I have been having problems receiving and sending emails for a few weeks now.

After rebooting my PC I can start OE and download any emails. However, any further attempts to receive or send emails fail as OE times out. I have tried disabling email scanning and personal firewall but this has had no effect. I have also uninstalled and reinstalled both OE and NIS but again no effect.

So far the only solution has been to completely disable NIS or Norton antivirus.

I have also tried TELNETing to my pop3 server. If I do this after rebooting but before running OE I can connect OK, however, once I have run OE I am no longer able to connect via TELNET.

I hope that makes sense. If anyone can shed some light on the problem I would be very grateful.

Run the Read First Procedures found here, if you haven't already done so. Also run the additional two (2) scans suggested below before posting a HijackThis log:

http://www.d-a-l.com/help/showthread.php?t=32403




Please download, install, update and scan your system with the free (trial) version of Ewido TROJAN scanner
[Developed for Windows 2000 and XP]:

1. When installing, under "Additional Options" uncheck "Install background guard" and "Install scan via context menu".
2. When you run ewido for the first time, you will get a warning "Database could not be found!". Click OK. We will fix this in a moment.
3. From the main ewido screen, click on update in the left menu, then click the Start update button.
4. After the update finishes (the status bar at the bottom will display "Update successful"), click on the Scanner button in the left menu, then click on the Start button. This scan can take quite a while to run, so time to go get a drink and a snack....
5. If ewido finds anything, it will pop up a notification. You can select "clean" and check the boxes "Perform action with all infections" and "Create encrypted backup" before clicking on OK.
6. When the scan finishes, click on "Save Report". This will create a text file. Please then paste the contents of the text file to this thread.

Note: Ewido is a free trial product for 14 days. Since Ewido is a trial version, the realtime guard and automatic update will stop functioning after 14 days. We are not installing the guard because it might interfere with the cleanup or the malware removal process. You can use Ewido as an on-demand scanner (recommended) but you will have to manually update the definition file each time you scan. If you decide to purchase Ewido, you can enable the 'Realtime Protect' and 'Automatic Update' functions by clicking on the 'Status' bar (Top left) and clicking on both items under "Your Security Status".

REBOOT.




Please do an online scan (scan only tool) with Kaspersky WebScanner



[Internet Explorer required]
Go to Kaspersky website: www.kaspersky.com/virusscanner and click on the Kaspersky Online Scanner BUTTON/BOX.

You will be prompted to install an ActiveX component from Kaspersky, Click Yes.

• The program will launch and then begin downloading the latest definition files:
• Once the files have been downloaded click on NEXT
  
• Now click on Scan Settings
• In the scan settings make sure that the following are selected:
  • Scan using the following Anti-Virus database:
    - Extended (if available otherwise Standard)
  • Scan Options:
    - Scan Archives
    - Scan Mail Bases
• Click OK
• Now under select a target to scan:
  • Select My Computer
• This program will start and scan your system.
• The scan will take a while so be patient and let it run.
• Once the scan is complete it will display if your system has been infected.
  • Now click on the Save as Text button:
• Save the file to your desktop.
• Copy and paste that information in your next post.

Thanks for the help. Below are the reports from ewido and Kaspersky plus a hijackthis log from after the previous two scans were carried out. When running Kaspersky it got to 99% complete then remained on one file. I stopped the scan after it had been stuck at this point for over 4 hours. The file in question was;

C:\System Volume Information\_restore....5D-BF30-83E44C588624}\RP943\A0109063.old

I did a search for this file (including hidden and system files) but couldn't find it.

The report from Ewido is;

---------------------------------------------------------
ewido anti-malware - Scan report
---------------------------------------------------------

+ Created on: 06:48:02, 12/04/2006
+ Report-Checksum: DCEF8A7B

+ Scan result:

C:\Documents and Settings\NealCallaghan\Cookies\nealcallaghan@112.2 o7[2].txt -> TrackingCookie.2o7 : Cleaned with backup
C:\Documents and Settings\NealCallaghan\Cookies\nealcallaghan@ad.ad ition[2].txt -> TrackingCookie.Adition : Cleaned with backup
C:\Documents and Settings\NealCallaghan\Cookies\nealcallaghan@ad.yi eldmanager[2].txt -> TrackingCookie.Yieldmanager : Cleaned with backup
C:\Documents and Settings\NealCallaghan\Cookies\nealcallaghan@adbri te[1].txt -> TrackingCookie.Adbrite : Cleaned with backup
C:\Documents and Settings\NealCallaghan\Cookies\nealcallaghan@adopt .euroclick[1].txt -> TrackingCookie.Euroclick : Cleaned with backup
C:\Documents and Settings\NealCallaghan\Cookies\nealcallaghan@adopt .specificclick[2].txt -> TrackingCookie.Specificclick : Cleaned with backup
C:\Documents and Settings\NealCallaghan\Cookies\nealcallaghan@ameri canexpress.122.2o7[1].txt -> TrackingCookie.2o7 : Cleaned with backup
C:\Documents and Settings\NealCallaghan\Cookies\nealcallaghan@as1.f alkag[1].txt -> TrackingCookie.Falkag : Cleaned with backup
C:\Documents and Settings\NealCallaghan\Cookies\nealcallaghan@c.enh ance[1].txt -> TrackingCookie.Enhance : Cleaned with backup
C:\Documents and Settings\NealCallaghan\Cookies\nealcallaghan@cbs.1 12.2o7[1].txt -> TrackingCookie.2o7 : Cleaned with backup
C:\Documents and Settings\NealCallaghan\Cookies\nealcallaghan@cnn.1 22.2o7[1].txt -> TrackingCookie.2o7 : Cleaned with backup
C:\Documents and Settings\NealCallaghan\Cookies\nealcallaghan@com[2].txt -> TrackingCookie.Com : Cleaned with backup
C:\Documents and Settings\NealCallaghan\Cookies\nealcallaghan@coxhs i.112.2o7[1].txt -> TrackingCookie.2o7 : Cleaned with backup
C:\Documents and Settings\NealCallaghan\Cookies\nealcallaghan@data2 .perf.overture[1].txt -> TrackingCookie.Overture : Cleaned with backup
C:\Documents and Settings\NealCallaghan\Cookies\nealcallaghan@e-2dj6wfk4gpcpmlq.stats.esomniture[2].txt -> TrackingCookie.Esomniture : Cleaned with backup
C:\Documents and Settings\NealCallaghan\Cookies\nealcallaghan@e-2dj6wfkiwnczwep.stats.esomniture[2].txt -> TrackingCookie.Esomniture : Cleaned with backup
C:\Documents and Settings\NealCallaghan\Cookies\nealcallaghan@e-2dj6wfkoqmdpeap.stats.esomniture[2].txt -> TrackingCookie.Esomniture : Cleaned with backup
C:\Documents and Settings\NealCallaghan\Cookies\nealcallaghan@e-2dj6wfkouiczifp.stats.esomniture[2].txt -> TrackingCookie.Esomniture : Cleaned with backup
C:\Documents and Settings\NealCallaghan\Cookies\nealcallaghan@e-2dj6wfkyqndzcap.stats.esomniture[2].txt -> TrackingCookie.Esomniture : Cleaned with backup
C:\Documents and Settings\NealCallaghan\Cookies\nealcallaghan@e-2dj6wflisidzkfp.stats.esomniture[2].txt -> TrackingCookie.Esomniture : Cleaned with backup
C:\Documents and Settings\NealCallaghan\Cookies\nealcallaghan@e-2dj6wfmyejcpifo.stats.esomniture[1].txt -> TrackingCookie.Esomniture : Cleaned with backup
C:\Documents and Settings\NealCallaghan\Cookies\nealcallaghan@e-2dj6wgkicjcjmkp.stats.esomniture[1].txt -> TrackingCookie.Esomniture : Cleaned with backup
C:\Documents and Settings\NealCallaghan\Cookies\nealcallaghan@e-2dj6wjk4wmcpoho.stats.esomniture[2].txt -> TrackingCookie.Esomniture : Cleaned with backup
C:\Documents and Settings\NealCallaghan\Cookies\nealcallaghan@e-2dj6wjkoelajebp.stats.esomniture[2].txt -> TrackingCookie.Esomniture : Cleaned with backup
C:\Documents and Settings\NealCallaghan\Cookies\nealcallaghan@e-2dj6wjkoqgdzmao.stats.esomniture[2].txt -> TrackingCookie.Esomniture : Cleaned with backup
C:\Documents and Settings\NealCallaghan\Cookies\nealcallaghan@e-2dj6wjkoqod5ilp.stats.esomniture[2].txt -> TrackingCookie.Esomniture : Cleaned with backup
C:\Documents and Settings\NealCallaghan\Cookies\nealcallaghan@e-2dj6wjkycoc5khq.stats.esomniture[1].txt -> TrackingCookie.Esomniture : Cleaned with backup
C:\Documents and Settings\NealCallaghan\Cookies\nealcallaghan@e-2dj6wjkycocjoap.stats.esomniture[2].txt -> TrackingCookie.Esomniture : Cleaned with backup
C:\Documents and Settings\NealCallaghan\Cookies\nealcallaghan@e-2dj6wjkygldzkbo.stats.esomniture[2].txt -> TrackingCookie.Esomniture : Cleaned with backup
C:\Documents and Settings\NealCallaghan\Cookies\nealcallaghan@e-2dj6wjkykkczefq.stats.esomniture[2].txt -> TrackingCookie.Esomniture : Cleaned with backup
C:\Documents and Settings\NealCallaghan\Cookies\nealcallaghan@e-2dj6wjkyogcpkcq.stats.esomniture[2].txt -> TrackingCookie.Esomniture : Cleaned with backup
C:\Documents and Settings\NealCallaghan\Cookies\nealcallaghan@e-2dj6wjkyqhdpaaq.stats.esomniture[2].txt -> TrackingCookie.Esomniture : Cleaned with backup
C:\Documents and Settings\NealCallaghan\Cookies\nealcallaghan@e-2dj6wjkywkcjwhp.stats.esomniture[2].txt -> TrackingCookie.Esomniture : Cleaned with backup
C:\Documents and Settings\NealCallaghan\Cookies\nealcallaghan@e-2dj6wjloend5klp.stats.esomniture[2].txt -> TrackingCookie.Esomniture : Cleaned with backup
C:\Documents and Settings\NealCallaghan\Cookies\nealcallaghan@e-2dj6wjlougcpedp.stats.esomniture[2].txt -> TrackingCookie.Esomniture : Cleaned with backup
C:\Documents and Settings\NealCallaghan\Cookies\nealcallaghan@e-2dj6wjmyoncpeeo.stats.esomniture[2].txt -> TrackingCookie.Esomniture : Cleaned with backup
C:\Documents and Settings\NealCallaghan\Cookies\nealcallaghan@e-2dj6wjmywmcpeep.stats.esomniture[2].txt -> TrackingCookie.Esomniture : Cleaned with backup
C:\Documents and Settings\NealCallaghan\Cookies\nealcallaghan@hyper tracker[1].txt -> TrackingCookie.Hypertracker : Cleaned with backup
C:\Documents and Settings\NealCallaghan\Cookies\nealcallaghan@image .masterstats[1].txt -> TrackingCookie.Masterstats : Cleaned with backup
C:\Documents and Settings\NealCallaghan\Cookies\nealcallaghan@ivwbo x[2].txt -> TrackingCookie.Ivwbox : Cleaned with backup
C:\Documents and Settings\NealCallaghan\Cookies\nealcallaghan@krone .oewabox[1].txt -> TrackingCookie.Oewabox : Cleaned with backup
C:\Documents and Settings\NealCallaghan\Cookies\nealcallaghan@machi nemart.122.2o7[1].txt -> TrackingCookie.2o7 : Cleaned with backup
C:\Documents and Settings\NealCallaghan\Cookies\nealcallaghan@micro softeup.112.2o7[1].txt -> TrackingCookie.2o7 : Cleaned with backup
C:\Documents and Settings\NealCallaghan\Cookies\nealcallaghan@micro softwga.112.2o7[1].txt -> TrackingCookie.2o7 : Cleaned with backup
C:\Documents and Settings\NealCallaghan\Cookies\nealcallaghan@msnpo rtal.112.2o7[1].txt -> TrackingCookie.2o7 : Cleaned with backup
C:\Documents and Settings\NealCallaghan\Cookies\nealcallaghan@orf.o ewabox[1].txt -> TrackingCookie.Oewabox : Cleaned with backup
C:\Documents and Settings\NealCallaghan\Cookies\nealcallaghan@paypo pup[2].txt -> TrackingCookie.Paypopup : Cleaned with backup
C:\Documents and Settings\NealCallaghan\Cookies\nealcallaghan@serve r3.web-stat[1].txt -> TrackingCookie.Web-stat : Cleaned with backup
C:\Documents and Settings\NealCallaghan\Cookies\nealcallaghan@stats .esomniture[2].txt -> TrackingCookie.Esomniture : Cleaned with backup
C:\Documents and Settings\NealCallaghan\Cookies\nealcallaghan@webst at[2].txt -> TrackingCookie.Web-stat : Cleaned with backup
C:\Documents and Settings\NealCallaghan\Cookies\nealcallaghan@www.w eb-stat[1].txt -> TrackingCookie.Web-stat : Cleaned with backup
C:\Documents and Settings\NealCallaghan\Cookies\nealcallaghan@y-1shz2prbmdj6wvny-1sez2pra2dj6wfkiggc5edpqidj6x9ny-1seq-2-2.stats.esomniture[2].txt -> TrackingCookie.Esomniture : Cleaned with backup
C:\Documents and Settings\NealCallaghan\Cookies\nealcallaghan@y-1shz2prbmdj6wvny-1sez2pra2dj6wjkoejcpihoqqdj6x9ny-1seq-2-2.stats.esomniture[2].txt -> TrackingCookie.Esomniture : Cleaned with backup
C:\Documents and Settings\NealCallaghan\Cookies\nealcallaghan@y-1shz2prbmdj6wvny-1sez2pra2dj6wjlywkdpgcpwidj6x9ny-1seq-2-2.stats.esomniture[2].txt -> TrackingCookie.Esomniture : Cleaned with backup
C:\Documents and Settings\NealCallaghan\Cookies\nealcallaghan@yadro[2].txt -> TrackingCookie.Yadro : Cleaned with backup
C:\Documents and Settings\NealCallaghan\Local Settings\Temp\Cookies\nealcallaghan@ad.yieldmanage r[2].txt -> TrackingCookie.Yieldmanager : Cleaned with backup
C:\Documents and Settings\NealCallaghan\Local Settings\Temp\Cookies\nealcallaghan@americanexpres s.122.2o7[1].txt -> TrackingCookie.2o7 : Cleaned with backup
C:\Documents and Settings\NealCallaghan\Local Settings\Temp\Cookies\nealcallaghan@com[2].txt -> TrackingCookie.Com : Cleaned with backup
C:\Documents and Settings\NealCallaghan\Local Settings\Temp\Cookies\nealcallaghan@e-2dj6wfkyugcjkkp.stats.esomniture[2].txt -> TrackingCookie.Esomniture : Cleaned with backup
C:\Documents and Settings\NealCallaghan\Local Settings\Temp\Cookies\nealcallaghan@e-2dj6wgkicjcjmkp.stats.esomniture[2].txt -> TrackingCookie.Esomniture : Cleaned with backup
C:\Documents and Settings\NealCallaghan\Local Settings\Temp\Cookies\nealcallaghan@e-2dj6wgkycnaziao.stats.esomniture[2].txt -> TrackingCookie.Esomniture : Cleaned with backup
C:\Documents and Settings\NealCallaghan\Local Settings\Temp\Cookies\nealcallaghan@e-2dj6wjlygkdzadp.stats.esomniture[2].txt -> TrackingCookie.Esomniture : Cleaned with backup
C:\Documents and Settings\NealCallaghan\Local Settings\Temp\Cookies\nealcallaghan@e-2dj6wjmiaidzeko.stats.esomniture[2].txt -> TrackingCookie.Esomniture : Cleaned with backup
C:\Documents and Settings\NealCallaghan\Local Settings\Temp\Cookies\nealcallaghan@e-2dj6wjmieldpihq.stats.esomniture[2].txt -> TrackingCookie.Esomniture : Cleaned with backup
C:\Documents and Settings\NealCallaghan\Local Settings\Temp\Cookies\nealcallaghan@journalregiste rcompany.122.2o7[1].txt -> TrackingCookie.2o7 : Cleaned with backup
C:\Documents and Settings\NealCallaghan\Local Settings\Temp\Cookies\nealcallaghan@www.statcounte r[1].txt -> TrackingCookie.Statcounter : Cleaned with backup


