Roshlin
2008-03-01, 03:20
Hi friends,
I have my computer infected and need your help.
I have gone through the sticky and done what is sugested.
This is my problem:
when I try to run ,Spybot or norton programmes I get an error that it is not a valid win32 application.
Restore system is also not working.
I've also tried all of the above in safe mode without any luck
I ran the kapersky online scan and no malware was found in the critical area, but there are many objects locked.
The email scan has 4 viruses, 30 infected objects, but the date is of 2003.
I tried to install the latest version of spybot but even that does not work.
I'm working with XP-SP2
Below are the kapersky results.
Thanks for your help.
-------------------------------------------------------------------------------
KASPERSKY ONLINE SCANNER REPORT
Friday, February 29, 2008 11:48:04 PM
Operating System: Microsoft Windows XP Professional, Service Pack 2 (Build 2600)
Kaspersky Online Scanner version: 5.0.98.0
Kaspersky Anti-Virus database last update: 29/02/2008
Kaspersky Anti-Virus database records: 590964
-------------------------------------------------------------------------------
Scan Settings:
Scan using the following antivirus database: extended
Scan Archives: true
Scan Mail Bases: true
Scan Target - Critical Areas:
C:\WINDOWS
C:\DOCUME~1\Lolo\CONFIG~1\Temp\
Scan Statistics:
Total number of scanned objects: 18001
Number of viruses found: 0
Number of infected objects: 0
Number of suspicious objects: 0
Duration of the scan process: 01:03:25
Infected Object Name / Virus Name / Last Action
C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\ntoskrnl.exe Object is locked skipped
C:\WINDOWS\$hf_mig$\KB931784\SP2QFE\ntoskrnl.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ntoskrnl.exe Object is locked skipped
C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped
C:\WINDOWS\Driver Cache\i386\ntoskrnl.exe Object is locked skipped
C:\WINDOWS\SchedLgU.Txt Object is locked skipped
C:\WINDOWS\ServicePackFiles\i386\ntoskrnl.exe Object is locked skipped
C:\WINDOWS\system32\CatRoot2\edb.log Object is locked skipped
C:\WINDOWS\system32\CatRoot2\tmp.edb Object is locked skipped
C:\WINDOWS\system32\config\AppEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\default Object is locked skipped
C:\WINDOWS\system32\config\default.LOG Object is locked skipped
C:\WINDOWS\system32\config\ODiag.evt Object is locked skipped
C:\WINDOWS\system32\config\OSession.evt Object is locked skipped
C:\WINDOWS\system32\config\SAM Object is locked skipped
C:\WINDOWS\system32\config\SAM.LOG Object is locked skipped
C:\WINDOWS\system32\config\SecEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\SECURITY Object is locked skipped
C:\WINDOWS\system32\config\SECURITY.LOG Object is locked skipped
C:\WINDOWS\system32\config\software Object is locked skipped
C:\WINDOWS\system32\config\software.LOG Object is locked skipped
C:\WINDOWS\system32\config\SysEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\system Object is locked skipped
C:\WINDOWS\system32\config\system.LOG Object is locked skipped
C:\WINDOWS\system32\LogFiles\WUDF\WUDFTrace.etl Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP Object is locked skipped
C:\WINDOWS\Temp\T30DebugLogFile.txt Object is locked skipped
Scan process completed.
