Lots of Malware Log to big to fit

[stickfish]

OK I followed the directions as best I could. When running Spybot in safemode I couldn't fix all the seleted proglems kept getting an error opening zipdll.dll and unzpdll.dll and every time I re-ran it the same malware kept coming up

Virtumonde.Generic
ABetterInternet
Virtumonde

The Kas Log is HUGE and will not fit - here is the HJT log - maybe I can start there?

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:40:04 AM, on 1/29/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16574)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\PROGRA~1\NETGEAR\MEDIAS~1\ImmsService.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\MsPMSPSv.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Java\jre1.5.0_02\bin\jusched.exe
C:\Program Files\Java\jre1.5.0_02\bin\jucheck.exe
C:\Program Files\Adaptec\Easy CD Creator 5\DirectCD\DirectCD.exe
C:\PROGRA~1\Verizon\SMARTB~1\MotiveSB.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Panasonic\LUMIXSimpleViewer\PhLeAutoRun.exe
C:\Program Files\NETGEAR\Media Server\MediaServer.exe
C:\Program Files\NETGEAR\Media Server\RestartApp.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by Comcast
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = :0
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: (no name) - {6D794CB4-C7CD-4c6f-BFDC-9B77AFBDC02C} - C:\WINDOWS\system32\iiffdee.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O3 - Toolbar: (no name) - {0BF43445-2F28-4351-9252-17FE6E806AA0} - (no file)
O3 - Toolbar: (no name) - {4E7BD74F-2B8D-469E-D0FC-E57AF4D5FA7D} - (no file)
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_02\bin\jusched.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [iTunesHelper] C:\Program Files\iTunes\iTunesHelper.exe
O4 - HKLM\..\Run: [AdaptecDirectCD] C:\Program Files\Adaptec\Easy CD Creator 5\DirectCD\DirectCD.exe
O4 - HKLM\..\Run: [Motive SmartBridge] C:\PROGRA~1\Verizon\SMARTB~1\MotiveSB.exe
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [TaskTray] C:\Program Files\Creative\SBAudigy\Taskbar\CTLTray.exe
O4 - HKCU\..\Run: [Taskbar] C:\Program Files\Creative\SBAudigy\Taskbar\CTLTask.exe
O4 - HKUS\S-1-5-19\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'Default user')
O4 - Global Startup: LUMIX Simple Viewer.lnk = ?
O4 - Global Startup: NETGEAR Media Server.lnk = C:\Program Files\NETGEAR\Media Server\MediaServer.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
O9 - Extra button: ComcastHSI - {669B269B-0D4E-41FB-A3D8-FD67CA94F646} - http://www.comcast.net/ (file missing)
O9 - Extra button: Support - {8828075D-D097-4055-AA02-2DBFA9D85E8A} - http://www.comcastsupport.com/ (file missing)
O9 - Extra button: Help - {97809617-3937-4F84-B335-9BB05EF1A8D4} - http://online.comcast.net/help/ (file missing)
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/english/kavwebscan_unicode.cab
O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} - http://download.mcafee.com/molbin/shared/mcinsctl/4,0,0,101/mcinsctl.cab
O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} - http://download.mcafee.com/molbin/shared/mcgdmgr/1,0,0,26/mcgdmgr.cab
O20 - Winlogon Notify: iiffdee - C:\WINDOWS\SYSTEM32\iiffdee.dll
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Integrated Multimedia Server - Unknown owner - C:\PROGRA~1\NETGEAR\MEDIAS~1\ImmsService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe

--
End of file - 7398 bytes

[stickfish]

Here is the other log in pieces

Scan Statistics:
Total number of scanned objects: 73306
Number of viruses found: 11
Number of infected objects: 176
Number of suspicious objects: 88
Duration of the scan process: 02:18:40

Infected Object Name / Virus Name / Last Action
C:\Documents and Settings\All Users\Application Data\avg7\Log\emc.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Grisoft\Avg7Data\avg7log.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Grisoft\Avg7Data\avg7log.log.lck Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\015decb2eb7b1f5d4c8381304fefaf90_ebab9ece-be32-4425-8e87-b4167122a1ed Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\03f7b0476be320df948aa02e95af29ba_ebab9ece-be32-4425-8e87-b4167122a1ed Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\08ff03aa19ea16bd326f3e328a1cbca4_ebab9ece-be32-4425-8e87-b4167122a1ed Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1874dca3a9a2e2c1546affa741efaf5e_ebab9ece-be32-4425-8e87-b4167122a1ed Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1fa4a1093678b85969f73cea8c49f98f_ebab9ece-be32-4425-8e87-b4167122a1ed Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\22c46a0536b78d0d50d245863e228b5c_ebab9ece-be32-4425-8e87-b4167122a1ed Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2eb5fae4a8eab52b69968d252d7f7742_ebab9ece-be32-4425-8e87-b4167122a1ed Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\30906daf7b108d7b995cfa0e103e25a2_ebab9ece-be32-4425-8e87-b4167122a1ed Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\65c9f804d91cb41f61d50bcd76007975_ebab9ece-be32-4425-8e87-b4167122a1ed Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\706787f7d0635f24af38ea66fe09551b_ebab9ece-be32-4425-8e87-b4167122a1ed Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\8180d1ca294ece5f6af12b102aff5bf1_ebab9ece-be32-4425-8e87-b4167122a1ed Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\86ae17ba493c01ea7e37437d039f9e9c_ebab9ece-be32-4425-8e87-b4167122a1ed Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\888275f2bca22f7f4e92da8805072743_ebab9ece-be32-4425-8e87-b4167122a1ed Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\b19fea0f67e9203005ca414a3e0c8575_ebab9ece-be32-4425-8e87-b4167122a1ed Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\b7ad9521055bd6414436103399502212_ebab9ece-be32-4425-8e87-b4167122a1ed Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\b889657a979a0ee0d1f1fc771e5051ca_ebab9ece-be32-4425-8e87-b4167122a1ed Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\df52cdc46787ea75522788692cb5a620_ebab9ece-be32-4425-8e87-b4167122a1ed Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\e1d61a919689f1b4a272092a14398590_ebab9ece-be32-4425-8e87-b4167122a1ed Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\f713c46c3efbda25565c2c2ebd588ac2_ebab9ece-be32-4425-8e87-b4167122a1ed Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\fb5dcd1eea0e1c77c41dc16dedb36d61_ebab9ece-be32-4425-8e87-b4167122a1ed Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Dr Watson\user.dmp Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat Object is locked skipped
C:\Documents and Settings\Carly.OFFICE\Local Settings\Temporary Internet Files\Content.IE5\ABSBQ9W9\css4[1] Object is locked skipped
C:\Documents and Settings\Carly.OFFICE\Local Settings\Temporary Internet Files\Content.IE5\TIQOEKSG\css4[1] Object is locked skipped
C:\Documents and Settings\Erin\Local Settings\Application Data\Mozilla\Firefox\Profiles\1e39xuyk.default\Cache\83F60C09d01/mwsSetup.CommonCodebase.exe Infected: not-a-virus:AdTool.Win32.MyWebSearch.bc skipped
C:\Documents and Settings\Erin\Local Settings\Application Data\Mozilla\Firefox\Profiles\1e39xuyk.default\Cache\83F60C09d01 CAB: infected - 1 skipped

[stickfish]

C:\Documents and Settings\LocalService\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\NetworkService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Firefox\Profiles\49ou0ro0.default\cert8.db Object is locked skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Firefox\Profiles\49ou0ro0.default\formhistory.dat Object is locked skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Firefox\Profiles\49ou0ro0.default\history.dat Object is locked skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Firefox\Profiles\49ou0ro0.default\key3.db Object is locked skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Firefox\Profiles\49ou0ro0.default\parent.lock Object is locked skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Firefox\Profiles\49ou0ro0.default\search.sqlite Object is locked skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Firefox\Profiles\49ou0ro0.default\urlclassifier2.sqlite Object is locked skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Firefox\Profiles\49ou0ro0.default\webappsstore.sqlite Object is locked skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Fri, 17 Oct 2003 08:44:20 -0700]/text/[From "Doug Oppedal" <Doug_Oppedal@pgn.com>][Date Fri, 17 Oct 2003 11:17:39 -0700]/UNNAMED/[From "Postmaster" < >][Date Fri, 17 Oct 2003 19:38:40 +0100]/html Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Fri, 17 Oct 2003 08:44:20 -0700]/text/[From "Doug Oppedal" <Doug_Oppedal@pgn.com>][Date Fri, 17 Oct 2003 11:17:39 -0700]/UNNAMED/[From "Admin" <mailbot@netmail.net>][Date Fri, 17 Oct 2003 15:08:12 -0500]/html Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Fri, 17 Oct 2003 08:44:20 -0700]/text/[From "Doug Oppedal" <Doug_Oppedal@pgn.com>][Date Fri, 17 Oct 2003 11:17:39 -0700]/UNNAMED/[From "Admin" <mailbot@netmail.net>][Date Fri, 17 Oct 2003 15:08:12 -0500]/evpk.exe Infected: Email-Worm.Win32.Swen skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Fri, 17 Oct 2003 08:44:20 -0700]/text/[From "Doug Oppedal" <Doug_Oppedal@pgn.com>][Date Fri, 17 Oct 2003 11:17:39 -0700]/UNNAMED/[From "Radiant Records" <info@radiantrecords.com>][Date Fri, 17 Oct 2003 15:25:35 -0 ... /[From "" <igzzuwq_chnxdjsb@vfuu.com>][Date Sat, 18 Oct 2003 01:35:44 +0200 (CEST)]/UPGRADE516.exe Infected: Email-Worm.Win32.Swen skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Fri, 17 Oct 2003 08:44:20 -0700]/text/[From "Doug Oppedal" <Doug_Oppedal@pgn.com>][Date Fri, 17 Oct 2003 11:17:39 -0700]/UNNAMED/[From "Radiant Records" <info@radiantrecords.com>][Date Fri, ... /[From "internet email storage service" <masterengine@microsoft.com>][Date Sat, 18 Oct 2003 01:39:24 +0200 (CEST ... /html Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Fri, 17 Oct 2003 08:44:20 -0700]/text/[From "Doug Oppedal" <Doug_Oppedal@pgn.com>][Date Fri, 17 Oct 2003 11:17:39 -0700]/UNNAMED/[From "Radiant Records" <info@radiantrecords.com>][Date Fri, ... /[F ... /[From "ms internet email storage system" <postroutine@bigfoot.com>][Date Sat, 18 Oct 2003 01:04:53 +010 ... /html Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Fri, 17 Oct 2003 08:44:20 -0700]/text/[From "Doug Oppedal" <Doug_Oppedal@pgn.com>][Date Fri, 17 Oct 2003 11:17:39 -0700]/UNNAMED/[From "Radiant Records" <info@radiantrecords.com>][Date Fri, ... /[F ... /[From ... /[From "Administrator" <mailerdaemon@america.com>][Date Sat, 18 Oct 2003 00:29:29 +0000 (GMT ... /html Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Fri, 17 Oct 2003 08:44:20 -0700]/text/[From "Doug Oppedal" <Doug_Oppedal@pgn.com>][Date Fri, 17 Oct 2003 11:17:39 -0700]/UNNAMED/[From "Radiant Records" <info@radiantrecords.com>][Date Fri, ... /[F ... /[From ... /[From "Administrator" <mailerdaemon@america.com>][Date Sat, 18 Oct 2003 00:29:29 +0000 ... /fqmb.exe Infected: Email-Worm.Win32.Swen skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Fri, 17 Oct 2003 08:44:20 -0700]/text/[From "Doug Oppedal" <Doug_Oppedal@pgn.com>][Date Fri, 17 Oct 2003 11:17:39 -0700]/UNNAMED/[From "Radiant Records" <info@radiantrecords.com>][Date Fri, ... /[F ... /[From ... /[From "A ... /[From "Postmaster" <masterdaemon@yahoo.net>][Date Fri, 17 Oct 2003 23:32:03 -0600]/html Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Fri, 17 Oct 2003 08:44:20 -0700]/text/[From "Doug Oppedal" <Doug_Oppedal@pgn.com>][Date Fri, 17 Oct 2003 11:17:39 -0700]/UNNAMED/[From "Radiant Records" <info@radiantrecords.com>][Date Fri, ... /[F ... /[From ... /[From ... /[From "Public Support" <prhhtjstg@qyvi.net>][Date Sat, 18 Oct 2003 09:20:31 +0100]/Qix.exe Infected: Email-Worm.Win32.Swen skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Fri, 17 Oct 2003 08:44:20 -0700]/text/[From "Doug Oppedal" <Doug_Oppedal@pgn.com>][Date Fri, 17 Oct 2003 11:17:39 -0700]/UNNAMED/[From "Radiant Records" <info@radiantrecords.com>][Date Fri, ... /[F ... /[From ... /[From ... /[From "administrator" <tmailbot@microsoft.com>][Date Sat, 18 Oct 2003 04:50:02 -0400]/html Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Fri, 17 Oct 2003 08:44:20 -0700]/text/[From "Doug Oppedal" <Doug_Oppedal@pgn.com>][Date Fri, 17 Oct 2003 11:17:39 -0700]/UNNAMED/[From "Radiant Records" <info@radiantrecords.com>][Date Fri, ... /[F ... /[From ... /[From "html-news@ashampoo.com" <html-news@ashampoo.com>][Date Sat, 18 Oct 2003 10:32:58 +0200]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload skipped

[stickfish]

