Connection dropping - Worm? (RESOLVED)

  1. #1
    WoodDuck is offline Newbie

    Connection dropping - Worm? (RESOLVED)

    Hello, my ADSL connection drops constantly and I suspect a worm or some such. I have a KAV online scan report that shows 2 viruses in 100+ diffent objects, so I got KAV, updated,
    scanned and nothing . I have run Spybot and Adaware, and nothing shows up. Is it possible for these things to hide when they detect an installed program?

    Thanks very much

    P.S.I have a Hijack this log if needed


  2. #2
    VopThis is offline Senior Member (Canada)
    Is it possible for these things to hide when they detect an installed program?
    More likely, it is possible that there could be attempts to block access to certain sites or create other forms of interference.


    I have a KAV online scan report that shows 2 viruses in 100+ diffent objects
    Can you post that report?


    Also post a HijackThis log.

  3. #3
    WoodDuck is offline Newbie
    Hi, thanks for the response. Here is the online Kaspersky scan results. It's big so I'll post it in 2 seperate pieces and then the Hijack log.
    Thanks

    -------------------------------------------------------------------------------
    KASPERSKY ON-LINE SCANNER REPORT
    Sunday, April 09, 2006 12:51:29 PM
    Operating System: Microsoft Windows XP Home Edition, Service Pack 2 (Build 2600)
    Kaspersky On-line Scanner version: 5.0.78.0
    Kaspersky Anti-Virus database last update: 9/04/2006
    Kaspersky Anti-Virus database records: 175794
    -------------------------------------------------------------------------------

    Scan Settings:
    Scan using the following antivirus database: standard
    Scan Archives: true
    Scan Mail Bases: true

    Scan Target - My Computer:
    C:\
    D:\
    E:\
    F:\
    G:\

    Scan Statistics:
    Total number of scanned objects: 155002
    Number of viruses found: 2
    Number of infected objects: 138
    Number of suspicious objects: 0
    Duration of the scan process: 02:13:01