-------------------------------------------------------------------------------
KASPERSKY ONLINE SCANNER REPORT
Saturday, March 01, 2008 1:01:16 AM
Operating System: Microsoft Windows XP Professional, Service Pack 2 (Build 2600)
Kaspersky Online Scanner version: 5.0.98.0
Kaspersky Anti-Virus database last update: 29/02/2008
Kaspersky Anti-Virus database records: 590964
-------------------------------------------------------------------------------
Scan Settings:
Scan using the following antivirus database: extended
Scan Archives: true
Scan Mail Bases: true
Scan Target - My Email:
C:\
D:\
E:\
K:\
Scan Statistics:
Total number of scanned objects: 217
Number of viruses found: 4
Number of infected objects: 30
Number of suspicious objects: 0
Duration of the scan process: 00:17:33
Infected Object Name / Virus Name / Last Action
E:\RECYCLER\S-1-5-21-1659004503-484763869-1957994488-1007\Dl25\{3642C617-FF3A-4FEB-B2AF-7D9DFB2055B8}\Microsoft\Outlook Express\Bandeja de entrada.dbx/[From McAfee Inc.<av_patch@mcafee.com>][Date Sat,15 Mar 2003 01:03:42 PM]/UNNAMED/FixElkern.com Infected: Email-Worm.Win32.Lentin.i skipped
E:\RECYCLER\S-1-5-21-1659004503-484763869-1957994488-1007\Dl25\{3642C617-FF3A-4FEB-B2AF-7D9DFB2055B8}\Microsoft\Outlook Express\Bandeja de entrada.dbx/[From McAfee Inc.<av_patch@mcafee.com>][Date Sat,15 Mar 2003 01:03:42 PM]/UNNAMED Infected: Email-Worm.Win32.Lentin.i skipped
E:\RECYCLER\S-1-5-21-1659004503-484763869-1957994488-1007\Dl25\{3642C617-FF3A-4FEB-B2AF-7D9DFB2055B8}\Microsoft\Outlook Express\Bandeja de entrada.dbx Mail MS Outlook 5: infected - 2 skipped
E:\RECYCLER\S-1-5-21-1659004503-484763869-1957994488-1007\Dl25\{3642C617-FF3A-4FEB-B2AF-7D9DFB2055B8}\Microsoft\Outlook Express\Elementos eliminados.dbx/[From <hotchocolate@hotmail.com>][Date Fri, 22 Aug 2003 14:51:27 +0100]/wicked_scr.scr Infected: Email-Worm.Win32.Sobig.f skipped
E:\RECYCLER\S-1-5-21-1659004503-484763869-1957994488-1007\Dl25\{3642C617-FF3A-4FEB-B2AF-7D9DFB2055B8}\Microsoft\Outlook Express\Elementos eliminados.dbx/[From <bartgaudeus@hotmail.com>][Date Sun, 24 Aug 2003 11:13:16 +0100]/thank_you.pif Infected: Email-Worm.Win32.Sobig.f skipped
E:\RECYCLER\S-1-5-21-1659004503-484763869-1957994488-1007\Dl25\{3642C617-FF3A-4FEB-B2AF-7D9DFB2055B8}\Microsoft\Outlook Express\Elementos eliminados.dbx/[From <N_P4T31@HOTMAIL.COM>][Date Wed, 27 Aug 2003 9:07:17 +0100]/UNNAMED/wicked_scr.scr Infected: Email-Worm.Win32.Sobig.f skipped
E:\RECYCLER\S-1-5-21-1659004503-484763869-1957994488-1007\Dl25\{3642C617-FF3A-4FEB-B2AF-7D9DFB2055B8}\Microsoft\Outlook Express\Elementos eliminados.dbx/[From <N_P4T31@HOTMAIL.COM>][Date Wed, 27 Aug 2003 9:07:17 +0100]/UNNAMED Infected: Email-Worm.Win32.Sobig.f skipped
E:\RECYCLER\S-1-5-21-1659004503-484763869-1957994488-1007\Dl25\{3642C617-FF3A-4FEB-B2AF-7D9DFB2055B8}\Microsoft\Outlook Express\Elementos eliminados.dbx/[From <payaldade@hotmail.com>][Date Wed, 27 Aug 2003 9:07:14 +0100]/UNNAMED/your_details.pif Infected: Email-Worm.Win32.Sobig.f skipped