C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Fri, 17 Oct 2003 08:44:20 -0700]/text/[From "Doug Oppedal" <Doug_Oppedal@pgn.com>][Date Fri, 17 Oct 2003 11:17:39 -0700]/UNNAMED/[From "Radiant Records" <info@radiantrecords.com>][Date Fri, ... /[F ... /[From ... /[From "Administrator" ... /[From <@leonardointernet.com>][Date Sat, 18 Oct 2003 01:16:00 +0100]/text Infected: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Fri, 17 Oct 2003 08:44:20 -0700]/text/[From "Doug Oppedal" <Doug_Oppedal@pgn.com>][Date Fri, 17 Oct 2003 11:17:39 -0700]/UNNAMED/[From "Radiant Records" <info@radiantrecords.com>][Date Fri, ... /[F ... /[From ... /[From "Administrator" <mailerdaemon@america.com>][Date Sat, 18 Oct 2003 00:29:29 +0000 (GMT)]/UNNAMED Infected: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Fri, 17 Oct 2003 08:44:20 -0700]/text/[From "Doug Oppedal" <Doug_Oppedal@pgn.com>][Date Fri, 17 Oct 2003 11:17:39 -0700]/UNNAMED/[From "Radiant Records" <info@radiantrecords.com>][Date Fri, ... /[F ... /[From "ms internet email storage system" <postroutine@bigfoot.com>][Date Sat, 18 Oct 2003 01:04:53 +0100]/UNNAMED Infected: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Fri, 17 Oct 2003 08:44:20 -0700]/text/[From "Doug Oppedal" <Doug_Oppedal@pgn.com>][Date Fri, 17 Oct 2003 11:17:39 -0700]/UNNAMED/[From "Radiant Records" <info@radiantrecords.com>][Date Fri, ... /[From "internet email storage service" <masterengine@microsoft.com>][Date Sat, 18 Oct 2003 01:39:24 +0200 (CEST)]/UNNAMED Infected: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Fri, 17 Oct 2003 08:44:20 -0700]/text/[From "Doug Oppedal" <Doug_Oppedal@pgn.com>][Date Fri, 17 Oct 2003 11:17:39 -0700]/UNNAMED/[From "Radiant Records" <info@radiantrecords.com>][Date Fri, 17 Oct 2003 15:25:35 -0500]/UNNAMED/[From Terry@k8smc.com][Date Fri, 17 Oct 2003 18:31:01 -0400]/UNNAMED Infected: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Fri, 17 Oct 2003 08:44:20 -0700]/text/[From "Doug Oppedal" <Doug_Oppedal@pgn.com>][Date Fri, 17 Oct 2003 11:17:39 -0700]/UNNAMED/[From "Radiant Records" <info@radiantrecords.com>][Date Fri, 17 Oct 2003 15:25:35 -0500]/UNNAMED Infected: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Fri, 17 Oct 2003 08:44:20 -0700]/text/[From "Doug Oppedal" <Doug_Oppedal@pgn.com>][Date Fri, 17 Oct 2003 11:17:39 -0700]/UNNAMED Infected: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Fri, 17 Oct 2003 08:44:20 -0700]/text/[From "Forrest" <rivkasolleral@eudoramail.com>][Date Tue, 21 Oct 2003 23:08:16 -0400]/html/[From "Tom Remily" <taremily@comcast.net>][Date Wed, 22 Oct 2003 07 ... /[From "Yso-8859-1 ... /[From "Postmaster" <dmaildaemon@bigfoot.com>][Date Thu, 23 Oct 2003 19:38:58 +0100]/UNNAMED Infected: Email-Worm.Win32.Swen skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Fri, 17 Oct 2003 08:44:20 -0700]/text/[From "Forrest" <rivkasolleral@eudoramail.com>][Date Tue, 21 Oct 2003 23:08:16 -0400]/html/[From "Tom Remily" <taremily@comcast.net>][Date Wed, 22 Oct 2003 07 ... /[From "net mail delivery service" <webroutine@microsoft.net>][Date Fri, 24 Oct 2003 11:40:14 +0900 (JST)]/UNNAMED Infected: Email-Worm.Win32.Swen skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Fri, 17 Oct 2003 08:44:20 -0700]/text/[From "Forrest" <rivkasolleral@eudoramail.com>][Date Tue, 21 Oct 2003 23:08:16 -0400]/html/[From "Tom Remily" <taremily@comcast.net>][Date Wed, 22 Oct 2003 07 ... /[From "Yso-8 ... /[From "Paul Maduell ... /[From promo@mypcclub.com][Date Thu, 23 Oct 2003 19:03:15 -0700]/UNNAMED Infected: Email-Worm.Win32.Swen skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Fri, 17 Oct 2003 08:44:20 -0700]/text/[From "Forrest" <rivkasolleral@eudoramail.com>][Date Tue, 21 Oct 2003 23:08:16 -0400]/html/[From "Tom Remily" <taremily@comcast.net>][Date Wed, 22 Oct 2003 07 ... /[From "Yso-8 ... /[From "Paul Maduell" <paul@maduellassociates.com>][Date Thu, 23 Oct 2003 13:20:54 -0700]/UNNAMED Infected: Email-Worm.Win32.Swen skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Fri, 17 Oct 2003 08:44:20 -0700]/text/[From "Forrest" <rivkasolleral@eudoramail.com>][Date Tue, 21 Oct 2003 23:08:16 -0400]/html/[From "Tom Remily" <taremily@comcast.net>][Date Wed, 22 Oct 2003 07 ... /[From "Yso-8859-1?Q? ... /[From Yesworld <yesworld@YesWorld.com>][Date Thu, 23 Oct 2003 08:10:38 -0400 (EDT)]/text Infected: Email-Worm.Win32.Swen skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Fri, 17 Oct 2003 08:44:20 -0700]/text/[From "Forrest" <rivkasolleral@eudoramail.com>][Date Tue, 21 Oct 2003 23:08:16 -0400]/html/[From "Tom Remily" <taremily@comcast.net>][Date Wed, 22 Oct 2003 07 ... /[From "Yso-8859-1?Q?Info@RadiantRecords.com?@<Info@RadiantRecords.com>][Date Thu, 23 Oct 2003 12:06:12 -0500]/text Infected: Email-Worm.Win32.Swen skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Fri, 17 Oct 2003 08:44:20 -0700]/text/[From "Forrest" <rivkasolleral@eudoramail.com>][Date Tue, 21 Oct 2003 23:08:16 -0400]/html/[From "Tom Remily" <taremily@comcast.net>][Date Wed, 22 Oct 2003 07:13:13 -0700]/UNNAMED Infected: Email-Worm.Win32.Swen skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Fri, 17 Oct 2003 08:44:20 -0700]/text/[From "Forrest" <rivkasolleral@eudoramail.com>][Date Tue, 21 Oct 2003 23:08:16 -0400]/html Infected: Email-Worm.Win32.Swen skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Fri, 17 Oct 2003 08:44:20 -0700]/text/[From "Paul Maduell" <paul@maduellassociates.com>][Date Fri, 24 Oct 2003 09:45:55 -0700]/UNNAMED/[From "network mail system" <masterservice@aol.com>][Date Fri, 24 Oct 2003 13:33:54 -0500]/html Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Fri, 17 Oct 2003 08:44:20 -0700]/text/[From "Paul Maduell" <paul@maduellassociates.com>][Date Fri, 24 Oct 2003 09:45:55 -0700]/UNNAMED/[From "Administrator" <nmaildaemon@netmail.net>][Date Fri, 24 Oct 2003 16:31:26 -0300]/UNNAMED/html Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Fri, 17 Oct 2003 08:44:20 -0700]/text/[From "Paul Maduell" <paul@maduellassociates.com>][Date Fri, 24 Oct 2003 09:45:55 -0700]/UNNAMED/[From "Administrator" <nmaildaemon@netmail.net>][Date Fri, 24 Oct 2003 16:31:26 ... /[From "P ... /[From "Admin" <qmailform@freemail.net>][Date Tue, 21 Oct 2003 14:36:09 -0500]/html Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Fri, 17 Oct 2003 08:44:20 -0700]/text/[From "Paul Maduell" <paul@maduellassociates.com>][Date Fri, 24 Oct 2003 09:45:55 -0700]/UNNAMED/[From "Administrator" <nmaildaemon@netmail.net>][Date Fri, 24 O ... /[From JobsOnline Career Tip of the Day <careertips@ncube.com>][Date Sat, 25 Oct 2003 01:04:39 +0000 (GMT)]/html Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Fri, 17 Oct 2003 08:44:20 -0700]/text/[From "Paul Maduell" <paul@maduellassociates.com>][Date Fri, 24 Oct 2003 09:45:55 -0700]/UNNAMED/[From "Administrator" <nmaildaemon@netmail.net>][Date Fri, 24 Oct 2003 16 ... /[From "History Channel" <HistoryChannel@aetv.chtah.com>][Date Sat, 25 Oct 2003 00:17:53 -0000]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Fri, 17 Oct 2003 08:44:20 -0700]/text/[From "Paul Maduell" <paul@maduellassociates.com>][Date Fri, 24 Oct 2003 09:45:55 -0700]/UNNAMED/[From "Administrator" <nmaildaemon@netmail.net>][Date Fri, 24 Oct 2003 16:31:26 ... /[From "Paul Maduell" <paul@maduellassociates.com>][Date Fri, 24 Oct 2003 12:45:20 -0700]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Fri, 17 Oct 2003 08:44:20 -0700]/text/[From "Paul Maduell" <paul@maduellassociates.com>][Date Fri, 24 Oct 2003 09:45:55 -0700]/UNNAMED/[From "Administrator" <nmaildaemon@netmail.net>][Date Fri, 24 Oct 2003 16:31:26 -0300]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Fri, 17 Oct 2003 08:44:20 -0700]/text/[From "Paul Maduell" <paul@maduellassociates.com>][Date Fri, 24 Oct 2003 09:45:55 -0700]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Fri, 17 Oct 2003 08:44:20 -0700]/text Infected: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From "Jill King" <kingbv@wissen.de>][Date Mon, 17 Nov 2003 09:04:48 +0000]/html/[From "John and Susan Signor" <jsignor@e-z.net>][Date Mon, 17 Nov 2003 08:20:10 -0800 (Pacific Standard Time)]/UNNAMED/[From Culin Edward W <Edward.Culin@irs.gov>][Date Mon, 17 Nov 2003 10:36:41 ... /[From "Network Mail Storage Service" <>][Date Tue, 18 Nov 2003 05:31:40 +0100 (CET ... /html Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From "Jill King" <kingbv@wissen.de>][Date Mon, 17 Nov 2003 09:04:48 +0000]/html/[From "John and Susan Signor" <jsignor@e-z.net>][Date Mon, 17 Nov 2003 08:20:10 -0800 (Pacific Standard Time)]/UNNAMED/[From Culin Edward W <Edward.Culin@irs.gov>][Date Mon, 17 Nov 2003 10:36:41 ... /[From "Network Mail Storage Service" <>][Date Tue, 18 Nov 2003 05:31:40 +0100 (CET)]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From "Jill King" <kingbv@wissen.de>][Date Mon, 17 Nov 2003 09:04:48 +0000]/html/[From "John and Susan Signor" <jsignor@e-z.net>][Date Mon, 17 Nov 2003 08:20:10 -0800 (Pacific Standard Time)]/UNNAMED/[From Culin Edward W <Edward.Culin@irs.gov>][Date Mon, 17 Nov 2003 10:36:41 -0 ... /[F ... /[From mike.w.knifong@exgate.tek.com][Date Mon, 17 Nov 2003 15:33:27 -0800]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload skipped

[stickfish]

C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From "Jill King" <kingbv@wissen.de>][Date Mon, 17 Nov 2003 09:04:48 +0000]/html/[From "John and Susan Signor" <jsignor@e-z.net>][Date Mon, 17 Nov 2003 08:20:10 -0800 (Pacific Standard Time)]/UNNAMED/[From Culin Edward W <Edward.Culin@irs.gov>][Date Mon, 17 Nov 2003 10:36:41 -0 ... /[From Culin Edward W <Edward.Culin@irs.gov>][Date Mon, 17 Nov 2003 12:53:55 -0600]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From "Jill King" <kingbv@wissen.de>][Date Mon, 17 Nov 2003 09:04:48 +0000]/html/[From "John and Susan Signor" <jsignor@e-z.net>][Date Mon, 17 Nov 2003 08:20:10 -0800 (Pacific Standard Time)]/UNNAMED/[From Culin Edward W <Edward.Culin@irs.gov>][Date Mon, 17 Nov 2003 10:36:41 -0600]/UNNAMED/[From "Argentia" <wvhjy6@yahoo.com.hk>][Date Mon, 17 Nov 2003 12:51:58 -0600]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From "Jill King" <kingbv@wissen.de>][Date Mon, 17 Nov 2003 09:04:48 +0000]/html/[From "John and Susan Signor" <jsignor@e-z.net>][Date Mon, 17 Nov 2003 08:20:10 -0800 (Pacific Standard Time)]/UNNAMED/[From Culin Edward W <Edward.Culin@irs.gov>][Date Mon, 17 Nov 2003 10:36:41 -0600]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From "Jill King" <kingbv@wissen.de>][Date Mon, 17 Nov 2003 09:04:48 +0000]/html/[From "John and Susan Signor" <jsignor@e-z.net>][Date Mon, 17 Nov 2003 08:20:10 -0800 (Pacific Standard Time)]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From "Jill King" <kingbv@wissen.de>][Date Mon, 17 Nov 2003 09:04:48 +0000]/html Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Greg Mace <MaceG@esi.com>][Date Wed, 26 Nov 2003 06:55:14 -0800]/text/[From "inet email delivery system" <webengine@america.com>][Date Wed, 26 Nov 2003 10:12:18 -0600]/html Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Greg Mace <MaceG@esi.com>][Date Wed, 26 Nov 2003 06:55:14 -0800]/text/[From "Administrator" <mailautomat@freemail.com>][Date 26 Nov 2003 16:40:16 +0000]/UNNAMED/html Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Greg Mace <MaceG@esi.com>][Date Wed, 26 Nov 2003 06:55:14 -0800]/text/[From "Administrator" <mailautomat@freemail.com>][Date 26 Nov 2003 16:40:16 +0000]/UNNAMED/[From Shelby Martz <shellieprevatte@eudoramail.com>][Date Wed, 26 Nov 2003 11:45:13 -0500]/text/[From Ticketmaster <newsletter@reply.ticketmaster.com>][Date 26 Nov 2003 09:56:10 -0800]/UNNAMED Infected: Email-Worm.Win32.Swen skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Greg Mace <MaceG@esi.com>][Date Wed, 26 Nov 2003 06:55:14 -0800]/text/[From "Administrator" <mailautomat@freemail.com>][Date 26 Nov 2003 16:40:16 +0000]/UNNAMED/[From Shelby Martz <shellieprevatte@eudoramail.com>][Date Wed, 26 Nov 2003 11:45:13 -0500]/text/[From promo@mypc ... /[From "delivery service" <mmailbot@america.com>][Date 27 Nov 2003 18:43:20 +0100]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Greg Mace <MaceG@esi.com>][Date Wed, 26 Nov 2003 06:55:14 -0800]/text/[From "Administrator" <mailautomat@freemail.com>][Date 26 Nov 2003 16:40:16 +0000]/UNNAMED/[From Shelby Martz <shellieprevatte@eudoramail.com>][Date Wed, 26 Nov 2003 11:45:13 -0500]/text/[From promo@mypcclub.com][Date Wed, 26 Nov 2003 20:29:11 -0800]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Greg Mace <MaceG@esi.com>][Date Wed, 26 Nov 2003 06:55:14 -0800]/text/[From "Administrator" <mailautomat@freemail.com>][Date 26 Nov 2003 16:40:16 +0000]/UNNAMED/[From Shelby Martz <shellieprevatte@eudoramail.com>][Date Wed, 26 Nov 2003 11:45:13 -0500]/text/[F ... /[From "I ... /[From "Postmaster" <xmailform@bigfoot.com>][Date Sun, 30 Nov 2003 16:47:46 -0600]/UNNAMED Infected: Email-Worm.Win32.Swen skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Greg Mace <MaceG@esi.com>][Date Wed, 26 Nov 2003 06:55:14 -0800]/text/[From "Administrator" <mailautomat@freemail.com>][Date 26 Nov 2003 16:40:16 +0000]/UNNAMED/[From Shelby Martz <shellieprevatte@eudoramail.com>][Date Wed, 26 Nov 2003 11:45:13 -0500]/text/[F ... /[From "I ... /[From "Administrator" <dmailprogram@netmail.com>][Date 1 Dec 2003 13:01:29 +0100]/UNNAMED Infected: Email-Worm.Win32.Swen skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Greg Mace <MaceG@esi.com>][Date Wed, 26 Nov 2003 06:55:14 -0800]/text/[From "Administrator" <mailautomat@freemail.com>][Date 26 Nov 2003 16:40:16 +0000]/UNNAMED/[From Shelby Martz <shellieprevatte@eudoramail.com>][Date Wed, 26 Nov 2003 11:45:13 -0500]/text/[F ... /[From "Inet Storage ... /[From Greg Mace <MaceG@esi.com>][Date Mon, 1 Dec 2003 09:59:17 -0800]/UNNAMED Infected: Email-Worm.Win32.Swen skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Greg Mace <MaceG@esi.com>][Date Wed, 26 Nov 2003 06:55:14 -0800]/text/[From "Administrator" <mailautomat@freemail.com>][Date 26 Nov 2003 16:40:16 +0000]/UNNAMED/[From Shelby Martz <shellieprevatte@eudoramail.com>][Date Wed, 26 Nov 2003 11:45:13 -0500]/text/[F ... /[From "Inet Storage Syste ... /[From sdshuman@harbornet.com][Date Mon, 01 Dec 2003 08:26:24 -0800]/text Infected: Email-Worm.Win32.Swen skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Greg Mace <MaceG@esi.com>][Date Wed, 26 Nov 2003 06:55:14 -0800]/text/[From "Administrator" <mailautomat@freemail.com>][Date 26 Nov 2003 16:40:16 +0000]/UNNAMED/[From Shelby Martz <shellieprevatte@eudoramail.com>][Date Wed, 26 Nov 2003 11:45:13 -0500]/text/[F ... /[From "Inet Storage System" <jmai ... /[From DHSID@aol.com][Date Sun, 30 Nov 2003 16:35:47 EST]/UNNAMED Infected: Email-Worm.Win32.Swen skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Greg Mace <MaceG@esi.com>][Date Wed, 26 Nov 2003 06:55:14 -0800]/text/[From "Administrator" <mailautomat@freemail.com>][Date 26 Nov 2003 16:40:16 +0000]/UNNAMED/[From Shelby Martz <shellieprevatte@eudoramail.com>][Date Wed, 26 Nov 2003 11:45:13 -0500]/text/[F ... /[From "Inet Storage System" <jmailprogram@aol.net>][Date Sun, 30 Nov 2003 21:23:35 +0100 (CET)]/UNNAMED Infected: Email-Worm.Win32.Swen skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Greg Mace <MaceG@esi.com>][Date Wed, 26 Nov 2003 06:55:14 -0800]/text/[From "Administrator" <mailautomat@freemail.com>][Date 26 Nov 2003 16:40:16 +0000]/UNNAMED/[From Shelby Martz <shellieprevatte@eudoramail.com>][Date Wed, 26 Nov 2003 11:45:13 -0500]/text/[Fr ... /[From "network mail service" <imailprogram@netmail.net>][Date Tue, 2 Dec 2003 14:49:59 -0500]/UNNAMED Infected: Email-Worm.Win32.Swen skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Greg Mace <MaceG@esi.com>][Date Wed, 26 Nov 2003 06:55:14 -0800]/text/[From "Administrator" <mailautomat@freemail.com>][Date 26 Nov 2003 16:40:16 +0000]/UNNAMED/[From Shelby Martz <shellieprevatte@eudoramail.com>][Date Wed, 26 Nov 2003 11:45:13 -0500]/text/[Fr ... /[From " ... /[From ... /[From Greg Mace <MaceG@esi.com>][Date Tue, 2 Dec 2003 07:27:53 -0800]/UNNAMED Infected: Email-Worm.Win32.Swen skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Greg Mace <MaceG@esi.com>][Date Wed, 26 Nov 2003 06:55:14 -0800]/text/[From "Administrator" <mailautomat@freemail.com>][Date 26 Nov 2003 16:40:16 +0000]/UNNAMED/[From Shelby Martz <shellieprevatte@eudoramail.com>][Date Wed, 26 Nov 2003 11:45:13 -0500]/text/[Fr ... /[From " ... /[From Greg Hardy <GHardy@rocketmail.com>][Date Tue, 2 Dec 2003 07:12:04 -0800 (PST)]/text Infected: Email-Worm.Win32.Swen skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Greg Mace <MaceG@esi.com>][Date Wed, 26 Nov 2003 06:55:14 -0800]/text/[From "Administrator" <mailautomat@freemail.com>][Date 26 Nov 2003 16:40:16 +0000]/UNNAMED/[From Shelby Martz <shellieprevatte@eudoramail.com>][Date Wed, 26 Nov 2003 11:45:13 -0500]/text/[Fr ... /[From "html-news@ashampoo.com" <html-news@ashampoo.com>][Date Sat, 29 Nov 2003 19:46:18 +0100]/UNNAMED Infected: Email-Worm.Win32.Swen skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Greg Mace <MaceG@esi.com>][Date Wed, 26 Nov 2003 06:55:14 -0800]/text/[From "Administrator" <mailautomat@freemail.com>][Date 26 Nov 2003 16:40:16 +0000]/UNNAMED/[From Shelby Martz <shellieprevatte@eudoramail.com>][Date Wed, 26 Nov 2003 11:45:13 -0500]/text/[From <modest ... /[From Rodney Walbright <zherdtas@spinster.co.uk>][Date Sat, 29 Nov 2003 04:55:08 -0500]/text Infected: Email-Worm.Win32.Swen skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Greg Mace <MaceG@esi.com>][Date Wed, 26 Nov 2003 06:55:14 -0800]/text/[From "Administrator" <mailautomat@freemail.com>][Date 26 Nov 2003 16:40:16 +0000]/UNNAMED/[From Shelby Martz <shellieprevatte@eudoramail.com>][Date Wed, 26 Nov 2003 11:45:13 -0500]/text/[From <modestacutler@mail15.com>][Date Sat, 29 Nov 2003 10:33:30 +0000]/UNNAMED Infected: Email-Worm.Win32.Swen skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Greg Mace <MaceG@esi.com>][Date Wed, 26 Nov 2003 06:55:14 -0800]/text/[From "Administrator" <mailautomat@freemail.com>][Date 26 Nov 2003 16:40:16 +0000]/UNNAMED/[From Shelby Martz <shellieprevatte@eudoramail.com>][Date Wed, 26 Nov 2003 11:45:13 -0500]/text/ ... /[From "Net Storage System" <postautomat@america.com>][Date Wed, 3 Dec 2003 12:35:35 +0100 (CET)]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Greg Mace <MaceG@esi.com>][Date Wed, 26 Nov 2003 06:55:14 -0800]/text/[From "Administrator" <mailautomat@freemail.com>][Date 26 Nov 2003 16:40:16 +0000]/UNNAMED/[From Shelby Martz <shellieprevatte@eudoramail.com>][Date Wed, 26 Nov 2003 11:45:13 -0500]/text/[From Bahram Adrangi <adrangi@up.edu>][Date Tue, 02 Dec 2003 21:06:49 -0800]/text Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Greg Mace <MaceG@esi.com>][Date Wed, 26 Nov 2003 06:55:14 -0800]/text/[From "Administrator" <mailautomat@freemail.com>][Date 26 Nov 2003 16:40:16 +0000]/UNNAMED/[From Shelby Martz <shellieprevatte@eudoramail.com> ... /[From Submi ... /[From "Administrator" <postbot@rocketmail.net>][Date Wed, 10 Dec 2003 15:02:19 +0100 (added by postmaster@mail-1.tiscali ... /UNNAMED Infected: Email-Worm.Win32.Swen skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Greg Mace <MaceG@esi.com>][Date Wed, 26 Nov 2003 06:55:14 -0800]/text/[From "Administrator" <mailautomat@freemail.com>][Date 26 Nov 2003 16:40:16 +0000]/UNNAMED/[From Shelby Martz <shellieprevatte@eudoramail.com> ... /[From Submi ... /[From "Administrator" <postbot@rocketmail.net>][Date Wed, 10 Dec 2003 15:02:19 +0100 (added by postmaster@mail-1.tiscali.it)]/UNNAMED Infected: Email-Worm.Win32.Swen skipped