    Infected Object Name / Virus Name / Last Action
    C:\Documents and Settings\Scott\Application Data\Thunderbird\Old Profile\Mail\Local Folders\Inbox/[From TELUS Mail Administrator <helpdesk@telus.net>][Date Tue, 30 Nov 2004 23:44:16 -0700]/UNNAMED/[From "Judi Ayers" <jayers@dccnet.com>][Date Thu, 2 Dec 2004 19:45:10 -0800]/UNNAMED/[From "Giganews" <support@giganews.com>][Date Fri, 3 Dec 2004 05:50:58 UT]/UNNAMED/[From Chris Walter <hook90@shaw.ca>][Date Wed, 08 Dec 2004 1018 -0800]/text/[From "Coats, Scott" <SCoats@rich ... / ... ... /[Fro ... /[From "Scoats" <scoats@teligentems.com>][Date Fri, 12 Aug 2005 03:19:09 ... /Taxes.exe Infected: Email-Worm.Win32.Bagle.cf skipped
    C:\Documents and Settings\Scott\Application Data\Thunderbird\Old Profile\Mail\Local Folders\Inbox/[From TELUS Mail Administrator <helpdesk@telus.net>][Date Tue, 30 Nov 2004 23:44:16 -0700]/UNNAMED/[From "Judi Ayers" <jayers@dccnet.com>][Date Thu, 2 Dec 2004 19:45:10 -0800]/UNNAMED/[From "Giganews" <support@giganews.com>][Date Fri, 3 Dec 2004 05:50:58 UT]/UNNAMED/[From Chris Walter <hook90@shaw.ca>][Date Wed, 08 Dec 2004 1018 -0800]/text/[From "Coats, Scott" <SCoats@rich ... / ... ... /[Fro ... /[From "Scoats" <scoats@teligentems.com>][Date Fri, 12 Aug 2005 03:19:09 -0300]/UNNAMED Infected: Email-Worm.Win32.Bagle.cf skipped
    C:\Documents and Settings\Scott\Application Data\Thunderbird\Old Profile\Mail\Local Folders\Inbox/[From TELUS Mail Administrator <helpdesk@telus.net>][Date Tue, 30 Nov 2004 23:44:16 -0700]/UNNAMED/[From "Judi Ayers" <jayers@dccnet.com>][Date Thu, 2 Dec 2004 19:45:10 -0800]/UNNAMED/[From "Giganews" <support@giganews.com>][Date Fri, 3 Dec 2004 05:50:58 UT]/UNNAMED/[From Chris Walter <hook90@shaw.ca>][Date Wed, 08 Dec 2004 1018 -0800]/text/[From "Coats, Scott" <SCoats@rich ... / ... ... ... / ... /[From "Scoats" <scoats@teligentems.com>][Date Fri, 12 Aug 2005 0934 ... /Taxes.exe Infected: Email-Worm.Win32.Bagle.ck skipped
    C:\Documents and Settings\Scott\Application Data\Thunderbird\Old Profile\Mail\Local Folders\Inbox/[From TELUS Mail Administrator <helpdesk@telus.net>][Date Tue, 30 Nov 2004 23:44:16 -0700]/UNNAMED/[From "Judi Ayers" <jayers@dccnet.com>][Date Thu, 2 Dec 2004 19:45:10 -0800]/UNNAMED/[From "Giganews" <support@giganews.com>][Date Fri, 3 Dec 2004 05:50:58 UT]/UNNAMED/[From Chris Walter <hook90@shaw.ca>][Date Wed, 08 Dec 2004 1018 -0800]/text/[From "Coats, Scott" <SCoats@rich ... / ... ... ... / ... /[From "Scoats" <scoats@teligentems.com>][Date Fri, 12 Aug 2005 0934 -0500]/UNNAMED Infected: Email-Worm.Win32.Bagle.ck skipped
    C:\Documents and Settings\Scott\Application Data\Thunderbird\Old Profile\Mail\Local Folders\Inbox/[From TELUS Mail Administrator <helpdesk@telus.net>][Date Tue, 30 Nov 2004 23:44:16 -0700]/UNNAMED/[From "Judi Ayers" <jayers@dccnet.com>][Date Thu, 2 Dec 2004 19:45:10 -0800]/UNNAMED/[From "Giganews" <support@giganews.com>][Date Fri, 3 Dec 2004 05:50:58 UT]/UNNAMED/[From Chris Walter <hook90@shaw.ca>][Date Wed, 08 Dec 2004 1018 -0800]/text/[From "Coats, Scott" <SCoats@rich ... / ... ... ... /[From "Adams" <UnKnOwNCusack@columbus.rr.com>][Date Fri, 12 Aug 2005 00:48:35 -0800]/UNNAMED Infected: Email-Worm.Win32.Bagle.ck skipped
    C:\Documents and Settings\Scott\Application Data\Thunderbird\Old Profile\Mail\Local Folders\Inbox/[From TELUS Mail Administrator <helpdesk@telus.net>][Date Tue, 30 Nov 2004 23:44:16 -0700]/UNNAMED/[From "Judi Ayers" <jayers@dccnet.com>][Date Thu, 2 Dec 2004 19:45:10 -0800]/UNNAMED/[From "Giganews" <support@giganews.com>][Date Fri, 3 Dec 2004 05:50:58 UT]/UNNAMED/[From Chris Walter <hook90@shaw.ca>][Date Wed, 08 Dec 2004 1018 -0800]/text/[From "Coats, Scott" <SCoats@rich ... / ... ... /[From ... /[From "Coats, Scott" <SCoats@richmond.ca>][Date Thu, 11 Aug 2005 12:32:17 -0700]/text Infected: Email-Worm.Win32.Bagle.ck skipped
    C:\Documents and Settings\Scott\Application Data\Thunderbird\Old Profile\Mail\Local Folders\Inbox/[From TELUS Mail Administrator <helpdesk@telus.net>][Date Tue, 30 Nov 2004 23:44:16 -0700]/UNNAMED/[From "Judi Ayers" <jayers@dccnet.com>][Date Thu, 2 Dec 2004 19:45:10 -0800]/UNNAMED/[From "Giganews" <support@giganews.com>][Date Fri, 3 Dec 2004 05:50:58 UT]/UNNAMED/[From Chris Walter <hook90@shaw.ca>][Date Wed, 08 Dec 2004 1018 -0800]/text/[From "Coats, Scott" <SCoats@rich ... / ... ... /[From "Andrea Gillis" <lpmgrygdelyp@cgocable.com>][Date Thu, 11 Aug 2005 17:23:29 -0200]/UNNAMED Infected: Email-Worm.Win32.Bagle.ck skipped
    C:\Documents and Settings\Scott\Application Data\Thunderbird\Old Profile\Mail\Local Folders\Inbox/[From TELUS Mail Administrator <helpdesk@telus.net>][Date Tue, 30 Nov 2004 23:44:16 -0700]/UNNAMED/[From "Judi Ayers" <jayers@dccnet.com>][Date Thu, 2 Dec 2004 19:45:10 -0800]/UNNAMED/[From "Giganews" <support@giganews.com>][Date Fri, 3 Dec 2004 05:50:58 UT]/UNNAMED/[From Chris Walter <hook90@shaw.ca>][Date Wed, 08 Dec 2004 1018 -0800]/text/[From "Coats, Scott" <SCoats@rich ... / ... /[From "Kathryn Schmidt" <MirandaMariguano@rogers.com>][Date Mon, 01 Aug 2005 08:55:31 -0800]/UNNAMED Infected: Email-Worm.Win32.Bagle.ck skipped
    C:\Documents and Settings\Scott\Application Data\Thunderbird\Old Profile\Mail\Local Folders\Inbox/[From TELUS Mail Administrator <helpdesk@telus.net>][Date Tue, 30 Nov 2004 23:44:16 -0700]/UNNAMED/[From "Judi Ayers" <jayers@dccnet.com>][Date Thu, 2 Dec 2004 19:45:10 -0800]/UNNAMED/[From "Giganews" <support@giganews.com>][Date Fri, 3 Dec 2004 05:50:58 UT]/UNNAMED/[From Chris Walter <hook90@shaw.ca>][Date Wed, 08 Dec 2004 1018 -0800]/text/[From "Coats, Scott" <SCoats@rich ... / .. ... /[Fr ... /[From "Johnson" <glitteranimate@dc.rr.com>][Date Sun, 31 Jul 2005 21:10:24 -0800]/UNNAMED Infected: Email-Worm.Win32.Bagle.ck skipped
    C:\Documents and Settings\Scott\Application Data\Thunderbird\Old Profile\Mail\Local Folders\Inbox/[From TELUS Mail Administrator <helpdesk@telus.net>][Date Tue, 30 Nov 2004 23:44:16 -0700]/UNNAMED/[From "Judi Ayers" <jayers@dccnet.com>][Date Thu, 2 Dec 2004 19:45:10 -0800]/UNNAMED/[From "Giganews" <support@giganews.com>][Date Fri, 3 Dec 2004 05:50:58 UT]/UNNAMED/[From Chris Walter <hook90@shaw.ca>][Date Wed, 08 Dec 2004 1018 -0800]/text/[From "Coats, Scott" <SCoats@rich ... / .. ... /[Fr ... /[From Autolycus <alexgood@mail.com>][Date Mon, 01 Aug 2005 07:02:33 +0300 (EEST)]/UNNAMED Infected: Email-Worm.Win32.Bagle.ck skipped
    C:\Documents and Settings\Scott\Application Data\Thunderbird\Old Profile\Mail\Local Folders\Inbox/[From TELUS Mail Administrator <helpdesk@telus.net>][Date Tue, 30 Nov 2004 23:44:16 -0700]/UNNAMED/[From "Judi Ayers" <jayers@dccnet.com>][Date Thu, 2 Dec 2004 19:45:10 -0800]/UNNAMED/[From "Giganews" <support@giganews.com>][Date Fri, 3 Dec 2004 05:50:58 UT]/UNNAMED/[From Chris Walter <hook90@shaw.ca>][Date Wed, 08 Dec 2004 1018 -0800]/text/[From "Coats, Scott" <SCoats@rich ... / .. ... /[From "Marianne Sawchu ... /[From gwsii@comcast.net][Date Sun, 31 Jul 2005 20:59:53 -0500]/UNNAMED Infected: Email-Worm.Win32.Bagle.ck skipped
    C:\Documents and Settings\Scott\Application Data\Thunderbird\Old Profile\Mail\Local Folders\Inbox/[From TELUS Mail Administrator <helpdesk@telus.net>][Date Tue, 30 Nov 2004 23:44:16 -0700]/UNNAMED/[From "Judi Ayers" <jayers@dccnet.com>][Date Thu, 2 Dec 2004 19:45:10 -0800]/UNNAMED/[From "Giganews" <support@giganews.com>][Date Fri, 3 Dec 2004 05:50:58 UT]/UNNAMED/[From Chris Walter <hook90@shaw.ca>][Date Wed, 08 Dec 2004 1018 -0800]/text/[From "Coats, Scott" <SCoats@rich ... / .. ... /[From "Marianne Sawchuk" <mariannesawchuk@hotmail.com>][Date Sat, 30 Jul 2005 1328 -0700]/html Infected: Email-Worm.Win32.Bagle.ck skipped
    C:\Documents and Settings\Scott\Application Data\Thunderbird\Old Profile\Mail\Local Folders\Inbox/[From TELUS Mail Administrator <helpdesk@telus.net>][Date Tue, 30 Nov 2004 23:44:16 -0700]/UNNAMED/[From "Judi Ayers" <jayers@dccnet.com>][Date Thu, 2 Dec 2004 19:45:10 -0800]/UNNAMED/[From "Giganews" <support@giganews.com>][Date Fri, 3 Dec 2004 05:50:58 UT]/UNNAMED/[From Chris Walter <hook90@shaw.ca>][Date Wed, 08 Dec 2004 1018 -0800]/text/[From "Coats, Scott" <SCoats@rich ... / .. ... /[From Madeline Gerbert <alexmoukh@hotmail.com>][Date Fri, 29 Jul 2005 18:55:38 +0300 (EEST)]/html Infected: Email-Worm.Win32.Bagle.ck skipped
    C:\Documents and Settings\Scott\Application Data\Thunderbird\Old Profile\Mail\Local Folders\Inbox/[From TELUS Mail Administrator <helpdesk@telus.net>][Date Tue, 30 Nov 2004 23:44:16 -0700]/UNNAMED/[From "Judi Ayers" <jayers@dccnet.com>][Date Thu, 2 Dec 2004 19:45:10 -0800]/UNNAMED/[From "Giganews" <support@giganews.com>][Date Fri, 3 Dec 2004 05:50:58 UT]/UNNAMED/[From Chris Walter <hook90@shaw.ca>][Date Wed, 08 Dec 2004 1018 -0800]/text/[From "Coats, Scott" <SCoats@rich ... / ... ... ... ... /[From "Jay Fox" <cvrrxcig@ascendone.com>][Date Fri, 29 Jul 2005 08:31:26 -0500]/UNNAMED Infected: Email-Worm.Win32.Bagle.ck skipped
    C:\Documents and Settings\Scott\Application Data\Thunderbird\Old Profile\Mail\Local Folders\Inbox/[From TELUS Mail Administrator <helpdesk@telus.net>][Date Tue, 30 Nov 2004 23:44:16 -0700]/UNNAMED/[From "Judi Ayers" <jayers@dccnet.com>][Date Thu, 2 Dec 2004 19:45:10 -0800]/UNNAMED/[From "Giganews" <support@giganews.com>][Date Fri, 3 Dec 2004 05:50:58 UT]/UNNAMED/[From Chris Walter <hook90@shaw.ca>][Date Wed, 08 Dec 2004 1018 -0800]/text/[From "Coats, Scott" <SCoats@rich ... / ... ... ... /[From "Rena" <ArlenebuzyleneZ0aWg@rogers.com>][Date Thu, 28 Jul 2005 17:52:13 -0800]/UNNAMED Infected: Email-Worm.Win32.Bagle.ck skipped
    C:\Documents and Settings\Scott\Application Data\Thunderbird\Old Profile\Mail\Local Folders\Inbox/[From TELUS Mail Administrator <helpdesk@telus.net>][Date Tue, 30 Nov 2004 23:44:16 -0700]/UNNAMED/[From "Judi Ayers" <jayers@dccnet.com>][Date Thu, 2 Dec 2004 19:45:10 -0800]/UNNAMED/[From "Giganews" <support@giganews.com>][Date Fri, 3 Dec 2004 05:50:58 UT]/UNNAMED/[From Chris Walter <hook90@shaw.ca>][Date Wed, 08 Dec 2004 1018 -0800]/text/[From "Coats, Scott" <SCoats@rich ... / ... ... /[From eCabinet Systems <ecabnotify@thermwood.com>][Date Mon, 21 Mar 2005 13:33:52 -0600]/UNNAMED Infected: Email-Worm.Win32.Bagle.ck skipped
    C:\Documents and Settings\Scott\Application Data\Thunderbird\Old Profile\Mail\Local Folders\Inbox/[From TELUS Mail Administrator <helpdesk@telus.net>][Date Tue, 30 Nov 2004 23:44:16 -0700]/UNNAMED/[From "Judi Ayers" <jayers@dccnet.com>][Date Thu, 2 Dec 2004 19:45:10 -0800]/UNNAMED/[From "Giganews" <support@giganews.com>][Date Fri, 3 Dec 2004 05:50:58 UT]/UNNAMED/[From Chris Walter <hook90@shaw.ca>][Date Wed, 08 Dec 2004 1018 -0800]/text/[From "Coats, Scott" <SCoats@rich ... / ... /[From "Able A ... /[From Chris Walter <hook90@shaw.ca>][Date Fri, 18 Mar 2005 17:55:41 -0800]/UNNAMED Infected: Email-Worm.Win32.Bagle.ck skipped
    C:\Documents and Settings\Scott\Application Data\Thunderbird\Old Profile\Mail\Local Folders\Inbox/[From TELUS Mail Administrator <helpdesk@telus.net>][Date Tue, 30 Nov 2004 23:44:16 -0700]/UNNAMED/[From "Judi Ayers" <jayers@dccnet.com>][Date Thu, 2 Dec 2004 19:45:10 -0800]/UNNAMED/[From "Giganews" <support@giganews.com>][Date Fri, 3 Dec 2004 05:50:58 UT]/UNNAMED/[From Chris Walter <hook90@shaw.ca>][Date Wed, 08 Dec 2004 1018 -0800]/text/[From "Coats, Scott" <SCoats@rich ... / ... /[From "Able Auctions Vancouver" <ablevcr@ableauctions.ca>][Date Mon, 28 Feb 2005 10:15:57 -0800]/text Infected: Email-Worm.Win32.Bagle.ck skipped
    C:\Documents and Settings\Scott\Application Data\Thunderbird\Old Profile\Mail\Local Folders\Inbox/[From TELUS Mail Administrator <helpdesk@telus.net>][Date Tue, 30 Nov 2004 23:44:16 -0700]/UNNAMED/[From "Judi Ayers" <jayers@dccnet.com>][Date Thu, 2 Dec 2004 19:45:10 -0800]/UNNAMED/[From "Giganews" <support@giganews.com>][Date Fri, 3 Dec 2004 05:50:58 UT]/UNNAMED/[From Chris Walter <hook90@shaw.ca>][Date Wed, 08 Dec 2004 1018 -0800]/text/[From "Coats, Scott" <SCoats@rich ... /[From The .. ... / ... / ... /[From igor <igor@hificentre.com>][Date Fri, 04 Feb 2005 1255 -0800]/text Infected: Email-Worm.Win32.Bagle.ck skipped
    C:\Documents and Settings\Scott\Application Data\Thunderbird\Old Profile\Mail\Local Folders\Inbox/[From TELUS Mail Administrator <helpdesk@telus.net>][Date Tue, 30 Nov 2004 23:44:16 -0700]/UNNAMED/[From "Judi Ayers" <jayers@dccnet.com>][Date Thu, 2 Dec 2004 19:45:10 -0800]/UNNAMED/[From "Giganews" <support@giganews.com>][Date Fri, 3 Dec 2004 05:50:58 UT]/UNNAMED/[From Chris Walter <hook90@shaw.ca>][Date Wed, 08 Dec 2004 1018 -0800]/text/[From "Coats, Scott" <SCoats@rich ... /[From The .. ... / ... /[From John Larsen <jjcclarsen@shaw.ca>][Date Thu, 27 Jan 2005 19:04:22 -0800]/text Infected: Email-Worm.Win32.Bagle.ck skipped
    C:\Documents and Settings\Scott\Application Data\Thunderbird\Old Profile\Mail\Local Folders\Inbox/[From TELUS Mail Administrator <helpdesk@telus.net>][Date Tue, 30 Nov 2004 23:44:16 -0700]/UNNAMED/[From "Judi Ayers" <jayers@dccnet.com>][Date Thu, 2 Dec 2004 19:45:10 -0800]/UNNAMED/[From "Giganews" <support@giganews.com>][Date Fri, 3 Dec 2004 05:50:58 UT]/UNNAMED/[From Chris Walter <hook90@shaw.ca>][Date Wed, 08 Dec 2004 1018 -0800]/text/[From "Coats, Scott" <SCoats@rich ... /[From The .. ... /[From "Coats, Scott" <SCoats@richmond.ca>][Date Wed, 26 Jan 2005 14:09:54 -0800]/UNNAMED Infected: Email-Worm.Win32.Bagle.ck skipped
    C:\Documents and Settings\Scott\Application Data\Thunderbird\Old Profile\Mail\Local Folders\Inbox/[From TELUS Mail Administrator <helpdesk@telus.net>][Date Tue, 30 Nov 2004 23:44:16 -0700]/UNNAMED/[From "Judi Ayers" <jayers@dccnet.com>][Date Thu, 2 Dec 2004 19:45:10 -0800]/UNNAMED/[From "Giganews" <support@giganews.com>][Date Fri, 3 Dec 2004 05:50:58 UT]/UNNAMED/[From Chris Walter <hook90@shaw.ca>][Date Wed, 08 Dec 2004 1018 -0800]/text/[From "Coats, Scott" <SCoats@rich ... /[From The .. ... /[From "Coats, Scott" <SCoats@richmond.ca>][Date Wed, 26 Jan 2005 14:09:22 -0800]/UNNAMED Infected: Email-Worm.Win32.Bagle.ck skipped
    C:\Documents and Settings\Scott\Application Data\Thunderbird\Old Profile\Mail\Local Folders\Inbox/[From TELUS Mail Administrator <helpdesk@telus.net>][Date Tue, 30 Nov 2004 23:44:16 -0700]/UNNAMED/[From "Judi Ayers" <jayers@dccnet.com>][Date Thu, 2 Dec 2004 19:45:10 -0800]/UNNAMED/[From "Giganews" <support@giganews.com>][Date Fri, 3 Dec 2004 05:50:58 UT]/UNNAMED/[From Chris Walter <hook90@shaw.ca>][Date Wed, 08 Dec 2004 1018 -0800]/text/[From "Coats, Scott" <SCoats@rich ... /[From The .. ... /[From "Coats, Scott" <SCoats@richmond.ca>][Date Wed, 26 Jan 2005 14:07:07 -0800]/UNNAMED Infected: Email-Worm.Win32.Bagle.ck skipped
    C:\Documents and Settings\Scott\Application Data\Thunderbird\Old Profile\Mail\Local Folders\Inbox/[From TELUS Mail Administrator <helpdesk@telus.net>][Date Tue, 30 Nov 2004 23:44:16 -0700]/UNNAMED/[From "Judi Ayers" <jayers@dccnet.com>][Date Thu, 2 Dec 2004 19:45:10 -0800]/UNNAMED/[From "Giganews" <support@giganews.com>][Date Fri, 3 Dec 2004 05:50:58 UT]/UNNAMED/[From Chris Walter <hook90@shaw.ca>][Date Wed, 08 Dec 2004 1018 -0800]/text/[From "Coats, Scott" <SCoats@rich ... /[From The .. ... /[From "Coats, Scott" <SCoats@richmond.ca>][Date Wed, 26 Jan 2005 14:06:34 -0800]/UNNAMED Infected: Email-Worm.Win32.Bagle.ck skipped
    C:\Documents and Settings\Scott\Application Data\Thunderbird\Old Profile\Mail\Local Folders\Inbox/[From TELUS Mail Administrator <helpdesk@telus.net>][Date Tue, 30 Nov 2004 23:44:16 -0700]/UNNAMED/[From "Judi Ayers" <jayers@dccnet.com>][Date Thu, 2 Dec 2004 19:45:10 -0800]/UNNAMED/[From "Giganews" <support@giganews.com>][Date Fri, 3 Dec 2004 05:50:58 UT]/UNNAMED/[From Chris Walter <hook90@shaw.ca>][Date Wed, 08 Dec 2004 1018 -0800]/text/[From "Coats, Scott" <SCoats@rich ... /[From The ... /[From "Igor Kivritsky" <igor@hificentre.com>][Date Sun, 23 Jan 2005 21:59:38 -0800]/UNNAMED Infected: Email-Worm.Win32.Bagle.ck skipped
    C:\Documents and Settings\Scott\Application Data\Thunderbird\Old Profile\Mail\Local Folders\Inbox/[From TELUS Mail Administrator <helpdesk@telus.net>][Date Tue, 30 Nov 2004 23:44:16 -0700]/UNNAMED/[From "Judi Ayers" <jayers@dccnet.com>][Date Thu, 2 Dec 2004 19:45:10 -0800]/UNNAMED/[From "Giganews" <support@giganews.com>][Date Fri, 3 Dec 2004 05:50:58 UT]/UNNAMED/[From Chris Walter <hook90@shaw.ca>][Date Wed, 08 Dec 2004 1018 -0800]/text/[From "Coats, Scott" <SCoats@rich ... /[From The .. ... /[From "Lynn Sawchuk" <cybersuzu@hotmail.com>][Date Fri, 21 Jan 2005 10:29:13 -0800]/html Infected: Email-Worm.Win32.Bagle.ck skipped
    C:\Documents and Settings\Scott\Application Data\Thunderbird\Old Profile\Mail\Local Folders\Inbox/[From TELUS Mail Administrator <helpdesk@telus.net>][Date Tue, 30 Nov 2004 23:44:16 -0700]/UNNAMED/[From "Judi Ayers" <jayers@dccnet.com>][Date Thu, 2 Dec 2004 19:45:10 -0800]/UNNAMED/[From "Giganews" <support@giganews.com>][Date Fri, 3 Dec 2004 05:50:58 UT]/UNNAMED/[From Chris Walter <hook90@shaw.ca>][Date Wed, 08 Dec 2004 1018 -0800]/text/[From "Coats, Scott" <SCoats@rich ... /[From The ... /[From "Jason Wood" <shadowbox11@hotmail.com>][Date Thu, 20 Jan 2005 22:36:42 -0800]/UNNAMED Infected: Email-Worm.Win32.Bagle.ck skipped
    C:\Documents and Settings\Scott\Application Data\Thunderbird\Old Profile\Mail\Local Folders\Inbox/[From TELUS Mail Administrator <helpdesk@telus.net>][Date Tue, 30 Nov 2004 23:44:16 -0700]/UNNAMED/[From "Judi Ayers" <jayers@dccnet.com>][Date Thu, 2 Dec 2004 19:45:10 -0800]/UNNAMED/[From "Giganews" <support@giganews.com>][Date Fri, 3 Dec 2004 05:50:58 UT]/UNNAMED/[From Chris Walter <hook90@shaw.ca>][Date Wed, 08 Dec 2004 1018 -0800]/text/[From "Coats, Scott" <SCoats@rich ... /[From The ... ... /[From "Lynn Sawchuk" <cybersuzu@hotmail.com>][Date Wed, 19 Jan 2005 11:52:00 -0800]/html Infected: Email-Worm.Win32.Bagle.ck skipped