E:\RECYCLER\S-1-5-21-1659004503-484763869-1957994488-1007\Dl25\{3642C617-FF3A-4FEB-B2AF-7D9DFB2055B8}\Microsoft\Outlook Express\Elementos eliminados.dbx/[From <payaldade@hotmail.com>][Date Wed, 27 Aug 2003 9:07:14 +0100]/UNNAMED Infected: Email-Worm.Win32.Sobig.f skipped
E:\RECYCLER\S-1-5-21-1659004503-484763869-1957994488-1007\Dl25\{3642C617-FF3A-4FEB-B2AF-7D9DFB2055B8}\Microsoft\Outlook Express\Elementos eliminados.dbx/[From <niveditasj@yahoo.com>][Date Sun, 24 Aug 2003 11:13:20 +0100]/UNNAMED/your_details.pif Infected: Email-Worm.Win32.Sobig.f skipped
E:\RECYCLER\S-1-5-21-1659004503-484763869-1957994488-1007\Dl25\{3642C617-FF3A-4FEB-B2AF-7D9DFB2055B8}\Microsoft\Outlook Express\Elementos eliminados.dbx/[From <niveditasj@yahoo.com>][Date Sun, 24 Aug 2003 11:13:20 +0100]/UNNAMED Infected: Email-Worm.Win32.Sobig.f skipped
E:\RECYCLER\S-1-5-21-1659004503-484763869-1957994488-1007\Dl25\{3642C617-FF3A-4FEB-B2AF-7D9DFB2055B8}\Microsoft\Outlook Express\Elementos eliminados.dbx/[From <Motif44@aol.com>][Date Fri, 22 Aug 2003 14:51:19 +0100]/UNNAMED/wicked_scr.scr Infected: Email-Worm.Win32.Sobig.f skipped
E:\RECYCLER\S-1-5-21-1659004503-484763869-1957994488-1007\Dl25\{3642C617-FF3A-4FEB-B2AF-7D9DFB2055B8}\Microsoft\Outlook Express\Elementos eliminados.dbx/[From <Motif44@aol.com>][Date Fri, 22 Aug 2003 14:51:19 +0100]/UNNAMED Infected: Email-Worm.Win32.Sobig.f skipped
E:\RECYCLER\S-1-5-21-1659004503-484763869-1957994488-1007\Dl25\{3642C617-FF3A-4FEB-B2AF-7D9DFB2055B8}\Microsoft\Outlook Express\Elementos eliminados.dbx/[From admin@terra.es][Date Mon, 11 Aug 2003 21:52:16 +0100]/UNNAMED/text Infected: Email-Worm.Win32.Mimail.txt skipped
E:\RECYCLER\S-1-5-21-1659004503-484763869-1957994488-1007\Dl25\{3642C617-FF3A-4FEB-B2AF-7D9DFB2055B8}\Microsoft\Outlook Express\Elementos eliminados.dbx/[From admin@terra.es][Date Mon, 11 Aug 2003 21:52:16 +0100]/UNNAMED/message.zip/message.html Infected: Email-Worm.Win32.Mimail.a skipped
E:\RECYCLER\S-1-5-21-1659004503-484763869-1957994488-1007\Dl25\{3642C617-FF3A-4FEB-B2AF-7D9DFB2055B8}\Microsoft\Outlook Express\Elementos eliminados.dbx/[From admin@terra.es][Date Mon, 11 Aug 2003 21:52:16 +0100]/UNNAMED/message.zip Infected: Email-Worm.Win32.Mimail.a skipped
E:\RECYCLER\S-1-5-21-1659004503-484763869-1957994488-1007\Dl25\{3642C617-FF3A-4FEB-B2AF-7D9DFB2055B8}\Microsoft\Outlook Express\Elementos eliminados.dbx/[From admin@terra.es][Date Mon, 11 Aug 2003 21:52:16 +0100]/UNNAMED Infected: Email-Worm.Win32.Mimail.a skipped
E:\RECYCLER\S-1-5-21-1659004503-484763869-1957994488-1007\Dl25\{3642C617-FF3A-4FEB-B2AF-7D9DFB2055B8}\Microsoft\Outlook Express\Elementos eliminados.dbx/[From admin@terra.es][Date Mon, 11 Aug 2003 21:52:16 +0100]/UNNAMED/text Infected: Email-Worm.Win32.Mimail.txt skipped
E:\RECYCLER\S-1-5-21-1659004503-484763869-1957994488-1007\Dl25\{3642C617-FF3A-4FEB-B2AF-7D9DFB2055B8}\Microsoft\Outlook Express\Elementos eliminados.dbx/[From admin@terra.es][Date Mon, 11 Aug 2003 21:52:16 +0100]/UNNAMED/message.zip/message.html Infected: Email-Worm.Win32.Mimail.a skipped