[stickfish]

C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Greg Mace <MaceG@esi.com>][Date Wed, 26 Nov 2003 06:55:14 -0800]/text/[From "Administrator" <mailautomat@freemail.com>][Date 26 Nov 2003 16:40:16 +0000]/UNNAMED/[From Shelby Martz <shellieprevatte@eudoramail.com> ... /[From Submitted using SMTP AUTH at out005.verizon. ... /[From "archer wright" <abunkie55@earthlink.net>][Date Wed, 10 Dec 2003 06:34:49 -0600]/UNNAMED Infected: Email-Worm.Win32.Swen skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Greg Mace <MaceG@esi.com>][Date Wed, 26 Nov 2003 06:55:14 -0800]/text/[From "Administrator" <mailautomat@freemail.com>][Date 26 Nov 2003 16:40:16 +0000]/UNNAMED/[From Shelby Martz <shellieprevatte@eudoramail.com> ... /[From Submitted using SMTP AUTH at out005.verizon.net from [4.5.54.87] at Tue, 9 D ... /[From Nw.Phl@kp.org][Date Tue, 9 Dec 2003 16:01:49 -0800]/text Infected: Email-Worm.Win32.Swen skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Greg Mace <MaceG@esi.com>][Date Wed, 26 Nov 2003 06:55:14 -0800]/text/[From "Administrator" <mailautomat@freemail.com>][Date 26 Nov 2003 16:40:16 +0000]/UNNAMED/[From Shelby Martz <shellieprevatte@eudoramail.com> ... /[From Submitted using SMTP AUTH at out005.verizon.net from [4.5.54.87] at Tue, 9 Dec 2003 14:32:58 -0600][Date Tue, 9 Dec 2003 12:32:59 -0800]/UNNAMED Infected: Email-Worm.Win32.Swen skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Greg Mace <MaceG@esi.com>][Date Wed, 26 Nov 2003 06:55:14 -0800]/text/[From "Administrator" <mailautomat@freemail.com>][Date 26 Nov 2003 16:40:16 +0000]/UNNAMED/[From Shelby Martz <shellieprevatte@eudoramail.com>][D ... /[From Submitted using SMTP AUTH at out004.verizon.net from [4.5.54.87] at Tue, 9 Dec 2003 12:46:40 -0600][Date Tue, 9 Dec 2003 10:46:41 -0800]/text Infected: Email-Worm.Win32.Swen skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Greg Mace <MaceG@esi.com>][Date Wed, 26 Nov 2003 06:55:14 -0800]/text/[From "Administrator" <mailautomat@freemail.com>][Date 26 Nov 2003 16:40:16 +0000]/UNNAMED/[From Shelby Martz <shellieprevatte@eudoramail.com>][Date Wed, 26 Nov 2003 11:45:13 -0500]/text/[From Yesworld <yesworld@YesWorld.com>][Date Tue, 9 Dec 2003 07:52:35 -0500 (EST)]/text Infected: Email-Worm.Win32.Swen skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Greg Mace <MaceG@esi.com>][Date Wed, 26 Nov 2003 06:55:14 -0800]/text/[From "Administrator" <mailautomat@freemail.com>][Date 26 Nov 2003 16:40:16 +0000]/UNNAMED/[From Shelby Martz <shellieprevatte@eudoramail.com>][Date Wed, 26 Nov 2003 11:45:13 -0500]/text Infected: Email-Worm.Win32.Swen skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Greg Mace <MaceG@esi.com>][Date Wed, 26 Nov 2003 06:55:14 -0800]/text/[From "Administrator" <mailautomat@freemail.com>][Date 26 Nov 2003 16:40:16 +0000]/UNNAMED Infected: Email-Worm.Win32.Swen skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Greg Mace <MaceG@esi.com>][Date Wed, 26 Nov 2003 06:55:14 -0800]/text Infected: Email-Worm.Win32.Swen skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From orders@cabelas.com][Date Sat, 17 Jan 2004 00:53:04 -0700]/text/[From "Admin" <webengine@bigfoot.com>][Date Sat, 17 Jan 2004 18:21:32 +0100 (MET)]/UNNAMED/html Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From orders@cabelas.com][Date Sat, 17 Jan 2004 00:53:04 -0700]/text/[From "Admin" <webengine@bigfoot.com>][Date Sat, 17 Jan 2004 18:21:32 +0100 (MET)]/UNNAMED/[From "Postmaster" <mailerservice@microsoft.net>][Date Sat, 17 Jan 2004 11:56:38 -0600]/UNNAMED/html Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From orders@cabelas.com][Date Sat, 17 Jan 2004 00:53:04 -0700]/text/[From "Admin" <webengine@bigfoot.com>][Date Sat, 17 Jan 2004 18:21:32 +0100 (MET)]/UNNAMED/[From "Postmaster" <mailerservice@microsoft.net>][Date Sat, 17 Jan 2004 11:56:38 -0600]/UNNAMED/gqyim.exe Infected: Email-Worm.Win32.Swen skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From orders@cabelas.com][Date Sat, 17 Jan 2004 00:53:04 -0700]/text/[From "Admin" <webengine@bigfoot.com>][Date Sat, 17 Jan 2004 18:21:32 +0100 (MET)]/UNNAMED/[From "Postmaster" <mailerservice@microsoft.net>][Date Sat, 17 Jan 2004 11 ... /[From "message system" <masterengine@puremail.com>][Date Sun, 18 Jan 2004 17:00:47 +1100 (added by postmaster@iprimus.com.au ... /html Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From orders@cabelas.com][Date Sat, 17 Jan 2004 00:53:04 -0700]/text/[From "Admin" <webengine@bigfoot.com>][Date Sat, 17 Jan 2004 18:21:32 +0100 (MET)]/UNNAMED/[From "Postmaster" <mailerservice@microsoft.net>][Date Sat, 17 Jan 2004 11 ... /[From "message system" <masterengine@purem ... /[From postengine@puremail.com][Date Date header was inserted by smtp04.wxs.n ... /html Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From orders@cabelas.com][Date Sat, 17 Jan 2004 00:53:04 -0700]/text/[From "Admin" <webengine@bigfoot.com>][Date Sat, 17 Jan 2004 18:21:32 +0100 (MET)]/UNNAMED/[From "Postmaster" <mailerservice@microsoft.net>][Date Sat, 17 Jan 2004 11 ... /[From "message system" <masterengine@purem ... /[From postengine@puremail.com][Date Date header was inserted by smtp04.wxs.nl]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload skipped

[stickfish]