::Report End

Kaspersky report, upto the point I interupted the scan, is;

-------------------------------------------------------------------------------
KASPERSKY ON-LINE SCANNER REPORT
Wednesday, April 12, 2006 8:44:55 PM
Operating System: Microsoft Windows XP Home Edition, Service Pack 2 (Build 2600)
Kaspersky On-line Scanner version: 5.0.78.0
Kaspersky Anti-Virus database last update: 12/04/2006
Kaspersky Anti-Virus database records: 187695
-------------------------------------------------------------------------------

Scan Settings:
Scan using the following antivirus database: extended
Scan Archives: true
Scan Mail Bases: true

Scan Target - My Computer:
A:\
C:\
D:\
E:\
G:\

Scan Statistics:
Total number of scanned objects: 124473
Number of viruses found: 22
Number of infected objects: 573
Number of suspicious objects: 31
Duration of the scan process: 06:58:20

Infected Object Name / Virus Name / Last Action
C:\Documents and Settings\NealCallaghan\Local Settings\Temp\CC4F1.tmp/[From studiovdh@swing.be][Date Sat, 24 Apr 2004 11:15:13 +0200]/UNNAMED/html Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\NealCallaghan\Local Settings\Temp\CC4F1.tmp/[From studiovdh@swing.be][Date Sat, 24 Apr 2004 11:15:13 +0200]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\NealCallaghan\Local Settings\Temp\CC4F1.tmp Mail: suspicious - 2 skipped
C:\Documents and Settings\NealCallaghan\My Documents\applications\bittorrent-3.3.exe/data0007 Infected: Trojan-Downloader.Win32.Swizzor.l skipped
C:\Documents and Settings\NealCallaghan\My Documents\applications\bittorrent-3.3.exe NSIS: infected - 1 skipped
C:\Downloads\bittorrent-3.4.1.exe/stream/data0006 Infected: Trojan-Downloader.Win32.Swizzor.k skipped
C:\Downloads\bittorrent-3.4.1.exe/stream Infected: Trojan-Downloader.Win32.Swizzor.k skipped
C:\Downloads\bittorrent-3.4.1.exe NSIS: infected - 2 skipped
C:\Program Files\Norton AntiVirus\Quarantine\009779BD Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\01950440 Infected: Email-Worm.Win32.Bagle.z skipped
C:\Program Files\Norton AntiVirus\Quarantine\01982B32 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\01C668A3 Infected: Email-Worm.Win32.Klez.h skipped
C:\Program Files\Norton AntiVirus\Quarantine\01F4791E Infected: Email-Worm.Win32.NetSky.q skipped
C:\Program Files\Norton AntiVirus\Quarantine\02821598 Infected: Email-Worm.Win32.Klez.h skipped
C:\Program Files\Norton AntiVirus\Quarantine\034015FF Infected: Email-Worm.Win32.NetSky.q skipped
C:\Program Files\Norton AntiVirus\Quarantine\034109AB Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\044C0285/details.pif Infected: Email-Worm.Win32.NetSky.b skipped
C:\Program Files\Norton AntiVirus\Quarantine\044C0285 ZIP: infected - 1 skipped
C:\Program Files\Norton AntiVirus\Quarantine\044C0285 CryptFF: infected - 1 skipped
C:\Program Files\Norton AntiVirus\Quarantine\046902B6 Infected: Email-Worm.Win32.Bagle.i skipped
C:\Program Files\Norton AntiVirus\Quarantine\05E565A2 Infected: Email-Worm.Win32.NetSky.q skipped
C:\Program Files\Norton AntiVirus\Quarantine\06277B4C Infected: Email-Worm.Win32.Klez.h skipped
C:\Program Files\Norton AntiVirus\Quarantine\064E1691 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\06581487 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\069662EC Infected: Email-Worm.Win32.Klez.h skipped
C:\Program Files\Norton AntiVirus\Quarantine\070D75A5/[From devoteesandwannabees@yahoogroups.com][Date Tue, 18 May 2004 09:23:24 +0200]/UNNAMED/html Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Program Files\Norton AntiVirus\Quarantine\070D75A5/[From devoteesandwannabees@yahoogroups.com][Date Tue, 18 May 2004 09:23:24 +0200]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Program Files\Norton AntiVirus\Quarantine\070D75A5/[From devoteesandwannabees@yahoogroups.com][Date Tue, 18 May 2004 09:23:24 +0200]/message.zlq Infected: Email-Worm.Win32.NetSky.q skipped
C:\Program Files\Norton AntiVirus\Quarantine\070D75A5 Mail: infected - 1, suspicious - 2 skipped
C:\Program Files\Norton AntiVirus\Quarantine\070D75A5 CryptFF: infected - 1, suspicious - 2 skipped
C:\Program Files\Norton AntiVirus\Quarantine\07531F20 Infected: Email-Worm.Win32.Sobig.c skipped
C:\Program Files\Norton AntiVirus\Quarantine\090330C1 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\09BD623F Infected: Email-Worm.Win32.Sobig.b skipped
C:\Program Files\Norton AntiVirus\Quarantine\09FB09A9 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\0A285BA1 Infected: Email-Worm.Win32.Klez.h skipped
C:\Program Files\Norton AntiVirus\Quarantine\0C9D154E Infected: Email-Worm.Win32.Magistr.a skipped
C:\Program Files\Norton AntiVirus\Quarantine\0D57321C Infected: Email-Worm.Win32.Klez.h skipped
C:\Program Files\Norton AntiVirus\Quarantine\0D6F1341 Infected: Email-Worm.Win32.Bagle.z skipped
C:\Program Files\Norton AntiVirus\Quarantine\0DE44F06 Infected: Email-Worm.Win32.Bagle.z skipped
C:\Program Files\Norton AntiVirus\Quarantine\0E170C96 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\10675FE5 Infected: Email-Worm.Win32.Klez.h skipped
C:\Program Files\Norton AntiVirus\Quarantine\108B61AD Infected: Email-Worm.Win32.Sobig.e skipped
C:\Program Files\Norton AntiVirus\Quarantine\10A53191 Infected: Email-Worm.Win32.Sobig.e skipped
C:\Program Files\Norton AntiVirus\Quarantine\10BD431C Infected: Email-Worm.Win32.Klez.h skipped
C:\Program Files\Norton AntiVirus\Quarantine\112A4F6D Infected: Email-Worm.Win32.Sobig.c skipped
C:\Program Files\Norton AntiVirus\Quarantine\115804BF Infected: Email-Worm.Win32.Klez.h skipped
C:\Program Files\Norton AntiVirus\Quarantine\118F4E82 Infected: Email-Worm.Win32.Klez.h skipped
C:\Program Files\Norton AntiVirus\Quarantine\11FF6137 Infected: Email-Worm.Win32.NetSky.q skipped
C:\Program Files\Norton AntiVirus\Quarantine\12085F2C Infected: Email-Worm.Win32.NetSky.q skipped
C:\Program Files\Norton AntiVirus\Quarantine\120C587F Infected: Email-Worm.Win32.Klez.h skipped
C:\Program Files\Norton AntiVirus\Quarantine\120F3325/details.txt .pif Infected: Email-Worm.Win32.NetSky.q skipped
C:\Program Files\Norton AntiVirus\Quarantine\120F3325 ZIP: infected - 1 skipped
C:\Program Files\Norton AntiVirus\Quarantine\120F3325 CryptFF: infected - 1 skipped
C:\Program Files\Norton AntiVirus\Quarantine\12A70BC6 Infected: Email-Worm.Win32.Bagle.z skipped
C:\Program Files\Norton AntiVirus\Quarantine\12B43FC7 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\12BE3DBD Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\139A7088 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\13AA4276 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\13B0166F Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\13B30BBF Infected: Email-Worm.Win32.Magistr.a skipped
C:\Program Files\Norton AntiVirus\Quarantine\13BA1464 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\13F359A4 Infected: Email-Worm.Win32.NetSky.q skipped
C:\Program Files\Norton AntiVirus\Quarantine\14426D11 Infected: Email-Worm.Win32.Klez.h skipped
C:\Program Files\Norton AntiVirus\Quarantine\148A5DC2 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\148B4855 Infected: Email-Worm.Win32.Klez.h skipped
C:\Program Files\Norton AntiVirus\Quarantine\152F315F Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\15432D4A Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\15490142 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\1550553B Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\15562934 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\155D7D2D Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\15635126 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\156D4F1B Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\15742314 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\157D2109 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\158E72F7 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\159770EC Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\15A518DE Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\15B240CF Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\15C212BD Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\15CC10B3 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\15D938A4 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\15E90A92 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\15FD067D Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\16056421 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\1615360F Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\161C0A08 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\16225E01 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\162C5BF6 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\16332FEF Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\163C2DE4 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\16462BD9 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\164D3ED5 Infected: Email-Worm.Win32.Klez.h skipped
C:\Program Files\Norton AntiVirus\Quarantine\174F4588 Infected: Email-Worm.Win32.NetSky.q skipped
C:\Program Files\Norton AntiVirus\Quarantine\19485770/qlyxficyr.exe Suspicious: Password-protected-EXE skipped
C:\Program Files\Norton AntiVirus\Quarantine\19485770 ZIP: suspicious - 1 skipped
C:\Program Files\Norton AntiVirus\Quarantine\19485770 CryptFF: suspicious - 1 skipped
C:\Program Files\Norton AntiVirus\Quarantine\1A1873AD/details.pif Infected: Email-Worm.Win32.NetSky.b skipped
C:\Program Files\Norton AntiVirus\Quarantine\1A1873AD ZIP: infected - 1 skipped
C:\Program Files\Norton AntiVirus\Quarantine\1A1873AD CryptFF: infected - 1 skipped
C:\Program Files\Norton AntiVirus\Quarantine\1A3C4186 Infected: Email-Worm.Win32.Dumaru.o skipped
C:\Program Files\Norton AntiVirus\Quarantine\1AA00329/story.rtf.pif Infected: Email-Worm.Win32.NetSky.c skipped
C:\Program Files\Norton AntiVirus\Quarantine\1AA00329 ZIP: infected - 1 skipped
C:\Program Files\Norton AntiVirus\Quarantine\1AA00329 CryptFF: infected - 1 skipped
C:\Program Files\Norton AntiVirus\Quarantine\1AF53C09 Infected: Email-Worm.Win32.Klez.h skipped
C:\Program Files\Norton AntiVirus\Quarantine\1C8A14EB Infected: Email-Worm.Win32.Sobig.c skipped
C:\Program Files\Norton AntiVirus\Quarantine\1CF27967 Infected: Email-Worm.Win32.NetSky.q skipped
C:\Program Files\Norton AntiVirus\Quarantine\1D4F206C Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\1D591E61 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\1EAF7338/details.txt .pif Infected: Email-Worm.Win32.NetSky.q skipped
C:\Program Files\Norton AntiVirus\Quarantine\1EAF7338 ZIP: infected - 1 skipped
C:\Program Files\Norton AntiVirus\Quarantine\1EAF7338 CryptFF: infected - 1 skipped
C:\Program Files\Norton AntiVirus\Quarantine\1F1D4D27 Infected: Email-Worm.Win32.Bagle.z skipped
C:\Program Files\Norton AntiVirus\Quarantine\1FCF1597/message.pif Infected: Email-Worm.Win32.Mydoom.a skipped
C:\Program Files\Norton AntiVirus\Quarantine\1FCF1597 ZIP: infected - 1 skipped
C:\Program Files\Norton AntiVirus\Quarantine\1FCF1597 CryptFF: infected - 1 skipped
C:\Program Files\Norton AntiVirus\Quarantine\208179C4 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\2086726C Infected: Email-Worm.Win32.Klez.h skipped
C:\Program Files\Norton AntiVirus\Quarantine\21414316 Infected: Email-Worm.Win32.Bagle.z skipped
C:\Program Files\Norton AntiVirus\Quarantine\217D2EB2 Infected: Email-Worm.Win32.Klez.h skipped
C:\Program Files\Norton AntiVirus\Quarantine\21DE161A Infected: Email-Worm.Win32.Klez.h skipped
C:\Program Files\Norton AntiVirus\Quarantine\221B5527 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\23017F96 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\23072A1F Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\230B7D8B Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\23115184 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\23254D6E Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\232B2167 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\23310563/vhturx.scr Suspicious: Password-protected-EXE skipped
C:\Program Files\Norton AntiVirus\Quarantine\23310563 ZIP: suspicious - 1 skipped
C:\Program Files\Norton AntiVirus\Quarantine\23310563 CryptFF: suspicious - 1 skipped
