Forum Index
Home Forum Radio Memberlist Help Search Quick Links

It appears you have not yet registered with our community which limits what you can do & see. It's Free To register, please click here.



Forum Index » Internet » Spyware / Virus Removal » Worms
Register Calendar Gallery Mark Forums Read

Spyware / Virus Removal Spyware, virus, browser hijack and other malware removal.

Reply
 
Thread Tools Display Modes
  #1  
Old 06-29-2005, 06:08 PM
Hellokitty_123 Hellokitty_123 is offline
Junior Member
  
Join Date: Apr 2005
Posts: 25
Logfile of HijackThis v1.99.1
Scan saved at 5:04:50 PM, on 29/06/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
C:\Program Files\Microsoft IntelliType Pro\type32.exe
C:\Program Files\Java\jre1.5.0_02\bin\jusched.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe
C:\Program Files\Microsoft IntelliPoint\point32.exe
D:\HP Software Update\HPWuSchd2.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\Program Files\HP DVD\Umbrella\DVDTray.exe
C:\WINDOWS\mHotkey.exe
C:\Program Files\Eset\nod32kui.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\ctfmon.exe
C:\SpywareGuard\sgmain.exe
C:\SpywareGuard\sgbhp.exe
C:\Program Files\Eset\nod32krn.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\mayen\My Documents\hijackthis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://ca.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.emachines.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ca.rd.yahoo.com/customize/ie/defaul...earch.yahoo.com
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://ca.rd.yahoo.com/customize/ie/defaul...earch.yahoo.com
O2 - BHO: Yahoo! Companion BHO - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\PROGRA~1\Yahoo!\COMPAN~1\Installs\cpn1\ycomp5_6 _2_0.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {243B17DE-77C7-46BF-B94B-0B5F309A0E64} - C:\Program Files\Microsoft Money\System\mnyside.dll
O2 - BHO: SpywareGuard Download Protection - {4A368E80-174F-4872-96B5-0B27DDD11DB2} - C:\SpywareGuard\dlprotect.dll
O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file)
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\COMPAN~1\Installs\cpn1\ycomp5_6 _2_0.dll
O4 - HKLM\..\Run: [ViewMgr] C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
O4 - HKLM\..\Run: [UpdateManager] "C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe" /r
O4 - HKLM\..\Run: [type32] "C:\Program Files\Microsoft IntelliType Pro\type32.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_02\bin\jusched.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe
O4 - HKLM\..\Run: [IntelliPoint] "C:\Program Files\Microsoft IntelliPoint\point32.exe"
O4 - HKLM\..\Run: [HP Software Update] "D:\HP Software Update\HPWuSchd2.exe"
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [DVDTray] "C:\Program Files\HP DVD\Umbrella\DVDTray.exe"
O4 - HKLM\..\Run: [DVDBitSet] "C:\Program Files\HP DVD\Umbrella\DVDBitSet.exe" /NOUI
O4 - HKLM\..\Run: [CHotkey] mHotkey.exe
O4 - HKLM\..\Run: [nod32kui] "C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [CasinoDownloader] C:\casinodownloader.exe
O4 - Startup: SpywareGuard.lnk = C:\SpywareGuard\sgmain.exe
O8 - Extra context menu item: &Yahoo! Search - file:///C:\Program Files\Yahoo!\Common/ycsrch.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://D:\MICROS~1\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Yahoo! &Dictionary - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
O8 - Extra context menu item: Yahoo! &Maps - file:///C:\Program Files\Yahoo!\Common/ycmap.htm
O8 - Extra context menu item: Yahoo! &SMS - file:///C:\Program Files\Yahoo!\Common/ycsms.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
O9 - Extra button: Yahoo! Login - {2499216C-4BA5-11D5-BD9C-000103C116D5} - C:\Program Files\Yahoo!\Common\ylogin.dll
O9 - Extra 'Tools' menuitem: Yahoo! Login - {2499216C-4BA5-11D5-BD9C-000103C116D5} - C:\Program Files\Yahoo!\Common\ylogin.dll
O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - D:\PARTY POKER\PartyPoker.exe (file missing)
O9 - Extra 'Tools' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - D:\PARTY POKER\PartyPoker.exe (file missing)
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O9 - Extra button: MoneySide - {E023F504-0C5A-4750-A1E7-A9046DEA8A21} - C:\Program Files\Microsoft Money\System\mnyside.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O14 - IERESET.INF: START_PAGE_URL=http://www.emachines.com
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?link...67&clcid=0x409
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {4C39376E-FA9D-4349-BACC-D305C1750EF3} (EPUImageControl Class) - http://tools.ebayimg.com/eps/wl/activex/EP...l_v1-0-3-24.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://groups.msn.com/controls/PhotoUC/MsnPUpld.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v5co...b?1113209377140
O16 - DPF: {7565A160-5C60-4866-A120-F4D5B2BA3AAE} (FSLoaderCtrl Class) - http://www.clickedyclick.com/Downloa...sloader_v3.cab
O16 - DPF: {9522B3FB-7A2B-4646-8AF6-36E7F593073C} (cpbrkpie Control) - http://a19.g.akamai.net/7/19/7125/4051/ftp...02/cpbrkpie.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMesse...pDownloader.cab
O16 - DPF: {D8089245-3211-40F6-819B-9E5E92CD61A2} (FlashXControl Object) - https://jackpotcity.microgaming.com/...ty/FlashAX.cab
O16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) - http://chat.msn.com/bin/msnchat45.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{9EC7B00A-1C07-4837-BA5B-BA3F6D6F7B6B}: NameServer = 142.161.130.155 142.161.2.155
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O23 - Service: distributed.net client (dnetc) - Unknown owner - C:\WINDOWS\system32\iosdt\iosdt.exe (file missing)
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files\Eset\nod32krn.exe
Reply With Quote
Posted