    C:\Documents and Settings\Scott\Application Data\Thunderbird\Old Profile\Mail\Local Folders\Inbox/[From TELUS Mail Administrator <helpdesk@telus.net>][Date Tue, 30 Nov 2004 23:44:16 -0700]/UNNAMED/[From "Judi Ayers" <jayers@dccnet.com>][Date Thu, 2 Dec 2004 19:45:10 -0800]/UNNAMED/[From "Giganews" <support@giganews.com>][Date Fri, 3 Dec 2004 05:50:58 UT]/UNNAMED/[From Chris Walter <hook90@shaw.ca>][Date Wed, 08 Dec 2004 1018 -0800]/text/[From "Coats, Scott" <SCoats@rich ... /[From The ... ... /[From "B. Hallett" <bhallett@autobahn.mb.ca>][Date Sun, 16 Jan 2005 01:59:38 -0600]/text Infected: Email-Worm.Win32.Bagle.ck skipped
    C:\Documents and Settings\Scott\Application Data\Thunderbird\Old Profile\Mail\Local Folders\Inbox/[From TELUS Mail Administrator <helpdesk@telus.net>][Date Tue, 30 Nov 2004 23:44:16 -0700]/UNNAMED/[From "Judi Ayers" <jayers@dccnet.com>][Date Thu, 2 Dec 2004 19:45:10 -0800]/UNNAMED/[From "Giganews" <support@giganews.com>][Date Fri, 3 Dec 2004 05:50:58 UT]/UNNAMED/[From Chris Walter <hook90@shaw.ca>][Date Wed, 08 Dec 2004 1018 -0800]/text/[From "Coats, Scott" <SCoats@rich ... /[From The ... . ... /[From John Larsen <jjcclarsen@shaw.ca>][Date Tue, 11 Jan 2005 20:55:56 -0800]/UNNAMED Infected: Email-Worm.Win32.Bagle.ck skipped
    C:\Documents and Settings\Scott\Application Data\Thunderbird\Old Profile\Mail\Local Folders\Inbox/[From TELUS Mail Administrator <helpdesk@telus.net>][Date Tue, 30 Nov 2004 23:44:16 -0700]/UNNAMED/[From "Judi Ayers" <jayers@dccnet.com>][Date Thu, 2 Dec 2004 19:45:10 -0800]/UNNAMED/[From "Giganews" <support@giganews.com>][Date Fri, 3 Dec 2004 05:50:58 UT]/UNNAMED/[From Chris Walter <hook90@shaw.ca>][Date Wed, 08 Dec 2004 1018 -0800]/text/[From "Coats, Scott" <SCoats@rich ... /[From The ... ... /[From "Coats, Scott" <SCoats@richmond.ca>][Date Wed, 5 Jan 2005 15:57:30 -0800]/UNNAMED Infected: Email-Worm.Win32.Bagle.ck skipped
    C:\Documents and Settings\Scott\Application Data\Thunderbird\Old Profile\Mail\Local Folders\Inbox/[From TELUS Mail Administrator <helpdesk@telus.net>][Date Tue, 30 Nov 2004 23:44:16 -0700]/UNNAMED/[From "Judi Ayers" <jayers@dccnet.com>][Date Thu, 2 Dec 2004 19:45:10 -0800]/UNNAMED/[From "Giganews" <support@giganews.com>][Date Fri, 3 Dec 2004 05:50:58 UT]/UNNAMED/[From Chris Walter <hook90@shaw.ca>][Date Wed, 08 Dec 2004 1018 -0800]/text/[From "Coats, Scott" <SCoats@rich ... /[From The ... ... /[From "Coats, Scott" <SCoats@richmond.ca>][Date Wed, 5 Jan 2005 15:55:27 -0800]/UNNAMED Infected: Email-Worm.Win32.Bagle.ck skipped
    C:\Documents and Settings\Scott\Application Data\Thunderbird\Old Profile\Mail\Local Folders\Inbox/[From TELUS Mail Administrator <helpdesk@telus.net>][Date Tue, 30 Nov 2004 23:44:16 -0700]/UNNAMED/[From "Judi Ayers" <jayers@dccnet.com>][Date Thu, 2 Dec 2004 19:45:10 -0800]/UNNAMED/[From "Giganews" <support@giganews.com>][Date Fri, 3 Dec 2004 05:50:58 UT]/UNNAMED/[From Chris Walter <hook90@shaw.ca>][Date Wed, 08 Dec 2004 1018 -0800]/text/[From "Coats, Scott" <SCoats@rich ... /[From The ... /[From Bruce Hallett <bhallett@autobahn.mb.ca>][Date Tue, 04 Jan 2005 10:04:40 -0600]/UNNAMED Infected: Email-Worm.Win32.Bagle.ck skipped
    C:\Documents and Settings\Scott\Application Data\Thunderbird\Old Profile\Mail\Local Folders\Inbox/[From TELUS Mail Administrator <helpdesk@telus.net>][Date Tue, 30 Nov 2004 23:44:16 -0700]/UNNAMED/[From "Judi Ayers" <jayers@dccnet.com>][Date Thu, 2 Dec 2004 19:45:10 -0800]/UNNAMED/[From "Giganews" <support@giganews.com>][Date Fri, 3 Dec 2004 05:50:58 UT]/UNNAMED/[From Chris Walter <hook90@shaw.ca>][Date Wed, 08 Dec 2004 1018 -0800]/text/[From "Coats, Scott" <SCoats@rich ... /[From The Canadi ... /[From "kelly cook" <krcook49@hotmail.com>][Date Mon, 03 Jan 2005 21:14:31 -0600]/text Infected: Email-Worm.Win32.Bagle.ck skipped
    C:\Documents and Settings\Scott\Application Data\Thunderbird\Old Profile\Mail\Local Folders\Inbox/[From TELUS Mail Administrator <helpdesk@telus.net>][Date Tue, 30 Nov 2004 23:44:16 -0700]/UNNAMED/[From "Judi Ayers" <jayers@dccnet.com>][Date Thu, 2 Dec 2004 19:45:10 -0800]/UNNAMED/[From "Giganews" <support@giganews.com>][Date Fri, 3 Dec 2004 05:50:58 UT]/UNNAMED/[From Chris Walter <hook90@shaw.ca>][Date Wed, 08 Dec 2004 1018 -0800]/text/[From "Coats, Scott" <SCoats@rich ... /[From The Canadi ... /[From John Larsen <jjcclarsen@shaw.ca>][Date Thu, 30 Dec 2004 16:49:58 -0800]/UNNAMED Infected: Email-Worm.Win32.Bagle.ck skipped
    C:\Documents and Settings\Scott\Application Data\Thunderbird\Old Profile\Mail\Local Folders\Inbox/[From TELUS Mail Administrator <helpdesk@telus.net>][Date Tue, 30 Nov 2004 23:44:16 -0700]/UNNAMED/[From "Judi Ayers" <jayers@dccnet.com>][Date Thu, 2 Dec 2004 19:45:10 -0800]/UNNAMED/[From "Giganews" <support@giganews.com>][Date Fri, 3 Dec 2004 05:50:58 UT]/UNNAMED/[From Chris Walter <hook90@shaw.ca>][Date Wed, 08 Dec 2004 1018 -0800]/text/[From "Coats, Scott" <SCoats@rich ... /[From The Canadian ... /[From "Giganews" <support@giganews.com>][Date Tue, 28 Dec 2004 06:05:13 UT]/UNNAMED Infected: Email-Worm.Win32.Bagle.ck skipped
    C:\Documents and Settings\Scott\Application Data\Thunderbird\Old Profile\Mail\Local Folders\Inbox/[From TELUS Mail Administrator <helpdesk@telus.net>][Date Tue, 30 Nov 2004 23:44:16 -0700]/UNNAMED/[From "Judi Ayers" <jayers@dccnet.com>][Date Thu, 2 Dec 2004 19:45:10 -0800]/UNNAMED/[From "Giganews" <support@giganews.com>][Date Fri, 3 Dec 2004 05:50:58 UT]/UNNAMED/[From Chris Walter <hook90@shaw.ca>][Date Wed, 08 Dec 2004 1018 -0800]/text/[From "Coats, Scott" <SCoats@rich ... /[From The Canadian Red Cross Society <ereceipts@redcross.ca>][Date Mon, 27 Dec 2004 18:23:46 -0800]/UNNAMED Infected: Email-Worm.Win32.Bagle.ck skipped
    C:\Documents and Settings\Scott\Application Data\Thunderbird\Old Profile\Mail\Local Folders\Inbox/[From TELUS Mail Administrator <helpdesk@telus.net>][Date Tue, 30 Nov 2004 23:44:16 -0700]/UNNAMED/[From "Judi Ayers" <jayers@dccnet.com>][Date Thu, 2 Dec 2004 19:45:10 -0800]/UNNAMED/[From "Giganews" <support@giganews.com>][Date Fri, 3 Dec 2004 05:50:58 UT]/UNNAMED/[From Chris Walter <hook90@shaw.ca>][Date Wed, 08 Dec 2004 1018 -0800]/text/[From "Coats, Scott" <SCoats@richmo ... /[From "Lee Valley Service" <CustomerService@leevalley.com>][Date Tue, 21 Dec 2004 10:14:01 -0500]/UNNAMED Infected: Email-Worm.Win32.Bagle.ck skipped
    C:\Documents and Settings\Scott\Application Data\Thunderbird\Old Profile\Mail\Local Folders\Inbox/[From TELUS Mail Administrator <helpdesk@telus.net>][Date Tue, 30 Nov 2004 23:44:16 -0700]/UNNAMED/[From "Judi Ayers" <jayers@dccnet.com>][Date Thu, 2 Dec 2004 19:45:10 -0800]/UNNAMED/[From "Giganews" <support@giganews.com>][Date Fri, 3 Dec 2004 05:50:58 UT]/UNNAMED/[From Chris Walter <hook90@shaw.ca>][Date Wed, 08 Dec 2004 1018 -0800]/text/[From "Coats, Scott" <SCoats@richmond.c ... /[From "Able Auctions Vancouver" <ablevcr@ableauctions.ca>][Date Mon, 13 Dec 2004 17:20:49 -0800]/text Infected: Email-Worm.Win32.Bagle.ck skipped
    C:\Documents and Settings\Scott\Application Data\Thunderbird\Old Profile\Mail\Local Folders\Inbox/[From TELUS Mail Administrator <helpdesk@telus.net>][Date Tue, 30 Nov 2004 23:44:16 -0700]/UNNAMED/[From "Judi Ayers" <jayers@dccnet.com>][Date Thu, 2 Dec 2004 19:45:10 -0800]/UNNAMED/[From "Giganews" <support@giganews.com>][Date Fri, 3 Dec 2004 05:50:58 UT]/UNNAMED/[From Chris Walter <hook90@shaw.ca>][Date Wed, 08 Dec 2004 1018 -0800]/text/[From "Coats, Scott" <SCoats@richmond.ca>][Date Thu, ... /[From "Coats, Scott" <SCoats@richmond.ca>][Date Fri, 10 Dec 2004 15:28:59 -0800]/UNNAMED Infected: Email-Worm.Win32.Bagle.ck skipped
    C:\Documents and Settings\Scott\Application Data\Thunderbird\Old Profile\Mail\Local Folders\Inbox/[From TELUS Mail Administrator <helpdesk@telus.net>][Date Tue, 30 Nov 2004 23:44:16 -0700]/UNNAMED/[From "Judi Ayers" <jayers@dccnet.com>][Date Thu, 2 Dec 2004 19:45:10 -0800]/UNNAMED/[From "Giganews" <support@giganews.com>][Date Fri, 3 Dec 2004 05:50:58 UT]/UNNAMED/[From Chris Walter <hook90@shaw.ca>][Date Wed, 08 Dec 2004 1018 -0800]/text/[From "Coats, Scott" <SCoats@richmond.ca>][Date Thu, 9 Dec 2004 15:48:49 -0800]/UNNAMED Infected: Email-Worm.Win32.Bagle.ck skipped
    C:\Documents and Settings\Scott\Application Data\Thunderbird\Old Profile\Mail\Local Folders\Inbox/[From TELUS Mail Administrator <helpdesk@telus.net>][Date Tue, 30 Nov 2004 23:44:16 -0700]/UNNAMED/[From "Judi Ayers" <jayers@dccnet.com>][Date Thu, 2 Dec 2004 19:45:10 -0800]/UNNAMED/[From "Giganews" <support@giganews.com>][Date Fri, 3 Dec 2004 05:50:58 UT]/UNNAMED/[From Chris Walter <hook90@shaw.ca>][Date Wed, 08 Dec 2004 1018 -0800]/text Infected: Email-Worm.Win32.Bagle.ck skipped
    C:\Documents and Settings\Scott\Application Data\Thunderbird\Old Profile\Mail\Local Folders\Inbox/[From TELUS Mail Administrator <helpdesk@telus.net>][Date Tue, 30 Nov 2004 23:44:16 -0700]/UNNAMED/[From "Judi Ayers" <jayers@dccnet.com>][Date Thu, 2 Dec 2004 19:45:10 -0800]/UNNAMED/[From "Giganews" <support@giganews.com>][Date Fri, 3 Dec 2004 05:50:58 UT]/UNNAMED Infected: Email-Worm.Win32.Bagle.ck skipped
    C:\Documents and Settings\Scott\Application Data\Thunderbird\Old Profile\Mail\Local Folders\Inbox/[From TELUS Mail Administrator <helpdesk@telus.net>][Date Tue, 30 Nov 2004 23:44:16 -0700]/UNNAMED/[From "Judi Ayers" <jayers@dccnet.com>][Date Thu, 2 Dec 2004 19:45:10 -0800]/UNNAMED Infected: Email-Worm.Win32.Bagle.ck skipped
    C:\Documents and Settings\Scott\Application Data\Thunderbird\Old Profile\Mail\Local Folders\Inbox/[From TELUS Mail Administrator <helpdesk@telus.net>][Date Tue, 30 Nov 2004 23:44:16 -0700]/UNNAMED Infected: Email-Worm.Win32.Bagle.ck skipped
    C:\Documents and Settings\Scott\Application Data\Thunderbird\Old Profile\Mail\Local Folders\Inbox Mail Berkeley mbox: infected - 45 skipped
    C:\Documents and Settings\Scott\Application Data\Thunderbird\Profiles\From Backup-Use this One\Mail\Local Folders\Inbox/[From TELUS Mail Administrator <helpdesk@telus.net>][Date Tue, 30 Nov 2004 23:44:16 -0700]/UNNAMED/[From "Judi Ayers" <jayers@dccnet.com>][Date Thu, 2 Dec 2004 19:45:10 -0800]/UNNAMED/[From "Giganews" <support@giganews.com>][Date Fri, 3 Dec 2004 05:50:58 UT]/UNNAMED/[From Chris Walter <hook90@shaw.ca>][Date Wed, 08 Dec 2004 1018 -0800]/text/[From "Coats, Scott" <SCoats@rich ... / ... ... /[Fro ... /[From "Scoats" <scoats@teligentems.com>][Date Fri, 12 Aug 2005 03:19:09 ... /Taxes.exe Infected: Email-Worm.Win32.Bagle.cf skipped
    C:\Documents and Settings\Scott\Application Data\Thunderbird\Profiles\From Backup-Use this One\Mail\Local Folders\Inbox/[From TELUS Mail Administrator <helpdesk@telus.net>][Date Tue, 30 Nov 2004 23:44:16 -0700]/UNNAMED/[From "Judi Ayers" <jayers@dccnet.com>][Date Thu, 2 Dec 2004 19:45:10 -0800]/UNNAMED/[From "Giganews" <support@giganews.com>][Date Fri, 3 Dec 2004 05:50:58 UT]/UNNAMED/[From Chris Walter <hook90@shaw.ca>][Date Wed, 08 Dec 2004 1018 -0800]/text/[From "Coats, Scott" <SCoats@rich ... / ... ... /[Fro ... /[From "Scoats" <scoats@teligentems.com>][Date Fri, 12 Aug 2005 03:19:09 -0300]/UNNAMED Infected: Email-Worm.Win32.Bagle.cf skipped
    C:\Documents and Settings\Scott\Application Data\Thunderbird\Profiles\From Backup-Use this One\Mail\Local Folders\Inbox/[From TELUS Mail Administrator <helpdesk@telus.net>][Date Tue, 30 Nov 2004 23:44:16 -0700]/UNNAMED/[From "Judi Ayers" <jayers@dccnet.com>][Date Thu, 2 Dec 2004 19:45:10 -0800]/UNNAMED/[From "Giganews" <support@giganews.com>][Date Fri, 3 Dec 2004 05:50:58 UT]/UNNAMED/[From Chris Walter <hook90@shaw.ca>][Date Wed, 08 Dec 2004 1018 -0800]/text/[From "Coats, Scott" <SCoats@rich ... / ... ... ... / ... /[From "Scoats" <scoats@teligentems.com>][Date Fri, 12 Aug 2005 0934 ... /Taxes.exe Infected: Email-Worm.Win32.Bagle.ck skipped
    C:\Documents and Settings\Scott\Application Data\Thunderbird\Profiles\From Backup-Use this One\Mail\Local Folders\Inbox/[From TELUS Mail Administrator <helpdesk@telus.net>][Date Tue, 30 Nov 2004 23:44:16 -0700]/UNNAMED/[From "Judi Ayers" <jayers@dccnet.com>][Date Thu, 2 Dec 2004 19:45:10 -0800]/UNNAMED/[From "Giganews" <support@giganews.com>][Date Fri, 3 Dec 2004 05:50:58 UT]/UNNAMED/[From Chris Walter <hook90@shaw.ca>][Date Wed, 08 Dec 2004 1018 -0800]/text/[From "Coats, Scott" <SCoats@rich ... / ... ... ... / ... /[From "Scoats" <scoats@teligentems.com>][Date Fri, 12 Aug 2005 0934 -0500]/UNNAMED Infected: Email-Worm.Win32.Bagle.ck skipped
    C:\Documents and Settings\Scott\Application Data\Thunderbird\Profiles\From Backup-Use this One\Mail\Local Folders\Inbox/[From TELUS Mail Administrator <helpdesk@telus.net>][Date Tue, 30 Nov 2004 23:44:16 -0700]/UNNAMED/[From "Judi Ayers" <jayers@dccnet.com>][Date Thu, 2 Dec 2004 19:45:10 -0800]/UNNAMED/[From "Giganews" <support@giganews.com>][Date Fri, 3 Dec 2004 05:50:58 UT]/UNNAMED/[From Chris Walter <hook90@shaw.ca>][Date Wed, 08 Dec 2004 1018 -0800]/text/[From "Coats, Scott" <SCoats@rich ... / ... ... ... /[From "Adams" <UnKnOwNCusack@columbus.rr.com>][Date Fri, 12 Aug 2005 00:48:35 -0800]/UNNAMED Infected: Email-Worm.Win32.Bagle.ck skipped
    C:\Documents and Settings\Scott\Application Data\Thunderbird\Profiles\From Backup-Use this One\Mail\Local Folders\Inbox/[From TELUS Mail Administrator <helpdesk@telus.net>][Date Tue, 30 Nov 2004 23:44:16 -0700]/UNNAMED/[From "Judi Ayers" <jayers@dccnet.com>][Date Thu, 2 Dec 2004 19:45:10 -0800]/UNNAMED/[From "Giganews" <support@giganews.com>][Date Fri, 3 Dec 2004 05:50:58 UT]/UNNAMED/[From Chris Walter <hook90@shaw.ca>][Date Wed, 08 Dec 2004 1018 -0800]/text/[From "Coats, Scott" <SCoats@rich ... / ... ... /[From ... /[From "Coats, Scott" <SCoats@richmond.ca>][Date Thu, 11 Aug 2005 12:32:17 -0700]/text Infected: Email-Worm.Win32.Bagle.ck skipped
    C:\Documents and Settings\Scott\Application Data\Thunderbird\Profiles\From Backup-Use this One\Mail\Local Folders\Inbox/[From TELUS Mail Administrator <helpdesk@telus.net>][Date Tue, 30 Nov 2004 23:44:16 -0700]/UNNAMED/[From "Judi Ayers" <jayers@dccnet.com>][Date Thu, 2 Dec 2004 19:45:10 -0800]/UNNAMED/[From "Giganews" <support@giganews.com>][Date Fri, 3 Dec 2004 05:50:58 UT]/UNNAMED/[From Chris Walter <hook90@shaw.ca>][Date Wed, 08 Dec 2004 1018 -0800]/text/[From "Coats, Scott" <SCoats@rich ... / ... ... /[From "Andrea Gillis" <lpmgrygdelyp@cgocable.com>][Date Thu, 11 Aug 2005 17:23:29 -0200]/UNNAMED Infected: Email-Worm.Win32.Bagle.ck skipped
    C:\Documents and Settings\Scott\Application Data\Thunderbird\Profiles\From Backup-Use this One\Mail\Local Folders\Inbox/[From TELUS Mail Administrator <helpdesk@telus.net>][Date Tue, 30 Nov 2004 23:44:16 -0700]/UNNAMED/[From "Judi Ayers" <jayers@dccnet.com>][Date Thu, 2 Dec 2004 19:45:10 -0800]/UNNAMED/[From "Giganews" <support@giganews.com>][Date Fri, 3 Dec 2004 05:50:58 UT]/UNNAMED/[From Chris Walter <hook90@shaw.ca>][Date Wed, 08 Dec 2004 1018 -0800]/text/[From "Coats, Scott" <SCoats@rich ... / ... /[From "Kathryn Schmidt" <MirandaMariguano@rogers.com>][Date Mon, 01 Aug 2005 08:55:31 -0800]/UNNAMED Infected: Email-Worm.Win32.Bagle.ck skipped
    C:\Documents and Settings\Scott\Application Data\Thunderbird\Profiles\From Backup-Use this One\Mail\Local Folders\Inbox/[From TELUS Mail Administrator <helpdesk@telus.net>][Date Tue, 30 Nov 2004 23:44:16 -0700]/UNNAMED/[From "Judi Ayers" <jayers@dccnet.com>][Date Thu, 2 Dec 2004 19:45:10 -0800]/UNNAMED/[From "Giganews" <support@giganews.com>][Date Fri, 3 Dec 2004 05:50:58 UT]/UNNAMED/[From Chris Walter <hook90@shaw.ca>][Date Wed, 08 Dec 2004 1018 -0800]/text/[From "Coats, Scott" <SCoats@rich ... / .. ... /[Fr ... /[From "Johnson" <glitteranimate@dc.rr.com>][Date Sun, 31 Jul 2005 21:10:24 -0800]/UNNAMED Infected: Email-Worm.Win32.Bagle.ck skipped
    C:\Documents and Settings\Scott\Application Data\Thunderbird\Profiles\From Backup-Use this One\Mail\Local Folders\Inbox/[From TELUS Mail Administrator <helpdesk@telus.net>][Date Tue, 30 Nov 2004 23:44:16 -0700]/UNNAMED/[From "Judi Ayers" <jayers@dccnet.com>][Date Thu, 2 Dec 2004 19:45:10 -0800]/UNNAMED/[From "Giganews" <support@giganews.com>][Date Fri, 3 Dec 2004 05:50:58 UT]/UNNAMED/[From Chris Walter <hook90@shaw.ca>][Date Wed, 08 Dec 2004 1018 -0800]/text/[From "Coats, Scott" <SCoats@rich ... / .. ... /[Fr ... /[From Autolycus <alexgood@mail.com>][Date Mon, 01 Aug 2005 07:02:33 +0300 (EEST)]/UNNAMED Infected: Email-Worm.Win32.Bagle.ck skipped
    C:\Documents and Settings\Scott\Application Data\Thunderbird\Profiles\From Backup-Use this One\Mail\Local Folders\Inbox/[From TELUS Mail Administrator <helpdesk@telus.net>][Date Tue, 30 Nov 2004 23:44:16 -0700]/UNNAMED/[From "Judi Ayers" <jayers@dccnet.com>][Date Thu, 2 Dec 2004 19:45:10 -0800]/UNNAMED/[From "Giganews" <support@giganews.com>][Date Fri, 3 Dec 2004 05:50:58 UT]/UNNAMED/[From Chris Walter <hook90@shaw.ca>][Date Wed, 08 Dec 2004 1018 -0800]/text/[From "Coats, Scott" <SCoats@rich ... / .. ... /[From "Marianne Sawchu ... /[From gwsii@comcast.net][Date Sun, 31 Jul 2005 20:59:53 -0500]/UNNAMED Infected: Email-Worm.Win32.Bagle.ck skipped
    C:\Documents and Settings\Scott\Application Data\Thunderbird\Profiles\From Backup-Use this One\Mail\Local Folders\Inbox/[From TELUS Mail Administrator <helpdesk@telus.net>][Date Tue, 30 Nov 2004 23:44:16 -0700]/UNNAMED/[From "Judi Ayers" <jayers@dccnet.com>][Date Thu, 2 Dec 2004 19:45:10 -0800]/UNNAMED/[From "Giganews" <support@giganews.com>][Date Fri, 3 Dec 2004 05:50:58 UT]/UNNAMED/[From Chris Walter <hook90@shaw.ca>][Date Wed, 08 Dec 2004 1018 -0800]/text/[From "Coats, Scott" <SCoats@rich ... / .. ... /[From "Marianne Sawchuk" <mariannesawchuk@hotmail.com>][Date Sat, 30 Jul 2005 1328 -0700]/html Infected: Email-Worm.Win32.Bagle.ck skipped