C:\Program Files\Norton AntiVirus\Quarantine\23327560 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\233C7355 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\2342474E Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\23491B47 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\234F6F40 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\23564338 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\2360412E Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\23693F23 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\23733D18 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\23765310 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\237A1111 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\23805105 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\23830F06 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\238A4EFA Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\238D0CFB Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\239136F8 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\23934CEF Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\23A174E1 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\23AA72D6 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\23B146CF Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\23BB44C4 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\23C442BA Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\23CB16B2 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\23CE1BD9/details.pif Infected: Email-Worm.Win32.NetSky.b skipped
C:\Program Files\Norton AntiVirus\Quarantine\23CE1BD9 ZIP: infected - 1 skipped
C:\Program Files\Norton AntiVirus\Quarantine\23CE1BD9 CryptFF: infected - 1 skipped
C:\Program Files\Norton AntiVirus\Quarantine\24E8204F Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\24FE0161 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\25590BDD Infected: Email-Worm.Win32.NetSky.q skipped
C:\Program Files\Norton AntiVirus\Quarantine\256A5DCB Infected: Email-Worm.Win32.NetSky.q skipped
C:\Program Files\Norton AntiVirus\Quarantine\258003B2/details.txt .pif Infected: Email-Worm.Win32.NetSky.q skipped
C:\Program Files\Norton AntiVirus\Quarantine\258003B2 ZIP: infected - 1 skipped
C:\Program Files\Norton AntiVirus\Quarantine\258003B2 CryptFF: infected - 1 skipped
C:\Program Files\Norton AntiVirus\Quarantine\25B52378/data.rtf .scr Infected: Email-Worm.Win32.NetSky.q skipped
C:\Program Files\Norton AntiVirus\Quarantine\25B52378 ZIP: infected - 1 skipped
C:\Program Files\Norton AntiVirus\Quarantine\25B52378 CryptFF: infected - 1 skipped
C:\Program Files\Norton AntiVirus\Quarantine\26385571 Infected: Email-Worm.Win32.Hawawi.e skipped
C:\Program Files\Norton AntiVirus\Quarantine\26735D0B Infected: Email-Worm.Win32.Klez.h skipped
C:\Program Files\Norton AntiVirus\Quarantine\267B46D5 Infected: Email-Worm.Win32.Klez.h skipped
C:\Program Files\Norton AntiVirus\Quarantine\26953A2C/message.html Infected: Email-Worm.Win32.Mimail.a skipped
C:\Program Files\Norton AntiVirus\Quarantine\26953A2C ZIP: infected - 1 skipped
C:\Program Files\Norton AntiVirus\Quarantine\26953A2C CryptFF: infected - 1 skipped
C:\Program Files\Norton AntiVirus\Quarantine\28690E67/document.htm .exe Infected: Email-Worm.Win32.Mydoom.a skipped
C:\Program Files\Norton AntiVirus\Quarantine\28690E67 ZIP: infected - 1 skipped
C:\Program Files\Norton AntiVirus\Quarantine\28690E67 CryptFF: infected - 1 skipped
C:\Program Files\Norton AntiVirus\Quarantine\28691105 Infected: Email-Worm.Win32.Klez.h skipped
C:\Program Files\Norton AntiVirus\Quarantine\286F6260/document.htm .exe Infected: Email-Worm.Win32.Mydoom.a skipped
C:\Program Files\Norton AntiVirus\Quarantine\286F6260 ZIP: infected - 1 skipped
C:\Program Files\Norton AntiVirus\Quarantine\286F6260 CryptFF: infected - 1 skipped
C:\Program Files\Norton AntiVirus\Quarantine\289021A4 Infected: Email-Worm.Win32.Bagle.z skipped
C:\Program Files\Norton AntiVirus\Quarantine\298730A0 Infected: Email-Worm.Win32.Bagle.z skipped
C:\Program Files\Norton AntiVirus\Quarantine\299C4BA1 Infected: Email-Worm.Win32.Bagle.z skipped
C:\Program Files\Norton AntiVirus\Quarantine\29F926FF Infected: Email-Worm.Win32.Klez.h skipped
C:\Program Files\Norton AntiVirus\Quarantine\2A4D33D1 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\2AC40455 Infected: Email-Worm.Win32.Klez.h skipped
C:\Program Files\Norton AntiVirus\Quarantine\2AF4512E Infected: Email-Worm.Win32.Klez.h skipped
C:\Program Files\Norton AntiVirus\Quarantine\2B7F59AA Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\2B995798 Infected: Email-Worm.Win32.NetSky.q skipped
C:\Program Files\Norton AntiVirus\Quarantine\2BA2558E/data.rtf .scr Infected: Email-Worm.Win32.NetSky.q skipped
C:\Program Files\Norton AntiVirus\Quarantine\2BA2558E ZIP: infected - 1 skipped
C:\Program Files\Norton AntiVirus\Quarantine\2BA2558E CryptFF: infected - 1 skipped
C:\Program Files\Norton AntiVirus\Quarantine\2D1C722B Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\2D2F6E15 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\2D396C0A Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\2D4369FF Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\2FC273D9 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\30017989 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\303E70A0 Infected: Email-Worm.Win32.Klez.h skipped
C:\Program Files\Norton AntiVirus\Quarantine\30414A89 Infected: Email-Worm.Win32.Klez.h skipped
C:\Program Files\Norton AntiVirus\Quarantine\31623960 Infected: Email-Worm.Win32.NetSky.q skipped
C:\Program Files\Norton AntiVirus\Quarantine\316F6152 Infected: Email-Worm.Win32.NetSky.q skipped
C:\Program Files\Norton AntiVirus\Quarantine\32F20370 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\333A7E4F/message.html Infected: Email-Worm.Win32.Mimail.a skipped
C:\Program Files\Norton AntiVirus\Quarantine\333A7E4F ZIP: infected - 1 skipped
C:\Program Files\Norton AntiVirus\Quarantine\333A7E4F CryptFF: infected - 1 skipped
C:\Program Files\Norton AntiVirus\Quarantine\333E7888 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\334F4A76 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\33AF06A0 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\33B65A99 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\33BD2E92 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\33C3028A Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\33CD0080 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\33D02A7C Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\33D77E75 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\33DD526E Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\33F80C3F Infected: Email-Worm.Win32.NetSky.q skipped
C:\Program Files\Norton AntiVirus\Quarantine\34AD418B Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\351951E1 Infected: Email-Worm.Win32.Sobig.c skipped
C:\Program Files\Norton AntiVirus\Quarantine\35977F24 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\35A75112 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\35AB3D1C Infected: Email-Worm.Win32.Klez.h skipped
C:\Program Files\Norton AntiVirus\Quarantine\35B47904 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\35C54AF2 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\35CB1EEB Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\35CD7689 Infected: Email-Worm.Win32.Klez.h skipped
C:\Program Files\Norton AntiVirus\Quarantine\35D272E4 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\35D846DC Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\35E56ECE Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\35EF6CC3 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\35F97414 Infected: Email-Worm.Win32.Bagle.gen skipped
C:\Program Files\Norton AntiVirus\Quarantine\36197492 Infected: Email-Worm.Win32.Sobig.b skipped
C:\Program Files\Norton AntiVirus\Quarantine\37357A81 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\3771350E Infected: Email-Worm.Win32.Klez.h skipped
C:\Program Files\Norton AntiVirus\Quarantine\39A5590E Infected: Email-Worm.Win32.Klez.h skipped
C:\Program Files\Norton AntiVirus\Quarantine\3AC73321 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\3B8B794F/[From devoteesandwannabees@yahoogroups.com][Date Tue, 18 May 2004 09:23:24 +0200]/UNNAMED/html Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Program Files\Norton AntiVirus\Quarantine\3B8B794F/[From devoteesandwannabees@yahoogroups.com][Date Tue, 18 May 2004 09:23:24 +0200]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Program Files\Norton AntiVirus\Quarantine\3B8B794F/[From devoteesandwannabees@yahoogroups.com][Date Tue, 18 May 2004 09:23:24 +0200]/message.zlq Infected: Email-Worm.Win32.NetSky.q skipped
C:\Program Files\Norton AntiVirus\Quarantine\3B8B794F Mail: infected - 1, suspicious - 2 skipped
C:\Program Files\Norton AntiVirus\Quarantine\3B8B794F CryptFF: infected - 1, suspicious - 2 skipped
C:\Program Files\Norton AntiVirus\Quarantine\3B957684 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\3B982141/data.rtf .scr Infected: Email-Worm.Win32.NetSky.q skipped
C:\Program Files\Norton AntiVirus\Quarantine\3B982141 ZIP: infected - 1 skipped
C:\Program Files\Norton AntiVirus\Quarantine\3B982141 CryptFF: infected - 1 skipped
C:\Program Files\Norton AntiVirus\Quarantine\3B9C4A7D Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\3BA64872 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\3BAF4668 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\3BB61A60 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\3BBA088C Infected: Email-Worm.Win32.Bagle.z skipped
C:\Program Files\Norton AntiVirus\Quarantine\3BBC6E59 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\3BC34252 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\3BCA164B Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\3BD06A44 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\3BDA6839 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\3D3D4CB9 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\3D464AAE Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\3D5048A3 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\3D581894 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\3D64448E Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\3D6A1886 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\3D716C7F Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\3D774078 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\3D7E1471 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\3F863999 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\40103E13/details.txt .pif Infected: Email-Worm.Win32.NetSky.q skipped
C:\Program Files\Norton AntiVirus\Quarantine\40103E13 ZIP: infected - 1 skipped
C:\Program Files\Norton AntiVirus\Quarantine\40103E13 CryptFF: infected - 1 skipped
C:\Program Files\Norton AntiVirus\Quarantine\4060556F Infected: Email-Worm.Win32.Bagle.z skipped
C:\Program Files\Norton AntiVirus\Quarantine\406F468C Infected: Email-Worm.Win32.Klez.h skipped
C:\Program Files\Norton AntiVirus\Quarantine\41322057 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\41397450 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\41427245 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\418A43E0 Infected: Email-Worm.Win32.Klez.h skipped
C:\Program Files\Norton AntiVirus\Quarantine\41A45DD9 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\4224434D Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\422E4142 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\42347903 Infected: Email-Worm.Win32.NetSky.c skipped
C:\Program Files\Norton AntiVirus\Quarantine\42373F38 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\423E5B67 Infected: Email-Worm.Win32.Bagle.z skipped