C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From orders@cabelas.com][Date Sat, 17 Jan 2004 00:53:04 -0700]/text/[From "Admin" <webengine@bigfoot.com>][Date Sat, 17 Jan 2004 18:21:32 +0100 (MET)]/UNNAMED/[From "Postmaster" <mailerservice@microsoft.net>][Date Sat, 17 Jan 2004 11 ... /[From "message system" <masterengine@puremail.com>][Date Sun, 18 Jan 2004 17:00:47 +1100 (added by postmaster@iprimus.com.au)]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From orders@cabelas.com][Date Sat, 17 Jan 2004 00:53:04 -0700]/text/[From "Admin" <webengine@bigfoot.com>][Date Sat, 17 Jan 2004 18:21:32 +0100 (MET)]/UNNAMED/[From "Postmaster" <mailerservice@microsoft.net>][Date Sat, 17 Jan 2004 11:56:38 -0600]/UNNAMED/[From "archer wright" <a ... /[From "Tom Remily" <taremily@comcast.net>][Date Sat, 17 Jan 2004 17:53:46 -0800]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From orders@cabelas.com][Date Sat, 17 Jan 2004 00:53:04 -0700]/text/[From "Admin" <webengine@bigfoot.com>][Date Sat, 17 Jan 2004 18:21:32 +0100 (MET)]/UNNAMED/[From "Postmaster" <mailerservice@microsoft.net>][Date Sat, 17 Jan 2004 11:56:38 -0600]/UNNAMED/[From "archer wright" <abunkie55@earthlink.net>][Date Sat, 17 Jan 2004 13:56:32 -0600]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From orders@cabelas.com][Date Sat, 17 Jan 2004 00:53:04 -0700]/text/[From "Admin" <webengine@bigfoot.com>][Date Sat, 17 Jan 2004 18:21:32 +0100 (MET)]/UNNAMED/[From "Postmaster" <mailerservice@microsoft.net>][Date Sat, 17 Jan 2004 11:56:38 -0600]/UNNAMED Infected: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From orders@cabelas.com][Date Sat, 17 Jan 2004 00:53:04 -0700]/text/[From "Admin" <webengine@bigfoot.com>][Date Sat, 17 Jan 2004 18:21:32 +0100 (MET)]/UNNAMED Infected: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From orders@cabelas.com][Date Sat, 17 Jan 2004 00:53:04 -0700]/text Infected: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From "Dave Bax" <coinopper@hotmail.com>][Date Wed, 18 Feb 2004 14:20:26 -0800]/UNNAMED/[From "" <nmailform@rocketmail.com>][Date Thu, 19 Feb 2004 16:52:03 +1300 (NZDT)]/html Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From "Dave Bax" <coinopper@hotmail.com>][Date Wed, 18 Feb 2004 14:20:26 -0800]/UNNAMED/[From "Radiant Records" <info@radiantrecords.com>][Date Wed, 24 Mar 2004 13:24:14 -0600]/UNNAMED/[From Richard M Craig <k7rmc@juno.com>][Date Sat, 6 Dec 2003 21:47:18 -0800]/disco.zip/disco.pif Infected: Email-Worm.Win32.NetSky.c skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From "Dave Bax" <coinopper@hotmail.com>][Date Wed, 18 Feb 2004 14:20:26 -0800]/UNNAMED/[From "Radiant Records" <info@radiantrecords.com>][Date Wed, 24 Mar 2004 13:24:14 -0600]/UNNAMED/[From Richard M Craig <k7rmc@juno.com>][Date Sat, 6 Dec 2003 21:47:18 -0800]/disco.zip Infected: Email-Worm.Win32.NetSky.c skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From "Dave Bax" <coinopper@hotmail.com>][Date Wed, 18 Feb 2004 14:20:26 -0800]/UNNAMED/[From "Radiant Records" <info@radiantrecords.com>][Date Wed, 24 Mar 2004 13:24:14 -0600]/UNNAMED Infected: Email-Worm.Win32.NetSky.c skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From "Dave Bax" <coinopper@hotmail.com>][Date Wed, 18 Feb 2004 14:20:26 -0800]/UNNAMED/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Wed, 7 Apr 2004 15:57:36 -0700]/UNNAMED/[From Submitted using SMTP AUTH at out009.verizon.net from [ ... /[From "Administrator" <mailerbot@aol.net>][Date Thu, 8 Apr 2004 08:00:35 +0200 (added by postmaster@mail.tiscali.cz)]/html Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From "Dave Bax" <coinopper@hotmail.com>][Date Wed, 18 Feb 2004 14:20:26 -0800]/UNNAMED/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Wed, 7 Apr 2004 15:57:36 -0700]/UNNAMED/[From Submitted using SMTP AUTH at out009.verizon.net from [4.5.54.87] at Wed, 7 Apr 2004 18:16:48 -0500][Date Wed, 7 Apr 2004 16:16:50 -0700]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From "Dave Bax" <coinopper@hotmail.com>][Date Wed, 18 Feb 2004 14:20:26 -0800]/UNNAMED/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Wed, 7 Apr 2004 15:57:36 -0700]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From "Dave Bax" <coinopper@hotmail.com>][Date Wed, 18 Feb 2004 14:20:26 -0800]/UNNAMED Infected: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From George Yazz <kc7hkp@teleport.com>][Date Tue, 20 Apr 2004 13:22:22 -0700]/text/[From "email system" <webengine@america.net>][Date Wed, 21 Apr 2004 18:06:43 -0500]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From George Yazz <kc7hkp@teleport.com>][Date Tue, 20 Apr 2004 13:22:22 -0700]/text/[From "Ron Boyd" <ronbyd@dsl-only.net>][Date Sun, 25 Apr 2004 11:47:41 -0700]/text/[From United Mileage Plus <MileagePlus@UnitedOffers.com>][Date Mon, 26 Apr 2004 08:46:21 -0500]/UNNAMED/[From "Ron Boyd" < ... /[From Ted.Peterson@gecapital.com][Date Mon, 26 Apr 2004 23:58:56 -0800]/UNNAMED Infected: Email-Worm.Win32.Bagle.n skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From George Yazz <kc7hkp@teleport.com>][Date Tue, 20 Apr 2004 13:22:22 -0700]/text/[From "Ron Boyd" <ronbyd@dsl-only.net>][Date Sun, 25 Apr 2004 11:47:41 -0700]/text/[From United Mileage Plus <MileagePlus@UnitedOffers.com>][Date Mon, 26 Apr 2004 08:46:21 -0500]/UNNAMED/[From "Ron Boyd" <ronbyd@dsl-only.net>][Date Mon, 26 Apr 2004 23:32:38 -0700]/UNNAMED Infected: Email-Worm.Win32.Bagle.n skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From George Yazz <kc7hkp@teleport.com>][Date Tue, 20 Apr 2004 13:22:22 -0700]/text/[From "Ron Boyd" <ronbyd@dsl-only.net>][Date Sun, 25 Apr 2004 11:47:41 -0700]/text/[From United Mileage Plus <MileagePlus@UnitedOffers.com>][Date Mon, 26 Apr 2004 08:46:21 -0500]/UNNAMED Infected: Email-Worm.Win32.Bagle.n skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From George Yazz <kc7hkp@teleport.com>][Date Tue, 20 Apr 2004 13:22:22 -0700]/text/[From "Ron Boyd" <ronbyd@dsl-only.net>][Date Sun, 25 Apr 2004 11:47:41 -0700]/text Infected: Email-Worm.Win32.Bagle.n skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From George Yazz <kc7hkp@teleport.com>][Date Tue, 20 Apr 2004 13:22:22 -0700]/text Infected: Email-Worm.Win32.Bagle.n skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From "Lucinda Drake" <don.kennedy@gte.net>][Date Sat, 19 Jun 2004 16:28:04 +0400]/UNNAMED/[From "Ramon Rivera" <vtopydhflr@hotmail.com>][Date Sat, 19 Jun 2004 01:51:27 +0400]/UNNAMED/[From "Patsy Ray" <ajyenr@yahoo.com>][Date Wed, 30 Jun 2004 08:27:43 ... /[From Mail ... /[From ... /data.rtf .scr Infected: Email-Worm.Win32.NetSky.q skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From "Lucinda Drake" <don.kennedy@gte.net>][Date Sat, 19 Jun 2004 16:28:04 +0400]/UNNAMED/[From "Ramon Rivera" <vtopydhflr@hotmail.com>][Date Sat, 19 Jun 2004 01:51:27 +0400]/UNNAMED/[From "Patsy Ray" <ajyenr@yahoo.com>][Date Wed, 30 Jun 2004 08:27:43 ... /[From Mail ... /[From ... /[ . ... /[From don.morrison@chordiant.com][Date Fri, 16 Jul 2004 19:36:06 -0400]/UNNAMED Infected: Email-Worm.Win32.NetSky.q skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From "Lucinda Drake" <don.kennedy@gte.net>][Date Sat, 19 Jun 2004 16:28:04 +0400]/UNNAMED/[From "Ramon Rivera" <vtopydhflr@hotmail.com>][Date Sat, 19 Jun 2004 01:51:27 +0400]/UNNAMED/[From "Patsy Ray" <ajyenr@yahoo.com>][Date Wed, 30 Jun 2004 08:27:43 ... /[From Mail ... /[From ... /[ ... /[From "Gay" <Monte489@hotmail.com>][Date Sat, 17 Jul 2004 01:46:56 +0500]/UNNAMED Infected: Email-Worm.Win32.NetSky.q skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From "Lucinda Drake" <don.kennedy@gte.net>][Date Sat, 19 Jun 2004 16:28:04 +0400]/UNNAMED/[From "Ramon Rivera" <vtopydhflr@hotmail.com>][Date Sat, 19 Jun 2004 01:51:27 +0400]/UNNAMED/[From "Patsy Ray" <ajyenr@yahoo.com>][Date Wed, 30 Jun 2004 08:27:43 ... /[From Mail ... /[From ... /[From "Roberta Souza" <ted.culin@gte.net>][Date Mon, 12 Jul 2004 10:19:25 +0400]/UNNAMED Infected: Email-Worm.Win32.NetSky.q skipped

[stickfish]

C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From "Lucinda Drake" <don.kennedy@gte.net>][Date Sat, 19 Jun 2004 16:28:04 +0400]/UNNAMED/[From "Ramon Rivera" <vtopydhflr@hotmail.com>][Date Sat, 19 Jun 2004 01:51:27 +0400]/UNNAMED/[From "Patsy Ray" <ajyenr@yahoo.com>][Date Wed, 30 Jun 2004 08:27:43 ... /[From Mail ... /[From Ca ... /[From "Lucy Jordache" <lucy@marillion.com>][Date Fri, 9 Jul 2004 16:05:08 +0100]/text Infected: Email-Worm.Win32.NetSky.q skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From "Lucinda Drake" <don.kennedy@gte.net>][Date Sat, 19 Jun 2004 16:28:04 +0400]/UNNAMED/[From "Ramon Rivera" <vtopydhflr@hotmail.com>][Date Sat, 19 Jun 2004 01:51:27 +0400]/UNNAMED/[From "Patsy Ray" <ajyenr@yahoo.com>][Date Wed, 30 Jun 2004 08:27:43 ... /[From Mail ... /[From Car ... /[From "B ... /[From promo@mypcclub.net][Date Thu, 8 Jul 2004 20:08:58 -0700]/UNNAMED Infected: Email-Worm.Win32.NetSky.q skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From "Lucinda Drake" <don.kennedy@gte.net>][Date Sat, 19 Jun 2004 16:28:04 +0400]/UNNAMED/[From "Ramon Rivera" <vtopydhflr@hotmail.com>][Date Sat, 19 Jun 2004 01:51:27 +0400]/UNNAMED/[From "Patsy Ray" <ajyenr@yahoo.com>][Date Wed, 30 Jun 2004 08:27:43 ... /[From Mail ... /[From Car ... /[From "Brad Sims" <ted.culin@gte.net>][Date Sat, 10 Jul 2004 22:18:15 +0500]/UNNAMED Infected: Email-Worm.Win32.NetSky.q skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From "Lucinda Drake" <don.kennedy@gte.net>][Date Sat, 19 Jun 2004 16:28:04 +0400]/UNNAMED/[From "Ramon Rivera" <vtopydhflr@hotmail.com>][Date Sat, 19 Jun 2004 01:51:27 +0400]/UNNAMED/[From "Patsy Ray" <ajyenr@yahoo.com>][Date Wed, 30 Jun 2004 08:27:43 ... /[From Mail ... /[From Carlson Jim-rjj ... /[From Tom Popp <ka0tp@aol.com>][Date Tue, 29 Jun 2004 10:31:51 EDT]/text Infected: Email-Worm.Win32.NetSky.q skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From "Lucinda Drake" <don.kennedy@gte.net>][Date Sat, 19 Jun 2004 16:28:04 +0400]/UNNAMED/[From "Ramon Rivera" <vtopydhflr@hotmail.com>][Date Sat, 19 Jun 2004 01:51:27 +0400]/UNNAMED/[From "Patsy Ray" <ajyenr@yahoo.com>][Date Wed, 30 Jun 2004 08:27:43 ... /[From Mail ... /[From Carlson Jim-rjjr90 <Jim.Carlson@freescale.com>][Date Tue, 29 Jun 2004 06:29:26 -0700]/UNNAMED Infected: Email-Worm.Win32.NetSky.q skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From "Lucinda Drake" <don.kennedy@gte.net>][Date Sat, 19 Jun 2004 16:28:04 +0400]/UNNAMED/[From "Ramon Rivera" <vtopydhflr@hotmail.com>][Date Sat, 19 Jun 2004 01:51:27 +0400]/UNNAMED/[From "Patsy Ray" <ajyenr@yahoo.com>][Date Wed, 30 Jun 2004 08:27:43 ... /[From Mail Delivery Subsystem <MAILER-DAEMON@motgate5.mot.com>][Date Tue, 29 Jun 2004 06:24:14 -0700 (MST)]/UNNAMED Infected: Email-Worm.Win32.NetSky.q skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From "Lucinda Drake" <don.kennedy@gte.net>][Date Sat, 19 Jun 2004 16:28:04 +0400]/UNNAMED/[From "Ramon Rivera" <vtopydhflr@hotmail.com>][Date Sat, 19 Jun 2004 01:51:27 +0400]/UNNAMED/[From "Patsy Ray" <ajyenr@yahoo.com>][Date Wed, 30 Jun 2004 08:27:43 -0400]/UNNAMED/[From Culin Edward W <Edward.Culin@irs.gov>][Date Mon, 28 Jun 2004 11:43:49 -0500]/UNNAMED Infected: Email-Worm.Win32.NetSky.q skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From "Lucinda Drake" <don.kennedy@gte.net>][Date Sat, 19 Jun 2004 16:28:04 +0400]/UNNAMED/[From "Ramon Rivera" <vtopydhflr@hotmail.com>][Date Sat, 19 Jun 2004 01:51:27 +0400]/UNNAMED/[From "Patsy Ray" <ajyenr@yahoo.com>][Date Wed, 30 Jun 2004 08:27:43 -0400]/UNNAMED Infected: Email-Worm.Win32.NetSky.q skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From "Lucinda Drake" <don.kennedy@gte.net>][Date Sat, 19 Jun 2004 16:28:04 +0400]/UNNAMED/[From "Ramon Rivera" <vtopydhflr@hotmail.com>][Date Sat, 19 Jun 2004 01:51:27 +0400]/UNNAMED Infected: Email-Worm.Win32.NetSky.q skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From "Lucinda Drake" <don.kennedy@gte.net>][Date Sat, 19 Jun 2004 16:28:04 +0400]/UNNAMED Infected: Email-Worm.Win32.NetSky.q skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From "Paul Maduell" <paul@maduellassociates.com>][Date Mon, 23 Aug 2004 12:37:04 -0700]/UNNAMED/[From linda@gte.net][Date Mon, 23 Aug 2004 14:27:13 -0600]/UNNAMED/transcript-txt.scr Infected: Email-Worm.Win32.Mydoom.o skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From "Paul Maduell" <paul@maduellassociates.com>][Date Mon, 23 Aug 2004 12:37:04 -0700]/UNNAMED/[From linda@gte.net][Date Mon, 23 Aug 2004 14:27:13 -0600]/UNNAMED Infected: Email-Worm.Win32.Mydoom.o skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From "Paul Maduell" <paul@maduellassociates.com>][Date Mon, 23 Aug 2004 12:37:04 -0700]/UNNAMED Infected: Email-Worm.Win32.Mydoom.o skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Sauvie <wuoregon@worldnet.att.net>][Date Fri, 22 Oct 2004 13:55:48 -0700]/text/[From "eBay" <eBay@reply3.ebay.com>][Date Wed, 27 Oct 2004 14:21:16 -0700]/UNNAMED/[From "Barry Posey" <barryposeyjc@devparadise.com>][Date Thu, 28 Oct 2004 19:10:10 +0000 ... /[From "Lesa Stinson" <lesastinsonvq@cim.se.fujitsu.co.jp>][Date Sun, 31 Oct 2004 10:41:22 +0000]/Loves_money.scr Infected: Email-Worm.Win32.Bagle.z skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Sauvie <wuoregon@worldnet.att.net>][Date Fri, 22 Oct 2004 13:55:48 -0700]/text/[From "eBay" <eBay@reply3.ebay.com>][Date Wed, 27 Oct 2004 14:21:16 -0700]/UNNAMED/[From "Barry Posey" <barryposeyjc@devparadise.com>][Date Thu, 28 Oct 2004 19:10:10 +0000]/html/[From "Connie Fox" <foxaccounting@comcast.net>][Date Fri, 29 Oct 2004 07:09:01 -0700]/UNNAMED Infected: Email-Worm.Win32.Bagle.z skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Sauvie <wuoregon@worldnet.att.net>][Date Fri, 22 Oct 2004 13:55:48 -0700]/text/[From "eBay" <eBay@reply3.ebay.com>][Date Wed, 27 Oct 2004 14:21:16 -0700]/UNNAMED/[From "Barry Posey" <barryposeyjc@devparadise.com>][Date Thu, 28 Oct 2004 19:10:10 +0000]/html Infected: Email-Worm.Win32.Bagle.z skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Sauvie <wuoregon@worldnet.att.net>][Date Fri, 22 Oct 2004 13:55:48 -0700]/text/[From "eBay" <eBay@reply3.ebay.com>][Date Wed, 27 Oct 2004 14:21:16 -0700]/UNNAMED Infected: Email-Worm.Win32.Bagle.z skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Sauvie <wuoregon@worldnet.att.net>][Date Fri, 22 Oct 2004 13:55:48 -0700]/text Infected: Email-Worm.Win32.Bagle.z skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html Infected: Email-Worm.Win32.Bagle.z skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox Mail Berkeley mbox: infected - 79, suspicious - 43 skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Junk/[From "Lucinda Drake" <don.kennedy@gte.net>][Date Sat, 19 Jun 2004 16:28:04 +0400]/UNNAMED/[From "Ramon Rivera" <vtopydhflr@hotmail.com>][Date Sat, 19 Jun 2004 01:51:27 +0400]/UNNAMED/[From "Patsy Ray" <ajyenr@yahoo.com>][Date Wed, 30 Jun 2004 08:27:43 -0400]/UNNAMED/[From <service@usbank.com>][Date Thu, 10 Jun 2004 11:05:56 -0600]/html Infected: Trojan-Spy.HTML.Usbankfraud.b skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Junk/[From "Lucinda Drake" <don.kennedy@gte.net>][Date Sat, 19 Jun 2004 16:28:04 +0400]/UNNAMED/[From "Ramon Rivera" <vtopydhflr@hotmail.com>][Date Sat, 19 Jun 2004 01:51:27 +0400]/UNNAMED/[From "Patsy Ray" <ajyenr@yahoo.com>][Date Wed, 30 Jun 2004 08:27:43 -0400]/UNNAMED Infected: Trojan-Spy.HTML.Usbankfraud.b skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Junk/[From "Lucinda Drake" <don.kennedy@gte.net>][Date Sat, 19 Jun 2004 16:28:04 +0400]/UNNAMED/[From "Ramon Rivera" <vtopydhflr@hotmail.com>][Date Sat, 19 Jun 2004 01:51:27 +0400]/UNNAMED Infected: Trojan-Spy.HTML.Usbankfraud.b skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Junk/[From "Lucinda Drake" <don.kennedy@gte.net>][Date Sat, 19 Jun 2004 16:28:04 +0400]/UNNAMED Infected: Trojan-Spy.HTML.Usbankfraud.b skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Junk Mail Berkeley mbox: infected - 4 skipped
C:\Documents and Settings\Ted\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\jvmimpro.jar-b825669-35bab9bb.zip/vmain.class Infected: Exploit.Java.Gimsh.b skipped
C:\Documents and Settings\Ted\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\jvmimpro.jar-b825669-35bab9bb.zip ZIP: infected - 1 skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Fri, 17 Oct 2003 08:44:20 -0700]/text/[From "Doug Oppedal" <Doug_Oppedal@pgn.com>][Date Fri, 17 Oct 2003 11:17:39 -0700]/UNNAMED/[From "Postmaster" < >][Date Fri, 17 Oct 2003 19:38:40 +0100]/html Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Fri, 17 Oct 2003 08:44:20 -0700]/text/[From "Doug Oppedal" <Doug_Oppedal@pgn.com>][Date Fri, 17 Oct 2003 11:17:39 -0700]/UNNAMED/[From "Admin" <mailbot@netmail.net>][Date Fri, 17 Oct 2003 15:08:12 -0500]/html Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Fri, 17 Oct 2003 08:44:20 -0700]/text/[From "Doug Oppedal" <Doug_Oppedal@pgn.com>][Date Fri, 17 Oct 2003 11:17:39 -0700]/UNNAMED/[From "Admin" <mailbot@netmail.net>][Date Fri, 17 Oct 2003 15:08:12 -0500]/evpk.exe Infected: Email-Worm.Win32.Swen skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Fri, 17 Oct 2003 08:44:20 -0700]/text/[From "Doug Oppedal" <Doug_Oppedal@pgn.com>][Date Fri, 17 Oct 2003 11:17:39 -0700]/UNNAMED/[From "Radiant Records" <info@radiantrecords.com>][Date Fri, 17 Oct 2003 15:25:35 -0 ... /[From "" <igzzuwq_chnxdjsb@vfuu.com>][Date Sat, 18 Oct 2003 01:35:44 +0200 (CEST)]/UPGRADE516.exe Infected: Email-Worm.Win32.Swen skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Fri, 17 Oct 2003 08:44:20 -0700]/text/[From "Doug Oppedal" <Doug_Oppedal@pgn.com>][Date Fri, 17 Oct 2003 11:17:39 -0700]/UNNAMED/[From "Radiant Records" <info@radiantrecords.com>][Date Fri, ... /[From "internet email storage service" <masterengine@microsoft.com>][Date Sat, 18 Oct 2003 01:39:24 +0200 (CEST ... /html Suspicious: Exploit.HTML.Iframe.FileDownload skipped