  4. #4
    WoodDuck is offline Newbie
    Part 2:

    C:\Documents and Settings\Scott\Application Data\Thunderbird\Profiles\From Backup-Use this One\Mail\Local Folders\Inbox/[From TELUS Mail Administrator <helpdesk@telus.net>][Date Tue, 30 Nov 2004 23:44:16 -0700]/UNNAMED/[From "Judi Ayers" <jayers@dccnet.com>][Date Thu, 2 Dec 2004 19:45:10 -0800]/UNNAMED/[From "Giganews" <support@giganews.com>][Date Fri, 3 Dec 2004 05:50:58 UT]/UNNAMED/[From Chris Walter <hook90@shaw.ca>][Date Wed, 08 Dec 2004 1018 -0800]/text/[From "Coats, Scott" <SCoats@rich ... / .. ... /[From Madeline Gerbert <alexmoukh@hotmail.com>][Date Fri, 29 Jul 2005 18:55:38 +0300 (EEST)]/html Infected: Email-Worm.Win32.Bagle.ck skipped
    C:\Documents and Settings\Scott\Application Data\Thunderbird\Profiles\From Backup-Use this One\Mail\Local Folders\Inbox/[From TELUS Mail Administrator <helpdesk@telus.net>][Date Tue, 30 Nov 2004 23:44:16 -0700]/UNNAMED/[From "Judi Ayers" <jayers@dccnet.com>][Date Thu, 2 Dec 2004 19:45:10 -0800]/UNNAMED/[From "Giganews" <support@giganews.com>][Date Fri, 3 Dec 2004 05:50:58 UT]/UNNAMED/[From Chris Walter <hook90@shaw.ca>][Date Wed, 08 Dec 2004 1018 -0800]/text/[From "Coats, Scott" <SCoats@rich ... / ... ... ... ... /[From "Jay Fox" <cvrrxcig@ascendone.com>][Date Fri, 29 Jul 2005 08:31:26 -0500]/UNNAMED Infected: Email-Worm.Win32.Bagle.ck skipped
    C:\Documents and Settings\Scott\Application Data\Thunderbird\Profiles\From Backup-Use this One\Mail\Local Folders\Inbox/[From TELUS Mail Administrator <helpdesk@telus.net>][Date Tue, 30 Nov 2004 23:44:16 -0700]/UNNAMED/[From "Judi Ayers" <jayers@dccnet.com>][Date Thu, 2 Dec 2004 19:45:10 -0800]/UNNAMED/[From "Giganews" <support@giganews.com>][Date Fri, 3 Dec 2004 05:50:58 UT]/UNNAMED/[From Chris Walter <hook90@shaw.ca>][Date Wed, 08 Dec 2004 1018 -0800]/text/[From "Coats, Scott" <SCoats@rich ... / ... ... ... /[From "Rena" <ArlenebuzyleneZ0aWg@rogers.com>][Date Thu, 28 Jul 2005 17:52:13 -0800]/UNNAMED Infected: Email-Worm.Win32.Bagle.ck skipped
    C:\Documents and Settings\Scott\Application Data\Thunderbird\Profiles\From Backup-Use this One\Mail\Local Folders\Inbox/[From TELUS Mail Administrator <helpdesk@telus.net>][Date Tue, 30 Nov 2004 23:44:16 -0700]/UNNAMED/[From "Judi Ayers" <jayers@dccnet.com>][Date Thu, 2 Dec 2004 19:45:10 -0800]/UNNAMED/[From "Giganews" <support@giganews.com>][Date Fri, 3 Dec 2004 05:50:58 UT]/UNNAMED/[From Chris Walter <hook90@shaw.ca>][Date Wed, 08 Dec 2004 1018 -0800]/text/[From "Coats, Scott" <SCoats@rich ... / ... ... /[From eCabinet Systems <ecabnotify@thermwood.com>][Date Mon, 21 Mar 2005 13:33:52 -0600]/UNNAMED Infected: Email-Worm.Win32.Bagle.ck skipped
    C:\Documents and Settings\Scott\Application Data\Thunderbird\Profiles\From Backup-Use this One\Mail\Local Folders\Inbox/[From TELUS Mail Administrator <helpdesk@telus.net>][Date Tue, 30 Nov 2004 23:44:16 -0700]/UNNAMED/[From "Judi Ayers" <jayers@dccnet.com>][Date Thu, 2 Dec 2004 19:45:10 -0800]/UNNAMED/[From "Giganews" <support@giganews.com>][Date Fri, 3 Dec 2004 05:50:58 UT]/UNNAMED/[From Chris Walter <hook90@shaw.ca>][Date Wed, 08 Dec 2004 1018 -0800]/text/[From "Coats, Scott" <SCoats@rich ... / ... /[From "Able A ... /[From Chris Walter <hook90@shaw.ca>][Date Fri, 18 Mar 2005 17:55:41 -0800]/UNNAMED Infected: Email-Worm.Win32.Bagle.ck skipped
    C:\Documents and Settings\Scott\Application Data\Thunderbird\Profiles\From Backup-Use this One\Mail\Local Folders\Inbox/[From TELUS Mail Administrator <helpdesk@telus.net>][Date Tue, 30 Nov 2004 23:44:16 -0700]/UNNAMED/[From "Judi Ayers" <jayers@dccnet.com>][Date Thu, 2 Dec 2004 19:45:10 -0800]/UNNAMED/[From "Giganews" <support@giganews.com>][Date Fri, 3 Dec 2004 05:50:58 UT]/UNNAMED/[From Chris Walter <hook90@shaw.ca>][Date Wed, 08 Dec 2004 1018 -0800]/text/[From "Coats, Scott" <SCoats@rich ... / ... /[From "Able Auctions Vancouver" <ablevcr@ableauctions.ca>][Date Mon, 28 Feb 2005 10:15:57 -0800]/text Infected: Email-Worm.Win32.Bagle.ck skipped
    C:\Documents and Settings\Scott\Application Data\Thunderbird\Profiles\From Backup-Use this One\Mail\Local Folders\Inbox/[From TELUS Mail Administrator <helpdesk@telus.net>][Date Tue, 30 Nov 2004 23:44:16 -0700]/UNNAMED/[From "Judi Ayers" <jayers@dccnet.com>][Date Thu, 2 Dec 2004 19:45:10 -0800]/UNNAMED/[From "Giganews" <support@giganews.com>][Date Fri, 3 Dec 2004 05:50:58 UT]/UNNAMED/[From Chris Walter <hook90@shaw.ca>][Date Wed, 08 Dec 2004 1018 -0800]/text/[From "Coats, Scott" <SCoats@rich ... /[From The .. ... / ... / ... /[From igor <igor@hificentre.com>][Date Fri, 04 Feb 2005 1255 -0800]/text Infected: Email-Worm.Win32.Bagle.ck skipped
    C:\Documents and Settings\Scott\Application Data\Thunderbird\Profiles\From Backup-Use this One\Mail\Local Folders\Inbox/[From TELUS Mail Administrator <helpdesk@telus.net>][Date Tue, 30 Nov 2004 23:44:16 -0700]/UNNAMED/[From "Judi Ayers" <jayers@dccnet.com>][Date Thu, 2 Dec 2004 19:45:10 -0800]/UNNAMED/[From "Giganews" <support@giganews.com>][Date Fri, 3 Dec 2004 05:50:58 UT]/UNNAMED/[From Chris Walter <hook90@shaw.ca>][Date Wed, 08 Dec 2004 1018 -0800]/text/[From "Coats, Scott" <SCoats@rich ... /[From The .. ... / ... /[From John Larsen <jjcclarsen@shaw.ca>][Date Thu, 27 Jan 2005 19:04:22 -0800]/text Infected: Email-Worm.Win32.Bagle.ck skipped
    C:\Documents and Settings\Scott\Application Data\Thunderbird\Profiles\From Backup-Use this One\Mail\Local Folders\Inbox/[From TELUS Mail Administrator <helpdesk@telus.net>][Date Tue, 30 Nov 2004 23:44:16 -0700]/UNNAMED/[From "Judi Ayers" <jayers@dccnet.com>][Date Thu, 2 Dec 2004 19:45:10 -0800]/UNNAMED/[From "Giganews" <support@giganews.com>][Date Fri, 3 Dec 2004 05:50:58 UT]/UNNAMED/[From Chris Walter <hook90@shaw.ca>][Date Wed, 08 Dec 2004 1018 -0800]/text/[From "Coats, Scott" <SCoats@rich ... /[From The .. ... /[From "Coats, Scott" <SCoats@richmond.ca>][Date Wed, 26 Jan 2005 14:09:54 -0800]/UNNAMED Infected: Email-Worm.Win32.Bagle.ck skipped
    C:\Documents and Settings\Scott\Application Data\Thunderbird\Profiles\From Backup-Use this One\Mail\Local Folders\Inbox/[From TELUS Mail Administrator <helpdesk@telus.net>][Date Tue, 30 Nov 2004 23:44:16 -0700]/UNNAMED/[From "Judi Ayers" <jayers@dccnet.com>][Date Thu, 2 Dec 2004 19:45:10 -0800]/UNNAMED/[From "Giganews" <support@giganews.com>][Date Fri, 3 Dec 2004 05:50:58 UT]/UNNAMED/[From Chris Walter <hook90@shaw.ca>][Date Wed, 08 Dec 2004 1018 -0800]/text/[From "Coats, Scott" <SCoats@rich ... /[From The .. ... /[From "Coats, Scott" <SCoats@richmond.ca>][Date Wed, 26 Jan 2005 14:09:22 -0800]/UNNAMED Infected: Email-Worm.Win32.Bagle.ck skipped
    C:\Documents and Settings\Scott\Application Data\Thunderbird\Profiles\From Backup-Use this One\Mail\Local Folders\Inbox/[From TELUS Mail Administrator <helpdesk@telus.net>][Date Tue, 30 Nov 2004 23:44:16 -0700]/UNNAMED/[From "Judi Ayers" <jayers@dccnet.com>][Date Thu, 2 Dec 2004 19:45:10 -0800]/UNNAMED/[From "Giganews" <support@giganews.com>][Date Fri, 3 Dec 2004 05:50:58 UT]/UNNAMED/[From Chris Walter <hook90@shaw.ca>][Date Wed, 08 Dec 2004 1018 -0800]/text/[From "Coats, Scott" <SCoats@rich ... /[From The .. ... /[From "Coats, Scott" <SCoats@richmond.ca>][Date Wed, 26 Jan 2005 14:07:07 -0800]/UNNAMED Infected: Email-Worm.Win32.Bagle.ck skipped
    C:\Documents and Settings\Scott\Application Data\Thunderbird\Profiles\From Backup-Use this One\Mail\Local Folders\Inbox/[From TELUS Mail Administrator <helpdesk@telus.net>][Date Tue, 30 Nov 2004 23:44:16 -0700]/UNNAMED/[From "Judi Ayers" <jayers@dccnet.com>][Date Thu, 2 Dec 2004 19:45:10 -0800]/UNNAMED/[From "Giganews" <support@giganews.com>][Date Fri, 3 Dec 2004 05:50:58 UT]/UNNAMED/[From Chris Walter <hook90@shaw.ca>][Date Wed, 08 Dec 2004 1018 -0800]/text/[From "Coats, Scott" <SCoats@rich ... /[From The .. ... /[From "Coats, Scott" <SCoats@richmond.ca>][Date Wed, 26 Jan 2005 14:06:34 -0800]/UNNAMED Infected: Email-Worm.Win32.Bagle.ck skipped
    C:\Documents and Settings\Scott\Application Data\Thunderbird\Profiles\From Backup-Use this One\Mail\Local Folders\Inbox/[From TELUS Mail Administrator <helpdesk@telus.net>][Date Tue, 30 Nov 2004 23:44:16 -0700]/UNNAMED/[From "Judi Ayers" <jayers@dccnet.com>][Date Thu, 2 Dec 2004 19:45:10 -0800]/UNNAMED/[From "Giganews" <support@giganews.com>][Date Fri, 3 Dec 2004 05:50:58 UT]/UNNAMED/[From Chris Walter <hook90@shaw.ca>][Date Wed, 08 Dec 2004 1018 -0800]/text/[From "Coats, Scott" <SCoats@rich ... /[From The ... /[From "Igor Kivritsky" <igor@hificentre.com>][Date Sun, 23 Jan 2005 21:59:38 -0800]/UNNAMED Infected: Email-Worm.Win32.Bagle.ck skipped
    C:\Documents and Settings\Scott\Application Data\Thunderbird\Profiles\From Backup-Use this One\Mail\Local Folders\Inbox/[From TELUS Mail Administrator <helpdesk@telus.net>][Date Tue, 30 Nov 2004 23:44:16 -0700]/UNNAMED/[From "Judi Ayers" <jayers@dccnet.com>][Date Thu, 2 Dec 2004 19:45:10 -0800]/UNNAMED/[From "Giganews" <support@giganews.com>][Date Fri, 3 Dec 2004 05:50:58 UT]/UNNAMED/[From Chris Walter <hook90@shaw.ca>][Date Wed, 08 Dec 2004 1018 -0800]/text/[From "Coats, Scott" <SCoats@rich ... /[From The .. ... /[From "Lynn Sawchuk" <cybersuzu@hotmail.com>][Date Fri, 21 Jan 2005 10:29:13 -0800]/html Infected: Email-Worm.Win32.Bagle.ck skipped
    C:\Documents and Settings\Scott\Application Data\Thunderbird\Profiles\From Backup-Use this One\Mail\Local Folders\Inbox/[From TELUS Mail Administrator <helpdesk@telus.net>][Date Tue, 30 Nov 2004 23:44:16 -0700]/UNNAMED/[From "Judi Ayers" <jayers@dccnet.com>][Date Thu, 2 Dec 2004 19:45:10 -0800]/UNNAMED/[From "Giganews" <support@giganews.com>][Date Fri, 3 Dec 2004 05:50:58 UT]/UNNAMED/[From Chris Walter <hook90@shaw.ca>][Date Wed, 08 Dec 2004 1018 -0800]/text/[From "Coats, Scott" <SCoats@rich ... /[From The ... /[From "Jason Wood" <shadowbox11@hotmail.com>][Date Thu, 20 Jan 2005 22:36:42 -0800]/UNNAMED Infected: Email-Worm.Win32.Bagle.ck skipped
    C:\Documents and Settings\Scott\Application Data\Thunderbird\Profiles\From Backup-Use this One\Mail\Local Folders\Inbox/[From TELUS Mail Administrator <helpdesk@telus.net>][Date Tue, 30 Nov 2004 23:44:16 -0700]/UNNAMED/[From "Judi Ayers" <jayers@dccnet.com>][Date Thu, 2 Dec 2004 19:45:10 -0800]/UNNAMED/[From "Giganews" <support@giganews.com>][Date Fri, 3 Dec 2004 05:50:58 UT]/UNNAMED/[From Chris Walter <hook90@shaw.ca>][Date Wed, 08 Dec 2004 1018 -0800]/text/[From "Coats, Scott" <SCoats@rich ... /[From The ... ... /[From "Lynn Sawchuk" <cybersuzu@hotmail.com>][Date Wed, 19 Jan 2005 11:52:00 -0800]/html Infected: Email-Worm.Win32.Bagle.ck skipped
    C:\Documents and Settings\Scott\Application Data\Thunderbird\Profiles\From Backup-Use this One\Mail\Local Folders\Inbox/[From TELUS Mail Administrator <helpdesk@telus.net>][Date Tue, 30 Nov 2004 23:44:16 -0700]/UNNAMED/[From "Judi Ayers" <jayers@dccnet.com>][Date Thu, 2 Dec 2004 19:45:10 -0800]/UNNAMED/[From "Giganews" <support@giganews.com>][Date Fri, 3 Dec 2004 05:50:58 UT]/UNNAMED/[From Chris Walter <hook90@shaw.ca>][Date Wed, 08 Dec 2004 1018 -0800]/text/[From "Coats, Scott" <SCoats@rich ... /[From The ... ... /[From "B. Hallett" <bhallett@autobahn.mb.ca>][Date Sun, 16 Jan 2005 01:59:38 -0600]/text Infected: Email-Worm.Win32.Bagle.ck skipped
    C:\Documents and Settings\Scott\Application Data\Thunderbird\Profiles\From Backup-Use this One\Mail\Local Folders\Inbox/[From TELUS Mail Administrator <helpdesk@telus.net>][Date Tue, 30 Nov 2004 23:44:16 -0700]/UNNAMED/[From "Judi Ayers" <jayers@dccnet.com>][Date Thu, 2 Dec 2004 19:45:10 -0800]/UNNAMED/[From "Giganews" <support@giganews.com>][Date Fri, 3 Dec 2004 05:50:58 UT]/UNNAMED/[From Chris Walter <hook90@shaw.ca>][Date Wed, 08 Dec 2004 1018 -0800]/text/[From "Coats, Scott" <SCoats@rich ... /[From The ... . ... /[From John Larsen <jjcclarsen@shaw.ca>][Date Tue, 11 Jan 2005 20:55:56 -0800]/UNNAMED Infected: Email-Worm.Win32.Bagle.ck skipped
    C:\Documents and Settings\Scott\Application Data\Thunderbird\Profiles\From Backup-Use this One\Mail\Local Folders\Inbox/[From TELUS Mail Administrator <helpdesk@telus.net>][Date Tue, 30 Nov 2004 23:44:16 -0700]/UNNAMED/[From "Judi Ayers" <jayers@dccnet.com>][Date Thu, 2 Dec 2004 19:45:10 -0800]/UNNAMED/[From "Giganews" <support@giganews.com>][Date Fri, 3 Dec 2004 05:50:58 UT]/UNNAMED/[From Chris Walter <hook90@shaw.ca>][Date Wed, 08 Dec 2004 1018 -0800]/text/[From "Coats, Scott" <SCoats@rich ... /[From The ... ... /[From "Coats, Scott" <SCoats@richmond.ca>][Date Wed, 5 Jan 2005 15:57:30 -0800]/UNNAMED Infected: Email-Worm.Win32.Bagle.ck skipped
    C:\Documents and Settings\Scott\Application Data\Thunderbird\Profiles\From Backup-Use this One\Mail\Local Folders\Inbox/[From TELUS Mail Administrator <helpdesk@telus.net>][Date Tue, 30 Nov 2004 23:44:16 -0700]/UNNAMED/[From "Judi Ayers" <jayers@dccnet.com>][Date Thu, 2 Dec 2004 19:45:10 -0800]/UNNAMED/[From "Giganews" <support@giganews.com>][Date Fri, 3 Dec 2004 05:50:58 UT]/UNNAMED/[From Chris Walter <hook90@shaw.ca>][Date Wed, 08 Dec 2004 1018 -0800]/text/[From "Coats, Scott" <SCoats@rich ... /[From The ... ... /[From "Coats, Scott" <SCoats@richmond.ca>][Date Wed, 5 Jan 2005 15:55:27 -0800]/UNNAMED Infected: Email-Worm.Win32.Bagle.ck skipped
    C:\Documents and Settings\Scott\Application Data\Thunderbird\Profiles\From Backup-Use this One\Mail\Local Folders\Inbox/[From TELUS Mail Administrator <helpdesk@telus.net>][Date Tue, 30 Nov 2004 23:44:16 -0700]/UNNAMED/[From "Judi Ayers" <jayers@dccnet.com>][Date Thu, 2 Dec 2004 19:45:10 -0800]/UNNAMED/[From "Giganews" <support@giganews.com>][Date Fri, 3 Dec 2004 05:50:58 UT]/UNNAMED/[From Chris Walter <hook90@shaw.ca>][Date Wed, 08 Dec 2004 1018 -0800]/text/[From "Coats, Scott" <SCoats@rich ... /[From The ... /[From Bruce Hallett <bhallett@autobahn.mb.ca>][Date Tue, 04 Jan 2005 10:04:40 -0600]/UNNAMED Infected: Email-Worm.Win32.Bagle.ck skipped
    C:\Documents and Settings\Scott\Application Data\Thunderbird\Profiles\From Backup-Use this One\Mail\Local Folders\Inbox/[From TELUS Mail Administrator <helpdesk@telus.net>][Date Tue, 30 Nov 2004 23:44:16 -0700]/UNNAMED/[From "Judi Ayers" <jayers@dccnet.com>][Date Thu, 2 Dec 2004 19:45:10 -0800]/UNNAMED/[From "Giganews" <support@giganews.com>][Date Fri, 3 Dec 2004 05:50:58 UT]/UNNAMED/[From Chris Walter <hook90@shaw.ca>][Date Wed, 08 Dec 2004 1018 -0800]/text/[From "Coats, Scott" <SCoats@rich ... /[From The Canadi ... /[From "kelly cook" <krcook49@hotmail.com>][Date Mon, 03 Jan 2005 21:14:31 -0600]/text Infected: Email-Worm.Win32.Bagle.ck skipped
    C:\Documents and Settings\Scott\Application Data\Thunderbird\Profiles\From Backup-Use this One\Mail\Local Folders\Inbox/[From TELUS Mail Administrator <helpdesk@telus.net>][Date Tue, 30 Nov 2004 23:44:16 -0700]/UNNAMED/[From "Judi Ayers" <jayers@dccnet.com>][Date Thu, 2 Dec 2004 19:45:10 -0800]/UNNAMED/[From "Giganews" <support@giganews.com>][Date Fri, 3 Dec 2004 05:50:58 UT]/UNNAMED/[From Chris Walter <hook90@shaw.ca>][Date Wed, 08 Dec 2004 1018 -0800]/text/[From "Coats, Scott" <SCoats@rich ... /[From The Canadi ... /[From John Larsen <jjcclarsen@shaw.ca>][Date Thu, 30 Dec 2004 16:49:58 -0800]/UNNAMED Infected: Email-Worm.Win32.Bagle.ck skipped
    C:\Documents and Settings\Scott\Application Data\Thunderbird\Profiles\From Backup-Use this One\Mail\Local Folders\Inbox/[From TELUS Mail Administrator <helpdesk@telus.net>][Date Tue, 30 Nov 2004 23:44:16 -0700]/UNNAMED/[From "Judi Ayers" <jayers@dccnet.com>][Date Thu, 2 Dec 2004 19:45:10 -0800]/UNNAMED/[From "Giganews" <support@giganews.com>][Date Fri, 3 Dec 2004 05:50:58 UT]/UNNAMED/[From Chris Walter <hook90@shaw.ca>][Date Wed, 08 Dec 2004 1018 -0800]/text/[From "Coats, Scott" <SCoats@rich ... /[From The Canadian ... /[From "Giganews" <support@giganews.com>][Date Tue, 28 Dec 2004 06:05:13 UT]/UNNAMED Infected: Email-Worm.Win32.Bagle.ck skipped