C:\Program Files\Norton AntiVirus\Quarantine\42413D2D Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\424B3B22 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\42520F1B Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\42586314 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\425F370C Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\42683502 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\426C5EFE Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\42755CF3 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\427F5AE9 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\42862EE1 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\42992ACC Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\42A07EC5 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\431503F9 Infected: Email-Worm.Win32.Bagle.i skipped
C:\Program Files\Norton AntiVirus\Quarantine\431711FC Infected: Email-Worm.Win32.Klez.h skipped
C:\Program Files\Norton AntiVirus\Quarantine\43493BF4 Infected: Email-Worm.Win32.Klez.h skipped
C:\Program Files\Norton AntiVirus\Quarantine\439C52F6 Infected: Email-Worm.Win32.Klez.h skipped
C:\Program Files\Norton AntiVirus\Quarantine\447D1189 Infected: Email-Worm.Win32.Sobig.c skipped
C:\Program Files\Norton AntiVirus\Quarantine\463E4DF2 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\467D53F6 Infected: Email-Worm.Win32.Sobig.b skipped
C:\Program Files\Norton AntiVirus\Quarantine\46B05EAA Infected: Email-Worm.Win32.Klez.h skipped
C:\Program Files\Norton AntiVirus\Quarantine\47F106F2/vhturx.scr Suspicious: Password-protected-EXE skipped
C:\Program Files\Norton AntiVirus\Quarantine\47F106F2 ZIP: suspicious - 1 skipped
C:\Program Files\Norton AntiVirus\Quarantine\47F106F2 CryptFF: suspicious - 1 skipped
C:\Program Files\Norton AntiVirus\Quarantine\484F477A Infected: Email-Worm.Win32.Mydoom.e skipped
C:\Program Files\Norton AntiVirus\Quarantine\48F67371 Infected: Email-Worm.Win32.Bagle.z skipped
C:\Program Files\Norton AntiVirus\Quarantine\499F1E2B Infected: Email-Worm.Win32.NetSky.q skipped
C:\Program Files\Norton AntiVirus\Quarantine\4A9C3564 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\4AAF314E Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\4AB92F44 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\4AC32D39 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\4ACD2B2E Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\4B0A6395 Infected: Email-Worm.Win32.Hawawi.e skipped
C:\Program Files\Norton AntiVirus\Quarantine\4B534C11/jomvxtjm.scr Suspicious: Password-protected-EXE skipped
C:\Program Files\Norton AntiVirus\Quarantine\4B534C11 ZIP: suspicious - 1 skipped
C:\Program Files\Norton AntiVirus\Quarantine\4B534C11 CryptFF: suspicious - 1 skipped
C:\Program Files\Norton AntiVirus\Quarantine\4B8A138A/jomvxtjm.scr Suspicious: Password-protected-EXE skipped
C:\Program Files\Norton AntiVirus\Quarantine\4B8A138A ZIP: suspicious - 1 skipped
C:\Program Files\Norton AntiVirus\Quarantine\4B8A138A CryptFF: suspicious - 1 skipped
C:\Program Files\Norton AntiVirus\Quarantine\4BEB52D1 Infected: Email-Worm.Win32.Hawawi.e skipped
C:\Program Files\Norton AntiVirus\Quarantine\4C0D3DCE Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\4C1A65BF Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\4C2039B8 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\4C647C2A Infected: Email-Worm.Win32.Klez.h skipped
C:\Program Files\Norton AntiVirus\Quarantine\4D110DAC/message.html Infected: Email-Worm.Win32.Mimail.a skipped
C:\Program Files\Norton AntiVirus\Quarantine\4D110DAC ZIP: infected - 1 skipped
C:\Program Files\Norton AntiVirus\Quarantine\4D110DAC CryptFF: infected - 1 skipped
C:\Program Files\Norton AntiVirus\Quarantine\4E905CCB/details.pif Infected: Email-Worm.Win32.NetSky.b skipped
C:\Program Files\Norton AntiVirus\Quarantine\4E905CCB ZIP: infected - 1 skipped
C:\Program Files\Norton AntiVirus\Quarantine\4E905CCB CryptFF: infected - 1 skipped
C:\Program Files\Norton AntiVirus\Quarantine\50761288 Infected: Email-Worm.Win32.Klez.h skipped
C:\Program Files\Norton AntiVirus\Quarantine\50811050 Infected: Email-Worm.Win32.Sobig.c skipped
C:\Program Files\Norton AntiVirus\Quarantine\50CA562B Infected: Email-Worm.Win32.Klez.h skipped
C:\Program Files\Norton AntiVirus\Quarantine\50FF2D3D Infected: Email-Worm.Win32.Sobig.b skipped
C:\Program Files\Norton AntiVirus\Quarantine\510B176B/message.pif Infected: Email-Worm.Win32.Mydoom.a skipped
C:\Program Files\Norton AntiVirus\Quarantine\510B176B ZIP: infected - 1 skipped
C:\Program Files\Norton AntiVirus\Quarantine\510B176B CryptFF: infected - 1 skipped
C:\Program Files\Norton AntiVirus\Quarantine\51B95465 Infected: Email-Worm.Win32.Sobig.c skipped
C:\Program Files\Norton AntiVirus\Quarantine\51D116C2 Infected: Email-Worm.Win32.Klez.h skipped
C:\Program Files\Norton AntiVirus\Quarantine\524C066D/details.txt .pif Infected: Email-Worm.Win32.NetSky.q skipped
C:\Program Files\Norton AntiVirus\Quarantine\524C066D ZIP: infected - 1 skipped
C:\Program Files\Norton AntiVirus\Quarantine\524C066D CryptFF: infected - 1 skipped
C:\Program Files\Norton AntiVirus\Quarantine\526168E4 Infected: Email-Worm.Win32.NetSky.q skipped
C:\Program Files\Norton AntiVirus\Quarantine\531211C0 Infected: Email-Worm.Win32.Bagle.z skipped
C:\Program Files\Norton AntiVirus\Quarantine\53902A69 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\53AC3603 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\53E96122 Infected: Email-Worm.Win32.Bagle.gen skipped
C:\Program Files\Norton AntiVirus\Quarantine\548825F2/details.pif Infected: Email-Worm.Win32.NetSky.b skipped
C:\Program Files\Norton AntiVirus\Quarantine\548825F2 ZIP: infected - 1 skipped
C:\Program Files\Norton AntiVirus\Quarantine\548825F2 CryptFF: infected - 1 skipped
C:\Program Files\Norton AntiVirus\Quarantine\557F68DB Infected: Email-Worm.Win32.Klez.h skipped
C:\Program Files\Norton AntiVirus\Quarantine\571B2992 Infected: Email-Worm.Win32.Magistr.a skipped
C:\Program Files\Norton AntiVirus\Quarantine\57511F67 Infected: Email-Worm.Win32.Klez.h skipped
C:\Program Files\Norton AntiVirus\Quarantine\57900849 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\579A063E Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\57A40433 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\57AA582C Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\57B12C25 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\57B8001E Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\58DF5818 Infected: Email-Worm.Win32.Klez.h skipped
C:\Program Files\Norton AntiVirus\Quarantine\58E07F4E Infected: Email-Worm.Win32.Klez.h skipped
C:\Program Files\Norton AntiVirus\Quarantine\5959165E Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\59703C45 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\597D6436 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\5983382F Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\5997341A Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\59AA3004 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\59BB01F2 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\59C155EB Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\59E523C3 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\59EC77BC Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\59EE374E Infected: Email-Worm.Win32.Klez.h skipped
C:\Program Files\Norton AntiVirus\Quarantine\59F24BB5 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\59F91FAE Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\5A021DA3 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\5A0C1B98 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\5A0F5B2A Infected: Email-Worm.Win32.Klez.h skipped
C:\Program Files\Norton AntiVirus\Quarantine\5A136F91 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\5A1D6D86 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\5A201783 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\5A2A1578 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\5A33136D Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\5AC4658E Infected: Email-Worm.Win32.Bagle.z skipped
C:\Program Files\Norton AntiVirus\Quarantine\5ACE6384 Infected: Email-Worm.Win32.NetSky.q skipped
C:\Program Files\Norton AntiVirus\Quarantine\5AD86179 Infected: Email-Worm.Win32.NetSky.q skipped
C:\Program Files\Norton AntiVirus\Quarantine\5B1A73EE Infected: Email-Worm.Win32.Klez.h skipped
C:\Program Files\Norton AntiVirus\Quarantine\5B2E27E3 Infected: Email-Worm.Win32.Klez.h skipped
C:\Program Files\Norton AntiVirus\Quarantine\5BD21825/jpmvnpbs.exe Suspicious: Password-protected-EXE skipped
C:\Program Files\Norton AntiVirus\Quarantine\5BD21825 ZIP: suspicious - 1 skipped
C:\Program Files\Norton AntiVirus\Quarantine\5BD21825 CryptFF: suspicious - 1 skipped
C:\Program Files\Norton AntiVirus\Quarantine\5BF44337 Infected: Email-Worm.Win32.NetSky.q skipped
C:\Program Files\Norton AntiVirus\Quarantine\5D261C57 Infected: Email-Worm.Win32.Bagle.z skipped
C:\Program Files\Norton AntiVirus\Quarantine\5DFC48F1 Infected: Email-Worm.Win32.Bagle.i skipped
C:\Program Files\Norton AntiVirus\Quarantine\5E2C4880 Infected: Email-Worm.Win32.Sobig.e skipped
C:\Program Files\Norton AntiVirus\Quarantine\5F7719E5 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\602C528E Infected: Email-Worm.Win32.Sobig.b skipped
C:\Program Files\Norton AntiVirus\Quarantine\604A16C5 Infected: Email-Worm.Win32.NetSky.q skipped
C:\Program Files\Norton AntiVirus\Quarantine\6078401C Infected: Email-Worm.Win32.Klez.h skipped
C:\Program Files\Norton AntiVirus\Quarantine\61252855 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\61392440 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\613A7E54 Infected: Email-Worm.Win32.Klez.h skipped
C:\Program Files\Norton AntiVirus\Quarantine\613D5D00 Infected: Email-Worm.Win32.Klez.h skipped
C:\Program Files\Norton AntiVirus\Quarantine\6149762E Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\615D7218 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\61634611 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\61904307 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\619C69E8 Infected: Email-Worm.Win32.Klez.h skipped
C:\Program Files\Norton AntiVirus\Quarantine\62052975 Infected: Email-Worm.Win32.Klez.h skipped
C:\Program Files\Norton AntiVirus\Quarantine\62497DB7 Infected: Email-Worm.Win32.NetSky.q skipped
C:\Program Files\Norton AntiVirus\Quarantine\626424A6 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\62A420E4/document.htm .exe Infected: Email-Worm.Win32.Mydoom.a skipped
C:\Program Files\Norton AntiVirus\Quarantine\62A420E4 ZIP: infected - 1 skipped
C:\Program Files\Norton AntiVirus\Quarantine\62A420E4 CryptFF: infected - 1 skipped
C:\Program Files\Norton AntiVirus\Quarantine\638954EE Infected: Email-Worm.Win32.Klez.h skipped
C:\Program Files\Norton AntiVirus\Quarantine\63CE2C22 Infected: Email-Worm.Win32.Klez.h skipped
C:\Program Files\Norton AntiVirus\Quarantine\640451B8 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\641423A6 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\641B779F Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\64214B98 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\642B38BD Infected: Email-Worm.Win32.NetSky.q skipped
C:\Program Files\Norton AntiVirus\Quarantine\642B498D Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\64354782 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\643F4577 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\644C6D69 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\64905F1E Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\64AE58FD Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\64BE2AEB Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\64C828E1 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\64CF3A4E Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\64D550D2 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\64DF4EC7 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\64EB420E Infected: Email-Worm.Win32.Klez.h skipped
C:\Program Files\Norton AntiVirus\Quarantine\64EF20B5 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\64F91EAB Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\6506469C Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\65104491 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\65276A78 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\6530686E Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\653D105F Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\654A3851 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\65543646 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\655B47B3 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\655C4917 Infected: Email-Worm.Win32.Magistr.b skipped
