[Can]

Hi,
I think i have a spyware in my computer, When i start my operating system limewire starting and i can not close it because when i close it will starts again and again also i couldn't see system32 folder under windows folder because of that i couldn't run cmd on run. Also i couldn't open task manager, i try to do the steps that is described in this adress "http://www.techspot....opic17297.html" but nohting changed after these steps. Could anyone help me? I am writing the hijackthis log file here.

Logfile of HijackThis v1.99.1
Scan saved at 00:15:50, on 24.12.2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Intel\Wireless\Bin\ZcfgSvc.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\Intel\Wireless\Bin\1XConfig.exe
C:\WINDOWS\system32\inetsrv\inetinfo.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\PROGRA~1\MICROS~4\MSSQL\binn\sqlservr.exe
C:\Program Files\Intel\Wireless\Bin\OProtSvc.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\WINDOWS\system32\slserv.exe
C:\WINDOWS\System32\igfxtray.exe
C:\WINDOWS\System32\hkcmd.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
C:\Program Files\Intel\Wireless\Bin\EOUWiz.exe
C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\PROGRA~1\MICROS~4\MSSQL\binn\sqlagent.exe
C:\Program Files\winupdates\winupdates.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\hijackthis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = proxy.ttnet.net.tr:8080
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [IntelWireless] C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe /tf Intel PROSet/Wireless
O4 - HKLM\..\Run: [EOUApp] C:\Program Files\Intel\Wireless\Bin\EOUWiz.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [winupdates] C:\Program Files\winupdates\winupdates.exe /auto
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: Service Manager.lnk = C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe
O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: &Translate English Word - res://c:\program files\google\GoogleToolbar1.dll/cmwordtrans.html
O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar1.dll/cmcache.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar1.dll/cmsimilar.html
O8 - Extra context menu item: Translate Page into English - res://c:\program files\google\GoogleToolbar1.dll/cmtrans.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
O9 - Extra button: ICQ 4.1 - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQLite\ICQLite.exe
O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQLite\ICQLite.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O20 - Winlogon Notify: IntelWireless - C:\Program Files\Intel\Wireless\Bin\LgNotify.dll
O23 - Service: EvtEng - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: Macromedia Licensing Service - Unknown owner - C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe
O23 - Service: OwnershipProtocol - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\OProtSvc.exe
O23 - Service: RegSrvc - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Spectrum24 Event Monitor (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe
O23 - Service: SSH Secure Shell 2 (SSHSecureShell2Server) - SSH Communications Security Corp - C:\Program Files\SSH Communications Security\SSH Secure Shell Server\ssh2master.exe

[Advertisements]

Hi and welcome to GeeksToGo! My name is Sam and I will be helping you.

Please download Ewido Security Suite it is a trial version of the program.

• Install ewido security suite
• When installing, under "Additional Options" uncheck "Install background guard" and "Install scan via context menu".
• Launch ewido, there should be an icon on your desktop double-click it.
• The program will now go to the main screen

You will need to update ewido to the latest definition files.

• On the left hand side of the main screen click update
• Then click on Start Update

The update will start and a progress bar will show the updates being installed.
If you are having problems with the updater, you can use this link to manually update ewido.
http://www.ewido.net...wnload/updates/

Once the updates are installed do the following:

• Click on scanner
• Click on Complete System Scan and the scan will begin.
• While the scan is in progress you will be prompted to clean files, click OK
• When it asks if you want to clean the first file, put a check in the lower left corner of the box that says "Perform action on all infections" then choose clean and click OK.
• Once the scan has completed, there will be a button located on the bottom of the screen named Save report
• Click Save report.
• Save the report .txt file to your desktop.

Now close ewido security suite.


Reboot your computer and post a new hijackthis log and the log from Ewido.

[Buckeye_Sam]

Hi and welcome to GeeksToGo! My name is Sam and I will be helping you.

Please download Ewido Security Suite it is a trial version of the program.

• Install ewido security suite
• When installing, under "Additional Options" uncheck "Install background guard" and "Install scan via context menu".
• Launch ewido, there should be an icon on your desktop double-click it.
• The program will now go to the main screen

You will need to update ewido to the latest definition files.

