\WINDOWS\SoftwareDistribution\Download\THe Best Ungu .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\WINDOWS\SoftwareDistribution\Download\Windows Vista setup .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\WINDOWS\SoftwareDistribution\Download\Gallery .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\WINDOWS\SoftwareDistribution\Download\Lagu - Server .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\WINDOWS\SoftwareDistribution\Download\1dfa26aa7c55425acf0fd8a07e6aaee7\download\Gallery .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\WINDOWS\SoftwareDistribution\Download\1dfa26aa7c55425acf0fd8a07e6aaee7\download\Love Song .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\WINDOWS\SoftwareDistribution\Download\1dfa26aa7c55425acf0fd8a07e6aaee7\download\Windows Vista setup .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\WINDOWS\SoftwareDistribution\Download\dc679cd47b4fc0ba518ddf01400df59a\download\Love Song .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\WINDOWS\SoftwareDistribution\Download\dc679cd47b4fc0ba518ddf01400df59a\download\THe Best Ungu .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\WINDOWS\SoftwareDistribution\Download\dc679cd47b4fc0ba518ddf01400df59a\download\Windows Vista setup .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\WINDOWS\SoftwareDistribution\Download\bbdccbfd5870508d129e9b482b642cbf\download\Lagu - Server .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\WINDOWS\SoftwareDistribution\Download\bbdccbfd5870508d129e9b482b642cbf\download\THe Best Ungu .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\WINDOWS\SoftwareDistribution\Download\85d26475ceaed09eb8326f5d66f84c6c\download\Lagu - Server .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\WINDOWS\SoftwareDistribution\Download\59b90d72a25c8fb81ab5ce06472f5082\download\Gallery .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\WINDOWS\SoftwareDistribution\Download\59b90d72a25c8fb81ab5ce06472f5082\download\THe Best Ungu .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\WINDOWS\SoftwareDistribution\Download\36a2296f631a54daefcc3b56e3d990e2\download\Gallery .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\WINDOWS\SoftwareDistribution\Download\36a2296f631a54daefcc3b56e3d990e2\download\THe Best Ungu .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\WINDOWS\SoftwareDistribution\Download\36a2296f631a54daefcc3b56e3d990e2\download\Windows Vista setup .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\WINDOWS\ime\shared\THe Best Ungu .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\WINDOWS\ime\shared\Windows Vista setup .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\WINDOWS\ime\shared\Gallery .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\WINDOWS\ime\shared\Love Song .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\_OTL\MovedFiles\01182012_104213\C_Documents and Settings\Administrator\Start Menu\Programs\Startup\sql.cmd (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\_OTL\MovedFiles\01182012_104213\C_WINDOWS\M13616\Ja178143bLay.com (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Documents and Settings\Administrator\My Documents\My Videos\RealPlayer Downloads\Gallery .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Documents and Settings\Administrator\My Documents\My Videos\RealPlayer Downloads\Lagu - Server .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Documents and Settings\Administrator\My Documents\My Videos\RealPlayer Downloads\Love Song .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Documents and Settings\Administrator\My Documents\My Videos\RealPlayer Downloads\THe Best Ungu .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Documents and Settings\Administrator\My Documents\My Videos\RealPlayer Downloads\Windows Vista setup .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Documents and Settings\Administrator\My Documents\Downloads\ST2011\Streets\MSMap\Common\MSShared\Gallery .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Documents and Settings\Administrator\My Documents\Downloads\ST2011\Streets\MSMap\Common\MSShared\Lagu - Server .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Documents and Settings\Administrator\My Documents\Downloads\ST2011\Streets\MSMap\Common\MSShared\Love Song .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Documents and Settings\Administrator\My Documents\Downloads\ST2011\Streets\MSMap\Common\MSShared\THe Best Ungu .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Documents and Settings\Administrator\My Documents\Downloads\ST2011\Streets\MSMap\Common\MSShared\Windows Vista setup .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Documents and Settings\Administrator\My Documents\Bluetooth Exchange Folder\My Music\iTunes\Album Artwork\Download\Gallery .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Documents and Settings\Administrator\My Documents\Bluetooth Exchange Folder\My Music\iTunes\Album Artwork\Download\Lagu - Server .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Documents and Settings\Administrator\My Documents\Bluetooth Exchange Folder\My Music\iTunes\Album Artwork\Download\Love Song .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Documents and Settings\Administrator\My Documents\Bluetooth Exchange Folder\My Music\iTunes\Album Artwork\Download\THe Best Ungu .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Documents and Settings\Administrator\My Documents\Bluetooth Exchange Folder\My Music\iTunes\Album Artwork\Download\Windows Vista setup .