C:\Program Files\Norton AntiVirus\Quarantine\65650834 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\65723026 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\657F5817 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\6589560D Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\65967DFE Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\65A325F0 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\65AC23E5 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\65B15A2E Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\65BA4BD7 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\65C349CC Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\65D071BD Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\65E143AB Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\65EE6B9D Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\65FB138F Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\66051184 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\66123976 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\667B1ABA Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\668B6CA8 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\66A51AD4 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\67434AA3 Infected: Email-Worm.Win32.Bagle.z skipped
C:\Program Files\Norton AntiVirus\Quarantine\67621E03 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\67A70FB8 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\67E10377 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\67E97523/message.html Infected: Email-Worm.Win32.Mimail.a skipped
C:\Program Files\Norton AntiVirus\Quarantine\67E97523 ZIP: infected - 1 skipped
C:\Program Files\Norton AntiVirus\Quarantine\67E97523 CryptFF: infected - 1 skipped
C:\Program Files\Norton AntiVirus\Quarantine\67EB016D Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\67FC535B Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\68055150 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\680C2549 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\68127941 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\68194D3A Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\681F2133 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\6826752C Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\68307321 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\68385A4C Infected: Email-Worm.Win32.NetSky.q skipped
C:\Program Files\Norton AntiVirus\Quarantine\683D1B13 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\684A4304 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\68576AF6 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\686168EB Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\686E10DD Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\687B38CE Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\688860C0 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\689508B2 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\689F06A7 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\68AC2E98 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\68C3547F Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\68D6506A Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\68E72258 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\68ED7651 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\68F44A49 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\68FA1E42 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\69041C37 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\690E1A2D Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\691B421E Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\692B140C Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\69351202 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\693F0FF7 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\694F61E5 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\695C09D6 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\69637BD6 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\696931C8 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\697659BA Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\698301AB Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\69945399 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\69A17B8B Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\69AB7980 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\69BE756B Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\69CB1D5C Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\69D51B51 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\69D918EB Infected: Email-Worm.Win32.Klez.h skipped
C:\Program Files\Norton AntiVirus\Quarantine\69E9173C Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\69F63F2E Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\6A027B79 Infected: Email-Worm.Win32.Sobig.e skipped
C:\Program Files\Norton AntiVirus\Quarantine\6A03671F Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\6AF07DF9 Infected: Email-Worm.Win32.Klez.h skipped
C:\Program Files\Norton AntiVirus\Quarantine\6C175F39 Infected: Email-Worm.Win32.Sobig.e skipped
C:\Program Files\Norton AntiVirus\Quarantine\6C901E3F/details.txt .pif Infected: Email-Worm.Win32.NetSky.q skipped
C:\Program Files\Norton AntiVirus\Quarantine\6C901E3F ZIP: infected - 1 skipped
C:\Program Files\Norton AntiVirus\Quarantine\6C901E3F CryptFF: infected - 1 skipped
C:\Program Files\Norton AntiVirus\Quarantine\6C977238 Infected: Email-Worm.Win32.NetSky.q skipped
C:\Program Files\Norton AntiVirus\Quarantine\6CA73965 Infected: Email-Worm.Win32.Klez.h skipped
C:\Program Files\Norton AntiVirus\Quarantine\6CD63586 Infected: Email-Worm.Win32.NetSky.c skipped
C:\Program Files\Norton AntiVirus\Quarantine\6CE35D78 Infected: Email-Worm.Win32.NetSky.q skipped
C:\Program Files\Norton AntiVirus\Quarantine\6CE60774/details.txt .pif Infected: Email-Worm.Win32.NetSky.q skipped
C:\Program Files\Norton AntiVirus\Quarantine\6CE60774 ZIP: infected - 1 skipped
C:\Program Files\Norton AntiVirus\Quarantine\6CE60774 CryptFF: infected - 1 skipped
C:\Program Files\Norton AntiVirus\Quarantine\6CF00569 Infected: Email-Worm.Win32.NetSky.q skipped
C:\Program Files\Norton AntiVirus\Quarantine\6CF2425C Infected: Email-Worm.Win32.Bagle.z skipped
C:\Program Files\Norton AntiVirus\Quarantine\6EAE13BB Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\6EB711B0 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\6EC10FA5 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\6ECE3797 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\6F8C5DE5 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\6FA34DE2 Infected: Email-Worm.Win32.Hawawi.e skipped
C:\Program Files\Norton AntiVirus\Quarantine\6FBA7974/qlyxficyr.exe Suspicious: Password-protected-EXE skipped
C:\Program Files\Norton AntiVirus\Quarantine\6FBA7974 ZIP: suspicious - 1 skipped
C:\Program Files\Norton AntiVirus\Quarantine\6FBA7974 CryptFF: suspicious - 1 skipped
C:\Program Files\Norton AntiVirus\Quarantine\70632FBC Infected: Email-Worm.Win32.Klez.h skipped
C:\Program Files\Norton AntiVirus\Quarantine\70DC7DC5 Infected: Email-Worm.Win32.Klez.h skipped
C:\Program Files\Norton AntiVirus\Quarantine\71C8154A Infected: Email-Worm.Win32.Klez.h skipped
C:\Program Files\Norton AntiVirus\Quarantine\71D1133F Infected: Email-Worm.Win32.Klez.h skipped
C:\Program Files\Norton AntiVirus\Quarantine\720155C5 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\720E7DB6 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\72177BAC Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\722179A1 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\72284D9A Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\72324B8F Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\72514DB3 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\72AB1B12 Infected: Email-Worm.Win32.NetSky.q skipped
C:\Program Files\Norton AntiVirus\Quarantine\73236E85 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\7331619E Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\73D01FC6 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\74DD7D35 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\74E93A91 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\74EA32D9 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\74F75ACB Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\752E2C46 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\759F2827 Infected: Email-Worm.Win32.NetSky.q skipped
C:\Program Files\Norton AntiVirus\Quarantine\75CE09AE Infected: Email-Worm.Win32.Klez.h skipped
C:\Program Files\Norton AntiVirus\Quarantine\760B0B5F/details.txt .pif Infected: Email-Worm.Win32.NetSky.q skipped
C:\Program Files\Norton AntiVirus\Quarantine\760B0B5F ZIP: infected - 1 skipped
C:\Program Files\Norton AntiVirus\Quarantine\760B0B5F CryptFF: infected - 1 skipped
C:\Program Files\Norton AntiVirus\Quarantine\76150954 Infected: Email-Worm.Win32.NetSky.q skipped
C:\Program Files\Norton AntiVirus\Quarantine\766E3EE6 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\769B02AA/jpmvnpbs.exe Suspicious: Password-protected-EXE skipped
C:\Program Files\Norton AntiVirus\Quarantine\769B02AA ZIP: suspicious - 1 skipped
C:\Program Files\Norton AntiVirus\Quarantine\769B02AA CryptFF: suspicious - 1 skipped
C:\Program Files\Norton AntiVirus\Quarantine\769B0AB3 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\76A508A9 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\76AC5CA1 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\76BC2E8F Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\76BF6A46 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\76C62C85 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\76CC007D Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\76D35476 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\76D93A2A Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\76DA286F Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\76E32664 Infected: Email-Worm.Win32.Klez.h skipped
C:\Program Files\Norton AntiVirus\Quarantine\76F7224F Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\77044A40 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\770B1E39 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\785B44D5 Infected: Email-Worm.Win32.Bagle.i skipped
C:\Program Files\Norton AntiVirus\Quarantine\7A0C1BF1 Infected: Email-Worm.Win32.Klez.h skipped
C:\Program Files\Norton AntiVirus\Quarantine\7A333AC1 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\7A4062B3 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\7A921199/message.html Infected: Email-Worm.Win32.Mimail.a skipped
C:\Program Files\Norton AntiVirus\Quarantine\7A921199 ZIP: infected - 1 skipped
C:\Program Files\Norton AntiVirus\Quarantine\7A921199 CryptFF: infected - 1 skipped
C:\Program Files\Norton AntiVirus\Quarantine\7A9F244A Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\7AC9461C Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\7B312E07 Infected: Email-Worm.Win32.Sobig.e skipped
C:\Program Files\Norton AntiVirus\Quarantine\7C3C6568 Infected: Email-Worm.Win32.NetSky.q skipped
C:\Program Files\Norton AntiVirus\Quarantine\7C3C75BC/details.txt .pif Infected: Email-Worm.Win32.NetSky.q skipped
C:\Program Files\Norton AntiVirus\Quarantine\7C3C75BC ZIP: infected - 1 skipped
C:\Program Files\Norton AntiVirus\Quarantine\7C3C75BC CryptFF: infected - 1 skipped
C:\Program Files\Norton AntiVirus\Quarantine\7CED64D4 Infected: Email-Worm.Win32.Bagle.z skipped
C:\Program Files\Norton AntiVirus\Quarantine\7D1406BF Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\7D212EB1 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\7D372239 Infected: Email-Worm.Win32.Klez.h skipped
C:\Program Files\Norton AntiVirus\Quarantine\7EF53A64 Infected: Email-Worm.Win32.Sobig.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\7F4550DA Infected: Email-Worm.Win32.Sobig.c skipped