• On the left hand side of the main screen click update
• Then click on Start Update

The update will start and a progress bar will show the updates being installed.
If you are having problems with the updater, you can use this link to manually update ewido.
http://www.ewido.net...wnload/updates/

Once the updates are installed do the following:

• Click on scanner
• Click on Complete System Scan and the scan will begin.
• While the scan is in progress you will be prompted to clean files, click OK
• When it asks if you want to clean the first file, put a check in the lower left corner of the box that says "Perform action on all infections" then choose clean and click OK.
• Once the scan has completed, there will be a button located on the bottom of the screen named Save report
• Click Save report.
• Save the report .txt file to your desktop.

Now close ewido security suite.


Reboot your computer and post a new hijackthis log and the log from Ewido.

[Can]

Hi,
Firstly Thanks for your help. I am working on this spyware problem for 2 weeks. At the end i can use my computer just like 2 weeks ago. I do whatever you say, i can open task manager and i solve limewire problem but still i couldn't see system 32 folder under windows and i can not run command prompt. maybe there is no relationship between system32 folder problem and spyware. I think i remove spyware from my computer. Do you know anyhting more about how can i see system32 folder i am writing log files here. Thank You

Logfile of HijackThis v1.99.1
Scan saved at 17:25:38, on 29.12.2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\ewido anti-malware\ewidoctrl.exe
C:\WINDOWS\system32\inetsrv\inetinfo.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\PROGRA~1\MICROS~4\MSSQL\binn\sqlservr.exe
C:\Program Files\Intel\Wireless\Bin\ZcfgSvc.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Intel\Wireless\Bin\OProtSvc.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\WINDOWS\system32\slserv.exe
C:\WINDOWS\System32\igfxtray.exe
C:\PROGRA~1\Intel\Wireless\Bin\1XConfig.exe
C:\WINDOWS\System32\hkcmd.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
C:\Program Files\Intel\Wireless\Bin\EOUWiz.exe
C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe
C:\PROGRA~1\MICROS~4\MSSQL\binn\sqlagent.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\hijackthis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = proxy.ttnet.net.tr:8080
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [IntelWireless] C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe /tf Intel PROSet/Wireless
O4 - HKLM\..\Run: [EOUApp] C:\Program Files\Intel\Wireless\Bin\EOUWiz.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [winupdates] C:\Program Files\winupdates\winupdates.exe /auto
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: Service Manager.lnk = C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe
O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: &Translate English Word - res://c:\program files\google\GoogleToolbar1.dll/cmwordtrans.html
O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar1.dll/cmcache.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar1.dll/cmsimilar.html
O8 - Extra context menu item: Translate Page into English - res://c:\program files\google\GoogleToolbar1.dll/cmtrans.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
O9 - Extra button: ICQ 4.1 - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQLite\ICQLite.exe
O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQLite\ICQLite.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O20 - Winlogon Notify: IntelWireless - C:\Program Files\Intel\Wireless\Bin\LgNotify.dll
O23 - Service: EvtEng - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exe
O23 - Service: Macromedia Licensing Service - Unknown owner - C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe
O23 - Service: OwnershipProtocol - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\OProtSvc.exe
O23 - Service: RegSrvc - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Spectrum24 Event Monitor (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe
O23 - Service: SSH Secure Shell 2 (SSHSecureShell2Server) - SSH Communications Security Corp - C:\Program Files\SSH Communications Security\SSH Secure Shell Server\ssh2master.exe


---------------------------------------------------------
ewido anti-malware - Scan report
---------------------------------------------------------

+ Created on: 17:19:55, 29.12.2005
+ Report-Checksum: 7CC6DB3F

+ Scan result:

HKLM\SOFTWARE\Classes\CLSID\{2B96D5CC-C5B5-49A5-A69D-CC0A30F9028C} -> Spyware.MiniBug : Cleaned with backup
HKU\S-1-5-21-746137067-839522115-1343024091-500\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{8A0DCBDA-6E20-489C-9041-C1E8A0352E75} -> Spyware.NetNucleus : Cleaned with backup
[1056] C:\Program Files\winupdates\winupdates.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\# BitDefender Professional Plus 9.09.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\- Paris Hilton.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\007 MP3 Sound Recorder 1.00.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\10 Different Versions Of Solitaire In.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\100 Greatest Guitar Solos.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\18 PopCap Deluxe Games.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\19 program AIO - Windows.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\1Click DVD Copy 4.1.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\200 Year Calendar 1.0.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\250 Versions House Of The Rising Sun.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\2PAC - SUNSET BLVD - 2005.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\321 Studios Games X Copy 1.0.8.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\3D Design & CAD.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\3D Merry Christmas Screensaver.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\3D MP3 Sound Recorder 3.8.17.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\4000 Professional Flash Web Animations.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\420 Rare Winks for MSN 7.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\4Team DVD Labeler 3.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\5 Xmas Screensavers.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\50 Favorite Classic Cartoon Songs.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\71 Premium XP Wallpapers (Brand new Se.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\8mm II.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\A Plus CADCopy 2.0.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\A Snakes Life 2.0.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\A Sound of Thunder.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Ability Mail Server 2.52.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Absolute Uninstaller 1.41.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Absolute Video to Audio Converter 2.6.5.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Ace.Ventura.Pet.Detective.1994.COMPLET.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Acronis True Image 7.0.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Ad Muncher 4.7b18491.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Ad-Aware SE Profesional 1.06.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Adobe Illustrator 10.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Adobe Illustrator CS - 10.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Adobe InDesign 3.0.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Adobe Photoshop 7.0.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Adobe Photoshop 8.0 CS.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Advanced Image Resizer 2.0.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Advanced Installer 3.4.1.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Advanced MP3 Converter.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Advanced MP3WMA Recorder 5.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Advanced Uninstaller Pro 2005 7.0.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Advanced Uninstaller Pro 2006 7.5.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Aeon Flux.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Age of Empires III.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Age Of Empires SE AIO.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Agenda At Once 2.3.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Agnitum Outpost Firewall Pro 2.1.309.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Ahead Nero 7 Premium Huge PlugIns Pack.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Ahead Nero 7 Ultra.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\AimOne Screen Recorder 1.31.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\AIO Web Server Applications.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Akella Dance Ejay 7.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\AlbumWeb Pro 2.7.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Alcohol 120% 1.9.2.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\All 35 books of the Asterix & Obelix s.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\All Cleaner 6.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\All Media Fixer 5.4.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\All To All AudioConvert 1.11.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\All Ulead Products and Cracks.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\American Pie 2.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Amon Tobin - Permutation.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Anime-Matrix.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Antares Autotune 4.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Anti Tracks 5.98.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\AnyDVD 3.8.2.3.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\AnyDVD 5.6.1.1.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Apollo Audio DVD Creator 1.1.7.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Apollo DivX To DVD Creator 1.3.0.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Apollo DVD Copy 4.3.4.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Apollo DVD copy 4.5.5.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Aquarium Desktop 1.0.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Armor2netTM Personal Firewall 3.12.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Ashampoo Burning Studio 5.0.2.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Ashampoo Magic Defrag 1.06.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Ashampoo Movie Shrink And Burn 2.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Ashampoo MP3 AudioCenter 1.50.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Ashampoo MP3 AudioCenter 1.70 (se).zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Ashampoo Photo Commander 3.02.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Ashampoo UnInstaller Suite Plus 1.32.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Ashampoo WinOptimizer Platinum 3.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Asmw PC Optimizer Pro 6.31.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\AudiMovie 2.1.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Audio Edit Magic 7.5.9.675.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Audio Editor Gold 2006 7.6.2.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Audio Editor Gold 7.4.0.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Audioslave - Out Of Exile.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Aurora Media Desktop 2.2.5.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Aurora Media Workshop 2.5.5.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Aurora MPEG To DVD Burner 4.76.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Auto Power-on and Shut-down 1.44.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Autodesk - AutoSketch 9.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\AutoDWG DWG to Image Converter 2.9.522x.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Avast Professional 4.6.739.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Avast Professional Edition 4.1.418.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\avast! Professional Edition 4.6.744.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\AVD Graphic Studio 6.5.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Aye Shutdown 5.86.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Babylon Pro 5.05.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Backup DVD Professional 2.03.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Bad News Bears.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Bad Santa.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\BalloNrain 1.0d.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Bandwith Monitor 2.8B605.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Banlieue 13.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Battlefield 2 Special Forces.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Beauty Shop.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\BeboSoft Email Fitness 1.0.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Bejeweled 2 Deluxe Plus.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Beyonce - Speak My Mind (2005).zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Black and White 2.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Black Eyed Peas - Monkey Business.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\BlackICE PC Protection Server Protect.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Blindwrite 5.2.10.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Blindwrite Suite 5.2.2.136.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Blood Omen - Legacy of Kain.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Boney M - Remix 2005.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Bookmark Buddy 3.5.2.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\BoXiKoN 1.4.0.