  #2  
Old 06-29-2005, 07:05 PM
Mobo's Avatar
Mobo Mobo is offline
Thinking outside the box
  
Join Date: Sep 2004
Location: Cape Breton
Posts: 4,587
Send a message via ICQ to Mobo Send a message via AIM to Mobo Send a message via MSN to Mobo Send a message via Yahoo to Mobo Send a message via Skype™ to Mobo
Tryt not to panic too much but I can see the remnants of a remote access trojan which i personally would categorize as a major threat to privacy..

No I want you to scan again with hijack, insert a check next to each of the following then close all open browser windows and click "fix checked"



O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file)


O16 - DPF: {7565A160-5C60-4866-A120-F4D5B2BA3AAE} (FSLoaderCtrl Class) - http://www.clickedyclick.com/Downloa...sloader_v3.cab

O16 - DPF: {9522B3FB-7A2B-4646-8AF6-36E7F593073C} (cpbrkpie Control) - http://a19.g.akamai.net/7/19/7125/4051/ftp...02/cpbrkpie.cab

O23 - Service: distributed.net client (dnetc) - Unknown owner - C:\WINDOWS\system32\iosdt\iosdt.exe (file missing)


In the next step we are going to remove a service that gets installed by this malware.

Go to Start>Run and type regedit.

Press enter.

Navigate to:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\Workstation NetLogon Service distributed.net client (dnetc)
If distributed.net client (dnetc) exists , right click on it and choose delete from the menu.

Now navigate to:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\R oot\LEGACY_distributed.net client (dnetc)

If LEGACY_distributed.net client (dnetc) exists then right click on it and choose delete from the menu.


Then reboot, rescan again with hijack and post a fresh hijack log.
Reply With Quote
  #3  
Old 06-29-2005, 07:54 PM
Hellokitty_123 Hellokitty_123 is offline
Junior Member
  
Join Date: Apr 2005
Posts: 25
I couldn't delete this one

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\Workstation NetLogon Service distributed.net client (dnetc)
If distributed.net client (dnetc) exists , right click on it and choose delete from the menu.


It says "CANNOT DELETE/ERROR WHILE DELETING KEY"