[stickfish]

C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Fri, 17 Oct 2003 08:44:20 -0700]/text/[From "Doug Oppedal" <Doug_Oppedal@pgn.com>][Date Fri, 17 Oct 2003 11:17:39 -0700]/UNNAMED/[From "Radiant Records" <info@radiantrecords.com>][Date Fri, ... /[F ... /[From "ms internet email storage system" <postroutine@bigfoot.com>][Date Sat, 18 Oct 2003 01:04:53 +010 ... /html Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Fri, 17 Oct 2003 08:44:20 -0700]/text/[From "Doug Oppedal" <Doug_Oppedal@pgn.com>][Date Fri, 17 Oct 2003 11:17:39 -0700]/UNNAMED/[From "Radiant Records" <info@radiantrecords.com>][Date Fri, ... /[F ... /[From ... /[From "Administrator" <mailerdaemon@america.com>][Date Sat, 18 Oct 2003 00:29:29 +0000 (GMT ... /html Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Fri, 17 Oct 2003 08:44:20 -0700]/text/[From "Doug Oppedal" <Doug_Oppedal@pgn.com>][Date Fri, 17 Oct 2003 11:17:39 -0700]/UNNAMED/[From "Radiant Records" <info@radiantrecords.com>][Date Fri, ... /[F ... /[From ... /[From "Administrator" <mailerdaemon@america.com>][Date Sat, 18 Oct 2003 00:29:29 +0000 ... /fqmb.exe Infected: Email-Worm.Win32.Swen skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Fri, 17 Oct 2003 08:44:20 -0700]/text/[From "Doug Oppedal" <Doug_Oppedal@pgn.com>][Date Fri, 17 Oct 2003 11:17:39 -0700]/UNNAMED/[From "Radiant Records" <info@radiantrecords.com>][Date Fri, ... /[F ... /[From ... /[From "A ... /[From "Postmaster" <masterdaemon@yahoo.net>][Date Fri, 17 Oct 2003 23:32:03 -0600]/html Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Fri, 17 Oct 2003 08:44:20 -0700]/text/[From "Doug Oppedal" <Doug_Oppedal@pgn.com>][Date Fri, 17 Oct 2003 11:17:39 -0700]/UNNAMED/[From "Radiant Records" <info@radiantrecords.com>][Date Fri, ... /[F ... /[From ... /[From ... /[From "Public Support" <prhhtjstg@qyvi.net>][Date Sat, 18 Oct 2003 09:20:31 +0100]/Qix.exe Infected: Email-Worm.Win32.Swen skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Fri, 17 Oct 2003 08:44:20 -0700]/text/[From "Doug Oppedal" <Doug_Oppedal@pgn.com>][Date Fri, 17 Oct 2003 11:17:39 -0700]/UNNAMED/[From "Radiant Records" <info@radiantrecords.com>][Date Fri, ... /[F ... /[From ... /[From ... /[From "administrator" <tmailbot@microsoft.com>][Date Sat, 18 Oct 2003 04:50:02 -0400]/html Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Fri, 17 Oct 2003 08:44:20 -0700]/text/[From "Doug Oppedal" <Doug_Oppedal@pgn.com>][Date Fri, 17 Oct 2003 11:17:39 -0700]/UNNAMED/[From "Radiant Records" <info@radiantrecords.com>][Date Fri, ... /[F ... /[From ... /[From "html-news@ashampoo.com" <html-news@ashampoo.com>][Date Sat, 18 Oct 2003 10:32:58 +0200]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Fri, 17 Oct 2003 08:44:20 -0700]/text/[From "Doug Oppedal" <Doug_Oppedal@pgn.com>][Date Fri, 17 Oct 2003 11:17:39 -0700]/UNNAMED/[From "Radiant Records" <info@radiantrecords.com>][Date Fri, ... /[F ... /[From ... /[From "Administrator" ... /[From <@leonardointernet.com>][Date Sat, 18 Oct 2003 01:16:00 +0100]/text Infected: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Fri, 17 Oct 2003 08:44:20 -0700]/text/[From "Doug Oppedal" <Doug_Oppedal@pgn.com>][Date Fri, 17 Oct 2003 11:17:39 -0700]/UNNAMED/[From "Radiant Records" <info@radiantrecords.com>][Date Fri, ... /[F ... /[From ... /[From "Administrator" <mailerdaemon@america.com>][Date Sat, 18 Oct 2003 00:29:29 +0000 (GMT)]/UNNAMED Infected: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Fri, 17 Oct 2003 08:44:20 -0700]/text/[From "Doug Oppedal" <Doug_Oppedal@pgn.com>][Date Fri, 17 Oct 2003 11:17:39 -0700]/UNNAMED/[From "Radiant Records" <info@radiantrecords.com>][Date Fri, ... /[F ... /[From "ms internet email storage system" <postroutine@bigfoot.com>][Date Sat, 18 Oct 2003 01:04:53 +0100]/UNNAMED Infected: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Fri, 17 Oct 2003 08:44:20 -0700]/text/[From "Doug Oppedal" <Doug_Oppedal@pgn.com>][Date Fri, 17 Oct 2003 11:17:39 -0700]/UNNAMED/[From "Radiant Records" <info@radiantrecords.com>][Date Fri, ... /[From "internet email storage service" <masterengine@microsoft.com>][Date Sat, 18 Oct 2003 01:39:24 +0200 (CEST)]/UNNAMED Infected: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Fri, 17 Oct 2003 08:44:20 -0700]/text/[From "Doug Oppedal" <Doug_Oppedal@pgn.com>][Date Fri, 17 Oct 2003 11:17:39 -0700]/UNNAMED/[From "Radiant Records" <info@radiantrecords.com>][Date Fri, 17 Oct 2003 15:25:35 -0500]/UNNAMED/[From Terry@k8smc.com][Date Fri, 17 Oct 2003 18:31:01 -0400]/UNNAMED Infected: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Fri, 17 Oct 2003 08:44:20 -0700]/text/[From "Doug Oppedal" <Doug_Oppedal@pgn.com>][Date Fri, 17 Oct 2003 11:17:39 -0700]/UNNAMED/[From "Radiant Records" <info@radiantrecords.com>][Date Fri, 17 Oct 2003 15:25:35 -0500]/UNNAMED Infected: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Fri, 17 Oct 2003 08:44:20 -0700]/text/[From "Doug Oppedal" <Doug_Oppedal@pgn.com>][Date Fri, 17 Oct 2003 11:17:39 -0700]/UNNAMED Infected: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Fri, 17 Oct 2003 08:44:20 -0700]/text/[From "Forrest" <rivkasolleral@eudoramail.com>][Date Tue, 21 Oct 2003 23:08:16 -0400]/html/[From "Tom Remily" <taremily@comcast.net>][Date Wed, 22 Oct 2003 07 ... /[From "Yso-8859-1 ... /[From "Postmaster" <dmaildaemon@bigfoot.com>][Date Thu, 23 Oct 2003 19:38:58 +0100]/UNNAMED Infected: Email-Worm.Win32.Swen skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Fri, 17 Oct 2003 08:44:20 -0700]/text/[From "Forrest" <rivkasolleral@eudoramail.com>][Date Tue, 21 Oct 2003 23:08:16 -0400]/html/[From "Tom Remily" <taremily@comcast.net>][Date Wed, 22 Oct 2003 07 ... /[From "net mail delivery service" <webroutine@microsoft.net>][Date Fri, 24 Oct 2003 11:40:14 +0900 (JST)]/UNNAMED Infected: Email-Worm.Win32.Swen skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Fri, 17 Oct 2003 08:44:20 -0700]/text/[From "Forrest" <rivkasolleral@eudoramail.com>][Date Tue, 21 Oct 2003 23:08:16 -0400]/html/[From "Tom Remily" <taremily@comcast.net>][Date Wed, 22 Oct 2003 07 ... /[From "Yso-8 ... /[From "Paul Maduell ... /[From promo@mypcclub.com][Date Thu, 23 Oct 2003 19:03:15 -0700]/UNNAMED Infected: Email-Worm.Win32.Swen skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Fri, 17 Oct 2003 08:44:20 -0700]/text/[From "Forrest" <rivkasolleral@eudoramail.com>][Date Tue, 21 Oct 2003 23:08:16 -0400]/html/[From "Tom Remily" <taremily@comcast.net>][Date Wed, 22 Oct 2003 07 ... /[From "Yso-8 ... /[From "Paul Maduell" <paul@maduellassociates.com>][Date Thu, 23 Oct 2003 13:20:54 -0700]/UNNAMED Infected: Email-Worm.Win32.Swen skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Fri, 17 Oct 2003 08:44:20 -0700]/text/[From "Forrest" <rivkasolleral@eudoramail.com>][Date Tue, 21 Oct 2003 23:08:16 -0400]/html/[From "Tom Remily" <taremily@comcast.net>][Date Wed, 22 Oct 2003 07 ... /[From "Yso-8859-1?Q? ... /[From Yesworld <yesworld@YesWorld.com>][Date Thu, 23 Oct 2003 08:10:38 -0400 (EDT)]/text Infected: Email-Worm.Win32.Swen skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Fri, 17 Oct 2003 08:44:20 -0700]/text/[From "Forrest" <rivkasolleral@eudoramail.com>][Date Tue, 21 Oct 2003 23:08:16 -0400]/html/[From "Tom Remily" <taremily@comcast.net>][Date Wed, 22 Oct 2003 07 ... /[From "Yso-8859-1?Q?Info@RadiantRecords.com?@<Info@RadiantRecords.com>][Date Thu, 23 Oct 2003 12:06:12 -0500]/text Infected: Email-Worm.Win32.Swen skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Fri, 17 Oct 2003 08:44:20 -0700]/text/[From "Forrest" <rivkasolleral@eudoramail.com>][Date Tue, 21 Oct 2003 23:08:16 -0400]/html/[From "Tom Remily" <taremily@comcast.net>][Date Wed, 22 Oct 2003 07:13:13 -0700]/UNNAMED Infected: Email-Worm.Win32.Swen skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Fri, 17 Oct 2003 08:44:20 -0700]/text/[From "Forrest" <rivkasolleral@eudoramail.com>][Date Tue, 21 Oct 2003 23:08:16 -0400]/html Infected: Email-Worm.Win32.Swen skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Fri, 17 Oct 2003 08:44:20 -0700]/text/[From "Paul Maduell" <paul@maduellassociates.com>][Date Fri, 24 Oct 2003 09:45:55 -0700]/UNNAMED/[From "network mail system" <masterservice@aol.com>][Date Fri, 24 Oct 2003 13:33:54 -0500]/html Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Fri, 17 Oct 2003 08:44:20 -0700]/text/[From "Paul Maduell" <paul@maduellassociates.com>][Date Fri, 24 Oct 2003 09:45:55 -0700]/UNNAMED/[From "Administrator" <nmaildaemon@netmail.net>][Date Fri, 24 Oct 2003 16:31:26 -0300]/UNNAMED/html Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Fri, 17 Oct 2003 08:44:20 -0700]/text/[From "Paul Maduell" <paul@maduellassociates.com>][Date Fri, 24 Oct 2003 09:45:55 -0700]/UNNAMED/[From "Administrator" <nmaildaemon@netmail.net>][Date Fri, 24 Oct 2003 16:31:26 ... /[From "P ... /[From "Admin" <qmailform@freemail.net>][Date Tue, 21 Oct 2003 14:36:09 -0500]/html Suspicious: Exploit.HTML.Iframe.FileDownload skipped

[stickfish]