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Broken Sword 3 - Sleeping Dragon.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Broken Sword 3 - Sleeping Dragonbroke.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Broken Sword The Sleeping Dragon.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Brothers In Arms Earned In Blood.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Bryce 5.5a.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\BT Engine 4.7.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\BubbleDiff 2.1.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Bug Doctor 3.0.3.3.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Business Plan Pro 2005.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\ByteOMeter 1.0.110.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\C.OF.DUTY.2.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Cabelas Big Game Hunter 2006.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Cachorro.Club.der.Baeren.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Call Of Duty 2.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Cara Dillon - Cara Dillon.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Cara Dillon - Sweet Liberty.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Carmageddon 2.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Carpenters - Vol 4.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\CD MP3 Terminator 2.07.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\CDG2VCD 2.5.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Cfont Pro 2.2.1.10.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Championship Manager 2005.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Cheech and Chongs Up In Smoke.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Cheetah DVD Burner 1.54.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Chicken Little.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\ChildProtector 2.0.0.5.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\CHM To PDF Converter Pro 3.4.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Chris TV Professional.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Cinema 4D 9.507.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\City Of Angels OST.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Civilization 4.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Civilization IV.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Clean Disk Security 7.52.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Clean Space 9.1.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\CleanCenter 1.35.02.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Cleanerzoomer 3.2.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Codecs pack AIO 4 In 1.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\CodeDrawer 1.8.2.0.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\CodeLobster 2.1.31.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Coffee Tycoon.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\CoffeeCup HTML Editor 2005-G.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Cold Fear.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Computer Repair 1.3.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Conflict Global Terror.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Converters 2005 A.I.O by SM.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Converters Collection.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\CopyPOD 7.63.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Corel Paint Shop Pro X 10.2.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Corel Painter 9.0.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Corel Photo Album 6 Deluxe Extras.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\CorelDRAW Graphics Suite 12.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\CrashDetective 1.0.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Crazy Frog - Jingle Bells.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Crazy Machines New Challenges.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Creature Conflict The Clan Wars.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Crime Life Gang Wars.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Cry Wolf.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Cucusoft DVD To iPod Converter 2.09.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Cucusoft iPod MovieVideo Converter 2.0.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Cute CD DVD Burner 2.5.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Cypress Hill-Greatest Hits From The Bo.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Dark Stone.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Darwinia.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\David Guetta - Blaster.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Dealing with Difficult People.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Def Cut - Return To Burn.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Def Cut - Street Level.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Deftones 4 Alboms.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Delta Force 3 Land Warrior.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Descent Freespace 2.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Deus Ex Invisible War.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Dev Hound 2.21.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\DFX 7.3 Audio Enhancer.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\DFX for Winamp 2 and 5 7.300.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\DialogBlocks 2.09.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\DiaryOne 5.6.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Digital Audio Editor 4.3.3.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Digital MediaRescue Pro 3.5.123x.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Digital PhotoRescue Pro 3.5.135.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\DigitByte Popup Killer 1.0.1.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\DigitByte WinAudio Recorder 2.1.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Diskeeper Professional Premier 10.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Dogdeball.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Doom 3 Ressurection of Evil.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Doom 3.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\DownloadStudio 3.0.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Dr Hardware 2006 7.0.0e.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Dr.DivX 1.0.6.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Dr.Web 4.33.1.12260.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Dracula III - Legacy.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Droppix Recorder iSO PowerPack 1.6.3.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\DSL Speed 3.1.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\DSS DJ 5.5.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Dual DVD Copy Gold 4.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Duke Nukem Manhattan Project.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\DVD Cloner 2.30.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\DVD PixPlay 2.62.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\DVD Region+CSS Free 5.965.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\DVD X Player Pro 4.0.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\DVD X Studios CloneDVD 3.9.0.0.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\DVD-Cloner 2.30.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\DVD2one 2.0.0.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\DVDComposer 1.0.5.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\DVDFab Platinum 2.9.6.0.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\DVDFab Platinum 2.9.6.5.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\DVDIdle Pro 5.89.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\DVDPizza 1.0.2.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\DVDSanta 4.0.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\DVDX Platinum 2.1.0.43.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Ease Audio Converter 2.40.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\East-Tec Eraser 2004 5.6.0.288 Pro.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Easy DVD To DVD Copy 3.0.27.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Easy FlashMaker 1.2.384.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Easy Recovery Pro 6.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Easy Screensaver Maker 1.2.7.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Easy Video Converter 4.5.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\eBay Auction Sniper 3.1.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Edguy - Superheroes.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Elecard Mobile Converter 1.1.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Eminem - Curtain Call.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Envelope Printer 7.0.050712.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Eudora 7.0.1.0.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Eurotrip.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Evanescence - Not For Your Ears.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Evil Msn 3.0.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Exorcism of Emily Rose.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Extensis Mask Pro 3.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\FairStars Audio Converter 1.402.