E:\RECYCLER\S-1-5-21-1659004503-484763869-1957994488-1007\Dl25\{3642C617-FF3A-4FEB-B2AF-7D9DFB2055B8}\Microsoft\Outlook Express\Elementos eliminados.dbx/[From admin@terra.es][Date Mon, 11 Aug 2003 21:52:16 +0100]/UNNAMED/message.zip Infected: Email-Worm.Win32.Mimail.a skipped
E:\RECYCLER\S-1-5-21-1659004503-484763869-1957994488-1007\Dl25\{3642C617-FF3A-4FEB-B2AF-7D9DFB2055B8}\Microsoft\Outlook Express\Elementos eliminados.dbx/[From admin@terra.es][Date Mon, 11 Aug 2003 21:52:16 +0100]/UNNAMED Infected: Email-Worm.Win32.Mimail.a skipped
E:\RECYCLER\S-1-5-21-1659004503-484763869-1957994488-1007\Dl25\{3642C617-FF3A-4FEB-B2AF-7D9DFB2055B8}\Microsoft\Outlook Express\Elementos eliminados.dbx/[From admin@terra.es][Date Mon, 11 Aug 2003 21:52:16 +0100]/UNNAMED/text Infected: Email-Worm.Win32.Mimail.txt skipped
E:\RECYCLER\S-1-5-21-1659004503-484763869-1957994488-1007\Dl25\{3642C617-FF3A-4FEB-B2AF-7D9DFB2055B8}\Microsoft\Outlook Express\Elementos eliminados.dbx/[From admin@terra.es][Date Mon, 11 Aug 2003 21:52:16 +0100]/UNNAMED/message.zip/message.html Infected: Email-Worm.Win32.Mimail.a skipped
E:\RECYCLER\S-1-5-21-1659004503-484763869-1957994488-1007\Dl25\{3642C617-FF3A-4FEB-B2AF-7D9DFB2055B8}\Microsoft\Outlook Express\Elementos eliminados.dbx/[From admin@terra.es][Date Mon, 11 Aug 2003 21:52:16 +0100]/UNNAMED/message.zip Infected: Email-Worm.Win32.Mimail.a skipped
E:\RECYCLER\S-1-5-21-1659004503-484763869-1957994488-1007\Dl25\{3642C617-FF3A-4FEB-B2AF-7D9DFB2055B8}\Microsoft\Outlook Express\Elementos eliminados.dbx/[From admin@terra.es][Date Mon, 11 Aug 2003 21:52:16 +0100]/UNNAMED Infected: Email-Worm.Win32.Mimail.a skipped
E:\RECYCLER\S-1-5-21-1659004503-484763869-1957994488-1007\Dl25\{3642C617-FF3A-4FEB-B2AF-7D9DFB2055B8}\Microsoft\Outlook Express\Elementos eliminados.dbx/[From admin@terra.es][Date Mon, 11 Aug 2003 21:52:16 +0100]/UNNAMED/text Infected: Email-Worm.Win32.Mimail.txt skipped
E:\RECYCLER\S-1-5-21-1659004503-484763869-1957994488-1007\Dl25\{3642C617-FF3A-4FEB-B2AF-7D9DFB2055B8}\Microsoft\Outlook Express\Elementos eliminados.dbx/[From admin@terra.es][Date Mon, 11 Aug 2003 21:52:16 +0100]/UNNAMED/message.zip/message.html Infected: Email-Worm.Win32.Mimail.a skipped
E:\RECYCLER\S-1-5-21-1659004503-484763869-1957994488-1007\Dl25\{3642C617-FF3A-4FEB-B2AF-7D9DFB2055B8}\Microsoft\Outlook Express\Elementos eliminados.dbx/[From admin@terra.es][Date Mon, 11 Aug 2003 21:52:16 +0100]/UNNAMED/message.zip Infected: Email-Worm.Win32.Mimail.a skipped
E:\RECYCLER\S-1-5-21-1659004503-484763869-1957994488-1007\Dl25\{3642C617-FF3A-4FEB-B2AF-7D9DFB2055B8}\Microsoft\Outlook Express\Elementos eliminados.dbx/[From admin@terra.es][Date Mon, 11 Aug 2003 21:52:16 +0100]/UNNAMED Infected: Email-Worm.Win32.Mimail.a skipped
E:\RECYCLER\S-1-5-21-1659004503-484763869-1957994488-1007\Dl25\{3642C617-FF3A-4FEB-B2AF-7D9DFB2055B8}\Microsoft\Outlook Express\Elementos eliminados.dbx Mail MS Outlook 5: infected - 26 skipped
Scan process completed.