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Documents and Settings\Administrator\My Documents\Bluetooth Exchange Folder\My Music\iTunes\iTunes Media\Downloads\Gallery .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Documents and Settings\Administrator\My Documents\Bluetooth Exchange Folder\My Music\iTunes\iTunes Media\Downloads\Lagu - Server .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Documents and Settings\Administrator\My Documents\Bluetooth Exchange Folder\My Music\iTunes\iTunes Media\Downloads\Love Song .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Documents and Settings\Administrator\My Documents\Bluetooth Exchange Folder\My Music\iTunes\iTunes Media\Downloads\THe Best Ungu .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Documents and Settings\Administrator\My Documents\Bluetooth Exchange Folder\My Music\iTunes\iTunes Media\Downloads\Windows Vista setup .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Documents and Settings\Administrator\My Documents\Bluetooth Exchange Folder\stuff not needed right now\DOWNLOADED FORMS AND INFO 2 KEEP\Gallery .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Documents and Settings\Administrator\My Documents\Bluetooth Exchange Folder\stuff not needed right now\DOWNLOADED FORMS AND INFO 2 KEEP\Lagu - Server .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Documents and Settings\Administrator\My Documents\Bluetooth Exchange Folder\stuff not needed right now\DOWNLOADED FORMS AND INFO 2 KEEP\Love Song .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Documents and Settings\Administrator\My Documents\Bluetooth Exchange Folder\stuff not needed right now\DOWNLOADED FORMS AND INFO 2 KEEP\THe Best Ungu .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Documents and Settings\Administrator\My Documents\Bluetooth Exchange Folder\stuff not needed right now\DOWNLOADED FORMS AND INFO 2 KEEP\Windows Vista setup .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Documents and Settings\Administrator\Desktop\EVERYTHING CIS\resized .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Documents and Settings\Administrator\Desktop\EVERYTHING CIS\PHOTOS\103011 .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Documents and Settings\Administrator\Desktop\EVERYTHING CIS\PHOTOS\cis photos renamed .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Documents and Settings\Administrator\Desktop\EVERYTHING CIS\PHOTOS\New Folder .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Documents and Settings\Administrator\Local Settings\Application Data\Ares\My Shared Folder\Gallery .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Documents and Settings\Administrator\Local Settings\Application Data\Ares\My Shared Folder\Lagu - Server .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Documents and Settings\Administrator\Local Settings\Application Data\Ares\My Shared Folder\Love Song .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Documents and Settings\Administrator\Local Settings\Application Data\Ares\My Shared Folder\THe Best Ungu .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Documents and Settings\Administrator\Local Settings\Application Data\Ares\My Shared Folder\Windows Vista setup .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Documents and Settings\Administrator\Local Settings\Application Data\BearShare\Gallery .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Documents and Settings\Administrator\Local Settings\Application Data\BearShare\Lagu - Server .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Documents and Settings\Administrator\Local Settings\Application Data\BearShare\Love Song .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Documents and Settings\Administrator\Local Settings\Application Data\BearShare\THe Best Ungu .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Documents and Settings\Administrator\Local Settings\Application Data\BearShare\Windows Vista setup .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Documents and Settings\Administrator\Local Settings\Application Data\CrazySlotsCasino\dialogs\tourneydownloaddialog\THe Best Ungu .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Documents and Settings\Administrator\Local Settings\Application Data\CrazySlotsCasino\dialogs\tourneydownloaddialog\Windows Vista setup .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Documents and Settings\Administrator\Local Settings\Application Data\CrazySlotsCasino\dialogs\tourneydownloaddialog\Lagu - Server .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Documents and Settings\Administrator\Local Settings\Application Data\CrazySlotsCasino\dialogs\tourneydownloaddialog\Love Song .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Documents and Settings\Administrator\Local Settings\Application Data\Downloaded Installations\THe Best Ungu .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Documents and Settings\Administrator\Local Settings\Application Data\Downloaded Installations\Windows Vista setup .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Documents and Settings\Administrator\Local Settings\Application Data\Downloaded Installations\Gallery .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Documents and Settings\Administrator\Local Settings\Application Data\Downloaded Installations\Lagu - Server .