C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Fri, 17 Oct 2003 08:44:20 -0700]/text/[From "Paul Maduell" <paul@maduellassociates.com>][Date Fri, 24 Oct 2003 09:45:55 -0700]/UNNAMED/[From "Administrator" <nmaildaemon@netmail.net>][Date Fri, 24 O ... /[From JobsOnline Career Tip of the Day <careertips@ncube.com>][Date Sat, 25 Oct 2003 01:04:39 +0000 (GMT)]/html Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Fri, 17 Oct 2003 08:44:20 -0700]/text/[From "Paul Maduell" <paul@maduellassociates.com>][Date Fri, 24 Oct 2003 09:45:55 -0700]/UNNAMED/[From "Administrator" <nmaildaemon@netmail.net>][Date Fri, 24 Oct 2003 16 ... /[From "History Channel" <HistoryChannel@aetv.chtah.com>][Date Sat, 25 Oct 2003 00:17:53 -0000]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Fri, 17 Oct 2003 08:44:20 -0700]/text/[From "Paul Maduell" <paul@maduellassociates.com>][Date Fri, 24 Oct 2003 09:45:55 -0700]/UNNAMED/[From "Administrator" <nmaildaemon@netmail.net>][Date Fri, 24 Oct 2003 16:31:26 ... /[From "Paul Maduell" <paul@maduellassociates.com>][Date Fri, 24 Oct 2003 12:45:20 -0700]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Fri, 17 Oct 2003 08:44:20 -0700]/text/[From "Paul Maduell" <paul@maduellassociates.com>][Date Fri, 24 Oct 2003 09:45:55 -0700]/UNNAMED/[From "Administrator" <nmaildaemon@netmail.net>][Date Fri, 24 Oct 2003 16:31:26 -0300]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Fri, 17 Oct 2003 08:44:20 -0700]/text/[From "Paul Maduell" <paul@maduellassociates.com>][Date Fri, 24 Oct 2003 09:45:55 -0700]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Fri, 17 Oct 2003 08:44:20 -0700]/text Infected: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From "Jill King" <kingbv@wissen.de>][Date Mon, 17 Nov 2003 09:04:48 +0000]/html/[From "John and Susan Signor" <jsignor@e-z.net>][Date Mon, 17 Nov 2003 08:20:10 -0800 (Pacific Standard Time)]/UNNAMED/[From Culin Edward W <Edward.Culin@irs.gov>][Date Mon, 17 Nov 2003 10:36:41 ... /[From "Network Mail Storage Service" <>][Date Tue, 18 Nov 2003 05:31:40 +0100 (CET ... /html Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From "Jill King" <kingbv@wissen.de>][Date Mon, 17 Nov 2003 09:04:48 +0000]/html/[From "John and Susan Signor" <jsignor@e-z.net>][Date Mon, 17 Nov 2003 08:20:10 -0800 (Pacific Standard Time)]/UNNAMED/[From Culin Edward W <Edward.Culin@irs.gov>][Date Mon, 17 Nov 2003 10:36:41 ... /[From "Network Mail Storage Service" <>][Date Tue, 18 Nov 2003 05:31:40 +0100 (CET)]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From "Jill King" <kingbv@wissen.de>][Date Mon, 17 Nov 2003 09:04:48 +0000]/html/[From "John and Susan Signor" <jsignor@e-z.net>][Date Mon, 17 Nov 2003 08:20:10 -0800 (Pacific Standard Time)]/UNNAMED/[From Culin Edward W <Edward.Culin@irs.gov>][Date Mon, 17 Nov 2003 10:36:41 -0 ... /[F ... /[From mike.w.knifong@exgate.tek.com][Date Mon, 17 Nov 2003 15:33:27 -0800]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From "Jill King" <kingbv@wissen.de>][Date Mon, 17 Nov 2003 09:04:48 +0000]/html/[From "John and Susan Signor" <jsignor@e-z.net>][Date Mon, 17 Nov 2003 08:20:10 -0800 (Pacific Standard Time)]/UNNAMED/[From Culin Edward W <Edward.Culin@irs.gov>][Date Mon, 17 Nov 2003 10:36:41 -0 ... /[From Culin Edward W <Edward.Culin@irs.gov>][Date Mon, 17 Nov 2003 12:53:55 -0600]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From "Jill King" <kingbv@wissen.de>][Date Mon, 17 Nov 2003 09:04:48 +0000]/html/[From "John and Susan Signor" <jsignor@e-z.net>][Date Mon, 17 Nov 2003 08:20:10 -0800 (Pacific Standard Time)]/UNNAMED/[From Culin Edward W <Edward.Culin@irs.gov>][Date Mon, 17 Nov 2003 10:36:41 -0600]/UNNAMED/[From "Argentia" <wvhjy6@yahoo.com.hk>][Date Mon, 17 Nov 2003 12:51:58 -0600]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From "Jill King" <kingbv@wissen.de>][Date Mon, 17 Nov 2003 09:04:48 +0000]/html/[From "John and Susan Signor" <jsignor@e-z.net>][Date Mon, 17 Nov 2003 08:20:10 -0800 (Pacific Standard Time)]/UNNAMED/[From Culin Edward W <Edward.Culin@irs.gov>][Date Mon, 17 Nov 2003 10:36:41 -0600]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From "Jill King" <kingbv@wissen.de>][Date Mon, 17 Nov 2003 09:04:48 +0000]/html/[From "John and Susan Signor" <jsignor@e-z.net>][Date Mon, 17 Nov 2003 08:20:10 -0800 (Pacific Standard Time)]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From "Jill King" <kingbv@wissen.de>][Date Mon, 17 Nov 2003 09:04:48 +0000]/html Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Greg Mace <MaceG@esi.com>][Date Wed, 26 Nov 2003 06:55:14 -0800]/text/[From "inet email delivery system" <webengine@america.com>][Date Wed, 26 Nov 2003 10:12:18 -0600]/html Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Greg Mace <MaceG@esi.com>][Date Wed, 26 Nov 2003 06:55:14 -0800]/text/[From "Administrator" <mailautomat@freemail.com>][Date 26 Nov 2003 16:40:16 +0000]/UNNAMED/html Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Greg Mace <MaceG@esi.com>][Date Wed, 26 Nov 2003 06:55:14 -0800]/text/[From "Administrator" <mailautomat@freemail.com>][Date 26 Nov 2003 16:40:16 +0000]/UNNAMED/[From Shelby Martz <shellieprevatte@eudoramail.com>][Date Wed, 26 Nov 2003 11:45:13 -0500]/text/[From Ticketmaster <newsletter@reply.ticketmaster.com>][Date 26 Nov 2003 09:56:10 -0800]/UNNAMED Infected: Email-Worm.Win32.Swen skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Greg Mace <MaceG@esi.com>][Date Wed, 26 Nov 2003 06:55:14 -0800]/text/[From "Administrator" <mailautomat@freemail.com>][Date 26 Nov 2003 16:40:16 +0000]/UNNAMED/[From Shelby Martz <shellieprevatte@eudoramail.com>][Date Wed, 26 Nov 2003 11:45:13 -0500]/text/[From promo@mypc ... /[From "delivery service" <mmailbot@america.com>][Date 27 Nov 2003 18:43:20 +0100]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Greg Mace <MaceG@esi.com>][Date Wed, 26 Nov 2003 06:55:14 -0800]/text/[From "Administrator" <mailautomat@freemail.com>][Date 26 Nov 2003 16:40:16 +0000]/UNNAMED/[From Shelby Martz <shellieprevatte@eudoramail.com>][Date Wed, 26 Nov 2003 11:45:13 -0500]/text/[From promo@mypcclub.com][Date Wed, 26 Nov 2003 20:29:11 -0800]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Greg Mace <MaceG@esi.com>][Date Wed, 26 Nov 2003 06:55:14 -0800]/text/[From "Administrator" <mailautomat@freemail.com>][Date 26 Nov 2003 16:40:16 +0000]/UNNAMED/[From Shelby Martz <shellieprevatte@eudoramail.com>][Date Wed, 26 Nov 2003 11:45:13 -0500]/text/[F ... /[From "I ... /[From "Postmaster" <xmailform@bigfoot.com>][Date Sun, 30 Nov 2003 16:47:46 -0600]/UNNAMED Infected: Email-Worm.Win32.Swen skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Greg Mace <MaceG@esi.com>][Date Wed, 26 Nov 2003 06:55:14 -0800]/text/[From "Administrator" <mailautomat@freemail.com>][Date 26 Nov 2003 16:40:16 +0000]/UNNAMED/[From Shelby Martz <shellieprevatte@eudoramail.com>][Date Wed, 26 Nov 2003 11:45:13 -0500]/text/[F ... /[From "I ... /[From "Administrator" <dmailprogram@netmail.com>][Date 1 Dec 2003 13:01:29 +0100]/UNNAMED Infected: Email-Worm.Win32.Swen skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Greg Mace <MaceG@esi.com>][Date Wed, 26 Nov 2003 06:55:14 -0800]/text/[From "Administrator" <mailautomat@freemail.com>][Date 26 Nov 2003 16:40:16 +0000]/UNNAMED/[From Shelby Martz <shellieprevatte@eudoramail.com>][Date Wed, 26 Nov 2003 11:45:13 -0500]/text/[F ... /[From "Inet Storage ... /[From Greg Mace <MaceG@esi.com>][Date Mon, 1 Dec 2003 09:59:17 -0800]/UNNAMED Infected: Email-Worm.Win32.Swen skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Greg Mace <MaceG@esi.com>][Date Wed, 26 Nov 2003 06:55:14 -0800]/text/[From "Administrator" <mailautomat@freemail.com>][Date 26 Nov 2003 16:40:16 +0000]/UNNAMED/[From Shelby Martz <shellieprevatte@eudoramail.com>][Date Wed, 26 Nov 2003 11:45:13 -0500]/text/[F ... /[From "Inet Storage Syste ... /[From sdshuman@harbornet.com][Date Mon, 01 Dec 2003 08:26:24 -0800]/text Infected: Email-Worm.Win32.Swen skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Greg Mace <MaceG@esi.com>][Date Wed, 26 Nov 2003 06:55:14 -0800]/text/[From "Administrator" <mailautomat@freemail.com>][Date 26 Nov 2003 16:40:16 +0000]/UNNAMED/[From Shelby Martz <shellieprevatte@eudoramail.com>][Date Wed, 26 Nov 2003 11:45:13 -0500]/text/[F ... /[From "Inet Storage System" <jmai ... /[From DHSID@aol.com][Date Sun, 30 Nov 2003 16:35:47 EST]/UNNAMED Infected: Email-Worm.Win32.Swen skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Greg Mace <MaceG@esi.com>][Date Wed, 26 Nov 2003 06:55:14 -0800]/text/[From "Administrator" <mailautomat@freemail.com>][Date 26 Nov 2003 16:40:16 +0000]/UNNAMED/[From Shelby Martz <shellieprevatte@eudoramail.com>][Date Wed, 26 Nov 2003 11:45:13 -0500]/text/[F ... /[From "Inet Storage System" <jmailprogram@aol.net>][Date Sun, 30 Nov 2003 21:23:35 +0100 (CET)]/UNNAMED Infected: Email-Worm.Win32.Swen skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Greg Mace <MaceG@esi.com>][Date Wed, 26 Nov 2003 06:55:14 -0800]/text/[From "Administrator" <mailautomat@freemail.com>][Date 26 Nov 2003 16:40:16 +0000]/UNNAMED/[From Shelby Martz <shellieprevatte@eudoramail.com>][Date Wed, 26 Nov 2003 11:45:13 -0500]/text/[Fr ... /[From "network mail service" <imailprogram@netmail.net>][Date Tue, 2 Dec 2003 14:49:59 -0500]/UNNAMED Infected: Email-Worm.Win32.Swen skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Greg Mace <MaceG@esi.com>][Date Wed, 26 Nov 2003 06:55:14 -0800]/text/[From "Administrator" <mailautomat@freemail.com>][Date 26 Nov 2003 16:40:16 +0000]/UNNAMED/[From Shelby Martz <shellieprevatte@eudoramail.com>][Date Wed, 26 Nov 2003 11:45:13 -0500]/text/[Fr ... /[From " ... /[From ... /[From Greg Mace <MaceG@esi.com>][Date Tue, 2 Dec 2003 07:27:53 -0800]/UNNAMED Infected: Email-Worm.Win32.Swen skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Greg Mace <MaceG@esi.com>][Date Wed, 26 Nov 2003 06:55:14 -0800]/text/[From "Administrator" <mailautomat@freemail.com>][Date 26 Nov 2003 16:40:16 +0000]/UNNAMED/[From Shelby Martz <shellieprevatte@eudoramail.com>][Date Wed, 26 Nov 2003 11:45:13 -0500]/text/[Fr ... /[From " ... /[From Greg Hardy <GHardy@rocketmail.com>][Date Tue, 2 Dec 2003 07:12:04 -0800 (PST)]/text Infected: Email-Worm.Win32.Swen skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Greg Mace <MaceG@esi.com>][Date Wed, 26 Nov 2003 06:55:14 -0800]/text/[From "Administrator" <mailautomat@freemail.com>][Date 26 Nov 2003 16:40:16 +0000]/UNNAMED/[From Shelby Martz <shellieprevatte@eudoramail.com>][Date Wed, 26 Nov 2003 11:45:13 -0500]/text/[Fr ... /[From "html-news@ashampoo.com" <html-news@ashampoo.com>][Date Sat, 29 Nov 2003 19:46:18 +0100]/UNNAMED Infected: Email-Worm.Win32.Swen skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Greg Mace <MaceG@esi.com>][Date Wed, 26 Nov 2003 06:55:14 -0800]/text/[From "Administrator" <mailautomat@freemail.com>][Date 26 Nov 2003 16:40:16 +0000]/UNNAMED/[From Shelby Martz <shellieprevatte@eudoramail.com>][Date Wed, 26 Nov 2003 11:45:13 -0500]/text/[From <modest ... /[From Rodney Walbright <zherdtas@spinster.co.uk>][Date Sat, 29 Nov 2003 04:55:08 -0500]/text Infected: Email-Worm.Win32.Swen skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Greg Mace <MaceG@esi.com>][Date Wed, 26 Nov 2003 06:55:14 -0800]/text/[From "Administrator" <mailautomat@freemail.com>][Date 26 Nov 2003 16:40:16 +0000]/UNNAMED/[From Shelby Martz <shellieprevatte@eudoramail.com>][Date Wed, 26 Nov 2003 11:45:13 -0500]/text/[From <modestacutler@mail15.com>][Date Sat, 29 Nov 2003 10:33:30 +0000]/UNNAMED Infected: Email-Worm.Win32.Swen skipped

[stickfish]