I have my computer infected and need your help.
I have gone through the sticky and done what is sugested.
This is my problem:
when I try to run ,Spybot or norton programmes I get an error that it is not a valid win32 application.
Restore system is also not working.
I've also tried all of the above in safe mode without any luck
I ran the kapersky online scan and no malware was found in the critical area, but there are many objects locked.
The email scan has 4 viruses, 30 infected objects, but the date is of 2003.
I tried to install the latest version of spybot but even that does not work.
I'm working with XP-SP2
Below are the kapersky results.
Thanks for your help.
-------------------------------------------------------------------------------
KASPERSKY ONLINE SCANNER REPORT
Friday, February 29, 2008 11:48:04 PM
Operating System: Microsoft Windows XP Professional, Service Pack 2 (Build 2600)
Kaspersky Online Scanner version: 5.0.98.0
Kaspersky Anti-Virus database last update: 29/02/2008
Kaspersky Anti-Virus database records: 590964
-------------------------------------------------------------------------------
Scan Settings:
Scan using the following antivirus database: extended
Scan Archives: true
Scan Mail Bases: true
Scan Target - Critical Areas:
C:\WINDOWS
C:\DOCUME~1\Lolo\CONFIG~1\Temp\
Scan Statistics:
Total number of scanned objects: 18001
Number of viruses found: 0
Number of infected objects: 0
Number of suspicious objects: 0
Duration of the scan process: 01:03:25
Infected Object Name / Virus Name / Last Action
C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\ntoskrnl.exe Object is locked skipped
C:\WINDOWS\$hf_mig$\KB931784\SP2QFE\ntoskrnl.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ntoskrnl.exe Object is locked skipped
C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped
C:\WINDOWS\Driver Cache\i386\ntoskrnl.exe Object is locked skipped
C:\WINDOWS\SchedLgU.Txt Object is locked skipped
C:\WINDOWS\ServicePackFiles\i386\ntoskrnl.exe Object is locked skipped
C:\WINDOWS\system32\CatRoot2\edb.log Object is locked skipped
C:\WINDOWS\system32\CatRoot2\tmp.edb Object is locked skipped
C:\WINDOWS\system32\config\AppEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\default Object is locked skipped
C:\WINDOWS\system32\config\default.LOG Object is locked skipped
C:\WINDOWS\system32\config\ODiag.evt Object is locked skipped
C:\WINDOWS\system32\config\OSession.evt Object is locked skipped
C:\WINDOWS\system32\config\SAM Object is locked skipped
C:\WINDOWS\system32\config\SAM.LOG Object is locked skipped
C:\WINDOWS\system32\config\SecEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\SECURITY Object is locked skipped
C:\WINDOWS\system32\config\SECURITY.LOG Object is locked skipped
C:\WINDOWS\system32\config\software Object is locked skipped
C:\WINDOWS\system32\config\software.LOG Object is locked skipped
C:\WINDOWS\system32\config\SysEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\system Object is locked skipped
C:\WINDOWS\system32\config\system.LOG Object is locked skipped
C:\WINDOWS\system32\LogFiles\WUDF\WUDFTrace.etl Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP Object is locked skipped
C:\WINDOWS\Temp\T30DebugLogFile.txt Object is locked skipped
Scan process completed.