Logfile of HijackThis v1.99.1
Scan saved at 6:48:13 PM, on 29/06/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\Explorer.EXE
C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe
C:\Program Files\Microsoft IntelliType Pro\type32.exe
C:\Program Files\Java\jre1.5.0_02\bin\jusched.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe
C:\Program Files\Microsoft IntelliPoint\point32.exe
D:\HP Software Update\HPWuSchd2.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\Program Files\HP DVD\Umbrella\DVDTray.exe
C:\WINDOWS\mHotkey.exe
C:\Program Files\Eset\nod32kui.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\ctfmon.exe
C:\SpywareGuard\sgmain.exe
C:\SpywareGuard\sgbhp.exe
C:\Program Files\Eset\nod32krn.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Documents and Settings\mayen\My Documents\hijackthis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://ca.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.emachines.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ca.rd.yahoo.com/customize/ie/defaul...earch.yahoo.com
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://ca.rd.yahoo.com/customize/ie/defaul...earch.yahoo.com
O2 - BHO: Yahoo! Companion BHO - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\PROGRA~1\Yahoo!\COMPAN~1\Installs\cpn1\ycomp5_6 _2_0.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {243B17DE-77C7-46BF-B94B-0B5F309A0E64} - C:\Program Files\Microsoft Money\System\mnyside.dll
O2 - BHO: SpywareGuard Download Protection - {4A368E80-174F-4872-96B5-0B27DDD11DB2} - C:\SpywareGuard\dlprotect.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\COMPAN~1\Installs\cpn1\ycomp5_6 _2_0.dll
O4 - HKLM\..\Run: [ViewMgr] C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
O4 - HKLM\..\Run: [UpdateManager] "C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe" /r
O4 - HKLM\..\Run: [type32] "C:\Program Files\Microsoft IntelliType Pro\type32.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_02\bin\jusched.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe
O4 - HKLM\..\Run: [IntelliPoint] "C:\Program Files\Microsoft IntelliPoint\point32.exe"
O4 - HKLM\..\Run: [HP Software Update] "D:\HP Software Update\HPWuSchd2.exe"
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [DVDTray] "C:\Program Files\HP DVD\Umbrella\DVDTray.exe"
O4 - HKLM\..\Run: [DVDBitSet] "C:\Program Files\HP DVD\Umbrella\DVDBitSet.exe" /NOUI
O4 - HKLM\..\Run: [CHotkey] mHotkey.exe
O4 - HKLM\..\Run: [nod32kui] "C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [CasinoDownloader] C:\casinodownloader.exe
O4 - Startup: SpywareGuard.lnk = C:\SpywareGuard\sgmain.exe
O8 - Extra context menu item: &Yahoo! Search - file:///C:\Program Files\Yahoo!\Common/ycsrch.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://D:\MICROS~1\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Yahoo! &Dictionary - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
O8 - Extra context menu item: Yahoo! &Maps - file:///C:\Program Files\Yahoo!\Common/ycmap.htm
O8 - Extra context menu item: Yahoo! &SMS - file:///C:\Program Files\Yahoo!\Common/ycsms.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
O9 - Extra button: Yahoo! Login - {2499216C-4BA5-11D5-BD9C-000103C116D5} - C:\Program Files\Yahoo!\Common\ylogin.dll
O9 - Extra 'Tools' menuitem: Yahoo! Login - {2499216C-4BA5-11D5-BD9C-000103C116D5} - C:\Program Files\Yahoo!\Common\ylogin.dll
O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - D:\PARTY POKER\PartyPoker.exe (file missing)
O9 - Extra 'Tools' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - D:\PARTY POKER\PartyPoker.exe (file missing)
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O9 - Extra button: MoneySide - {E023F504-0C5A-4750-A1E7-A9046DEA8A21} - C:\Program Files\Microsoft Money\System\mnyside.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O14 - IERESET.INF: START_PAGE_URL=http://www.emachines.com
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?link...67&clcid=0x409
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {4C39376E-FA9D-4349-BACC-D305C1750EF3} (EPUImageControl Class) - http://tools.ebayimg.com/eps/wl/activex/EP...l_v1-0-3-24.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://groups.msn.com/controls/PhotoUC/MsnPUpld.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v5co...b?1113209377140
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMesse...pDownloader.cab
O16 - DPF: {D8089245-3211-40F6-819B-9E5E92CD61A2} (FlashXControl Object) - https://jackpotcity.microgaming.com/...ty/FlashAX.cab
O16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) - http://chat.msn.com/bin/msnchat45.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{9EC7B00A-1C07-4837-BA5B-BA3F6D6F7B6B}: NameServer = 142.161.130.155 142.161.2.155
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files\Eset\nod32krn.exe
Reply With Quote
  #4  
Old 06-29-2005, 08:19 PM
Mobo's Avatar
Mobo Mobo is offline
Thinking outside the box
  
Join Date: Sep 2004
Location: Cape Breton
Posts: 4,587
Send a message via ICQ to Mobo Send a message via AIM to Mobo Send a message via MSN to Mobo Send a message via Yahoo to Mobo Send a message via Skype™ to Mobo
Ok that looks good but the real test will come after you download this program:
ftp://ftp.microworldsystems.com/download/tools/mwav.exe
Install, run the scan and wehn its complete sview and save the log. Then paste it here.
Reply With Quote
  #5  
Old 06-29-2005, 10:49 PM
Hellokitty_123 Hellokitty_123 is offline
Junior Member
  