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Documents and Settings\Administrator\Local Settings\Application Data\Downloaded Installations\Love Song .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Documents and Settings\Administrator\Local Settings\Application Data\VTShared\Gallery .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Documents and Settings\Administrator\Local Settings\Application Data\VTShared\THe Best Ungu .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Documents and Settings\Administrator\Local Settings\Application Data\VTShared\Windows Vista setup .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Documents and Settings\Administrator\Local Settings\Application Data\VTShared\Lagu - Server .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Documents and Settings\All Users\Application Data\AVG10\IDS\download\Gallery .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Documents and Settings\All Users\Application Data\AVG10\IDS\download\Lagu - Server .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Documents and Settings\All Users\Application Data\AVG10\IDS\download\Windows Vista setup .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Documents and Settings\All Users\Application Data\AVG10\update\download\Gallery .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Documents and Settings\All Users\Application Data\AVG10\update\download\Lagu - Server .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Documents and Settings\All Users\Application Data\AVG10\update\download\Love Song .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Documents and Settings\All Users\Application Data\AVG10\update\download\Windows Vista setup .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Documents and Settings\All Users\Application Data\AVG10\update(2)\download(2)\Gallery .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Documents and Settings\All Users\Application Data\AVG10\update(2)\download(2)\Lagu - Server .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Documents and Settings\All Users\Application Data\AVG10\update(2)\download(2)\Love Song .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Documents and Settings\All Users\Application Data\AVG10\update(2)\download(2)\THe Best Ungu .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Documents and Settings\All Users\Application Data\AVG10\update(2)\download(2)\Windows Vista setup .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Documents and Settings\All Users\Application Data\Symantec\Cached Installs\{C1B0BDC8-0624-4036-90D1-F7DF0EE8C96D}\Common\Symantec Shared\Gallery .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Documents and Settings\All Users\Application Data\Symantec\Cached Installs\{C1B0BDC8-0624-4036-90D1-F7DF0EE8C96D}\Common\Symantec Shared\Lagu - Server .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Documents and Settings\All Users\Application Data\Symantec\Cached Installs\{C1B0BDC8-0624-4036-90D1-F7DF0EE8C96D}\Common\Symantec Shared\Love Song .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Documents and Settings\All Users\Application Data\Symantec\Cached Installs\{C1B0BDC8-0624-4036-90D1-F7DF0EE8C96D}\Common\Symantec Shared\THe Best Ungu .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Documents and Settings\All Users\Application Data\Symantec\Cached Installs\{C1B0BDC8-0624-4036-90D1-F7DF0EE8C96D}\Common\Symantec Shared\Windows Vista setup .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Documents and Settings\All Users\Application Data\Symantec\Cached Installs\{C1B0BDC8-0624-4036-90D1-F7DF0EE8C96D}\Common\SYMSHARE\THe Best Ungu .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Documents and Settings\All Users\Application Data\Symantec\Cached Installs\{C1B0BDC8-0624-4036-90D1-F7DF0EE8C96D}\Common\SYMSHARE\Windows Vista setup .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Documents and Settings\All Users\Application Data\Symantec\Cached Installs\{C1B0BDC8-0624-4036-90D1-F7DF0EE8C96D}\Common\SYMSHARE\Gallery .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Documents and Settings\All Users\Application Data\Symantec\Cached Installs\{C1B0BDC8-0624-4036-90D1-F7DF0EE8C96D}\Common\SYMSHARE\Lagu - Server .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Documents and Settings\All Users\Application Data\Symantec\Cached Installs\{C1B0BDC8-0624-4036-90D1-F7DF0EE8C96D}\Common\SYMSHARE\Love Song .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Documents and Settings\All Users\Application Data\Symantec\Cached Installs\{C1B0BDC8-0624-4036-90D1-F7DF0EE8C96D}\Redist\SYMSHARE\THe Best Ungu .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Documents and Settings\All Users\Application Data\Symantec\Cached Installs\{C1B0BDC8-0624-4036-90D1-F7DF0EE8C96D}\Redist\SYMSHARE\Windows Vista setup .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Documents and Settings\All Users\Application Data\Symantec\Cached Installs\{C1B0BDC8-0624-4036-90D1-F7DF0EE8C96D}\Redist\SYMSHARE\Gallery .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Documents and Settings\All Users\Application Data\Symantec\Cached Installs\{C1B0BDC8-0624-4036-90D1-F7DF0EE8C96D}\Redist\SYMSHARE\Love Song .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate\Downloads\Gallery .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate\Downloads\Love Song .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate\Downloads\THe Best Ungu .scr (Worm.Moonlight.H) -> Quarantined and deleted successfully. (end)