    C:\Documents and Settings\Scott\Application Data\Thunderbird\Profiles\From Backup-Use this One\Mail\Local Folders\Inbox/[From TELUS Mail Administrator <helpdesk@telus.net>][Date Tue, 30 Nov 2004 23:44:16 -0700]/UNNAMED/[From "Judi Ayers" <jayers@dccnet.com>][Date Thu, 2 Dec 2004 19:45:10 -0800]/UNNAMED/[From "Giganews" <support@giganews.com>][Date Fri, 3 Dec 2004 05:50:58 UT]/UNNAMED/[From Chris Walter <hook90@shaw.ca>][Date Wed, 08 Dec 2004 1018 -0800]/text/[From "Coats, Scott" <SCoats@rich ... /[From The Canadian Red Cross Society <ereceipts@redcross.ca>][Date Mon, 27 Dec 2004 18:23:46 -0800]/UNNAMED Infected: Email-Worm.Win32.Bagle.ck skipped
    C:\Documents and Settings\Scott\Application Data\Thunderbird\Profiles\From Backup-Use this One\Mail\Local Folders\Inbox/[From TELUS Mail Administrator <helpdesk@telus.net>][Date Tue, 30 Nov 2004 23:44:16 -0700]/UNNAMED/[From "Judi Ayers" <jayers@dccnet.com>][Date Thu, 2 Dec 2004 19:45:10 -0800]/UNNAMED/[From "Giganews" <support@giganews.com>][Date Fri, 3 Dec 2004 05:50:58 UT]/UNNAMED/[From Chris Walter <hook90@shaw.ca>][Date Wed, 08 Dec 2004 1018 -0800]/text/[From "Coats, Scott" <SCoats@richmo ... /[From "Lee Valley Service" <CustomerService@leevalley.com>][Date Tue, 21 Dec 2004 10:14:01 -0500]/UNNAMED Infected: Email-Worm.Win32.Bagle.ck skipped
    C:\Documents and Settings\Scott\Application Data\Thunderbird\Profiles\From Backup-Use this One\Mail\Local Folders\Inbox/[From TELUS Mail Administrator <helpdesk@telus.net>][Date Tue, 30 Nov 2004 23:44:16 -0700]/UNNAMED/[From "Judi Ayers" <jayers@dccnet.com>][Date Thu, 2 Dec 2004 19:45:10 -0800]/UNNAMED/[From "Giganews" <support@giganews.com>][Date Fri, 3 Dec 2004 05:50:58 UT]/UNNAMED/[From Chris Walter <hook90@shaw.ca>][Date Wed, 08 Dec 2004 1018 -0800]/text/[From "Coats, Scott" <SCoats@richmond.c ... /[From "Able Auctions Vancouver" <ablevcr@ableauctions.ca>][Date Mon, 13 Dec 2004 17:20:49 -0800]/text Infected: Email-Worm.Win32.Bagle.ck skipped
    C:\Documents and Settings\Scott\Application Data\Thunderbird\Profiles\From Backup-Use this One\Mail\Local Folders\Inbox/[From TELUS Mail Administrator <helpdesk@telus.net>][Date Tue, 30 Nov 2004 23:44:16 -0700]/UNNAMED/[From "Judi Ayers" <jayers@dccnet.com>][Date Thu, 2 Dec 2004 19:45:10 -0800]/UNNAMED/[From "Giganews" <support@giganews.com>][Date Fri, 3 Dec 2004 05:50:58 UT]/UNNAMED/[From Chris Walter <hook90@shaw.ca>][Date Wed, 08 Dec 2004 1018 -0800]/text/[From "Coats, Scott" <SCoats@richmond.ca>][Date Thu, ... /[From "Coats, Scott" <SCoats@richmond.ca>][Date Fri, 10 Dec 2004 15:28:59 -0800]/UNNAMED Infected: Email-Worm.Win32.Bagle.ck skipped
    C:\Documents and Settings\Scott\Application Data\Thunderbird\Profiles\From Backup-Use this One\Mail\Local Folders\Inbox/[From TELUS Mail Administrator <helpdesk@telus.net>][Date Tue, 30 Nov 2004 23:44:16 -0700]/UNNAMED/[From "Judi Ayers" <jayers@dccnet.com>][Date Thu, 2 Dec 2004 19:45:10 -0800]/UNNAMED/[From "Giganews" <support@giganews.com>][Date Fri, 3 Dec 2004 05:50:58 UT]/UNNAMED/[From Chris Walter <hook90@shaw.ca>][Date Wed, 08 Dec 2004 1018 -0800]/text/[From "Coats, Scott" <SCoats@richmond.ca>][Date Thu, 9 Dec 2004 15:48:49 -0800]/UNNAMED Infected: Email-Worm.Win32.Bagle.ck skipped
    C:\Documents and Settings\Scott\Application Data\Thunderbird\Profiles\From Backup-Use this One\Mail\Local Folders\Inbox/[From TELUS Mail Administrator <helpdesk@telus.net>][Date Tue, 30 Nov 2004 23:44:16 -0700]/UNNAMED/[From "Judi Ayers" <jayers@dccnet.com>][Date Thu, 2 Dec 2004 19:45:10 -0800]/UNNAMED/[From "Giganews" <support@giganews.com>][Date Fri, 3 Dec 2004 05:50:58 UT]/UNNAMED/[From Chris Walter <hook90@shaw.ca>][Date Wed, 08 Dec 2004 1018 -0800]/text Infected: Email-Worm.Win32.Bagle.ck skipped
    C:\Documents and Settings\Scott\Application Data\Thunderbird\Profiles\From Backup-Use this One\Mail\Local Folders\Inbox/[From TELUS Mail Administrator <helpdesk@telus.net>][Date Tue, 30 Nov 2004 23:44:16 -0700]/UNNAMED/[From "Judi Ayers" <jayers@dccnet.com>][Date Thu, 2 Dec 2004 19:45:10 -0800]/UNNAMED/[From "Giganews" <support@giganews.com>][Date Fri, 3 Dec 2004 05:50:58 UT]/UNNAMED Infected: Email-Worm.Win32.Bagle.ck skipped
    C:\Documents and Settings\Scott\Application Data\Thunderbird\Profiles\From Backup-Use this One\Mail\Local Folders\Inbox/[From TELUS Mail Administrator <helpdesk@telus.net>][Date Tue, 30 Nov 2004 23:44:16 -0700]/UNNAMED/[From "Judi Ayers" <jayers@dccnet.com>][Date Thu, 2 Dec 2004 19:45:10 -0800]/UNNAMED Infected: Email-Worm.Win32.Bagle.ck skipped
    C:\Documents and Settings\Scott\Application Data\Thunderbird\Profiles\From Backup-Use this One\Mail\Local Folders\Inbox/[From TELUS Mail Administrator <helpdesk@telus.net>][Date Tue, 30 Nov 2004 23:44:16 -0700]/UNNAMED Infected: Email-Worm.Win32.Bagle.ck skipped
    C:\Documents and Settings\Scott\Application Data\Thunderbird\Profiles\From Backup-Use this One\Mail\Local Folders\Inbox Mail Berkeley mbox: infected - 45 skipped
    E:\Scott\Thunderbird\Old Profile\Mail\Local Folders\Inbox/[From TELUS Mail Administrator <helpdesk@telus.net>][Date Tue, 30 Nov 2004 23:44:16 -0700]/UNNAMED/[From "Judi Ayers" <jayers@dccnet.com>][Date Thu, 2 Dec 2004 19:45:10 -0800]/UNNAMED/[From "Giganews" <support@giganews.com>][Date Fri, 3 Dec 2004 05:50:58 UT]/UNNAMED/[From Chris Walter <hook90@shaw.ca>][Date Wed, 08 Dec 2004 1018 -0800]/text/[From "Coats, Scott" <SCoats@rich ... / ... ... /[Fro ... /[From "Scoats" <scoats@teligentems.com>][Date Fri, 12 Aug 2005 03:19:09 ... /Taxes.exe Infected: Email-Worm.Win32.Bagle.cf skipped
    E:\Scott\Thunderbird\Old Profile\Mail\Local Folders\Inbox/[From TELUS Mail Administrator <helpdesk@telus.net>][Date Tue, 30 Nov 2004 23:44:16 -0700]/UNNAMED/[From "Judi Ayers" <jayers@dccnet.com>][Date Thu, 2 Dec 2004 19:45:10 -0800]/UNNAMED/[From "Giganews" <support@giganews.com>][Date Fri, 3 Dec 2004 05:50:58 UT]/UNNAMED/[From Chris Walter <hook90@shaw.ca>][Date Wed, 08 Dec 2004 1018 -0800]/text/[From "Coats, Scott" <SCoats@rich ... / ... ... /[Fro ... /[From "Scoats" <scoats@teligentems.com>][Date Fri, 12 Aug 2005 03:19:09 -0300]/UNNAMED Infected: Email-Worm.Win32.Bagle.cf skipped
    E:\Scott\Thunderbird\Old Profile\Mail\Local Folders\Inbox/[From TELUS Mail Administrator <helpdesk@telus.net>][Date Tue, 30 Nov 2004 23:44:16 -0700]/UNNAMED/[From "Judi Ayers" <jayers@dccnet.com>][Date Thu, 2 Dec 2004 19:45:10 -0800]/UNNAMED/[From "Giganews" <support@giganews.com>][Date Fri, 3 Dec 2004 05:50:58 UT]/UNNAMED/[From Chris Walter <hook90@shaw.ca>][Date Wed, 08 Dec 2004 1018 -0800]/text/[From "Coats, Scott" <SCoats@rich ... / ... ... ... / ... /[From "Scoats" <scoats@teligentems.com>][Date Fri, 12 Aug 2005 0934 ... /Taxes.exe Infected: Email-Worm.Win32.Bagle.ck skipped
    E:\Scott\Thunderbird\Old Profile\Mail\Local Folders\Inbox/[From TELUS Mail Administrator <helpdesk@telus.net>][Date Tue, 30 Nov 2004 23:44:16 -0700]/UNNAMED/[From "Judi Ayers" <jayers@dccnet.com>][Date Thu, 2 Dec 2004 19:45:10 -0800]/UNNAMED/[From "Giganews" <support@giganews.com>][Date Fri, 3 Dec 2004 05:50:58 UT]/UNNAMED/[From Chris Walter <hook90@shaw.ca>][Date Wed, 08 Dec 2004 1018 -0800]/text/[From "Coats, Scott" <SCoats@rich ... / ... ... ... / ... /[From "Scoats" <scoats@teligentems.com>][Date Fri, 12 Aug 2005 0934 -0500]/UNNAMED Infected: Email-Worm.Win32.Bagle.ck skipped
    E:\Scott\Thunderbird\Old Profile\Mail\Local Folders\Inbox/[From TELUS Mail Administrator <helpdesk@telus.net>][Date Tue, 30 Nov 2004 23:44:16 -0700]/UNNAMED/[From "Judi Ayers" <jayers@dccnet.com>][Date Thu, 2 Dec 2004 19:45:10 -0800]/UNNAMED/[From "Giganews" <support@giganews.com>][Date Fri, 3 Dec 2004 05:50:58 UT]/UNNAMED/[From Chris Walter <hook90@shaw.ca>][Date Wed, 08 Dec 2004 1018 -0800]/text/[From "Coats, Scott" <SCoats@rich ... / ... ... ... /[From "Adams" <UnKnOwNCusack@columbus.rr.com>][Date Fri, 12 Aug 2005 00:48:35 -0800]/UNNAMED Infected: Email-Worm.Win32.Bagle.ck skipped
    E:\Scott\Thunderbird\Old Profile\Mail\Local Folders\Inbox/[From TELUS Mail Administrator <helpdesk@telus.net>][Date Tue, 30 Nov 2004 23:44:16 -0700]/UNNAMED/[From "Judi Ayers" <jayers@dccnet.com>][Date Thu, 2 Dec 2004 19:45:10 -0800]/UNNAMED/[From "Giganews" <support@giganews.com>][Date Fri, 3 Dec 2004 05:50:58 UT]/UNNAMED/[From Chris Walter <hook90@shaw.ca>][Date Wed, 08 Dec 2004 1018 -0800]/text/[From "Coats, Scott" <SCoats@rich ... / ... ... /[From ... /[From "Coats, Scott" <SCoats@richmond.ca>][Date Thu, 11 Aug 2005 12:32:17 -0700]/text Infected: Email-Worm.Win32.Bagle.ck skipped
    E:\Scott\Thunderbird\Old Profile\Mail\Local Folders\Inbox/[From TELUS Mail Administrator <helpdesk@telus.net>][Date Tue, 30 Nov 2004 23:44:16 -0700]/UNNAMED/[From "Judi Ayers" <jayers@dccnet.com>][Date Thu, 2 Dec 2004 19:45:10 -0800]/UNNAMED/[From "Giganews" <support@giganews.com>][Date Fri, 3 Dec 2004 05:50:58 UT]/UNNAMED/[From Chris Walter <hook90@shaw.ca>][Date Wed, 08 Dec 2004 1018 -0800]/text/[From "Coats, Scott" <SCoats@rich ... / ... ... /[From "Andrea Gillis" <lpmgrygdelyp@cgocable.com>][Date Thu, 11 Aug 2005 17:23:29 -0200]/UNNAMED Infected: Email-Worm.Win32.Bagle.ck skipped
    E:\Scott\Thunderbird\Old Profile\Mail\Local Folders\Inbox/[From TELUS Mail Administrator <helpdesk@telus.net>][Date Tue, 30 Nov 2004 23:44:16 -0700]/UNNAMED/[From "Judi Ayers" <jayers@dccnet.com>][Date Thu, 2 Dec 2004 19:45:10 -0800]/UNNAMED/[From "Giganews" <support@giganews.com>][Date Fri, 3 Dec 2004 05:50:58 UT]/UNNAMED/[From Chris Walter <hook90@shaw.ca>][Date Wed, 08 Dec 2004 1018 -0800]/text/[From "Coats, Scott" <SCoats@rich ... / ... /[From "Kathryn Schmidt" <MirandaMariguano@rogers.com>][Date Mon, 01 Aug 2005 08:55:31 -0800]/UNNAMED Infected: Email-Worm.Win32.Bagle.ck skipped
    E:\Scott\Thunderbird\Old Profile\Mail\Local Folders\Inbox/[From TELUS Mail Administrator <helpdesk@telus.net>][Date Tue, 30 Nov 2004 23:44:16 -0700]/UNNAMED/[From "Judi Ayers" <jayers@dccnet.com>][Date Thu, 2 Dec 2004 19:45:10 -0800]/UNNAMED/[From "Giganews" <support@giganews.com>][Date Fri, 3 Dec 2004 05:50:58 UT]/UNNAMED/[From Chris Walter <hook90@shaw.ca>][Date Wed, 08 Dec 2004 1018 -0800]/text/[From "Coats, Scott" <SCoats@rich ... / .. ... /[Fr ... /[From "Johnson" <glitteranimate@dc.rr.com>][Date Sun, 31 Jul 2005 21:10:24 -0800]/UNNAMED Infected: Email-Worm.Win32.Bagle.ck skipped
    E:\Scott\Thunderbird\Old Profile\Mail\Local Folders\Inbox/[From TELUS Mail Administrator <helpdesk@telus.net>][Date Tue, 30 Nov 2004 23:44:16 -0700]/UNNAMED/[From "Judi Ayers" <jayers@dccnet.com>][Date Thu, 2 Dec 2004 19:45:10 -0800]/UNNAMED/[From "Giganews" <support@giganews.com>][Date Fri, 3 Dec 2004 05:50:58 UT]/UNNAMED/[From Chris Walter <hook90@shaw.ca>][Date Wed, 08 Dec 2004 1018 -0800]/text/[From "Coats, Scott" <SCoats@rich ... / .. ... /[Fr ... /[From Autolycus <alexgood@mail.com>][Date Mon, 01 Aug 2005 07:02:33 +0300 (EEST)]/UNNAMED Infected: Email-Worm.Win32.Bagle.ck skipped
    E:\Scott\Thunderbird\Old Profile\Mail\Local Folders\Inbox/[From TELUS Mail Administrator <helpdesk@telus.net>][Date Tue, 30 Nov 2004 23:44:16 -0700]/UNNAMED/[From "Judi Ayers" <jayers@dccnet.com>][Date Thu, 2 Dec 2004 19:45:10 -0800]/UNNAMED/[From "Giganews" <support@giganews.com>][Date Fri, 3 Dec 2004 05:50:58 UT]/UNNAMED/[From Chris Walter <hook90@shaw.ca>][Date Wed, 08 Dec 2004 1018 -0800]/text/[From "Coats, Scott" <SCoats@rich ... / .. ... /[From "Marianne Sawchu ... /[From gwsii@comcast.net][Date Sun, 31 Jul 2005 20:59:53 -0500]/UNNAMED Infected: Email-Worm.Win32.Bagle.ck skipped
    E:\Scott\Thunderbird\Old Profile\Mail\Local Folders\Inbox/[From TELUS Mail Administrator <helpdesk@telus.net>][Date Tue, 30 Nov 2004 23:44:16 -0700]/UNNAMED/[From "Judi Ayers" <jayers@dccnet.com>][Date Thu, 2 Dec 2004 19:45:10 -0800]/UNNAMED/[From "Giganews" <support@giganews.com>][Date Fri, 3 Dec 2004 05:50:58 UT]/UNNAMED/[From Chris Walter <hook90@shaw.ca>][Date Wed, 08 Dec 2004 1018 -0800]/text/[From "Coats, Scott" <SCoats@rich ... / .. ... /[From "Marianne Sawchuk" <mariannesawchuk@hotmail.com>][Date Sat, 30 Jul 2005 1328 -0700]/html Infected: Email-Worm.Win32.Bagle.ck skipped
    E:\Scott\Thunderbird\Old Profile\Mail\Local Folders\Inbox/[From TELUS Mail Administrator <helpdesk@telus.net>][Date Tue, 30 Nov 2004 23:44:16 -0700]/UNNAMED/[From "Judi Ayers" <jayers@dccnet.com>][Date Thu, 2 Dec 2004 19:45:10 -0800]/UNNAMED/[From "Giganews" <support@giganews.com>][Date Fri, 3 Dec 2004 05:50:58 UT]/UNNAMED/[From Chris Walter <hook90@shaw.ca>][Date Wed, 08 Dec 2004 1018 -0800]/text/[From "Coats, Scott" <SCoats@rich ... / .. ... /[From Madeline Gerbert <alexmoukh@hotmail.com>][Date Fri, 29 Jul 2005 18:55:38 +0300 (EEST)]/html Infected: Email-Worm.Win32.Bagle.ck skipped
    E:\Scott\Thunderbird\Old Profile\Mail\Local Folders\Inbox/[From TELUS Mail Administrator <helpdesk@telus.net>][Date Tue, 30 Nov 2004 23:44:16 -0700]/UNNAMED/[From "Judi Ayers" <jayers@dccnet.com>][Date Thu, 2 Dec 2004 19:45:10 -0800]/UNNAMED/[From "Giganews" <support@giganews.com>][Date Fri, 3 Dec 2004 05:50:58 UT]/UNNAMED/[From Chris Walter <hook90@shaw.ca>][Date Wed, 08 Dec 2004 1018 -0800]/text/[From "Coats, Scott" <SCoats@rich ... / ... ... ... ... /[From "Jay Fox" <cvrrxcig@ascendone.com>][Date Fri, 29 Jul 2005 08:31:26 -0500]/UNNAMED Infected: Email-Worm.Win32.Bagle.ck skipped
    E:\Scott\Thunderbird\Old Profile\Mail\Local Folders\Inbox/[From TELUS Mail Administrator <helpdesk@telus.net>][Date Tue, 30 Nov 2004 23:44:16 -0700]/UNNAMED/[From "Judi Ayers" <jayers@dccnet.com>][Date Thu, 2 Dec 2004 19:45:10 -0800]/UNNAMED/[From "Giganews" <support@giganews.com>][Date Fri, 3 Dec 2004 05:50:58 UT]/UNNAMED/[From Chris Walter <hook90@shaw.ca>][Date Wed, 08 Dec 2004 1018 -0800]/text/[From "Coats, Scott" <SCoats@rich ... / ... ... ... /[From "Rena" <ArlenebuzyleneZ0aWg@rogers.com>][Date Thu, 28 Jul 2005 17:52:13 -0800]/UNNAMED Infected: Email-Worm.Win32.Bagle.ck skipped
    E:\Scott\Thunderbird\Old Profile\Mail\Local Folders\Inbox/[From TELUS Mail Administrator <helpdesk@telus.net>][Date Tue, 30 Nov 2004 23:44:16 -0700]/UNNAMED/[From "Judi Ayers" <jayers@dccnet.com>][Date Thu, 2 Dec 2004 19:45:10 -0800]/UNNAMED/[From "Giganews" <support@giganews.com>][Date Fri, 3 Dec 2004 05:50:58 UT]/UNNAMED/[From Chris Walter <hook90@shaw.ca>][Date Wed, 08 Dec 2004 1018 -0800]/text/[From "Coats, Scott" <SCoats@rich ... / ... ... /[From eCabinet Systems <ecabnotify@thermwood.com>][Date Mon, 21 Mar 2005 13:33:52 -0600]/UNNAMED Infected: Email-Worm.Win32.Bagle.ck skipped
    E:\Scott\Thunderbird\Old Profile\Mail\Local Folders\Inbox/[From TELUS Mail Administrator <helpdesk@telus.net>][Date Tue, 30 Nov 2004 23:44:16 -0700]/UNNAMED/[From "Judi Ayers" <jayers@dccnet.com>][Date Thu, 2 Dec 2004 19:45:10 -0800]/UNNAMED/[From "Giganews" <support@giganews.com>][Date Fri, 3 Dec 2004 05:50:58 UT]/UNNAMED/[From Chris Walter <hook90@shaw.ca>][Date Wed, 08 Dec 2004 1018 -0800]/text/[From "Coats, Scott" <SCoats@rich ... / ... /[From "Able A ... /[From Chris Walter <hook90@shaw.ca>][Date Fri, 18 Mar 2005 17:55:41 -0800]/UNNAMED Infected: Email-Worm.Win32.Bagle.ck skipped