Join Date: Apr 2005
Posts: 25
[img]style_emoticons/<#EMO_DIR#>/sad.gif[/img] HOLD ON i MADE A BOO BOO
Reply With Quote
  #6  
Old 06-29-2005, 10:57 PM
Mobo's Avatar
Mobo Mobo is offline
Thinking outside the box
  
Join Date: Sep 2004
Location: Cape Breton
Posts: 4,587
Send a message via ICQ to Mobo Send a message via AIM to Mobo Send a message via MSN to Mobo Send a message via Yahoo to Mobo Send a message via Skype™ to Mobo
Thats not quite what I wanted. Sorry.

Double-click it to run it, select all local drives, scan all files, press 'scan' and when it is completed, anything found will be displayed in the lower pane. Highlight it, CTRL C and paste it in your next reply.
Reply With Quote
  #7  
Old 06-30-2005, 12:36 AM
Hellokitty_123 Hellokitty_123 is offline
Junior Member
  
Join Date: Apr 2005
Posts: 25
Object "CWS.therealsearch Spyware/Adware" found in File System! Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Mo duleUsage" refers to invalid object "C:\WINDOWS\cpbrkpie.ocx". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Mo duleUsage" refers to invalid object "C:\WINDOWS\Downloaded Program Files\FSLOADER.DLL". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Sh aredDlls" refers to invalid object "C:\WINDOWS\cpbrkpie.ocx". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Sh aredDlls" refers to invalid object "D:\NERO6 DEMO\CoverDesigner\covered-deu.nls". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Sh aredDlls" refers to invalid object "D:\NERO6 DEMO\Nero BackItUp\BackItUp-Deu.nls". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Sh aredDlls" refers to invalid object "C:\WINDOWS\Downloaded Program Files\FSLOADER.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{00014C0D-B007-4448-B89B-4EC3E857961D}" refers to invalid object "C:\PROGRA~1\AOL8~1.0\Media\CDDBControl.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{10F34E64-BBB2-11D6-8A17-00E029570A3E}" refers to invalid object "C:\PROGRA~1\AOL8~1.0\sa.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{1167C47F-01F9-4C08-8564-1D6C9BAAFB60}" refers to invalid object "C:\PROGRA~1\AOL8~1.0\Media\Pathfinder.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{1853e19a-4e54-4190-8deb-2e1cc947cd60}" refers to invalid object "C:\Program Files\AOL 8.0\media\axtrack.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{1DD02726-012D-48e7-80E1-BA8E00A20ECB}" refers to invalid object "C:\PROGRA~1\WINDOW~2\wmplayer.exe". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{1EFD6A40-3999-11CF-9150-00AA0059F70D}" refers to invalid object "E:\PROGRAM\32\mci32.ocx". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{205D2DFB-BBAD-4DC4-A0BB-CDA12A1639CE}" refers to invalid object "C:\PROGRA~1\AOL8~1.0\Media\Phobos.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{229b78d5-38f5-11d5-9001-00c04f4c3b9f}" refers to invalid object "C:\PROGRA~1\AOL8~1.0\Media\CDDBControl.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{229b78df-38f5-11d5-9001-00c04f4c3b9f}" refers to invalid object "C:\PROGRA~1\AOL8~1.0\Media\CDDBControl.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{229b78e0-38f5-11d5-9001-00c04f4c3b9f}" refers to invalid object "C:\PROGRA~1\AOL8~1.0\Media\CDDBControl.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{229b78e1-38f5-11d5-9001-00c04f4c3b9f}" refers to invalid object "C:\PROGRA~1\AOL8~1.0\Media\CDDBControl.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{229b78e2-38f5-11d5-9001-00c04f4c3b9f}" refers to invalid object "C:\PROGRA~1\AOL8~1.0\Media\CDDBControl.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{3775D2E0-7C5D-11CF-899E-00AA00688B10}" refers to invalid object "E:\PROGRAM\32\mci32.ocx". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{390CE9F2-C4A0-11D4-8A92-0090271D4F88}" refers to invalid object "C:\Program Files\Yahoo!\Messenger\ycrwin32.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{41695A8E-6414-11D4-8FB3-00D0B7730277}" refers to invalid object "C:\Program Files\Yahoo!\Messenger\asw.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{4E97BE17-3300-4A4F-B380-5988DD771F1F}" refers to invalid object "C:\PROGRA~1\AOL8~1.0\Media\Ares.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{5788DAE8-4B72-4BE6-89A0-1E6123E4CBC2}" refers to invalid object "C:\PROGRA~1\AOL8~1.0\Media\Cerberus.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{639A19DD-1D97-4A6E-A0D1-01E04FED563F}" refers to invalid object "C:\PROGRA~1\AOL8~1.0\Media\Phobos.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{7C9688C3-7279-474D-ABA5-A632373D2CDB}" refers to invalid object "C:\PROGRA~1\AOL8~1.0\Media\Phobos.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{80373D03-D993-11D3-A2CE-00108335731F}" refers to invalid object "C:\PROGRA~1\AOL8~1.0\MIMEHook.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{83D4679F-B6D7-11D2-BF36-00C04FB90A03}" refers to invalid object "C:\PROGRA~1\MESSEN~1\rtcimsp.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{88E729D6-BDC1-11D1-BD2A-00C04FB9603F}" refers to invalid object "fde.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{8AB5F344-B600-11D6-8A15-00E029570A3E}" refers to invalid object "C:\PROGRA~1\AOL8~1.0\sa.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{8BBDA254-CE76-11D3-A2CE-00108335731F}" refers to invalid object "C:\PROGRA~1\AOL8~1.0\MIMEHook.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{A105BD70-BF56-4D10-BC91-41C88321F47C}" refers to invalid object "C:\PROGRA~1\AOL8~1.0\Media\Phobos.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{AED456C4-4866-4420-863F-35767EBED514}" refers to invalid object "C:\PROGRA~1\AOL8~1.0\Media\Phobos.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{B4F80028-5714-4B7B-B9B1-5748B204799A}" refers to invalid object "C:\PROGRA~1\AOL8~1.0\Media\Phobos.