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\FantasyDVD Player 8.50 Professional.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Fat Albert.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\FaxAmatic 9.80.01.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\FIFA 06.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\FIFA 2005.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Fight.Club.MultiSub.Pal.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\FileMerlin 5.0.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\FileRescue Pro 2.6.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\FinePrint Enterprise Edition 5.35.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Fireworks MX 2004.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\FixDown Full Retail Versions Everyday Update.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Flash Player Pro 2.6.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\FlashFXP 3.3.5.1110.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\FlashGet (JetCar) 1.71.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\FlaX 3.01.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\FliSoft Capture Studio 1.61.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Folder Watch 3.12.250.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Font Bureau Alpha Bloc Commerci.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Forever Classics Collection(CD4 Handel.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Foxit PDF Editor 1.2.0419.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Frames - Dance the Devil.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Fraps 2.6.4.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Free Internet TV 4.6.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\FTP Voyager 12.3.0.0 Enterprise.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Fun With Dick and Jane.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Future Trance Vol.34.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Futuremark 3DMark05 Pro 1.2.0.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\G-Unit-Beg for Mercy(2003).zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Game Speed Controller 1.0.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Game XP 1.5.2.2.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Games - Harry Potter.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Games and more.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\GEAR Pro Mastering Edition 7.00.16.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Gene6 FTP Server 3.7.0.24.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Gentle Draw 1.30.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\GhostSurf 2005 Platinum.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Girder 4.0.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Global Deejays - What A Feeling (2005).zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\GMail Drive 1.0.9.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Grand Theft Auto Vice City.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Grand Theft Auto.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\GridinSoft Notepad 2.8.0.0.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Gunner Palace (2005).zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\GXTranscoder 2.24.2960 beta3a.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Half-Life 2 - Lost Coast.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Half-Life 2.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Hard Disk Sentinel 1.02.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Hard Disk Sentinel 1.04.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Harry Potter and Prisoner Of Azkaban.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Harry Potter and the half blood prince.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Harry Potter Half Blooded Prince.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Havoc.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Hero Video Convert 2.7.2.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Heroes of the Pacific.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Hide IP Platinum 2.0.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Hide IP Platinum 2.2.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Hiren's BootCD 7.6.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Home alone 2005.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\HS WinPerfect 5.41.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\I Love Disco Energy Vol.1 (CD1).zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Igoodsoft Enterprise Development Edition 1.01.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\iGrafx 2005 10.0.4.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Im Fadenkreuz DVD-R German.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Image-Line Sytrus VSTi DXi 2.0.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Immoral Sisters Ep. 1.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\ImTOO DVD Audio Ripper 2.0.39.127.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\ImTOO DVD Ripper 2.0.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Infinite sudoku.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Internet Download Accelerator 4.4.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Internet Download Manager 5.01.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Internet Explorer 7 Plus.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Internet Explorer 7.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Into.The.Blue.2005.XviD-iANC.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Invision Power Board 2.1.1.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Jarhead XviD HQ - 15112005.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Jarhead.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Jay and Silent Bob Strike Back.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Jay-Z-The Black Album (2003).zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Jedi Knight, Jedi Academy.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\JetAudio Plus 6.1.6.6404.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\John Mayer - Any Given Thursday.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\John Mayer - Room For Squares.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\K-Ci & JoJo - Love Always.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Kasparov Chessmate 3D.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Kaspersky Anti-Virus Personal 2006 6.0.0.248 Beta 2.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Kaspersky Anti-Virus Personal 5.0.388.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Kaspersky Personal Security Suite 1.53.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\KATATONIA - THE GREAT COLD DISTANCE.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Kate DeAraugo - A Place Ive Never Been (2005) - Pop.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Kerio MailServer 5.7.10.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Kerio MailServer 6.12.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Kerio WinRoute Firewall for McAfee 6.011.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\King Kong (2005).zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\King Kong.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Kingdia DVD Ripper 2.47.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Kingdom Under Fire.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\KitchenDraw 4.53.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\KLS Backup 2005 Professional 1.7.1.483.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Late night Jazz Vol 2.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Limewire Pro 4.10.0 Final + All Skins.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Limp Bizkit - Chocolate Starfish.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Limp Bizkit - Significant Other.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Limp Bizkit - Three Dollar Bill Y.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Linkgrabber 3.0.4.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Linkgrabber 3.1.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\LinkLines 1.2.2.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\LiveSync 1.0.0.1020.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Lord of War.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Lord.Of.War.2005.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Luis Miguel - Grandes Exitos (2005) - Latin - CD1.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Luis Miguel - Grandes Exitos (2005) - Latin - CD2.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\LUXOLOGY MODO 1.03.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Macromedia Studio 8.0.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Macromedia Studio 8.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Madonna - Confessions On A Dance Floor.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Magic ASCII Picture Converter 1.20.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Magic DVD Ripper 3.4.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Magic Utilities 2006 4.10.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Magix Video Deluxe FR 2006.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Mail Inspector 2004 4.1.0.144.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Making Waves Studio 5.3.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complete\Mariah Carey - Merry Christmas - 2005.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Documents and Settings\Administrator\Complet