    E:\Scott\Thunderbird\Old Profile\Mail\Local Folders\Inbox/[From TELUS Mail Administrator <helpdesk@telus.net>][Date Tue, 30 Nov 2004 23:44:16 -0700]/UNNAMED/[From "Judi Ayers" <jayers@dccnet.com>][Date Thu, 2 Dec 2004 19:45:10 -0800]/UNNAMED/[From "Giganews" <support@giganews.com>][Date Fri, 3 Dec 2004 05:50:58 UT]/UNNAMED/[From Chris Walter <hook90@shaw.ca>][Date Wed, 08 Dec 2004 1018 -0800]/text/[From "Coats, Scott" <SCoats@rich ... / ... /[From "Able Auctions Vancouver" <ablevcr@ableauctions.ca>][Date Mon, 28 Feb 2005 10:15:57 -0800]/text Infected: Email-Worm.Win32.Bagle.ck skipped
    E:\Scott\Thunderbird\Old Profile\Mail\Local Folders\Inbox/[From TELUS Mail Administrator <helpdesk@telus.net>][Date Tue, 30 Nov 2004 23:44:16 -0700]/UNNAMED/[From "Judi Ayers" <jayers@dccnet.com>][Date Thu, 2 Dec 2004 19:45:10 -0800]/UNNAMED/[From "Giganews" <support@giganews.com>][Date Fri, 3 Dec 2004 05:50:58 UT]/UNNAMED/[From Chris Walter <hook90@shaw.ca>][Date Wed, 08 Dec 2004 1018 -0800]/text/[From "Coats, Scott" <SCoats@rich ... /[From The .. ... / ... / ... /[From igor <igor@hificentre.com>][Date Fri, 04 Feb 2005 1255 -0800]/text Infected: Email-Worm.Win32.Bagle.ck skipped
    E:\Scott\Thunderbird\Old Profile\Mail\Local Folders\Inbox/[From TELUS Mail Administrator <helpdesk@telus.net>][Date Tue, 30 Nov 2004 23:44:16 -0700]/UNNAMED/[From "Judi Ayers" <jayers@dccnet.com>][Date Thu, 2 Dec 2004 19:45:10 -0800]/UNNAMED/[From "Giganews" <support@giganews.com>][Date Fri, 3 Dec 2004 05:50:58 UT]/UNNAMED/[From Chris Walter <hook90@shaw.ca>][Date Wed, 08 Dec 2004 1018 -0800]/text/[From "Coats, Scott" <SCoats@rich ... /[From The .. ... / ... /[From John Larsen <jjcclarsen@shaw.ca>][Date Thu, 27 Jan 2005 19:04:22 -0800]/text Infected: Email-Worm.Win32.Bagle.ck skipped
    E:\Scott\Thunderbird\Old Profile\Mail\Local Folders\Inbox/[From TELUS Mail Administrator <helpdesk@telus.net>][Date Tue, 30 Nov 2004 23:44:16 -0700]/UNNAMED/[From "Judi Ayers" <jayers@dccnet.com>][Date Thu, 2 Dec 2004 19:45:10 -0800]/UNNAMED/[From "Giganews" <support@giganews.com>][Date Fri, 3 Dec 2004 05:50:58 UT]/UNNAMED/[From Chris Walter <hook90@shaw.ca>][Date Wed, 08 Dec 2004 1018 -0800]/text/[From "Coats, Scott" <SCoats@rich ... /[From The .. ... /[From "Coats, Scott" <SCoats@richmond.ca>][Date Wed, 26 Jan 2005 14:09:54 -0800]/UNNAMED Infected: Email-Worm.Win32.Bagle.ck skipped
    E:\Scott\Thunderbird\Old Profile\Mail\Local Folders\Inbox/[From TELUS Mail Administrator <helpdesk@telus.net>][Date Tue, 30 Nov 2004 23:44:16 -0700]/UNNAMED/[From "Judi Ayers" <jayers@dccnet.com>][Date Thu, 2 Dec 2004 19:45:10 -0800]/UNNAMED/[From "Giganews" <support@giganews.com>][Date Fri, 3 Dec 2004 05:50:58 UT]/UNNAMED/[From Chris Walter <hook90@shaw.ca>][Date Wed, 08 Dec 2004 1018 -0800]/text/[From "Coats, Scott" <SCoats@rich ... /[From The .. ... /[From "Coats, Scott" <SCoats@richmond.ca>][Date Wed, 26 Jan 2005 14:09:22 -0800]/UNNAMED Infected: Email-Worm.Win32.Bagle.ck skipped
    E:\Scott\Thunderbird\Old Profile\Mail\Local Folders\Inbox/[From TELUS Mail Administrator <helpdesk@telus.net>][Date Tue, 30 Nov 2004 23:44:16 -0700]/UNNAMED/[From "Judi Ayers" <jayers@dccnet.com>][Date Thu, 2 Dec 2004 19:45:10 -0800]/UNNAMED/[From "Giganews" <support@giganews.com>][Date Fri, 3 Dec 2004 05:50:58 UT]/UNNAMED/[From Chris Walter <hook90@shaw.ca>][Date Wed, 08 Dec 2004 1018 -0800]/text/[From "Coats, Scott" <SCoats@rich ... /[From The .. ... /[From "Coats, Scott" <SCoats@richmond.ca>][Date Wed, 26 Jan 2005 14:07:07 -0800]/UNNAMED Infected: Email-Worm.Win32.Bagle.ck skipped
    E:\Scott\Thunderbird\Old Profile\Mail\Local Folders\Inbox/[From TELUS Mail Administrator <helpdesk@telus.net>][Date Tue, 30 Nov 2004 23:44:16 -0700]/UNNAMED/[From "Judi Ayers" <jayers@dccnet.com>][Date Thu, 2 Dec 2004 19:45:10 -0800]/UNNAMED/[From "Giganews" <support@giganews.com>][Date Fri, 3 Dec 2004 05:50:58 UT]/UNNAMED/[From Chris Walter <hook90@shaw.ca>][Date Wed, 08 Dec 2004 1018 -0800]/text/[From "Coats, Scott" <SCoats@rich ... /[From The .. ... /[From "Coats, Scott" <SCoats@richmond.ca>][Date Wed, 26 Jan 2005 14:06:34 -0800]/UNNAMED Infected: Email-Worm.Win32.Bagle.ck skipped
    E:\Scott\Thunderbird\Old Profile\Mail\Local Folders\Inbox/[From TELUS Mail Administrator <helpdesk@telus.net>][Date Tue, 30 Nov 2004 23:44:16 -0700]/UNNAMED/[From "Judi Ayers" <jayers@dccnet.com>][Date Thu, 2 Dec 2004 19:45:10 -0800]/UNNAMED/[From "Giganews" <support@giganews.com>][Date Fri, 3 Dec 2004 05:50:58 UT]/UNNAMED/[From Chris Walter <hook90@shaw.ca>][Date Wed, 08 Dec 2004 1018 -0800]/text/[From "Coats, Scott" <SCoats@rich ... /[From The ... /[From "Igor Kivritsky" <igor@hificentre.com>][Date Sun, 23 Jan 2005 21:59:38 -0800]/UNNAMED Infected: Email-Worm.Win32.Bagle.ck skipped
    E:\Scott\Thunderbird\Old Profile\Mail\Local Folders\Inbox/[From TELUS Mail Administrator <helpdesk@telus.net>][Date Tue, 30 Nov 2004 23:44:16 -0700]/UNNAMED/[From "Judi Ayers" <jayers@dccnet.com>][Date Thu, 2 Dec 2004 19:45:10 -0800]/UNNAMED/[From "Giganews" <support@giganews.com>][Date Fri, 3 Dec 2004 05:50:58 UT]/UNNAMED/[From Chris Walter <hook90@shaw.ca>][Date Wed, 08 Dec 2004 1018 -0800]/text/[From "Coats, Scott" <SCoats@rich ... /[From The .. ... /[From "Lynn Sawchuk" <cybersuzu@hotmail.com>][Date Fri, 21 Jan 2005 10:29:13 -0800]/html Infected: Email-Worm.Win32.Bagle.ck skipped
    E:\Scott\Thunderbird\Old Profile\Mail\Local Folders\Inbox/[From TELUS Mail Administrator <helpdesk@telus.net>][Date Tue, 30 Nov 2004 23:44:16 -0700]/UNNAMED/[From "Judi Ayers" <jayers@dccnet.com>][Date Thu, 2 Dec 2004 19:45:10 -0800]/UNNAMED/[From "Giganews" <support@giganews.com>][Date Fri, 3 Dec 2004 05:50:58 UT]/UNNAMED/[From Chris Walter <hook90@shaw.ca>][Date Wed, 08 Dec 2004 1018 -0800]/text/[From "Coats, Scott" <SCoats@rich ... /[From The ... /[From "Jason Wood" <shadowbox11@hotmail.com>][Date Thu, 20 Jan 2005 22:36:42 -0800]/UNNAMED Infected: Email-Worm.Win32.Bagle.ck skipped
    E:\Scott\Thunderbird\Old Profile\Mail\Local Folders\Inbox/[From TELUS Mail Administrator <helpdesk@telus.net>][Date Tue, 30 Nov 2004 23:44:16 -0700]/UNNAMED/[From "Judi Ayers" <jayers@dccnet.com>][Date Thu, 2 Dec 2004 19:45:10 -0800]/UNNAMED/[From "Giganews" <support@giganews.com>][Date Fri, 3 Dec 2004 05:50:58 UT]/UNNAMED/[From Chris Walter <hook90@shaw.ca>][Date Wed, 08 Dec 2004 1018 -0800]/text/[From "Coats, Scott" <SCoats@rich ... /[From The ... ... /[From "Lynn Sawchuk" <cybersuzu@hotmail.com>][Date Wed, 19 Jan 2005 11:52:00 -0800]/html Infected: Email-Worm.Win32.Bagle.ck skipped
    E:\Scott\Thunderbird\Old Profile\Mail\Local Folders\Inbox/[From TELUS Mail Administrator <helpdesk@telus.net>][Date Tue, 30 Nov 2004 23:44:16 -0700]/UNNAMED/[From "Judi Ayers" <jayers@dccnet.com>][Date Thu, 2 Dec 2004 19:45:10 -0800]/UNNAMED/[From "Giganews" <support@giganews.com>][Date Fri, 3 Dec 2004 05:50:58 UT]/UNNAMED/[From Chris Walter <hook90@shaw.ca>][Date Wed, 08 Dec 2004 1018 -0800]/text/[From "Coats, Scott" <SCoats@rich ... /[From The ... ... /[From "B. Hallett" <bhallett@autobahn.mb.ca>][Date Sun, 16 Jan 2005 01:59:38 -0600]/text Infected: Email-Worm.Win32.Bagle.ck skipped
    E:\Scott\Thunderbird\Old Profile\Mail\Local Folders\Inbox/[From TELUS Mail Administrator <helpdesk@telus.net>][Date Tue, 30 Nov 2004 23:44:16 -0700]/UNNAMED/[From "Judi Ayers" <jayers@dccnet.com>][Date Thu, 2 Dec 2004 19:45:10 -0800]/UNNAMED/[From "Giganews" <support@giganews.com>][Date Fri, 3 Dec 2004 05:50:58 UT]/UNNAMED/[From Chris Walter <hook90@shaw.ca>][Date Wed, 08 Dec 2004 1018 -0800]/text/[From "Coats, Scott" <SCoats@rich ... /[From The ... . ... /[From John Larsen <jjcclarsen@shaw.ca>][Date Tue, 11 Jan 2005 20:55:56 -0800]/UNNAMED Infected: Email-Worm.Win32.Bagle.ck skipped
    E:\Scott\Thunderbird\Old Profile\Mail\Local Folders\Inbox/[From TELUS Mail Administrator <helpdesk@telus.net>][Date Tue, 30 Nov 2004 23:44:16 -0700]/UNNAMED/[From "Judi Ayers" <jayers@dccnet.com>][Date Thu, 2 Dec 2004 19:45:10 -0800]/UNNAMED/[From "Giganews" <support@giganews.com>][Date Fri, 3 Dec 2004 05:50:58 UT]/UNNAMED/[From Chris Walter <hook90@shaw.ca>][Date Wed, 08 Dec 2004 1018 -0800]/text/[From "Coats, Scott" <SCoats@rich ... /[From The ... ... /[From "Coats, Scott" <SCoats@richmond.ca>][Date Wed, 5 Jan 2005 15:57:30 -0800]/UNNAMED Infected: Email-Worm.Win32.Bagle.ck skipped
    E:\Scott\Thunderbird\Old Profile\Mail\Local Folders\Inbox/[From TELUS Mail Administrator <helpdesk@telus.net>][Date Tue, 30 Nov 2004 23:44:16 -0700]/UNNAMED/[From "Judi Ayers" <jayers@dccnet.com>][Date Thu, 2 Dec 2004 19:45:10 -0800]/UNNAMED/[From "Giganews" <support@giganews.com>][Date Fri, 3 Dec 2004 05:50:58 UT]/UNNAMED/[From Chris Walter <hook90@shaw.ca>][Date Wed, 08 Dec 2004 1018 -0800]/text/[From "Coats, Scott" <SCoats@rich ... /[From The ... ... /[From "Coats, Scott" <SCoats@richmond.ca>][Date Wed, 5 Jan 2005 15:55:27 -0800]/UNNAMED Infected: Email-Worm.Win32.Bagle.ck skipped
    E:\Scott\Thunderbird\Old Profile\Mail\Local Folders\Inbox/[From TELUS Mail Administrator <helpdesk@telus.net>][Date Tue, 30 Nov 2004 23:44:16 -0700]/UNNAMED/[From "Judi Ayers" <jayers@dccnet.com>][Date Thu, 2 Dec 2004 19:45:10 -0800]/UNNAMED/[From "Giganews" <support@giganews.com>][Date Fri, 3 Dec 2004 05:50:58 UT]/UNNAMED/[From Chris Walter <hook90@shaw.ca>][Date Wed, 08 Dec 2004 1018 -0800]/text/[From "Coats, Scott" <SCoats@rich ... /[From The ... /[From Bruce Hallett <bhallett@autobahn.mb.ca>][Date Tue, 04 Jan 2005 10:04:40 -0600]/UNNAMED Infected: Email-Worm.Win32.Bagle.ck skipped
    E:\Scott\Thunderbird\Old Profile\Mail\Local Folders\Inbox/[From TELUS Mail Administrator <helpdesk@telus.net>][Date Tue, 30 Nov 2004 23:44:16 -0700]/UNNAMED/[From "Judi Ayers" <jayers@dccnet.com>][Date Thu, 2 Dec 2004 19:45:10 -0800]/UNNAMED/[From "Giganews" <support@giganews.com>][Date Fri, 3 Dec 2004 05:50:58 UT]/UNNAMED/[From Chris Walter <hook90@shaw.ca>][Date Wed, 08 Dec 2004 1018 -0800]/text/[From "Coats, Scott" <SCoats@rich ... /[From The Canadi ... /[From "kelly cook" <krcook49@hotmail.com>][Date Mon, 03 Jan 2005 21:14:31 -0600]/text Infected: Email-Worm.Win32.Bagle.ck skipped
    E:\Scott\Thunderbird\Old Profile\Mail\Local Folders\Inbox/[From TELUS Mail Administrator <helpdesk@telus.net>][Date Tue, 30 Nov 2004 23:44:16 -0700]/UNNAMED/[From "Judi Ayers" <jayers@dccnet.com>][Date Thu, 2 Dec 2004 19:45:10 -0800]/UNNAMED/[From "Giganews" <support@giganews.com>][Date Fri, 3 Dec 2004 05:50:58 UT]/UNNAMED/[From Chris Walter <hook90@shaw.ca>][Date Wed, 08 Dec 2004 1018 -0800]/text/[From "Coats, Scott" <SCoats@rich ... /[From The Canadi ... /[From John Larsen <jjcclarsen@shaw.ca>][Date Thu, 30 Dec 2004 16:49:58 -0800]/UNNAMED Infected: Email-Worm.Win32.Bagle.ck skipped
    E:\Scott\Thunderbird\Old Profile\Mail\Local Folders\Inbox/[From TELUS Mail Administrator <helpdesk@telus.net>][Date Tue, 30 Nov 2004 23:44:16 -0700]/UNNAMED/[From "Judi Ayers" <jayers@dccnet.com>][Date Thu, 2 Dec 2004 19:45:10 -0800]/UNNAMED/[From "Giganews" <support@giganews.com>][Date Fri, 3 Dec 2004 05:50:58 UT]/UNNAMED/[From Chris Walter <hook90@shaw.ca>][Date Wed, 08 Dec 2004 1018 -0800]/text/[From "Coats, Scott" <SCoats@rich ... /[From The Canadian ... /[From "Giganews" <support@giganews.com>][Date Tue, 28 Dec 2004 06:05:13 UT]/UNNAMED Infected: Email-Worm.Win32.Bagle.ck skipped
    E:\Scott\Thunderbird\Old Profile\Mail\Local Folders\Inbox/[From TELUS Mail Administrator <helpdesk@telus.net>][Date Tue, 30 Nov 2004 23:44:16 -0700]/UNNAMED/[From "Judi Ayers" <jayers@dccnet.com>][Date Thu, 2 Dec 2004 19:45:10 -0800]/UNNAMED/[From "Giganews" <support@giganews.com>][Date Fri, 3 Dec 2004 05:50:58 UT]/UNNAMED/[From Chris Walter <hook90@shaw.ca>][Date Wed, 08 Dec 2004 1018 -0800]/text/[From "Coats, Scott" <SCoats@rich ... /[From The Canadian Red Cross Society <ereceipts@redcross.ca>][Date Mon, 27 Dec 2004 18:23:46 -0800]/UNNAMED Infected: Email-Worm.Win32.Bagle.ck skipped
    E:\Scott\Thunderbird\Old Profile\Mail\Local Folders\Inbox/[From TELUS Mail Administrator <helpdesk@telus.net>][Date Tue, 30 Nov 2004 23:44:16 -0700]/UNNAMED/[From "Judi Ayers" <jayers@dccnet.com>][Date Thu, 2 Dec 2004 19:45:10 -0800]/UNNAMED/[From "Giganews" <support@giganews.com>][Date Fri, 3 Dec 2004 05:50:58 UT]/UNNAMED/[From Chris Walter <hook90@shaw.ca>][Date Wed, 08 Dec 2004 1018 -0800]/text/[From "Coats, Scott" <SCoats@richmo ... /[From "Lee Valley Service" <CustomerService@leevalley.com>][Date Tue, 21 Dec 2004 10:14:01 -0500]/UNNAMED Infected: Email-Worm.Win32.Bagle.ck skipped
    E:\Scott\Thunderbird\Old Profile\Mail\Local Folders\Inbox/[From TELUS Mail Administrator <helpdesk@telus.net>][Date Tue, 30 Nov 2004 23:44:16 -0700]/UNNAMED/[From "Judi Ayers" <jayers@dccnet.com>][Date Thu, 2 Dec 2004 19:45:10 -0800]/UNNAMED/[From "Giganews" <support@giganews.com>][Date Fri, 3 Dec 2004 05:50:58 UT]/UNNAMED/[From Chris Walter <hook90@shaw.ca>][Date Wed, 08 Dec 2004 1018 -0800]/text/[From "Coats, Scott" <SCoats@richmond.c ... /[From "Able Auctions Vancouver" <ablevcr@ableauctions.ca>][Date Mon, 13 Dec 2004 17:20:49 -0800]/text Infected: Email-Worm.Win32.Bagle.ck skipped
    E:\Scott\Thunderbird\Old Profile\Mail\Local Folders\Inbox/[From TELUS Mail Administrator <helpdesk@telus.net>][Date Tue, 30 Nov 2004 23:44:16 -0700]/UNNAMED/[From "Judi Ayers" <jayers@dccnet.com>][Date Thu, 2 Dec 2004 19:45:10 -0800]/UNNAMED/[From "Giganews" <support@giganews.com>][Date Fri, 3 Dec 2004 05:50:58 UT]/UNNAMED/[From Chris Walter <hook90@shaw.ca>][Date Wed, 08 Dec 2004 1018 -0800]/text/[From "Coats, Scott" <SCoats@richmond.ca>][Date Thu, ... /[From "Coats, Scott" <SCoats@richmond.ca>][Date Fri, 10 Dec 2004 15:28:59 -0800]/UNNAMED Infected: Email-Worm.Win32.Bagle.ck skipped
    E:\Scott\Thunderbird\Old Profile\Mail\Local Folders\Inbox/[From TELUS Mail Administrator <helpdesk@telus.net>][Date Tue, 30 Nov 2004 23:44:16 -0700]/UNNAMED/[From "Judi Ayers" <jayers@dccnet.com>][Date Thu, 2 Dec 2004 19:45:10 -0800]/UNNAMED/[From "Giganews" <support@giganews.com>][Date Fri, 3 Dec 2004 05:50:58 UT]/UNNAMED/[From Chris Walter <hook90@shaw.ca>][Date Wed, 08 Dec 2004 1018 -0800]/text/[From "Coats, Scott" <SCoats@richmond.ca>][Date Thu, 9 Dec 2004 15:48:49 -0800]/UNNAMED Infected: Email-Worm.Win32.Bagle.ck skipped
    E:\Scott\Thunderbird\Old Profile\Mail\Local Folders\Inbox/[From TELUS Mail Administrator <helpdesk@telus.net>][Date Tue, 30 Nov 2004 23:44:16 -0700]/UNNAMED/[From "Judi Ayers" <jayers@dccnet.com>][Date Thu, 2 Dec 2004 19:45:10 -0800]/UNNAMED/[From "Giganews" <support@giganews.com>][Date Fri, 3 Dec 2004 05:50:58 UT]/UNNAMED/[From Chris Walter <hook90@shaw.ca>][Date Wed, 08 Dec 2004 1018 -0800]/text Infected: Email-Worm.Win32.Bagle.ck skipped
    E:\Scott\Thunderbird\Old Profile\Mail\Local Folders\Inbox/[From TELUS Mail Administrator <helpdesk@telus.net>][Date Tue, 30 Nov 2004 23:44:16 -0700]/UNNAMED/[From "Judi Ayers" <jayers@dccnet.com>][Date Thu, 2 Dec 2004 19:45:10 -0800]/UNNAMED/[From "Giganews" <support@giganews.com>][Date Fri, 3 Dec 2004 05:50:58 UT]/UNNAMED Infected: Email-Worm.Win32.Bagle.ck skipped
    E:\Scott\Thunderbird\Old Profile\Mail\Local Folders\Inbox/[From TELUS Mail Administrator <helpdesk@telus.net>][Date Tue, 30 Nov 2004 23:44:16 -0700]/UNNAMED/[From "Judi Ayers" <jayers@dccnet.com>][Date Thu, 2 Dec 2004 19:45:10 -0800]/UNNAMED Infected: Email-Worm.Win32.Bagle.ck skipped
    E:\Scott\Thunderbird\Old Profile\Mail\Local Folders\Inbox/[From TELUS Mail Administrator <helpdesk@telus.net>][Date Tue, 30 Nov 2004 23:44:16 -0700]/UNNAMED Infected: Email-Worm.Win32.Bagle.ck skipped
    E:\Scott\Thunderbird\Old Profile\Mail\Local Folders\Inbox Mail Berkeley mbox: infected - 45 skipped