-------------------------------------------------------------------------------
KASPERSKY ONLINE SCANNER REPORT
Saturday, March 01, 2008 1:01:16 AM
Operating System: Microsoft Windows XP Professional, Service Pack 2 (Build 2600)
Kaspersky Online Scanner version: 5.0.98.0
Kaspersky Anti-Virus database last update: 29/02/2008
Kaspersky Anti-Virus database records: 590964
-------------------------------------------------------------------------------
Scan Settings:
Scan using the following antivirus database: extended
Scan Archives: true
Scan Mail Bases: true
Scan Target - My Email:
C:\
D:\
E:\
K:\
Scan Statistics:
Total number of scanned objects: 217
Number of viruses found: 4
Number of infected objects: 30
Number of suspicious objects: 0
Duration of the scan process: 00:17:33
Infected Object Name / Virus Name / Last Action
E:\RECYCLER\S-1-5-21-1659004503-484763869-1957994488-1007\Dl25\{3642C617-FF3A-4FEB-B2AF-7D9DFB2055B8}\Microsoft\Outlook Express\Bandeja de entrada.dbx/[From McAfee Inc.<av_patch@mcafee.com>][Date Sat,15 Mar 2003 01:03:42 PM]/UNNAMED/FixElkern.com Infected: Email-Worm.Win32.Lentin.i skipped
E:\RECYCLER\S-1-5-21-1659004503-484763869-1957994488-1007\Dl25\{3642C617-FF3A-4FEB-B2AF-7D9DFB2055B8}\Microsoft\Outlook Express\Bandeja de entrada.dbx/[From McAfee Inc.<av_patch@mcafee.com>][Date Sat,15 Mar 2003 01:03:42 PM]/UNNAMED Infected: Email-Worm.Win32.Lentin.i skipped
E:\RECYCLER\S-1-5-21-1659004503-484763869-1957994488-1007\Dl25\{3642C617-FF3A-4FEB-B2AF-7D9DFB2055B8}\Microsoft\Outlook Express\Bandeja de entrada.dbx Mail MS Outlook 5: infected - 2 skipped
E:\RECYCLER\S-1-5-21-1659004503-484763869-1957994488-1007\Dl25\{3642C617-FF3A-4FEB-B2AF-7D9DFB2055B8}\Microsoft\Outlook Express\Elementos eliminados.dbx/[From <hotchocolate@hotmail.com>][Date Fri, 22 Aug 2003 14:51:27 +0100]/wicked_scr.scr Infected: Email-Worm.Win32.Sobig.f skipped
E:\RECYCLER\S-1-5-21-1659004503-484763869-1957994488-1007\Dl25\{3642C617-FF3A-4FEB-B2AF-7D9DFB2055B8}\Microsoft\Outlook Express\Elementos eliminados.dbx/[From <bartgaudeus@hotmail.com>][Date Sun, 24 Aug 2003 11:13:16 +0100]/thank_you.pif Infected: Email-Worm.Win32.Sobig.f skipped
E:\RECYCLER\S-1-5-21-1659004503-484763869-1957994488-1007\Dl25\{3642C617-FF3A-4FEB-B2AF-7D9DFB2055B8}\Microsoft\Outlook Express\Elementos eliminados.dbx/[From <N_P4T31@HOTMAIL.COM>][Date Wed, 27 Aug 2003 9:07:17 +0100]/UNNAMED/wicked_scr.scr Infected: Email-Worm.Win32.Sobig.f skipped
E:\RECYCLER\S-1-5-21-1659004503-484763869-1957994488-1007\Dl25\{3642C617-FF3A-4FEB-B2AF-7D9DFB2055B8}\Microsoft\Outlook Express\Elementos eliminados.dbx/[From <N_P4T31@HOTMAIL.COM>][Date Wed, 27 Aug 2003 9:07:17 +0100]/UNNAMED Infected: Email-Worm.Win32.Sobig.f skipped
E:\RECYCLER\S-1-5-21-1659004503-484763869-1957994488-1007\Dl25\{3642C617-FF3A-4FEB-B2AF-7D9DFB2055B8}\Microsoft\Outlook Express\Elementos eliminados.dbx/[From <payaldade@hotmail.com>][Date Wed, 27 Aug 2003 9:07:14 +0100]/UNNAMED/your_details.pif Infected: Email-Worm.Win32.Sobig.f skipped