[Buckeye_Sam]

Delete this folder, if it exists.

C:\Program Files\winupdates


As badly as Ewido shows you are infected I'd like you to run an antivirus scan.

Please download and install AVG antivirus. Follow the prompts to download and install all updates and then run a complete scan.

http://free.grisoft....E/lng/us/tpl/v5

Let me know what AVG finds.

[Can]

C:\Program Files\winupdates doesn't exist and AVG couldn't find anything, What am i gonna do now?
The only way is formatting the harddisk and setup windows again?

[Buckeye_Sam]

No, no, no. Formatting is always a last resort. Can you run Ewido once more and post the log here. I want to be sure that malware is not the cause of your problems.

[Can]

Here is the Ewido Log


---------------------------------------------------------
ewido anti-malware - Scan report
---------------------------------------------------------

+ Created on: 23:26:47, 30.12.2005
+ Report-Checksum: 2331FDC0

+ Scan result:

C:\Documents and Settings\Administrator\Cookies\administrator@adtech[2].txt -> Spyware.Cookie.Adtech : Cleaned with backup
C:\Documents and Settings\Administrator\Cookies\administrator@atdmt[2].txt -> Spyware.Cookie.Atdmt : Cleaned with backup
C:\Documents and Settings\Administrator\Cookies\administrator@casalemedia[1].txt -> Spyware.Cookie.Casalemedia : Cleaned with backup
C:\Documents and Settings\Administrator\Cookies\administrator@doubleclick[2].txt -> Spyware.Cookie.Doubleclick : Cleaned with backup
C:\Documents and Settings\Administrator\Cookies\[email protected][2].txt -> Spyware.Cookie.Hitbox : Cleaned with backup
C:\Documents and Settings\Administrator\Cookies\administrator@hitbox[1].txt -> Spyware.Cookie.Hitbox : Cleaned with backup
C:\Documents and Settings\Administrator\Cookies\administrator@questionmarket[1].txt -> Spyware.Cookie.Questionmarket : Cleaned with backup
C:\Documents and Settings\Administrator\Cookies\administrator@serving-sys[1].txt -> Spyware.Cookie.Serving-sys : Cleaned with backup
C:\Documents and Settings\Administrator\Cookies\administrator@statcounter[1].txt -> Spyware.Cookie.Statcounter : Cleaned with backup
C:\Documents and Settings\Administrator\Cookies\administrator@tribalfusion[1].txt -> Spyware.Cookie.Tribalfusion : Cleaned with backup


::Report End

Thanks a Lot for your help

[Buckeye_Sam]

Good, it appears that you are malware free.