    Scan process completed.

  5. #5
    WoodDuck is offline Newbie
    Logfile of HijackThis v1.99.1
    Scan saved at 1250 PM, on 4/9/2006
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

    Running processes:
    C:\windows\System32\smss.exe
    C:\windows\system32\winlogon.exe
    C:\windows\system32\services.exe
    C:\windows\system32\lsass.exe
    C:\windows\system32\svchost.exe
    C:\windows\System32\svchost.exe
    C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe
    C:\windows\system32\spoolsv.exe
    C:\WINDOWS\system32\drivers\CDAC11BA.EXE
    C:\Program Files\ewido anti-malware\ewidoctrl.exe
    C:\Program Files\ewido anti-malware\ewidoguard.exe
    C:\windows\System32\GEARSec.exe
    C:\Program Files\NovaStor\NovaBACKUP\NMSAccess.exe
    C:\Program Files\Symantec\Norton Ghost\Agent\PQV2iSvc.exe
    C:\Program Files\NovaStor\NovaBACKUP\NSENGINE.exe
    C:\windows\system32\nvsvc32.exe
    C:\windows\system32\svchost.exe
    C:\windows\Explorer.EXE
    C:\windows\system32\RUNDLL32.EXE
    C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe
    C:\Program Files\Nero\Nero 7\InCD\InCD.exe
    C:\Program Files\Symantec\Norton Ghost\Agent\GhostTray.exe
    C:\Program Files\NVIDIA Corporation\NvMixer\NvMixerTray.exe
    C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
    C:\Program Files\NovaStor\NovaBACKUP\NbkCtrl.exe
    C:\Program Files\iTunes\iTunesHelper.exe
    C:\Program Files\QuickTime\qttask.exe
    C:\Program Files\Brother\ControlCenter2\brctrcen.exe
    C:\Program Files\Ashampoo\Ashampoo UnInstaller Platinum Suite\UIWatcher.exe
    C:\WINDOWS\kdx\KHost.exe
    C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
    C:\Program Files\iPod\bin\iPodService.exe
    C:\windows\System32\svchost.exe
    C:\windows\system32\wuauclt.exe
    C:\Documents and Settings\Scott\Desktop\New Folder\New Folder\HijackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.ca/
    O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
    O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
    O4 - HKLM\..\Run: [SSBkgdUpdate] "C:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot
    O4 - HKLM\..\Run: [PaperPort PTD] C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe
    O4 - HKLM\..\Run: [IndexSearch] C:\Program Files\ScanSoft\PaperPort\IndexSearch.exe
    O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
    O4 - HKLM\..\Run: [InCD] C:\Program Files\Nero\Nero 7\InCD\InCD.exe
    O4 - HKLM\..\Run: [Norton Ghost 9.0] C:\Program Files\Symantec\Norton Ghost\Agent\GhostTray.exe
    O4 - HKLM\..\Run: [NvMixerTray] C:\Program Files\NVIDIA Corporation\NvMixer\NvMixerTray.exe
    O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
    O4 - HKLM\..\Run: [NovaBackup 7 Tray Control] "C:\Program Files\NovaStor\NovaBACKUP\NbkCtrl.exe"
    O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [KAVPersonal50] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\kav.exe" /minimize
    O4 - HKLM\..\Run: [ControlCenter2.0] C:\Program Files\Brother\ControlCenter2\brctrcen.exe /autorun
    O4 - HKCU\..\Run: [UIWatcher] C:\Program Files\Ashampoo\Ashampoo UnInstaller Platinum Suite\UIWatcher.exe
    O4 - HKCU\..\Run: [kdx] C:\WINDOWS\kdx\KHost.exe -all
    O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/english...an_unicode.cab
    O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/actives...ree/asinst.cab
    O16 - DPF: {A7ECD556-D6F6-4F41-8C6B-14AB246801A0} (Secure Delivery) - http://kdx.omn.org/securedelivery/omn/kdx.cab
    O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\system32\drivers\CDAC11BA.EXE
    O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exe
    O23 - Service: ewido security suite guard - ewido networks - C:\Program Files\ewido anti-malware\ewidoguard.exe
    O23 - Service: GEARSecurity - GEAR Software - C:\windows\System32\GEARSec.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
    O23 - Service: InCD Helper (InCDsrv) - Nero AG - C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe
    O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
    O23 - Service: kavsvc - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\kavsvc.exe
    O23 - Service: NMSAccess - Unknown owner - C:\Program Files\NovaStor\NovaBACKUP\NMSAccess.exe
    O23 - Service: Norton Ghost - Symantec Corporation - C:\Program Files\Symantec\Norton Ghost\Agent\PQV2iSvc.exe
    O23 - Service: NsEngine - Unknown owner - C:\Program Files\NovaStor\NovaBACKUP\NSENGINE.exe
    O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\windows\system32\nvsvc32.exe