Scan was interrupted by user!

Hijackthis log, carried out after the previous 2 scans is;

Logfile of HijackThis v1.99.1
Scan saved at 21:05:17, on 12/04/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Ahead\InCD\InCDsrv.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
C:\WINDOWS\System32\CTsvcCDA.exe
C:\Program Files\ewido anti-malware\ewidoctrl.exe
C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe
C:\WINDOWS\System32\tcpsvcs.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\System32\MsPMSPSv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
C:\WINDOWS\System32\DSentry.exe
C:\Program Files\Creative\SBAudigy2\Surround Mixer\CTSysVol.exe
C:\Program Files\Creative\SBAudigy2\DVDAudio\CTDVDDet.EXE
C:\WINDOWS\system32\CTHELPER.EXE
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\D-Tools\daemon.exe
C:\WINDOWS\System32\ezSP_Px.exe
C:\WINDOWS\BCMSMMSG.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Ahead\InCD\InCD.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\PROGRA~1\BLUEYO~1\SMARTB~1\blueyonder-istnotifier.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\WinTV\Ir.exe
C:\Program Files\GetRight\getright.exe
C:\Program Files\GetRight\getright.exe
C:\Program Files\Sierra Imaging\Image Expert\IXApplet.exe
C:\Program Files\blueyonder IST\bin\mpbtn.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Norton Internet Security\Norton AntiVirus\OPScan.exe
C:\Program Files\Outlook Express\msimn.exe
C:\WINDOWS\system32\taskmgr.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Downloads\adware\hijackthis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.euro.dell.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Tiscali 10.0
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings,ProxyOverride = 127.0.0.1
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: Web assistant - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Web assistant - {0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [DVDSentry] C:\WINDOWS\System32\DSentry.exe
O4 - HKLM\..\Run: [CTSysVol] C:\Program Files\Creative\SBAudigy2\Surround Mixer\CTSysVol.exe
O4 - HKLM\..\Run: [CTDVDDet] C:\Program Files\Creative\SBAudigy2\DVDAudio\CTDVDDet.EXE
O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Program Files\D-Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [ezShieldProtector for Px] C:\WINDOWS\System32\ezSP_Px.exe
O4 - HKLM\..\Run: [Burn blah] C:\PROGRA~1\TRUST REMOTE\Barb book funk.exe
O4 - HKLM\..\Run: [BCMSMMSG] BCMSMMSG.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [InCD] C:\Program Files\Ahead\InCD\InCD.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [Motive SmartBridge] C:\PROGRA~1\BLUEYO~1\SMARTB~1\blueyonder-istnotifier.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [URLLSTCK.exe] C:\Program Files\Norton Internet Security\UrlLstCk.exe
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
O4 - HKCU\..\Run: [NBJ] "C:\Program Files\Ahead\Nero BackItUp\NBJ.exe"
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - Startup: Camio Viewer.lnk = C:\Program Files\Sierra Imaging\Image Expert\IXApplet.exe
O4 - Startup: PowerReg Scheduler V3.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: AutoStart IR.lnk = C:\Program Files\WinTV\Ir.exe
O4 - Global Startup: blueyonder Instant Support Tool.lnk = C:\Program Files\blueyonder IST\bin\blueyonder-istconfig.exe
O4 - Global Startup: Digital Line Detect.lnk = ?
O4 - Global Startup: GetRight - Tray Icon.lnk = C:\Program Files\GetRight\getright.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O8 - Extra context menu item: &Search - http://bar.mywebsearch.com/menusearch.html?p=ZW
O8 - Extra context menu item: Download with GetRight - C:\Program Files\GetRight\GRdownload.htm
O8 - Extra context menu item: Open with GetRight Browser - C:\Program Files\GetRight\GRbrowse.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: Yahoo! Chat - http://us.chat1.yimg.com/us.yimg.com/i/chat/applet/c381/chat.cab
O16 - DPF: {01010E00-5E80-11D8-9E86-0007E96C65AE} (SupportSoft SmartIssue) - http://www.symantec.com/techsupp/asa/ctrl/tgctlsi.cab
O16 - DPF: {01012101-5E80-11D8-9E86-0007E96C65AE} (SupportSoft Script Runner Class) - http://www.symantec.com/techsupp/asa/ctrl/tgctlsr.cab
O16 - DPF: {0335A685-ED24-4F7B-A08E-3BD15D84E668} - http://dl.filekicker.com/send/file/128985-NZIL/PhPSetup.cab
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/english/kavwebscan_unicode.cab
O16 - DPF: {11260943-421B-11D0-8EAC-0000C07D88CF} (iPIX ActiveX Control) - http://www.ipix.com/download/ipixx.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {1F2F4C9E-6F09-47BC-970D-3C54734667FE} (LSSupCtl Class) - http://www.symantec.com/techsupp/asa/ctrl/LSSupCtl.cab
O16 - DPF: {2B323CD9-50E3-11D3-9466-00A0C9700498} (Yahoo! Audio Conferencing) - http://us.chat1.yimg.com/us.yimg.com/i/chat/applet/v45/yacscom.cab
O16 - DPF: {41F17733-B041-4099-A042-B518BB6A408C} - http://a1540.g.akamai.net/7/1540/52/20021205/qtinstall.info.apple.com/drakken/us/win/QuickTimeInstaller.exe
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
O16 - DPF: {90A29DA5-D020-4B18-8660-6689520C7CD7} (DmiReader Class) - http://support.euro.dell.com/global/apps/systemprofiler/PROFILER.CAB
O16 - DPF: {C606BA60-AB76-48B6-96A7-2C4D5C386F70} (PreQualifier Class) - http://help.blueyonder.co.uk/html/software/instantsupport/tool/files/MotivePreQual.cab
O16 - DPF: {CE28D5D2-60CF-4C7D-9FE8-0F47A3308078} (ActiveDataInfo Class) - http://www.symantec.com/techsupp/asa/ctrl/SymAData.cab
O16 - DPF: {CE3409C4-9E26-4F8E-83E4-778498F9E7B4} (PB_Uploader Class) - http://static.photobox.co.uk/sg/common/uploader.ocx
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: Boonty Games - BOONTY - C:\Program Files\Common Files\BOONTY Shared\Service\Boonty.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTsvcCDA.exe
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exe
O23 - Service: InCD Helper (InCDsrv) - Ahead Software AG - C:\Program Files\Ahead\InCD\InCDsrv.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: Norton AntiVirus Auto Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
O23 - Service: Intel(R) NMS (NMSSvc) - Intel Corporation - C:\WINDOWS\System32\NMSSvc.exe
O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe

C:\System Volume Information\_restore....5D-BF30-83E44C588624}\RP943\A0109063.old

The above item is a file sitting in the ‘system restore’ area and will be addressed as a last step.