Please make sure that you can View Hidden Files

• Click Start -> My Computer
• Select Tools -> Folder options
• Select the View tab and make sure that 'Show hidden files and folders' (or 'Show all files') is enabled.
• Also make sure that 'Display the contents of system folders' is checked.
• Make sure "Hide extensions for known file types" is unchecked
• Make sure "Hide protected operating system files (recommended)" is unchecked
• For more info on how to show hidden files click here.

Can you view the system32 folder now?

[Can]

Yes i see it. Thank you very much for your help Sam. Thanks a lot

[Buckeye_Sam]

It's not normally hidden. You can make it visible all the time by right clicking on the folder, select Properties, and then under attributes uncheck the box marked Hidden.

Now that you are clean, please follow these simple steps in order to keep your computer clean and secure:

• Disable and Enable System Restore. - If you are using Windows ME or XP then you should disable and reenable system restore to make sure there are no infected files found in a restore point left over from what we have just cleaned.
  
  You can find instructions on how to enable and reenable system restore here:
  
  Managing Windows Millenium System Restore
  
  or
  
  Windows XP System Restore Guide
  
  Renable system restore with instructions from tutorial above
  
  
• Make your Internet Explorer more secure - This can be done by following these simple instructions:
  • From within Internet Explorer click on the Tools menu and then click on Options.
  • Click once on the Security tab
  • Click once on the Internet icon so it becomes highlighted.
  • Click once on the Custom Level button.
    
    • Change the Download signed ActiveX controls to Prompt
    • Change the Download unsigned ActiveX controls to Disable
    • Change the Initialize and script ActiveX controls not marked as safe to Disable
    • Change the Installation of desktop items to Prompt
    • Change the Launching programs and files in an IFRAME to Prompt
    • Change the Navigate sub-frames across different domains to Prompt
    • When all these settings have been made, click on the OK button.
    • If it prompts you as to whether or not you want to save the settings, press the Yes button.
  • Next press the Apply button and then the OK to exit the Internet Properties page.
• Use an AntiVirus Software - It is very important that your computer has an anti-virus software running on your machine. This alone can save you a lot of trouble with malware in the future.
  
  See this link for a listing of some online & their stand-alone antivirus programs:
  
  Virus, Spyware, and Malware Protection and Removal Resources
  
  
• Update your AntiVirus Software - It is imperitive that you update your Antivirus software at least once a week (Even more if you wish). If you do not update your antivirus software then it will not be able to catch any of the new variants that may come out.
  
  
• Use a Firewall - I can not stress how important it is that you use a Firewall on your computer. Without a firewall your computer is succeptible to being hacked and taken over. I am very serious about this and see it happen almost every day with my clients. Simply using a Firewall in its default configuration can lower your risk greatly.
  
  For a tutorial on Firewalls and a listing of some available ones see the link below:
  
  Understanding and Using Firewalls
  
  
• Visit Microsoft's Windows Update Site Frequently - It is important that you visit http://www.windowsupdate.com regularly. This will ensure your computer has always the latest security updates available installed on your computer. If there are new updates to install, install them immediately, reboot your computer, and revisit the site until there are no more critical updates.
  
  
• Install Spybot - Search and Destroy - Install and download Spybot - Search and Destroy with its TeaTimer option. This will provide realtime spyware & hijacker protection on your computer alongside your virus protection. You should also scan your computer with program on a regular basis just as you would an antivirus software.
  
  A tutorial on installing & using this product can be found here:
  
  Using Spybot - Search & Destroy to remove Spyware , Malware, and Hijackers
  
  
• Install Ad-Aware - Install and download Ad-Aware. ou should also scan your computer with program on a regular basis just as you would an antivirus software in conjunction with Spybot.
  
  A tutorial on installing & using this product can be found here:
  
  Using Ad-aware to remove Spyware, Malware, & Hijackers from Your Computer
  
  
• Install SpywareBlaster - SpywareBlaster will added a large list of programs and sites into your Internet Explorer settings that will protect you from running and downloading known malicious programs.
  
  A tutorial on installing & using this product can be found here:
  
  Using SpywareBlaster to protect your computer from Spyware and Malware
  
  
• Update all these programs regularly - Make sure you update all the programs I have listed regularly. Without regular updates you WILL NOT be protected when new malicious programs are released.

Follow this list and your potential for being infected again will reduce dramatically.