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{B9F3009B-976B-41C4-A992-229DCCF3367C}" refers to invalid object "C:\Program Files\AOL 8.0\media\axtrack.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{bc8a96c4-3909-11d5-9001-00c04f4c3b9f}" refers to invalid object "C:\PROGRA~1\AOL8~1.0\Media\CDDBControl.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{bc8a96c5-3909-11d5-9001-00c04f4c3b9f}" refers to invalid object "C:\PROGRA~1\AOL8~1.0\Media\CDDBControl.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{bc8a96c6-3909-11d5-9001-00c04f4c3b9f}" refers to invalid object "C:\PROGRA~1\AOL8~1.0\Media\CDDBControl.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{bc8a96c7-3909-11d5-9001-00c04f4c3b9f}" refers to invalid object "C:\PROGRA~1\AOL8~1.0\Media\CDDBControl.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{bc8a96c8-3909-11d5-9001-00c04f4c3b9f}" refers to invalid object "C:\PROGRA~1\AOL8~1.0\Media\CDDBControl.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{C1A8AF25-1257-101B-8FB0-0020AF039CA3}" refers to invalid object "E:\PROGRAM\32\mci32.ocx". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{C28BC286-884C-4a63-8A9C-6F7F5711034F}" refers to invalid object "C:\PROGRA~1\AOL8~1.0\Media\NmpX\nmpx.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{CAFEEFAC-0015-0000-0001-ABCDEFFEDCBA}" refers to invalid object "C:\Program Files\Java\jre1.5.0_01\bin\npjpi150_01.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{CAFEEFAC-0015-0000-0001-ABCDEFFEDCBB}" refers to invalid object "C:\Program Files\Java\jre1.5.0_01\bin\npjpi150_01.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{CAFEEFAC-0015-0000-0001-ABCDEFFEDCBC}" refers to invalid object "C:\Program Files\Java\jre1.5.0_01\bin\npjpi150_01.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{CC3D0210-9655-11d3-BA86-0000F80855E6}" refers to invalid object "C:\PROGRA~1\WINDOW~2\wmplayer.exe". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{D058BFC5-55D4-11D3-9A62-00C04F8EFB70}" refers to invalid object "C:\PROGRA~1\WINDOW~2\wmplayer.exe". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{D058BFC9-55D4-11D3-9A62-00C04F8EFB70}" refers to invalid object "C:\PROGRA~1\WINDOW~2\wmplayer.exe". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{D465B936-C361-4417-9AC5-35167066F84B}" refers to invalid object "C:\PROGRA~1\AOL8~1.0\Media\Phobos.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{D9F99C6B-A3A6-11D4-AF64-444553546170}" refers to invalid object "C:\PROGRA~1\AOL8~1.0\Media\Phobos.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{E13046F7-A5DF-4574-BD7A-6DC12EC10FF5}" refers to invalid object "C:\PROGRA~1\AOL8~1.0\ebrowser.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{E3852604-B619-11d6-94EC-00047521F020}" refers to invalid object "C:\PROGRA~1\AOL8~1.0\Media\NmpXChat\nmpxchat.dll" . Action Taken: No Action Taken.
Entry "HKCR\CLSID\{E981D791-F499-4837-A483-5AB22F1C548F}" refers to invalid object "C:\PROGRA~1\AOL8~1.0\Media\Phobos.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{E9DD2392-EF9B-4963-BEDF-F86C0A2B762A}" refers to invalid object "C:\PROGRA~1\AOL8~1.0\AMH.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{EB511AE4-87FE-4EFB-91A3-428B2F2601F7}" refers to invalid object "C:\PROGRA~1\AOL8~1.0\Media\Phobos.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{FC2AAD0F-D03A-453b-91A6-77CADEE26282}" refers to invalid object "C:\PROGRA~1\WINDOW~2\wmpvis.dll". Action Taken: No Action Taken.
Entry "HKCR\Alg.AlgSetup" refers to invalid object "{27D0BCCC-344D-4287-AF37-0C72C161C14C}". Action Taken: No Action Taken.
Entry "HKCR\Alg.AlgSetup.1" refers to invalid object "{27D0BCCC-344D-4287-AF37-0C72C161C14C}". Action Taken: No Action Taken.
Entry "HKCR\ComPlusMetaData.MsCorHost" refers to invalid object "{727CDF4F-3BA0-11D3-8738-00C04F79ED0D}". Action Taken: No Action Taken.
Entry "HKCR\ComPlusMetaData.MsCorHost.2" refers to invalid object "{727CDF4F-3BA0-11D3-8738-00C04F79ED0D}". Action Taken: No Action Taken.
Entry "HKCR\Plenoptic.Plenoptic" refers to invalid object "{607C27E9-AB27-11d3-A116-A0EA50C10801}". Action Taken: No Action Taken.
Entry "HKCR\Plenoptic.Plenoptic.1" refers to invalid object "{607C27E9-AB27-11d3-A116-A0EA50C10801}". Action Taken: No Action Taken.
Entry "HKCR\RTCCore.RTCClient" refers to invalid object "{7a42ea29-a2b7-40c4-b091-f6f024aa89be}". Action Taken: No Action Taken.
Entry "HKCR\RTCCore.RTCClient.1" refers to invalid object "{7a42ea29-a2b7-40c4-b091-f6f024aa89be}". Action Taken: No Action Taken.
Entry "HKCR\SymWriter.pdb" refers to invalid object "{520DC67A-752E-11D3-8D56-00C04F680B2B}". Action Taken: No Action Taken.
Entry "HKCR\WMPPublsihCntr.WMPPublsihCntr" refers to invalid object "{939438A9-CF0F-44d8-9140-599736F0D3A2}". Action Taken: No Action Taken.
Entry "HKCR\WMPPublsihCntr.WMPPublsihCntr.1" refers to invalid object "{939438A9-CF0F-44d8-9140-599736F0D3A2}". Action Taken: No Action Taken.
File C:\WINDOWS\system32\f3PSSavr.scr tagged as "not-a-virus:AdWare.ToolBar.MyWebSearch". Action Taken: No Action Taken.
File C:\DOCUME~1\mayen\LOCALS~1\Temp\virtualcity.exe tagged as not-a-virus:Tool.Win32.Reboot. No Action Taken.
File C:\DOCUME~1\mayen\LOCALS~1\Temp\zodiac.exe tagged as not-a-virus:Tool.Win32.Reboot. No Action Taken.