E:\RECYCLER\S-1-5-21-1659004503-484763869-1957994488-1007\Dl25\{3642C617-FF3A-4FEB-B2AF-7D9DFB2055B8}\Microsoft\Outlook Express\Elementos eliminados.dbx/[From <payaldade@hotmail.com>][Date Wed, 27 Aug 2003 9:07:14 +0100]/UNNAMED Infected: Email-Worm.Win32.Sobig.f skipped
E:\RECYCLER\S-1-5-21-1659004503-484763869-1957994488-1007\Dl25\{3642C617-FF3A-4FEB-B2AF-7D9DFB2055B8}\Microsoft\Outlook Express\Elementos eliminados.dbx/[From <niveditasj@yahoo.com>][Date Sun, 24 Aug 2003 11:13:20 +0100]/UNNAMED/your_details.pif Infected: Email-Worm.Win32.Sobig.f skipped
E:\RECYCLER\S-1-5-21-1659004503-484763869-1957994488-1007\Dl25\{3642C617-FF3A-4FEB-B2AF-7D9DFB2055B8}\Microsoft\Outlook Express\Elementos eliminados.dbx/[From <niveditasj@yahoo.com>][Date Sun, 24 Aug 2003 11:13:20 +0100]/UNNAMED Infected: Email-Worm.Win32.Sobig.f skipped
E:\RECYCLER\S-1-5-21-1659004503-484763869-1957994488-1007\Dl25\{3642C617-FF3A-4FEB-B2AF-7D9DFB2055B8}\Microsoft\Outlook Express\Elementos eliminados.dbx/[From <Motif44@aol.com>][Date Fri, 22 Aug 2003 14:51:19 +0100]/UNNAMED/wicked_scr.scr Infected: Email-Worm.Win32.Sobig.f skipped
E:\RECYCLER\S-1-5-21-1659004503-484763869-1957994488-1007\Dl25\{3642C617-FF3A-4FEB-B2AF-7D9DFB2055B8}\Microsoft\Outlook Express\Elementos eliminados.dbx/[From <Motif44@aol.com>][Date Fri, 22 Aug 2003 14:51:19 +0100]/UNNAMED Infected: Email-Worm.Win32.Sobig.f skipped
E:\RECYCLER\S-1-5-21-1659004503-484763869-1957994488-1007\Dl25\{3642C617-FF3A-4FEB-B2AF-7D9DFB2055B8}\Microsoft\Outlook Express\Elementos eliminados.dbx/[From admin@terra.es][Date Mon, 11 Aug 2003 21:52:16 +0100]/UNNAMED/text Infected: Email-Worm.Win32.Mimail.txt skipped
E:\RECYCLER\S-1-5-21-1659004503-484763869-1957994488-1007\Dl25\{3642C617-FF3A-4FEB-B2AF-7D9DFB2055B8}\Microsoft\Outlook Express\Elementos eliminados.dbx/[From admin@terra.es][Date Mon, 11 Aug 2003 21:52:16 +0100]/UNNAMED/message.zip/message.html Infected: Email-Worm.Win32.Mimail.a skipped
E:\RECYCLER\S-1-5-21-1659004503-484763869-1957994488-1007\Dl25\{3642C617-FF3A-4FEB-B2AF-7D9DFB2055B8}\Microsoft\Outlook Express\Elementos eliminados.dbx/[From admin@terra.es][Date Mon, 11 Aug 2003 21:52:16 +0100]/UNNAMED/message.zip Infected: Email-Worm.Win32.Mimail.a skipped
E:\RECYCLER\S-1-5-21-1659004503-484763869-1957994488-1007\Dl25\{3642C617-FF3A-4FEB-B2AF-7D9DFB2055B8}\Microsoft\Outlook Express\Elementos eliminados.dbx/[From admin@terra.es][Date Mon, 11 Aug 2003 21:52:16 +0100]/UNNAMED Infected: Email-Worm.Win32.Mimail.a skipped
E:\RECYCLER\S-1-5-21-1659004503-484763869-1957994488-1007\Dl25\{3642C617-FF3A-4FEB-B2AF-7D9DFB2055B8}\Microsoft\Outlook Express\Elementos eliminados.dbx/[From admin@terra.es][Date Mon, 11 Aug 2003 21:52:16 +0100]/UNNAMED/text Infected: Email-Worm.Win32.Mimail.txt skipped
E:\RECYCLER\S-1-5-21-1659004503-484763869-1957994488-1007\Dl25\{3642C617-FF3A-4FEB-B2AF-7D9DFB2055B8}\Microsoft\Outlook Express\Elementos eliminados.dbx/[From admin@terra.es][Date Mon, 11 Aug 2003 21:52:16 +0100]/UNNAMED/message.zip/message.html Infected: Email-Worm.Win32.Mimail.a skipped