Do you have any idea what ‘trust remote’ is or its strange program name:

O4 - HKLM\..\Run: [BURN BLAH] C:\PROGRA~1\TRUST REMOTE\Barb book funk.exe


If not,
Lets check out the following unfamiliar files or FILE PATH variations:


HIDDEN FILES: To make sure you can see any and all hidden files, please follow the directions here

• Determine the FULL FILE PATH for each (unfamiliar) file item listed BELOW. Use Start (BUTTON)>Search or use the F3 key.
• Please copy and paste each FULL FILE PATH or browse/navigate to each file for assessment submission to the site(s) below and to obtain their immediate FEEDBACK on each item submitted. Paste into the 'Select File' box or navigate to the file using the BROWSE button:
  
  
  http://www.virustotal.com/flash/index_en.html (10MB file size maximum)

==================
C:\PROGRA~1\TRUST REMOTE\Barb book funk.exe
==================

Let us know what the results were for the file(s).

ALTERNATE SITE: http://virusscan.jotti.org/ (15MB file size maximum)





Your need to periodically clean out your Norton quarantine area:

Goto Reports>Quarantine Items>View Report


Those quarantine items above suggest a continuing pattern of frequent email worm infections. There is also evidence of remnants of a P2P application – bittorrent which could have been a major contributor to such problems. Please do not run this application while we are attempting to resolve your current issues.




Please download ATF Cleaner http://www.atribune.org/ccount/click.php?id=1 by Atribune.
This program is for XP and Windows 2000 only

It does not require any installation and uses minimal system resources. It is set up to clean IE, FireFox and Opera, and detects the browsers you have and grays out the other(s).

• Double-click ATF-Cleaner.exe to run the program.
  Under Main choose: Select All
  Recommend UNCHECKING COOKIES if you rely on system remembered passwords.
  Click the Empty Selected button.

If you use Firefox browser

• Click Firefox at the top and choose: Select All EXCEPT FIREFOX SAVED PASSWORDS
  Click the Empty Selected button.
  NOTE: If you would like to keep your saved passwords, please click No at the prompt.

If you use Opera browser

• Click Opera at the top and choose: Select All EXCEPT COOKIES AND SAVED PASSWORDS
  Click the Empty Selected button.
  NOTE: If you would like to keep your cookies and saved passwords, please click No at the prompt.

Click Exit on the Main menu to close the program.






1) Please download the Killbox.
Unzip it to the desktop and run it.

2) Select "Delete on Reboot".
3) Then Click the "All Files" button.

4) Copy the file names below to the clipboard by highlighting them and pressing Control-C:


C:\Documents and Settings\NealCallaghan\Local Settings\Temp\CC4F1.tmp
C:\Documents and Settings\NealCallaghan\My Documents\applications\bittorrent-3.3.exe
C:\Downloads\bittorrent-3.4.1.exe


5) Return to Killbox, go to the File menu, and choose "Paste from Clipboard".

6) Click the red-and-white "Delete File" button. Click "Yes" at the Delete on Reboot prompt. Click "Yes" to reboot next.



Tell us if anything has improved or what is happening now.

In the several years I've had this PC 'Barb book funk' is the only thing that Norton antivirus has picked up on my weekly system scan. This was quite a while ago. From what I can remember Norton quarantined the file but could not delete it, but gave a link to a discription of how it could be done. Initially I couldn't delete it, until I looked in task manager and found a process of the same name running. After stopping this I was able to delete the file.

This file does not exist on my PC. Even after setting the views as descibed in your link this file cannot be found. The directory C:\Program files\TRUST REMOTE is there, but is empty.

As recommend I ran ATF Cleaner and then killbox, though I had already deleted the bittorrent files before reading your reply. Killbox would not paste the first file from the clipboard which I thought meant the file path did not exist, however I pasted it manually and let the PC reboot.

When I did the initial scans I was surprised to find all the items in the quarantine area. As a said above the only thing Norton has ever picked up is Barb book funk, and when I went to the quarantine items report in Norton it is empty

So I still have the same problem. The one thing I forgot to mention in my original post is that when I shut the PC down I get an 'ending program' box for ccApp. This only happens if I have run outlook express.

Thanks for your continued help

Were you able to clean out the quarantine area? Please ensure that no new items have appeared in quarantine. Re-run Kaspersky to prove it is now clean, if necessary.


SELECT HijackThis FIX ITEMS: Scan with HijackThis and place a check next to these items:

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about:blank

O4 - HKLM\..\Run: [BURN BLAH] C:\PROGRA~1\TRUST REMOTE\Barb book funk.exe

Make sure that all browser windows and internet links are closed, even this one!
CLICK ’FIX CHECKED’ with HijackThis.





Get the stinger here:
http://vil.nai.com/vil/stinger/

Download it to another computer if need be, and bring it to the affected computer on floppy disk.

It will kill the top 40 virus files if any are found there




Run Bit Defender:
http://www.bitdefender.com/scan/licence.php
Turn off any Popup Blockers before accessing the site.
Save the log and post it here. Let it clean/cure/delete all it finds.

You might have to hit refresh if it reports a failed download.




REBOOT and Post your latest HJT log and any current observations.

The bitdefender log file and latest HJT log are below. Unfortunately, nothing seems to have changed, I am still able to download emails once and then am unable to connect to the email server.

Bitdefender log;

BitDefender Online Scanner



Scan report generated at: Fri, Apr 14, 2006 - 22:55:34





Scan path: A:\;C:\;D:\;E:\;G:\;







Statistics

Time
03:08:09

Files
462663

Folders
5011

Boot Sectors
3

Archives
7591

Packed Files
35096




Results

Identified Viruses
1

Infected Files
1

Suspect Files
0

Warnings
0

Disinfected
0

Deleted Files
1




Engines Info

Virus Definitions
369887

Engine build
AVCORE v1.0 (build 2292) (i386) (Mar 3 2005 11:57:29)

Scan plugins
13

Archive plugins
39

Unpack plugins
4

E-mail plugins
6

System plugins
1




Scan Settings

First Action
Disinfect

Second Action
Delete

Heuristics
Yes

Enable Warnings
Yes

Scanned Extensions
*;

Exclude Extensions


Scan Emails
Yes

Scan Archives
Yes

Scan Packed
Yes

Scan Files
Yes

Scan Boot
Yes




Scanned File
Status

C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP944\A0109181.exe=>(NSIS o)=>lzma_nsis0006
Infected with: Trojan.Downloader.Swizzor.K

C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP944\A0109181.exe=>(NSIS o)=>lzma_nsis0006
Disinfection failed

C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP944\A0109181.exe=>(NSIS o)=>lzma_nsis0006
Deleted

C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP944\A0109181.exe=>(NSIS o)
Update failed

Latest HJT report;

Logfile of HijackThis v1.99.1
Scan saved at 00:23:35, on 15/04/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Ahead\InCD\InCDsrv.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
C:\WINDOWS\System32\CTsvcCDA.exe
C:\Program Files\ewido anti-malware\ewidoctrl.exe
C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe
C:\WINDOWS\System32\tcpsvcs.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\System32\MsPMSPSv.exe
C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\DSentry.exe
C:\Program Files\Creative\SBAudigy2\Surround Mixer\CTSysVol.exe
C:\Program Files\Creative\SBAudigy2\DVDAudio\CTDVDDet.EXE
C:\WINDOWS\system32\CTHELPER.EXE
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\D-Tools\daemon.exe
C:\WINDOWS\System32\ezSP_Px.exe
C:\WINDOWS\BCMSMMSG.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Ahead\InCD\InCD.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\PROGRA~1\BLUEYO~1\SMARTB~1\blueyonder-istnotifier.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\WinTV\Ir.exe
C:\Program Files\GetRight\getright.exe
C:\Program Files\GetRight\getright.exe
C:\Program Files\Sierra Imaging\Image Expert\IXApplet.exe
C:\Program Files\blueyonder IST\bin\mpbtn.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\taskmgr.exe
C:\Program Files\Norton Internet Security\Norton AntiVirus\OPScan.exe
C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
C:\Program Files\Internet Explorer\iexplore.exe
C:\Downloads\adware\hijackthis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.euro.dell.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Tiscali 10.0
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings,ProxyOverride = 127.0.0.1
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: Web assistant - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Web assistant - {0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [DVDSentry] C:\WINDOWS\System32\DSentry.exe
O4 - HKLM\..\Run: [CTSysVol] C:\Program Files\Creative\SBAudigy2\Surround Mixer\CTSysVol.exe
O4 - HKLM\..\Run: [CTDVDDet] C:\Program Files\Creative\SBAudigy2\DVDAudio\CTDVDDet.EXE
O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Program Files\D-Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [ezShieldProtector for Px] C:\WINDOWS\System32\ezSP_Px.exe
O4 - HKLM\..\Run: [BCMSMMSG] BCMSMMSG.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [InCD] C:\Program Files\Ahead\InCD\InCD.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [Motive SmartBridge] C:\PROGRA~1\BLUEYO~1\SMARTB~1\blueyonder-istnotifier.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [URLLSTCK.exe] C:\Program Files\Norton Internet Security\UrlLstCk.exe
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
O4 - HKCU\..\Run: [NBJ] "C:\Program Files\Ahead\Nero BackItUp\NBJ.exe"
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - Startup: Camio Viewer.lnk = C:\Program Files\Sierra Imaging\Image Expert\IXApplet.exe
O4 - Startup: PowerReg Scheduler V3.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: AutoStart IR.lnk = C:\Program Files\WinTV\Ir.exe
O4 - Global Startup: blueyonder Instant Support Tool.lnk = C:\Program Files\blueyonder IST\bin\blueyonder-istconfig.exe
O4 - Global Startup: Digital Line Detect.lnk = ?
O4 - Global Startup: GetRight - Tray Icon.lnk = C:\Program Files\GetRight\getright.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O8 - Extra context menu item: &Search - http://bar.mywebsearch.com/menusearch.html?p=ZW
O8 - Extra context menu item: Download with GetRight - C:\Program Files\GetRight\GRdownload.htm
O8 - Extra context menu item: Open with GetRight Browser - C:\Program Files\GetRight\GRbrowse.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: Yahoo! Chat - http://us.chat1.yimg.com/us.yimg.com/i/chat/applet/c381/chat.cab
O16 - DPF: {01010E00-5E80-11D8-9E86-0007E96C65AE} (SupportSoft SmartIssue) - http://www.symantec.com/techsupp/asa/ctrl/tgctlsi.cab
O16 - DPF: {01012101-5E80-11D8-9E86-0007E96C65AE} (SupportSoft Script Runner Class) - http://www.symantec.com/techsupp/asa/ctrl/tgctlsr.cab
O16 - DPF: {0335A685-ED24-4F7B-A08E-3BD15D84E668} - http://dl.filekicker.com/send/file/128985-NZIL/PhPSetup.cab
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/english/kavwebscan_unicode.cab
O16 - DPF: {11260943-421B-11D0-8EAC-0000C07D88CF} (iPIX ActiveX Control) - http://www.ipix.com/download/ipixx.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {1F2F4C9E-6F09-47BC-970D-3C54734667FE} (LSSupCtl Class) - http://www.symantec.com/techsupp/asa/ctrl/LSSupCtl.cab
O16 - DPF: {2B323CD9-50E3-11D3-9466-00A0C9700498} (Yahoo! Audio Conferencing) - http://us.chat1.yimg.com/us.yimg.com/i/chat/applet/v45/yacscom.cab
O16 - DPF: {41F17733-B041-4099-A042-B518BB6A408C} - http://a1540.g.akamai.net/7/1540/52/20021205/qtinstall.info.apple.com/drakken/us/win/QuickTimeInstaller.exe
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
O16 - DPF: {90A29DA5-D020-4B18-8660-6689520C7CD7} (DmiReader Class) - http://support.euro.dell.com/global/apps/systemprofiler/PROFILER.CAB
O16 - DPF: {C606BA60-AB76-48B6-96A7-2C4D5C386F70} (PreQualifier Class) - http://help.blueyonder.co.uk/html/software/instantsupport/tool/files/MotivePreQual.cab
O16 - DPF: {CE28D5D2-60CF-4C7D-9FE8-0F47A3308078} (ActiveDataInfo Class) - http://www.symantec.com/techsupp/asa/ctrl/SymAData.cab
O16 - DPF: {CE3409C4-9E26-4F8E-83E4-778498F9E7B4} (PB_Uploader Class) - http://static.photobox.co.uk/sg/common/uploader.ocx
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: Boonty Games - BOONTY - C:\Program Files\Common Files\BOONTY Shared\Service\Boonty.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTsvcCDA.exe
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exe
O23 - Service: InCD Helper (InCDsrv) - Ahead Software AG - C:\Program Files\Ahead\InCD\InCDsrv.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: Norton AntiVirus Auto Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
O23 - Service: Intel(R) NMS (NMSSvc) - Intel Corporation - C:\WINDOWS\System32\NMSSvc.exe
O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe

How long have you had the 'Outlook Express' problem?


Lets try one more short scan:


[Internet Explorer required]
Place a shortcut to Panda ActiveScan on your desktop (FREE Version is mostly a scan only tool) [/b].


Run the Panda ActiveScan shortcut.
- Once you are on the Panda site click the Scan your PC button
- A new window will open...click the Check Now button
- Enter your Country
- Enter your State/Province
- Enter your e-mail address and click send
- Select either Home User or Company
- Click the big Scan Now button
- If it wants to install an ActiveX component allow it
- It will start downloading the files it requires for the scan (Note: It may take a couple of minutes)
- When download is complete, click on Local Disks to start the scan
- When the scan completes, if anything malicious is detected, click the See Report button, then Save Report and save it to a convenient location.


Post a Panda log back here, if anything is reported.

Thanks again for all this help. The problems started about 4 or 5 weeks ago. I initially contacted my ISP and went through a few things mostly on NIS settings but without success.

As suggested I ran the Panda Activescan the report from which is below.


Incident Status Location

Potentially unwanted tool:application/mywebsearch Not disinfected C:\WINDOWS\SYSTEM32\f3PSSavr.scr
Potentially unwanted tool:application/funweb Not disinfected C:\WINDOWS\DOWNLOADED PROGRAM FILES\f3initialsetup1.0.0.8.inf
Adware:adware/cws Not disinfected C:\Documents and Settings\NealCallaghan\Favorites\Hardcore
Spyware:spyware/searchcentrix Not disinfected Windows Registry
Spyware:Cookie/Gorillanation Not disinfected C:\Documents and Settings\NealCallaghan\Cookies\nealcallaghan@ads.g orillanation[1].txt
Spyware:Cookie/adultfriendfinder Not disinfected C:\Documents and Settings\NealCallaghan\Cookies\nealcallaghan@adult friendfinder[1].txt
Spyware:Cookie/Atwola Not disinfected C:\Documents and Settings\NealCallaghan\Cookies\nealcallaghan@atwol a[1].txt
Spyware:Cookie/Azjmp Not disinfected C:\Documents and Settings\NealCallaghan\Cookies\nealcallaghan@azjmp[2].txt
Spyware:Cookie/Belnk Not disinfected C:\Documents and Settings\NealCallaghan\Cookies\nealcallaghan@belnk[1].txt
Spyware:Cookie/Barelylegal Not disinfected C:\Documents and Settings\NealCallaghan\Cookies\nealcallaghan@c.fsx[1].txt
Spyware:Cookie/GoStats Not disinfected C:\Documents and Settings\NealCallaghan\Cookies\nealcallaghan@c2.go stats[2].txt
Spyware:Cookie/GoStats Not disinfected C:\Documents and Settings\NealCallaghan\Cookies\nealcallaghan@c3.go stats[2].txt
Spyware:Cookie/Com.com Not disinfected C:\Documents and Settings\NealCallaghan\Cookies\nealcallaghan@de.uo l.com[1].txt
Spyware:Cookie/Belnk Not disinfected C:\Documents and Settings\NealCallaghan\Cookies\nealcallaghan@dist. belnk[2].txt
Spyware:Cookie/FortuneCity Not disinfected C:\Documents and Settings\NealCallaghan\Cookies\nealcallaghan@fortu necity[2].txt
Spyware:Cookie/GoStats Not disinfected C:\Documents and Settings\NealCallaghan\Cookies\nealcallaghan@gosta ts[2].txt
Spyware:Cookie/go Not disinfected C:\Documents and Settings\NealCallaghan\Cookies\nealcallaghan@go[1].txt
Spyware:Cookie/Kount Not disinfected C:\Documents and Settings\NealCallaghan\Cookies\nealcallaghan@kount[2].txt
Spyware:Cookie/SpyLog Not disinfected C:\Documents and Settings\NealCallaghan\Cookies\nealcallaghan@spylo g[2].txt
Spyware:Cookie/Statcounter Not disinfected C:\Documents and Settings\NealCallaghan\Cookies\nealcallaghan@statc ounter[1].txt
Spyware:Cookie/Toplist Not disinfected C:\Documents and Settings\NealCallaghan\Cookies\nealcallaghan@topli st[1].txt
Spyware:Cookie/Tribalfusion Not disinfected C:\Documents and Settings\NealCallaghan\Cookies\nealcallaghan@triba lfusion[1].txt
Spyware:Cookie/WebPower Not disinfected C:\Documents and Settings\NealCallaghan\Cookies\nealcallaghan@webpo wer[1].txt
Spyware:Cookie/Xiti Not disinfected C:\Documents and Settings\NealCallaghan\Cookies\nealcallaghan@xiti[1].txt
Spyware:Cookie/Xmts Not disinfected C:\Documents and Settings\NealCallaghan\Cookies\nealcallaghan@xmts[1].txt
Spyware:Cookie/Gorillanation Not disinfected C:\Documents and Settings\NealCallaghan\Cookies\nealcallaghan@ads.g orillanation[1].txt
Spyware:Cookie/adultfriendfinder Not disinfected C:\Documents and Settings\NealCallaghan\Cookies\nealcallaghan@adult friendfinder[1].txt
Spyware:Cookie/Atwola Not disinfected C:\Documents and Settings\NealCallaghan\Cookies\nealcallaghan@atwol a[1].txt
Spyware:Cookie/Azjmp Not disinfected C:\Documents and Settings\NealCallaghan\Cookies\nealcallaghan@azjmp[2].txt
Spyware:Cookie/Belnk Not disinfected C:\Documents and Settings\NealCallaghan\Cookies\nealcallaghan@belnk[1].txt
Spyware:Cookie/Barelylegal Not disinfected C:\Documents and Settings\NealCallaghan\Cookies\nealcallaghan@c.fsx[1].txt
Spyware:Cookie/GoStats Not disinfected C:\Documents and Settings\NealCallaghan\Cookies\nealcallaghan@c2.go stats[2].txt
Spyware:Cookie/GoStats Not disinfected C:\Documents and Settings\NealCallaghan\Cookies\nealcallaghan@c3.go stats[2].txt
Spyware:Cookie/Com.com Not disinfected C:\Documents and Settings\NealCallaghan\Cookies\nealcallaghan@de.uo l.com[1].txt
Spyware:Cookie/Belnk Not disinfected C:\Documents and Settings\NealCallaghan\Cookies\nealcallaghan@dist. belnk[2].txt
Spyware:Cookie/FortuneCity Not disinfected C:\Documents and Settings\NealCallaghan\Cookies\nealcallaghan@fortu necity[2].txt
Spyware:Cookie/GoStats Not disinfected C:\Documents and Settings\NealCallaghan\Cookies\nealcallaghan@gosta ts[2].txt
Spyware:Cookie/go Not disinfected C:\Documents and Settings\NealCallaghan\Cookies\nealcallaghan@go[1].txt
Spyware:Cookie/Kount Not disinfected C:\Documents and Settings\NealCallaghan\Cookies\nealcallaghan@kount[2].txt
Spyware:Cookie/SpyLog Not disinfected C:\Documents and Settings\NealCallaghan\Cookies\nealcallaghan@spylo g[2].txt
Spyware:Cookie/Statcounter Not disinfected C:\Documents and Settings\NealCallaghan\Cookies\nealcallaghan@statc ounter[1].txt
Spyware:Cookie/Toplist Not disinfected C:\Documents and Settings\NealCallaghan\Cookies\nealcallaghan@topli st[1].txt
Spyware:Cookie/Tribalfusion Not disinfected C:\Documents and Settings\NealCallaghan\Cookies\nealcallaghan@triba lfusion[1].txt
Spyware:Cookie/WebPower Not disinfected C:\Documents and Settings\NealCallaghan\Cookies\nealcallaghan@webpo wer[1].txt
Spyware:Cookie/Xiti Not disinfected C:\Documents and Settings\NealCallaghan\Cookies\nealcallaghan@xiti[1].txt
Spyware:Cookie/Xmts Not disinfected C:\Documents and Settings\NealCallaghan\Cookies\nealcallaghan@xmts[1].txt
Potentially unwanted tool:Application/FunWeb Not disinfected C:\WINDOWS\Downloaded Program Files\f3initialsetup1.0.0.8.inf
Potentially unwanted tool:Application/MyWebSearch Not disinfected C:\WINDOWS\SYSTEM32\f3PSSavr.scr