C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Greg Mace <MaceG@esi.com>][Date Wed, 26 Nov 2003 06:55:14 -0800]/text/[From "Administrator" <mailautomat@freemail.com>][Date 26 Nov 2003 16:40:16 +0000]/UNNAMED/[From Shelby Martz <shellieprevatte@eudoramail.com>][Date Wed, 26 Nov 2003 11:45:13 -0500]/text/ ... /[From "Net Storage System" <postautomat@america.com>][Date Wed, 3 Dec 2003 12:35:35 +0100 (CET)]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Greg Mace <MaceG@esi.com>][Date Wed, 26 Nov 2003 06:55:14 -0800]/text/[From "Administrator" <mailautomat@freemail.com>][Date 26 Nov 2003 16:40:16 +0000]/UNNAMED/[From Shelby Martz <shellieprevatte@eudoramail.com>][Date Wed, 26 Nov 2003 11:45:13 -0500]/text/[From Bahram Adrangi <adrangi@up.edu>][Date Tue, 02 Dec 2003 21:06:49 -0800]/text Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Greg Mace <MaceG@esi.com>][Date Wed, 26 Nov 2003 06:55:14 -0800]/text/[From "Administrator" <mailautomat@freemail.com>][Date 26 Nov 2003 16:40:16 +0000]/UNNAMED/[From Shelby Martz <shellieprevatte@eudoramail.com> ... /[From Submi ... /[From "Administrator" <postbot@rocketmail.net>][Date Wed, 10 Dec 2003 15:02:19 +0100 (added by postmaster@mail-1.tiscali ... /UNNAMED Infected: Email-Worm.Win32.Swen skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Greg Mace <MaceG@esi.com>][Date Wed, 26 Nov 2003 06:55:14 -0800]/text/[From "Administrator" <mailautomat@freemail.com>][Date 26 Nov 2003 16:40:16 +0000]/UNNAMED/[From Shelby Martz <shellieprevatte@eudoramail.com> ... /[From Submi ... /[From "Administrator" <postbot@rocketmail.net>][Date Wed, 10 Dec 2003 15:02:19 +0100 (added by postmaster@mail-1.tiscali.it)]/UNNAMED Infected: Email-Worm.Win32.Swen skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Greg Mace <MaceG@esi.com>][Date Wed, 26 Nov 2003 06:55:14 -0800]/text/[From "Administrator" <mailautomat@freemail.com>][Date 26 Nov 2003 16:40:16 +0000]/UNNAMED/[From Shelby Martz <shellieprevatte@eudoramail.com> ... /[From Submitted using SMTP AUTH at out005.verizon. ... /[From "archer wright" <abunkie55@earthlink.net>][Date Wed, 10 Dec 2003 06:34:49 -0600]/UNNAMED Infected: Email-Worm.Win32.Swen skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Greg Mace <MaceG@esi.com>][Date Wed, 26 Nov 2003 06:55:14 -0800]/text/[From "Administrator" <mailautomat@freemail.com>][Date 26 Nov 2003 16:40:16 +0000]/UNNAMED/[From Shelby Martz <shellieprevatte@eudoramail.com> ... /[From Submitted using SMTP AUTH at out005.verizon.net from [4.5.54.87] at Tue, 9 D ... /[From Nw.Phl@kp.org][Date Tue, 9 Dec 2003 16:01:49 -0800]/text Infected: Email-Worm.Win32.Swen skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Greg Mace <MaceG@esi.com>][Date Wed, 26 Nov 2003 06:55:14 -0800]/text/[From "Administrator" <mailautomat@freemail.com>][Date 26 Nov 2003 16:40:16 +0000]/UNNAMED/[From Shelby Martz <shellieprevatte@eudoramail.com> ... /[From Submitted using SMTP AUTH at out005.verizon.net from [4.5.54.87] at Tue, 9 Dec 2003 14:32:58 -0600][Date Tue, 9 Dec 2003 12:32:59 -0800]/UNNAMED Infected: Email-Worm.Win32.Swen skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Greg Mace <MaceG@esi.com>][Date Wed, 26 Nov 2003 06:55:14 -0800]/text/[From "Administrator" <mailautomat@freemail.com>][Date 26 Nov 2003 16:40:16 +0000]/UNNAMED/[From Shelby Martz <shellieprevatte@eudoramail.com>][D ... /[From Submitted using SMTP AUTH at out004.verizon.net from [4.5.54.87] at Tue, 9 Dec 2003 12:46:40 -0600][Date Tue, 9 Dec 2003 10:46:41 -0800]/text Infected: Email-Worm.Win32.Swen skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Greg Mace <MaceG@esi.com>][Date Wed, 26 Nov 2003 06:55:14 -0800]/text/[From "Administrator" <mailautomat@freemail.com>][Date 26 Nov 2003 16:40:16 +0000]/UNNAMED/[From Shelby Martz <shellieprevatte@eudoramail.com>][Date Wed, 26 Nov 2003 11:45:13 -0500]/text/[From Yesworld <yesworld@YesWorld.com>][Date Tue, 9 Dec 2003 07:52:35 -0500 (EST)]/text Infected: Email-Worm.Win32.Swen skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Greg Mace <MaceG@esi.com>][Date Wed, 26 Nov 2003 06:55:14 -0800]/text/[From "Administrator" <mailautomat@freemail.com>][Date 26 Nov 2003 16:40:16 +0000]/UNNAMED/[From Shelby Martz <shellieprevatte@eudoramail.com>][Date Wed, 26 Nov 2003 11:45:13 -0500]/text Infected: Email-Worm.Win32.Swen skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Greg Mace <MaceG@esi.com>][Date Wed, 26 Nov 2003 06:55:14 -0800]/text/[From "Administrator" <mailautomat@freemail.com>][Date 26 Nov 2003 16:40:16 +0000]/UNNAMED Infected: Email-Worm.Win32.Swen skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Greg Mace <MaceG@esi.com>][Date Wed, 26 Nov 2003 06:55:14 -0800]/text Infected: Email-Worm.Win32.Swen skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From orders@cabelas.com][Date Sat, 17 Jan 2004 00:53:04 -0700]/text/[From "Admin" <webengine@bigfoot.com>][Date Sat, 17 Jan 2004 18:21:32 +0100 (MET)]/UNNAMED/html Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From orders@cabelas.com][Date Sat, 17 Jan 2004 00:53:04 -0700]/text/[From "Admin" <webengine@bigfoot.com>][Date Sat, 17 Jan 2004 18:21:32 +0100 (MET)]/UNNAMED/[From "Postmaster" <mailerservice@microsoft.net>][Date Sat, 17 Jan 2004 11:56:38 -0600]/UNNAMED/html Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From orders@cabelas.com][Date Sat, 17 Jan 2004 00:53:04 -0700]/text/[From "Admin" <webengine@bigfoot.com>][Date Sat, 17 Jan 2004 18:21:32 +0100 (MET)]/UNNAMED/[From "Postmaster" <mailerservice@microsoft.net>][Date Sat, 17 Jan 2004 11:56:38 -0600]/UNNAMED/gqyim.exe Infected: Email-Worm.Win32.Swen skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From orders@cabelas.com][Date Sat, 17 Jan 2004 00:53:04 -0700]/text/[From "Admin" <webengine@bigfoot.com>][Date Sat, 17 Jan 2004 18:21:32 +0100 (MET)]/UNNAMED/[From "Postmaster" <mailerservice@microsoft.net>][Date Sat, 17 Jan 2004 11 ... /[From "message system" <masterengine@puremail.com>][Date Sun, 18 Jan 2004 17:00:47 +1100 (added by postmaster@iprimus.com.au ... /html Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From orders@cabelas.com][Date Sat, 17 Jan 2004 00:53:04 -0700]/text/[From "Admin" <webengine@bigfoot.com>][Date Sat, 17 Jan 2004 18:21:32 +0100 (MET)]/UNNAMED/[From "Postmaster" <mailerservice@microsoft.net>][Date Sat, 17 Jan 2004 11 ... /[From "message system" <masterengine@purem ... /[From postengine@puremail.com][Date Date header was inserted by smtp04.wxs.n ... /html Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From orders@cabelas.com][Date Sat, 17 Jan 2004 00:53:04 -0700]/text/[From "Admin" <webengine@bigfoot.com>][Date Sat, 17 Jan 2004 18:21:32 +0100 (MET)]/UNNAMED/[From "Postmaster" <mailerservice@microsoft.net>][Date Sat, 17 Jan 2004 11 ... /[From "message system" <masterengine@purem ... /[From postengine@puremail.com][Date Date header was inserted by smtp04.wxs.nl]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From orders@cabelas.com][Date Sat, 17 Jan 2004 00:53:04 -0700]/text/[From "Admin" <webengine@bigfoot.com>][Date Sat, 17 Jan 2004 18:21:32 +0100 (MET)]/UNNAMED/[From "Postmaster" <mailerservice@microsoft.net>][Date Sat, 17 Jan 2004 11 ... /[From "message system" <masterengine@puremail.com>][Date Sun, 18 Jan 2004 17:00:47 +1100 (added by postmaster@iprimus.com.au)]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From orders@cabelas.com][Date Sat, 17 Jan 2004 00:53:04 -0700]/text/[From "Admin" <webengine@bigfoot.com>][Date Sat, 17 Jan 2004 18:21:32 +0100 (MET)]/UNNAMED/[From "Postmaster" <mailerservice@microsoft.net>][Date Sat, 17 Jan 2004 11:56:38 -0600]/UNNAMED/[From "archer wright" <a ... /[From "Tom Remily" <taremily@comcast.net>][Date Sat, 17 Jan 2004 17:53:46 -0800]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From orders@cabelas.com][Date Sat, 17 Jan 2004 00:53:04 -0700]/text/[From "Admin" <webengine@bigfoot.com>][Date Sat, 17 Jan 2004 18:21:32 +0100 (MET)]/UNNAMED/[From "Postmaster" <mailerservice@microsoft.net>][Date Sat, 17 Jan 2004 11:56:38 -0600]/UNNAMED/[From "archer wright" <abunkie55@earthlink.net>][Date Sat, 17 Jan 2004 13:56:32 -0600]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From orders@cabelas.com][Date Sat, 17 Jan 2004 00:53:04 -0700]/text/[From "Admin" <webengine@bigfoot.com>][Date Sat, 17 Jan 2004 18:21:32 +0100 (MET)]/UNNAMED/[From "Postmaster" <mailerservice@microsoft.net>][Date Sat, 17 Jan 2004 11:56:38 -0600]/UNNAMED Infected: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From orders@cabelas.com][Date Sat, 17 Jan 2004 00:53:04 -0700]/text/[From "Admin" <webengine@bigfoot.com>][Date Sat, 17 Jan 2004 18:21:32 +0100 (MET)]/UNNAMED Infected: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From orders@cabelas.com][Date Sat, 17 Jan 2004 00:53:04 -0700]/text Infected: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From "Dave Bax" <coinopper@hotmail.com>][Date Wed, 18 Feb 2004 14:20:26 -0800]/UNNAMED/[From "" <nmailform@rocketmail.com>][Date Thu, 19 Feb 2004 16:52:03 +1300 (NZDT)]/html Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From "Dave Bax" <coinopper@hotmail.com>][Date Wed, 18 Feb 2004 14:20:26 -0800]/UNNAMED/[From "Radiant Records" <info@radiantrecords.com>][Date Wed, 24 Mar 2004 13:24:14 -0600]/UNNAMED/[From Richard M Craig <k7rmc@juno.com>][Date Sat, 6 Dec 2003 21:47:18 -0800]/disco.zip/disco.pif Infected: Email-Worm.Win32.NetSky.c skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From "Dave Bax" <coinopper@hotmail.com>][Date Wed, 18 Feb 2004 14:20:26 -0800]/UNNAMED/[From "Radiant Records" <info@radiantrecords.com>][Date Wed, 24 Mar 2004 13:24:14 -0600]/UNNAMED/[From Richard M Craig <k7rmc@juno.com>][Date Sat, 6 Dec 2003 21:47:18 -0800]/disco.zip Infected: Email-Worm.Win32.NetSky.c skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From "Dave Bax" <coinopper@hotmail.com>][Date Wed, 18 Feb 2004 14:20:26 -0800]/UNNAMED/[From "Radiant Records" <info@radiantrecords.com>][Date Wed, 24 Mar 2004 13:24:14 -0600]/UNNAMED Infected: Email-Worm.Win32.NetSky.c skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From "Dave Bax" <coinopper@hotmail.com>][Date Wed, 18 Feb 2004 14:20:26 -0800]/UNNAMED/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Wed, 7 Apr 2004 15:57:36 -0700]/UNNAMED/[From Submitted using SMTP AUTH at out009.verizon.net from [ ... /[From "Administrator" <mailerbot@aol.net>][Date Thu, 8 Apr 2004 08:00:35 +0200 (added by postmaster@mail.tiscali.cz)]/html Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From "Dave Bax" <coinopper@hotmail.com>][Date Wed, 18 Feb 2004 14:20:26 -0800]/UNNAMED/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Wed, 7 Apr 2004 15:57:36 -0700]/UNNAMED/[From Submitted using SMTP AUTH at out009.verizon.net from [4.5.54.87] at Wed, 7 Apr 2004 18:16:48 -0500][Date Wed, 7 Apr 2004 16:16:50 -0700]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From "Dave Bax" <coinopper@hotmail.com>][Date Wed, 18 Feb 2004 14:20:26 -0800]/UNNAMED/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Wed, 7 Apr 2004 15:57:36 -0700]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From "Dave Bax" <coinopper@hotmail.com>][Date Wed, 18 Feb 2004 14:20:26 -0800]/UNNAMED Infected: Exploit.HTML.Iframe.FileDownload skipped

[stickfish]