  6. #6
    VopThis is offline Senior Member (Canada)
    There are no problems showing in your HijackThis log.


    However, there are clearly problems in your email storage areas:
    C:\Documents and Settings\Scott\Application Data\Thunderbird\Old Profile\Mail\Local Folders\Inbox/[From TELUS Mail Administrator <helpdesk@telus.net>][Date Tue, 30 Nov 2004 23:44:16 -0700]/UNNAMED/[From "Judi Ayers" <jayers@dccnet.com>][Date Thu, 2 Dec 2004 19:45:10 -0800]/UNNAMED/[From "Giganews" <support@giganews.com>][Date Fri, 3 Dec 2004 05:50:58 UT]/UNNAMED/[From Chris Walter <hook90@shaw.ca>][Date Wed, 08 Dec 2004 1018 -0800]/text/[From "Coats, Scott" <SCoats@rich ... / ... ... /[Fro ... /[From "Scoats" <scoats@teligentems.com>][Date Fri, 12 Aug 2005 03:19:09 ... /Taxes.exe Infected: Email-Worm.Win32.Bagle.cf skipped
    Your Kaspersky online items are:
    • mostly email related
    • are probably an old forgotten no longer used application version (2004)
    • are only picked up if you tick the applicable box to scan for them (likely did in the online scan but not for the regular tool)


    Suggest you delete the Thunderbird application or folder, or clean out the listed email items, manually, as applicable. Or, run the Kaspersky AV tool looking specifically at the email settings. See instruction settings for the online scan:

    Please do an online scan (scan only tool) with Kaspersky WebScanner
    [Internet Explorer required]


    Click on Kaspersky Online Scanner

    You will be prompted to install an ActiveX component from Kaspersky, Click Yes.
    • The program will launch and then begin downloading the latest definition files:
    • Once the files have been downloaded click on NEXT
    • Now click on Scan Settings
    • In the scan settings make sure that the following are selected:
      • Scan using the following Anti-Virus database:
        - Extended (if available otherwise Standard)
      • Scan Options:
        - Scan Archives
        - Scan Mail Bases
    • Click OK
    • Now under select a target to scan:
      • Select My Computer
    • This program will start and scan your system.
    • The scan will take a while so be patient and let it run.
    • Once the scan is complete it will display if your system has been infected.
      • Now click on the Save as Text button:
    • Save the file to your desktop.
    • Copy and paste that information in your next post.

  7. #7
    WoodDuck is offline Newbie
    Hi, just an update.

    I changed the settings on KAV as you suggested and ran it. It did pick up all the stuff that the online scan did so I allowed KAV to process it. It nuked my whole inbox!
    Luckily I had a backup to restore from so I didn't lose anything.

    I fished around a bit and discovered that if I cut all the messages from my inbox folder and saved them in a temp folder, there was still 160 mb of data in the inbox file! I have no idea what all that stuff was but I deleted the inblox file, then pasted all my messages back into the inbox folder.

    Then I ran a full system scan and nothing showed up. It seems the 3 worms that showed up (Email-Worm.Win32.Bagle.cf, Email-Worm.Win32.Bagle.ck, and "Mail Berkeley mbox") earlier were hiding in the inbox seding out over 100 messages over time. I gues pretty much everyone I know was sent one.

    Anyway it seems my system is clean now but I haven't had time to see whether my ADSL connection will continue to drop or if it's been fixed by deleting the worms. It could be it had nothing to do with the infection...

    Will keep you posted, thanks very much for the help.
    WoodDuck

  8. #8
    WoodDuck is offline Newbie
    My ADSL connection has been on steadily for 2 days now. Apparently it was the worm that was making it drop. Thanks.

  9. #9
    VopThis is offline Senior Member (Canada)
    Save 20% on AVG Internet Security 2012 Suite!
    To help avoid serious infection again, please look carefully at this post for some excellent preventative measures. Prevention must be made the first line of defense to improve upon.



    ONLY ONCE you are as clean as possible from any needed cleanup steps - As a final cleanup step (after serious infection), it may be advisable to Reset and Re-enable your System Restore to remove any bad files that MAY have been backed up by Windows . The files in System Restore are protected to prevent any programs changing them. And, this is the only complete way to clean these files: (You will lose all previous restore points which could likely be infected, anyway.)

    PLEASE NOTE: you will need to log into your computer with an account that has full administrator access. You will know if the account has administrator access because you will be able to see the System Restore tab. If the tab is missing, you are logged in under a limited account.


    (Windows XP)
    FOLDER LOCATION: c:\System Volume Information\_restore….
    To Turn OFF System Restore.
    1. Click the Start button.
    2. Right-click My Computer, and then click Properties.
    3. On the System Restore tab, check Turn off System Restore or Turn off System Restore on all drives.
    4. Click Apply.

    REBOOT.

    To Turn ON System Restore.
    1. Follow the steps in the previous section, but in step 3, uncheck Turn off System Restore or Turn off System Restore on all drives. Then click OK.
    2. Create new System Restore points.


    (Windows ME)
    FOLDER LOCATION: c:\_RESTORE\TEMP\….
    See the following link for instructions:
    http://service1.symantec.com/SUPPORT...rc=sec_doc_nam




    To reduce the re-infection potential for malware and protect your PC against spyware, here are a few helpful suggestions:
    1. Keep Windows and Internet Explorer current with the latest critical security updates from Microsoft . This will patch many of the security holes through which attackers can gain access to your computer . You CANNOT complete this update using an alternate browser – you must use Internet Explorer.
      http://v5.windowsupdate.microsoft.com/v5co...t.aspx?ln=en-us
      http://www.microsoft.com/windows/ie/default.asp
      • http://www.securityfocus.com/news/11273
        If you surf to questionable (blockable) parts of the Web, you could encounter sites that compromise your PC without any user interaction. In experiments [reported Aug 2005], Microsoft identified 752 specific addresses owned by 287 Web sites that contain programs able to install themselves on a completely unpatched Windows XP system. Also, be aware that the WinXP Service Pack 2 was an update that focused almost exclusively on security. Also reported was that a fully patched Windows XP SP2 system cannot be compromised by any such discovered rogue Web sites.

    2. Run your antivirus software regularly, and to keep its definitions up-to-date. If you are thinking about switching (using a real-time AV tool only one at a time), there are some good free Antivirus programs that are decent, including AVG and Avast!.
      AVG: http://free.grisoft.com/doc/1
      Avast: http://www.avast.com/eng/avast_4_home.html

    3. In addition to using Ad-aware, consider using another free malware scanning/removal program :
      Adaware SE: http://www.download.com/Ad-Aware-SE-Person...ubj=dl&tag=top5
      Spybot S&D: http://www.download.com/Spybot-Search-Dest...tml?tag=lst-0-1
      MS Antispyware beta: http://www.microsoft.com/athome/security/s...re/default.mspx

    4. Consider using a free firewall if you are not already using one (use only one firewall at a time – normally you will need to disable the MS firewall). Some good free ones (for incoming and added outgoing traffic protection) are:
      Kerio Personal Firewall: http://www.sunbelt-software.com/Kerio.cfm
      *** After 30 days, Kerio shuts down selected features, but will continue to run in 'free' mode.
      Zone Alarm: http://www.zonelabs.com/store/content/company/products/znalm/comparison.jsp?lid=ho_za

      It is not a bad idea to also consider using a Router/Hardware firewall device where you have a High-Speed Internet access connection. A software firewall may occasionally need to be disabled or it gets/remains disabled by someone or something. Such an added layer of security consistency has a lot of merit to it.

    5. Consider using an alternate free browser for general web surfing but you must use IE for windows updates.
      Mozilla Firefox: http://www.mozilla.org/products/firefox/

    6. Consider increasing your browser security by using these programs:
      SpywareGuard will help protect your homepage from being hijacked: http://www.javacoolsoftware.com/spywareguard.html
      SpywareBlaster will increase browser protection by blocking access to thousands of known malware sites by adding them to IE's restricted sites zone. It essentially blocks known- bad ActiveX program items from being installed or running on your computer. Download it here: http://www.javacoolsoftware.com/spywareblaster.html
    7. A HOSTS file can block Internet access to thousands of known-bad sites by not allowing you any easy browser access to such sites knowingly or unknowingly. Use HJT to determine if a current HOSTS file exists and any contents therein:
      • Run the HiJackThis tool and select ‘Open the Misc Tools section’.
      • Next select ‘Open host file manager’ button.
      • Use the ‘Open in Notepad’ button in XP/W2K or use WORDPAD if necessary [type wordpad.exe in the RUN box (Start>Run)] and load the FILE PATH identified in HJT.
      • Go to http://www.mvps.org/winhelp2002/hosts.txt . # Read the initial instructions #. Copy and paste (append or replace) the RELEVANT host address entry contents of that file into Notepad or Wordpad and save the updated file contents.

        EXCERPT:
        #start of lines added by WinHelp2002
        # [Misc A - Z]
        127.0.0.1 phpadsnew.abac.com
        127.0.0.1 a.abnad.net
        127.0.0.1 e.abnad.net
        127.0.0.1 www.accoona.com #[Adware-Accoona][Adware.Atoolb][Panda.Accoona]
        .
        .
        .
        #end of lines added by WinHelp2002




    *Remember just like your primary anti-virus software, it is important to:
    • Keep all of these programs up-to-date, and
    • Use them on a regular basis.

+ Reply to Thread