File C:\Documents and Settings\mayen\Complete\ Pinnacle Hollywood FX Pro 5.2 Build48.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\#1 DVD Ripper 1.3.47.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\#1 Video Converter 3.8.8.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\2 Blonde Teens **** a Huge ****.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\3D Studio Max 7.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\3D-Album Commercial Suite 3.0 + 3.27.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\50 Cent - In Da Club-Music Vid.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\8 Mile.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\Ability FTP Server v1.16.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\Absolute Sound Recorder v3.2.2.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\Absolute Uninstaller 1.44.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\ACD Systems Canvas X 898.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\Acd Systems FotoSlate 4.0.21.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\ACDSee Power Pack7.0 Build 102.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\AceBackup 2004 2.1.3.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\Acme CAD Converter 5.5.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\Acronis Power Utilities 2005.611.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\Acronis True Image Enterprise Server 8.1.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\Acronis True ImageTrue Image Server 8.0.889.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\AddWeb Website Promoter Pro v8.0.3.8.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\Adobe Acrobat v5 Pro.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\Adobe Creative Suite 2 iSO.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\Adobe Creative Suite 2.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\Adobe Creative Suite Premium Edition 2.0.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\Adobe Photoshop 9 CS2 iso.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\Adobe Photoshop CS2.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\Adware Spyware Removal 5.01.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\Agnitum Outpost firewall 2.7.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\Ahead.DVD.Ripper.v1.1.2.In cl.GOLD.Crack-TE.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\AI RoboForm 6.3.96.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\All My Movies 3.5 Build 1193.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\All My Movies™ 3.5 Build 1193.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\All-into-One FLASH Mixer 1.1.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\American Civil War Gettysburg.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\Anti Tracks v5.3.1.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\Antiy Ghostbusters StdProAdvanced 4.7.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\Army Men RTS.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\Army Ranger Mogadishu.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\AutoCAD 2006.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\Automize 6.19 for Windows.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\AV Voice Changer Diamond Edition 4.0.41.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\AV Voice Changer Diamond.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\Avant Browser 10.1 Beta 8 beta.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\AVI-GIF 2.1.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\Avid Xpress Pro 4.35.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\Azureus for Windows 2.3.0.4 - Final.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\Azureus for Windows 2.3.0.4.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\Battle Realms Winter of the W.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\Battlefield 2 Online Files.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\Battlefield 2 [FULL DVD].zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\BeFaster v3.54.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\Black Eyed Peas-Monkey Busine.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\Borland C++ Compiler 5.5.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\Borland Delphi 2005.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\BPS Spyware & Adware Remover 9.2.0.8.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\Call Of Duty United Offense.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\Camtasia Studio 2.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\Carmageddon The Death Race 2.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\Cinderella Man (Good Quality).zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\Cinderella Man XviD.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\Clean Space v9.1.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\ClipMate 6.5.09.542.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\CloneDVD 2.7.5.1.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\Cold Fear.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\Commandos 2 - Men of Courage.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\cool skins for MSN 7.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\CopyRator 1.4.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\CopyRator v1.4.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\COREL WordPerfect Office 12.0.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\Cossacks II.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\Counter Strike 1.5.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\Counter Strike Source + Online.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\Crazy Frog - Axel F.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\CryptoNote 2.4.0.1.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\Dangerous Waters.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\DesignLoad Website Templates.