C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From George Yazz <kc7hkp@teleport.com>][Date Tue, 20 Apr 2004 13:22:22 -0700]/text/[From "email system" <webengine@america.net>][Date Wed, 21 Apr 2004 18:06:43 -0500]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From George Yazz <kc7hkp@teleport.com>][Date Tue, 20 Apr 2004 13:22:22 -0700]/text/[From "Ron Boyd" <ronbyd@dsl-only.net>][Date Sun, 25 Apr 2004 11:47:41 -0700]/text/[From United Mileage Plus <MileagePlus@UnitedOffers.com>][Date Mon, 26 Apr 2004 08:46:21 -0500]/UNNAMED/[From "Ron Boyd" < ... /[From Ted.Peterson@gecapital.com][Date Mon, 26 Apr 2004 23:58:56 -0800]/UNNAMED Infected: Email-Worm.Win32.Bagle.n skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From George Yazz <kc7hkp@teleport.com>][Date Tue, 20 Apr 2004 13:22:22 -0700]/text/[From "Ron Boyd" <ronbyd@dsl-only.net>][Date Sun, 25 Apr 2004 11:47:41 -0700]/text/[From United Mileage Plus <MileagePlus@UnitedOffers.com>][Date Mon, 26 Apr 2004 08:46:21 -0500]/UNNAMED/[From "Ron Boyd" <ronbyd@dsl-only.net>][Date Mon, 26 Apr 2004 23:32:38 -0700]/UNNAMED Infected: Email-Worm.Win32.Bagle.n skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From George Yazz <kc7hkp@teleport.com>][Date Tue, 20 Apr 2004 13:22:22 -0700]/text/[From "Ron Boyd" <ronbyd@dsl-only.net>][Date Sun, 25 Apr 2004 11:47:41 -0700]/text/[From United Mileage Plus <MileagePlus@UnitedOffers.com>][Date Mon, 26 Apr 2004 08:46:21 -0500]/UNNAMED Infected: Email-Worm.Win32.Bagle.n skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From George Yazz <kc7hkp@teleport.com>][Date Tue, 20 Apr 2004 13:22:22 -0700]/text/[From "Ron Boyd" <ronbyd@dsl-only.net>][Date Sun, 25 Apr 2004 11:47:41 -0700]/text Infected: Email-Worm.Win32.Bagle.n skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From George Yazz <kc7hkp@teleport.com>][Date Tue, 20 Apr 2004 13:22:22 -0700]/text Infected: Email-Worm.Win32.Bagle.n skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From "Lucinda Drake" <don.kennedy@gte.net>][Date Sat, 19 Jun 2004 16:28:04 +0400]/UNNAMED/[From "Ramon Rivera" <vtopydhflr@hotmail.com>][Date Sat, 19 Jun 2004 01:51:27 +0400]/UNNAMED/[From "Patsy Ray" <ajyenr@yahoo.com>][Date Wed, 30 Jun 2004 08:27:43 ... /[From Mail ... /[From ... /data.rtf .scr Infected: Email-Worm.Win32.NetSky.q skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From "Lucinda Drake" <don.kennedy@gte.net>][Date Sat, 19 Jun 2004 16:28:04 +0400]/UNNAMED/[From "Ramon Rivera" <vtopydhflr@hotmail.com>][Date Sat, 19 Jun 2004 01:51:27 +0400]/UNNAMED/[From "Patsy Ray" <ajyenr@yahoo.com>][Date Wed, 30 Jun 2004 08:27:43 ... /[From Mail ... /[From ... /[ . ... /[From don.morrison@chordiant.com][Date Fri, 16 Jul 2004 19:36:06 -0400]/UNNAMED Infected: Email-Worm.Win32.NetSky.q skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From "Lucinda Drake" <don.kennedy@gte.net>][Date Sat, 19 Jun 2004 16:28:04 +0400]/UNNAMED/[From "Ramon Rivera" <vtopydhflr@hotmail.com>][Date Sat, 19 Jun 2004 01:51:27 +0400]/UNNAMED/[From "Patsy Ray" <ajyenr@yahoo.com>][Date Wed, 30 Jun 2004 08:27:43 ... /[From Mail ... /[From ... /[ ... /[From "Gay" <Monte489@hotmail.com>][Date Sat, 17 Jul 2004 01:46:56 +0500]/UNNAMED Infected: Email-Worm.Win32.NetSky.q skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From "Lucinda Drake" <don.kennedy@gte.net>][Date Sat, 19 Jun 2004 16:28:04 +0400]/UNNAMED/[From "Ramon Rivera" <vtopydhflr@hotmail.com>][Date Sat, 19 Jun 2004 01:51:27 +0400]/UNNAMED/[From "Patsy Ray" <ajyenr@yahoo.com>][Date Wed, 30 Jun 2004 08:27:43 ... /[From Mail ... /[From ... /[From "Roberta Souza" <ted.culin@gte.net>][Date Mon, 12 Jul 2004 10:19:25 +0400]/UNNAMED Infected: Email-Worm.Win32.NetSky.q skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From "Lucinda Drake" <don.kennedy@gte.net>][Date Sat, 19 Jun 2004 16:28:04 +0400]/UNNAMED/[From "Ramon Rivera" <vtopydhflr@hotmail.com>][Date Sat, 19 Jun 2004 01:51:27 +0400]/UNNAMED/[From "Patsy Ray" <ajyenr@yahoo.com>][Date Wed, 30 Jun 2004 08:27:43 ... /[From Mail ... /[From Ca ... /[From "Lucy Jordache" <lucy@marillion.com>][Date Fri, 9 Jul 2004 16:05:08 +0100]/text Infected: Email-Worm.Win32.NetSky.q skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From "Lucinda Drake" <don.kennedy@gte.net>][Date Sat, 19 Jun 2004 16:28:04 +0400]/UNNAMED/[From "Ramon Rivera" <vtopydhflr@hotmail.com>][Date Sat, 19 Jun 2004 01:51:27 +0400]/UNNAMED/[From "Patsy Ray" <ajyenr@yahoo.com>][Date Wed, 30 Jun 2004 08:27:43 ... /[From Mail ... /[From Car ... /[From "B ... /[From promo@mypcclub.net][Date Thu, 8 Jul 2004 20:08:58 -0700]/UNNAMED Infected: Email-Worm.Win32.NetSky.q skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From "Lucinda Drake" <don.kennedy@gte.net>][Date Sat, 19 Jun 2004 16:28:04 +0400]/UNNAMED/[From "Ramon Rivera" <vtopydhflr@hotmail.com>][Date Sat, 19 Jun 2004 01:51:27 +0400]/UNNAMED/[From "Patsy Ray" <ajyenr@yahoo.com>][Date Wed, 30 Jun 2004 08:27:43 ... /[From Mail ... /[From Car ... /[From "Brad Sims" <ted.culin@gte.net>][Date Sat, 10 Jul 2004 22:18:15 +0500]/UNNAMED Infected: Email-Worm.Win32.NetSky.q skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From "Lucinda Drake" <don.kennedy@gte.net>][Date Sat, 19 Jun 2004 16:28:04 +0400]/UNNAMED/[From "Ramon Rivera" <vtopydhflr@hotmail.com>][Date Sat, 19 Jun 2004 01:51:27 +0400]/UNNAMED/[From "Patsy Ray" <ajyenr@yahoo.com>][Date Wed, 30 Jun 2004 08:27:43 ... /[From Mail ... /[From Carlson Jim-rjj ... /[From Tom Popp <ka0tp@aol.com>][Date Tue, 29 Jun 2004 10:31:51 EDT]/text Infected: Email-Worm.Win32.NetSky.q skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From "Lucinda Drake" <don.kennedy@gte.net>][Date Sat, 19 Jun 2004 16:28:04 +0400]/UNNAMED/[From "Ramon Rivera" <vtopydhflr@hotmail.com>][Date Sat, 19 Jun 2004 01:51:27 +0400]/UNNAMED/[From "Patsy Ray" <ajyenr@yahoo.com>][Date Wed, 30 Jun 2004 08:27:43 ... /[From Mail ... /[From Carlson Jim-rjjr90 <Jim.Carlson@freescale.com>][Date Tue, 29 Jun 2004 06:29:26 -0700]/UNNAMED Infected: Email-Worm.Win32.NetSky.q skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From "Lucinda Drake" <don.kennedy@gte.net>][Date Sat, 19 Jun 2004 16:28:04 +0400]/UNNAMED/[From "Ramon Rivera" <vtopydhflr@hotmail.com>][Date Sat, 19 Jun 2004 01:51:27 +0400]/UNNAMED/[From "Patsy Ray" <ajyenr@yahoo.com>][Date Wed, 30 Jun 2004 08:27:43 ... /[From Mail Delivery Subsystem <MAILER-DAEMON@motgate5.mot.com>][Date Tue, 29 Jun 2004 06:24:14 -0700 (MST)]/UNNAMED Infected: Email-Worm.Win32.NetSky.q skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From "Lucinda Drake" <don.kennedy@gte.net>][Date Sat, 19 Jun 2004 16:28:04 +0400]/UNNAMED/[From "Ramon Rivera" <vtopydhflr@hotmail.com>][Date Sat, 19 Jun 2004 01:51:27 +0400]/UNNAMED/[From "Patsy Ray" <ajyenr@yahoo.com>][Date Wed, 30 Jun 2004 08:27:43 -0400]/UNNAMED/[From Culin Edward W <Edward.Culin@irs.gov>][Date Mon, 28 Jun 2004 11:43:49 -0500]/UNNAMED Infected: Email-Worm.Win32.NetSky.q skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From "Lucinda Drake" <don.kennedy@gte.net>][Date Sat, 19 Jun 2004 16:28:04 +0400]/UNNAMED/[From "Ramon Rivera" <vtopydhflr@hotmail.com>][Date Sat, 19 Jun 2004 01:51:27 +0400]/UNNAMED/[From "Patsy Ray" <ajyenr@yahoo.com>][Date Wed, 30 Jun 2004 08:27:43 -0400]/UNNAMED Infected: Email-Worm.Win32.NetSky.q skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From "Lucinda Drake" <don.kennedy@gte.net>][Date Sat, 19 Jun 2004 16:28:04 +0400]/UNNAMED/[From "Ramon Rivera" <vtopydhflr@hotmail.com>][Date Sat, 19 Jun 2004 01:51:27 +0400]/UNNAMED Infected: Email-Worm.Win32.NetSky.q skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From "Lucinda Drake" <don.kennedy@gte.net>][Date Sat, 19 Jun 2004 16:28:04 +0400]/UNNAMED Infected: Email-Worm.Win32.NetSky.q skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From "Paul Maduell" <paul@maduellassociates.com>][Date Mon, 23 Aug 2004 12:37:04 -0700]/UNNAMED/[From linda@gte.net][Date Mon, 23 Aug 2004 14:27:13 -0600]/UNNAMED/transcript-txt.scr Infected: Email-Worm.Win32.Mydoom.o skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From "Paul Maduell" <paul@maduellassociates.com>][Date Mon, 23 Aug 2004 12:37:04 -0700]/UNNAMED/[From linda@gte.net][Date Mon, 23 Aug 2004 14:27:13 -0600]/UNNAMED Infected: Email-Worm.Win32.Mydoom.o skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From "Paul Maduell" <paul@maduellassociates.com>][Date Mon, 23 Aug 2004 12:37:04 -0700]/UNNAMED Infected: Email-Worm.Win32.Mydoom.o skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Sauvie <wuoregon@worldnet.att.net>][Date Fri, 22 Oct 2004 13:55:48 -0700]/text/[From "eBay" <eBay@reply3.ebay.com>][Date Wed, 27 Oct 2004 14:21:16 -0700]/UNNAMED/[From "Barry Posey" <barryposeyjc@devparadise.com>][Date Thu, 28 Oct 2004 19:10:10 +0000 ... /[From "Lesa Stinson" <lesastinsonvq@cim.se.fujitsu.co.jp>][Date Sun, 31 Oct 2004 10:41:22 +0000]/Loves_money.scr Infected: Email-Worm.Win32.Bagle.z skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Sauvie <wuoregon@worldnet.att.net>][Date Fri, 22 Oct 2004 13:55:48 -0700]/text/[From "eBay" <eBay@reply3.ebay.com>][Date Wed, 27 Oct 2004 14:21:16 -0700]/UNNAMED/[From "Barry Posey" <barryposeyjc@devparadise.com>][Date Thu, 28 Oct 2004 19:10:10 +0000]/html/[From "Connie Fox" <foxaccounting@comcast.net>][Date Fri, 29 Oct 2004 07:09:01 -0700]/UNNAMED Infected: Email-Worm.Win32.Bagle.z skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Sauvie <wuoregon@worldnet.att.net>][Date Fri, 22 Oct 2004 13:55:48 -0700]/text/[From "eBay" <eBay@reply3.ebay.com>][Date Wed, 27 Oct 2004 14:21:16 -0700]/UNNAMED/[From "Barry Posey" <barryposeyjc@devparadise.com>][Date Thu, 28 Oct 2004 19:10:10 +0000]/html Infected: Email-Worm.Win32.Bagle.z skipped

[stickfish]

C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Sauvie <wuoregon@worldnet.att.net>][Date Fri, 22 Oct 2004 13:55:48 -0700]/text/[From "eBay" <eBay@reply3.ebay.com>][Date Wed, 27 Oct 2004 14:21:16 -0700]/UNNAMED Infected: Email-Worm.Win32.Bagle.z skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Sauvie <wuoregon@worldnet.att.net>][Date Fri, 22 Oct 2004 13:55:48 -0700]/text Infected: Email-Worm.Win32.Bagle.z skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html Infected: Email-Worm.Win32.Bagle.z skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox Mail Berkeley mbox: infected - 79, suspicious - 43 skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Junk/[From "Lucinda Drake" <don.kennedy@gte.net>][Date Sat, 19 Jun 2004 16:28:04 +0400]/UNNAMED/[From "Ramon Rivera" <vtopydhflr@hotmail.com>][Date Sat, 19 Jun 2004 01:51:27 +0400]/UNNAMED/[From "Patsy Ray" <ajyenr@yahoo.com>][Date Wed, 30 Jun 2004 08:27:43 -0400]/UNNAMED/[From <service@usbank.com>][Date Thu, 10 Jun 2004 11:05:56 -0600]/html Infected: Trojan-Spy.HTML.Usbankfraud.b skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Junk/[From "Lucinda Drake" <don.kennedy@gte.net>][Date Sat, 19 Jun 2004 16:28:04 +0400]/UNNAMED/[From "Ramon Rivera" <vtopydhflr@hotmail.com>][Date Sat, 19 Jun 2004 01:51:27 +0400]/UNNAMED/[From "Patsy Ray" <ajyenr@yahoo.com>][Date Wed, 30 Jun 2004 08:27:43 -0400]/UNNAMED Infected: Trojan-Spy.HTML.Usbankfraud.b skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Junk/[From "Lucinda Drake" <don.kennedy@gte.net>][Date Sat, 19 Jun 2004 16:28:04 +0400]/UNNAMED/[From "Ramon Rivera" <vtopydhflr@hotmail.com>][Date Sat, 19 Jun 2004 01:51:27 +0400]/UNNAMED Infected: Trojan-Spy.HTML.Usbankfraud.b skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Junk/[From "Lucinda Drake" <don.kennedy@gte.net>][Date Sat, 19 Jun 2004 16:28:04 +0400]/UNNAMED Infected: Trojan-Spy.HTML.Usbankfraud.b skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Junk Mail Berkeley mbox: infected - 4 skipped
C:\Documents and Settings\Ted\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\Ted\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\Ted\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\Ted\Local Settings\Application Data\Mozilla\Firefox\Profiles\49ou0ro0.default\Cache\_CACHE_001_ Object is locked skipped
C:\Documents and Settings\Ted\Local Settings\Application Data\Mozilla\Firefox\Profiles\49ou0ro0.default\Cache\_CACHE_002_ Object is locked skipped
C:\Documents and Settings\Ted\Local Settings\Application Data\Mozilla\Firefox\Profiles\49ou0ro0.default\Cache\_CACHE_003_ Object is locked skipped
C:\Documents and Settings\Ted\Local Settings\Application Data\Mozilla\Firefox\Profiles\49ou0ro0.default\Cache\_CACHE_MAP_ Object is locked skipped
C:\Documents and Settings\Ted\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\Ted\Local Settings\Temp\~DF822D.tmp Object is locked skipped
C:\Documents and Settings\Ted\Local Settings\Temporary Internet Files\AntiPhishing\B3BB5BBA-E7D5-40AB-A041-A5B1C0B26C8F.dat Object is locked skipped
C:\Documents and Settings\Ted\Local Settings\Temporary Internet Files\Content.IE5\339XLLHM\css4[1] Object is locked skipped
C:\Documents and Settings\Ted\Local Settings\Temporary Internet Files\Content.IE5\41234HA3\css4[1] Object is locked skipped
C:\Documents and Settings\Ted\Local Settings\Temporary Internet Files\Content.IE5\HYE8BLOJ\css4[1] Object is locked skipped
C:\Documents and Settings\Ted\Local Settings\Temporary Internet Files\Content.IE5\IM6PPXCE\css4[1] Object is locked skipped
C:\Documents and Settings\Ted\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\Ted\My Documents\backup.pst/Personal Folders/Achrives/26 Sep 2003 15:23 from System:Error Notice.html Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\My Documents\backup.pst Mail MS Mail: suspicious - 1 skipped
C:\Documents and Settings\Ted\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\Ted\NTUSER.DAT.LOG Object is locked skipped
C:\Program Files\NETGEAR\Media Server\BerkeleyDB\Berkeley.db Object is locked skipped
C:\Program Files\NETGEAR\Media Server\BerkeleyDB\log.0000000037 Object is locked skipped
C:\Program Files\Verizon\SmartBridge\AlertFilter.log Object is locked skipped
C:\Program Files\Verizon\SmartBridge\log\httpclient.log Object is locked skipped
C:\Program Files\Verizon\SmartBridge\SmartBridge.log Object is locked skipped
C:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped
C:\TEMP\Test\New Text Document.txt Object is locked skipped
C:\WINDOWS\CSC\00000001 Object is locked skipped
C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped
C:\WINDOWS\SchedLgU.Txt Object is locked skipped
C:\WINDOWS\SoftwareDistribution\ReportingEvents.log Object is locked skipped
C:\WINDOWS\Sti_Trace.log Object is locked skipped
C:\WINDOWS\system32\awtqq.dll Object is locked skipped
C:\WINDOWS\system32\CatRoot2\edb.log Object is locked skipped
C:\WINDOWS\system32\CatRoot2\tmp.edb Object is locked skipped
C:\WINDOWS\system32\config\AppEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\default Object is locked skipped
C:\WINDOWS\system32\config\default.LOG Object is locked skipped
C:\WINDOWS\system32\config\Internet.evt Object is locked skipped
C:\WINDOWS\system32\config\SAM Object is locked skipped
C:\WINDOWS\system32\config\SAM.LOG Object is locked skipped
C:\WINDOWS\system32\config\SecEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\SECURITY Object is locked skipped
C:\WINDOWS\system32\config\SECURITY.LOG Object is locked skipped
C:\WINDOWS\system32\config\software Object is locked skipped
C:\WINDOWS\system32\config\software.LOG Object is locked skipped
C:\WINDOWS\system32\config\SysEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\system Object is locked skipped
C:\WINDOWS\system32\config\system.LOG Object is locked skipped
C:\WINDOWS\system32\ddaby.dll Object is locked skipped
C:\WINDOWS\system32\h323log.txt Object is locked skipped
C:\WINDOWS\system32\jkhhf.dll Object is locked skipped
C:\WINDOWS\system32\L36F6.tmp/data0002 Infected: Trojan.Win32.Scapur.k skipped
C:\WINDOWS\system32\L36F6.tmp NSIS: infected - 1 skipped
C:\WINDOWS\system32\pmnlk.dll Object is locked skipped
C:\WINDOWS\system32\ssttr.dll Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP Object is locked skipped
C:\WINDOWS\wiadebug.log Object is locked skipped
C:\WINDOWS\wiaservc.log Object is locked skipped
C:\WINDOWS\WindowsUpdate.log Object is locked skipped
D:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped

Scan process completed.

[stickfish]

Sorry for all the posts to the thread - its the only way I could get it to fit.

[stickfish]

Looks like my install of Spybot was bad - removed and loaded a new version and was able to get all the junk to go away - or at least spy bot thinks so. Will upload new logs in the AM for the experts to look at.

[tashi]

Second topic: http://forums.spybot.info/showthread.php?p=162770#post162770