E:\RECYCLER\S-1-5-21-1659004503-484763869-1957994488-1007\Dl25\{3642C617-FF3A-4FEB-B2AF-7D9DFB2055B8}\Microsoft\Outlook Express\Elementos eliminados.dbx/[From admin@terra.es][Date Mon, 11 Aug 2003 21:52:16 +0100]/UNNAMED/message.zip Infected: Email-Worm.Win32.Mimail.a skipped
E:\RECYCLER\S-1-5-21-1659004503-484763869-1957994488-1007\Dl25\{3642C617-FF3A-4FEB-B2AF-7D9DFB2055B8}\Microsoft\Outlook Express\Elementos eliminados.dbx/[From admin@terra.es][Date Mon, 11 Aug 2003 21:52:16 +0100]/UNNAMED Infected: Email-Worm.Win32.Mimail.a skipped
E:\RECYCLER\S-1-5-21-1659004503-484763869-1957994488-1007\Dl25\{3642C617-FF3A-4FEB-B2AF-7D9DFB2055B8}\Microsoft\Outlook Express\Elementos eliminados.dbx/[From admin@terra.es][Date Mon, 11 Aug 2003 21:52:16 +0100]/UNNAMED/text Infected: Email-Worm.Win32.Mimail.txt skipped
E:\RECYCLER\S-1-5-21-1659004503-484763869-1957994488-1007\Dl25\{3642C617-FF3A-4FEB-B2AF-7D9DFB2055B8}\Microsoft\Outlook Express\Elementos eliminados.dbx/[From admin@terra.es][Date Mon, 11 Aug 2003 21:52:16 +0100]/UNNAMED/message.zip/message.html Infected: Email-Worm.Win32.Mimail.a skipped
E:\RECYCLER\S-1-5-21-1659004503-484763869-1957994488-1007\Dl25\{3642C617-FF3A-4FEB-B2AF-7D9DFB2055B8}\Microsoft\Outlook Express\Elementos eliminados.dbx/[From admin@terra.es][Date Mon, 11 Aug 2003 21:52:16 +0100]/UNNAMED/message.zip Infected: Email-Worm.Win32.Mimail.a skipped
E:\RECYCLER\S-1-5-21-1659004503-484763869-1957994488-1007\Dl25\{3642C617-FF3A-4FEB-B2AF-7D9DFB2055B8}\Microsoft\Outlook Express\Elementos eliminados.dbx/[From admin@terra.es][Date Mon, 11 Aug 2003 21:52:16 +0100]/UNNAMED Infected: Email-Worm.Win32.Mimail.a skipped
E:\RECYCLER\S-1-5-21-1659004503-484763869-1957994488-1007\Dl25\{3642C617-FF3A-4FEB-B2AF-7D9DFB2055B8}\Microsoft\Outlook Express\Elementos eliminados.dbx/[From admin@terra.es][Date Mon, 11 Aug 2003 21:52:16 +0100]/UNNAMED/text Infected: Email-Worm.Win32.Mimail.txt skipped
E:\RECYCLER\S-1-5-21-1659004503-484763869-1957994488-1007\Dl25\{3642C617-FF3A-4FEB-B2AF-7D9DFB2055B8}\Microsoft\Outlook Express\Elementos eliminados.dbx/[From admin@terra.es][Date Mon, 11 Aug 2003 21:52:16 +0100]/UNNAMED/message.zip/message.html Infected: Email-Worm.Win32.Mimail.a skipped
E:\RECYCLER\S-1-5-21-1659004503-484763869-1957994488-1007\Dl25\{3642C617-FF3A-4FEB-B2AF-7D9DFB2055B8}\Microsoft\Outlook Express\Elementos eliminados.dbx/[From admin@terra.es][Date Mon, 11 Aug 2003 21:52:16 +0100]/UNNAMED/message.zip Infected: Email-Worm.Win32.Mimail.a skipped
E:\RECYCLER\S-1-5-21-1659004503-484763869-1957994488-1007\Dl25\{3642C617-FF3A-4FEB-B2AF-7D9DFB2055B8}\Microsoft\Outlook Express\Elementos eliminados.dbx/[From admin@terra.es][Date Mon, 11 Aug 2003 21:52:16 +0100]/UNNAMED Infected: Email-Worm.Win32.Mimail.a skipped
E:\RECYCLER\S-1-5-21-1659004503-484763869-1957994488-1007\Dl25\{3642C617-FF3A-4FEB-B2AF-7D9DFB2055B8}\Microsoft\Outlook Express\Elementos eliminados.dbx Mail MS Outlook 5: infected - 26 skipped
Scan process completed.