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\DesktopCatalyst 5.3.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\Digital Sound Recorder V3.2.5.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\Diner Dash.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\Disk Space Inspector v2.9.5.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\DivX 6.0.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\Drivers all in 1 2005.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\DVD Cloner 2.35.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\DVD Copy Express v5.5.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\DVD PixPlay 2.25.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\DVD Region+CSS Free 5.83.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\DVD-Cloner v2.50.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\DynamicFactory Templates.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\E-Donkey 0.53a.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\Easy CD-DA Extractor 8.1.0.1.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\Easy CD-DA Extractor 8.2.1.1.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\Elektra DVDRip XViD.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\Elektra.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\Eminem-White America-Music Vid.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\Eminem_feat_Dido - Stan(snl).zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\Emu8086 3.22.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\Error Doctor 2006 v1.0.0.5.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\Error Doctor 2006 vv1.0.0.5.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\Eudora v 6.2.3.4.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\Excel to PDF Converter v3.0.052405.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\EXPert PDF Pro v3.11.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\Extensis Mask Pro 3.0.2.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\Extreme-G.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\F-1 Pole Position 64.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\F-1 World Grand Prix II.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\F-1 World Grand Prix.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\F-Secure Anti-Virus Client Security 6.0.0.11251 for Win.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\F-Zero X.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\Famista 64.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\Fantastic 4.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\Fantastic Four (2005).zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\Far Cry (PC) iSO.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\Fifa 99.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\Fifa Soccer 64.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\File Securer v3.81.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\FileRecoveryAngel 1.04.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\Final Fantasy 8.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\FireGraphic 8.0.803.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\Flash Decompiler 1.7.0.192.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\Flash MX 2004 7.02.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\Flash Player Pro v2.1.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\Flash Studio PRO 2.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\FlashFXP Password Decryption 1.0.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\FlatOut.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\FotoStation Pro v5.1.53.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\FoxIt PDF Reader v.1.3.0.519.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\Freddy Vs. Jason (Divx).zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\Free Internet TV.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\Free TV Player 1.6.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\FreePicGrabber 3.2.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\GameBoost 1.6.6.2005.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\GameJack v5.0.3.3.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\Gauntlet Legends.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\Geovid Video MP3 Extractor Pro 2.4.26.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\Gex 3 - Deep Cover Gecko.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\Gex 64 - Enter the Gecko.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\Ghost Recon.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\Girls Gone Wild - Dorm Room 3.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\Global Deejays, Dance.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\Glover.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\GMail Add-ons.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\Golden Eye 007.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\Golden Nugget 64.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\Google Earth 1.0.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\Grand Theft Auto San Andreas [PC].zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\GridinSoft Notepad 2.8.0.0.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\GT64 Championship.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\GTA 3 Full Myth.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\GTA San Andreas.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\GTASan Andreas.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\GXTranscoder 2.20.2691.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\Hard Drive Inspector v1.3 Build 840.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\HDD Regenerator 1.51.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\HDX4 Movie Creator 1.5.1.608.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\Herbie Fully Loaded (2005).zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\Hidden Recorder v1.5.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\Hide IP 1.7.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\HiDownload Pro 6.0.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\Home Plan Pro 4.6.37.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\Huge list of Appz.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\Hybrid Heaven.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\Ice Age.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\IconCool Studio v1.2 Build 624.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\Image Eye 7.1.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\Imperial Glory (Pc) iSO.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\In Good Company DVDR.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\Install Block v1.0.2.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\Internet Cleaning Tool v1.0.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\Invisible Browsing 400.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\Invisible Browsing v4.0.0.1.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\Jasc Paint Shop Pro 9.0.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\JetAudio Plus 6.1.6.6404.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\John Deere American Farme.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\Jordan Capri - ****ed in public bathroom.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\Juiced Hoodlum.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\Juiced.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\Just Over 18 - Behind The Scenes.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\Kaspersky Anti-Virus Personal.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\KC Softwares K-MP3 6.0.9.59.Beta10.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\Kingdom Of Heaven.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\Kls Backup 2005 Professional 1.5.0.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\KoolMoves 4.7.5.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\Lacey Barnes ****s A Huge ****.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\Learn Programming With Flash MX.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\LivePIM Conduit Buddy v2.0.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\Longhorn 5048.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\Macro Express 3.5.3.1.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\Macromedia Flash MX 2004.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\Madagascar.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\Making Waves Studio 5.17.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\Maxthon (MyIE2) 1.3.1.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\Mcafee 2005.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\McAfee Anti-Spyware Enterprise 8.0.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\McAfee internet security suite 2005 Full.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\Megadeth - The System Has Failed.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\Microsoft Office 2003.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\Microsoft Plus! Digital Media Edition .zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\Miko Lee and Sana Fey.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\Miranda IM 0.4.0.1.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\MOBILedit! 1.95.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\MOBILedit! 1.97.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\MobTime Cell Phone Manager 5.2.2.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\Moho v5.2.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\Monster In Law SVCD.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\Moto Racer 3.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\MSN Emoticons Installer 1.2.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\My Notes Keeper 1.1.3.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\Nero 6 Reloaded 6.6.0.14.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\Nero 6.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\Nero Burning Rom 6.6.0.12.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\Nero Burning ROM v6.6.0.14 Ultra Edition.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\Nero Burning ROM v6.6.0.3.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\Nicky Reed **** and Suck.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\NOD32 AntiVirus 2.50.25.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\Norton AntiVirus 2005 Pro.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\Norton SystemWorks 2005.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\nVidia Gelato 1.2 R1.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\Nyomi Arman ****s Monster ****.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\Offline Explorer Enterprise 3.8.2048.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\Omega Catalyst Driver 2.6.42 Win 2KXP.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\Opera 8.0.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\Opera 8.01 7642 Final.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\Panda Titanium Antivirus 2005 Retail.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\Parallaxis Cuckoo Clock 5.0.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\mayen\Complete\Pariah.zip infected by "Worm.Win32.VB.an" Virus! Action T