Help with some nasty bugs please

S

stickfish

New member
Attached are some fresh logs after getting spybot working - appears I had a bad installation of it or the bugs had messed with it.

Little background - there are four user accounts on this machine so if I need to do things from each user account please let me know.

Thanks to the experts for whatever help you can give or pointers

Here is the Hijackthis log

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 3:10:31 PM, on 2/1/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16574)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\PROGRA~1\NETGEAR\MEDIAS~1\ImmsService.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\MsPMSPSv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Java\jre1.5.0_02\bin\jusched.exe
C:\Program Files\Adaptec\Easy CD Creator 5\DirectCD\DirectCD.exe
C:\PROGRA~1\Verizon\SMARTB~1\MotiveSB.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Panasonic\LUMIXSimpleViewer\PhLeAutoRun.exe
C:\Program Files\NETGEAR\Media Server\MediaServer.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\NETGEAR\Media Server\RestartApp.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by Comcast
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = :0
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O3 - Toolbar: (no name) - {0BF43445-2F28-4351-9252-17FE6E806AA0} - (no file)
O3 - Toolbar: (no name) - {4E7BD74F-2B8D-469E-D0FC-E57AF4D5FA7D} - (no file)
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_02\bin\jusched.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [iTunesHelper] C:\Program Files\iTunes\iTunesHelper.exe
O4 - HKLM\..\Run: [AdaptecDirectCD] C:\Program Files\Adaptec\Easy CD Creator 5\DirectCD\DirectCD.exe
O4 - HKLM\..\Run: [Motive SmartBridge] C:\PROGRA~1\Verizon\SMARTB~1\MotiveSB.exe
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [SpyHunter Security Suite] C:\Program Files\Enigma Software Group\SpyHunter\SpyHunter3.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [TaskTray] C:\Program Files\Creative\SBAudigy\Taskbar\CTLTray.exe
O4 - HKCU\..\Run: [Taskbar] C:\Program Files\Creative\SBAudigy\Taskbar\CTLTask.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKUS\S-1-5-19\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'Default user')
O4 - Global Startup: LUMIX Simple Viewer.lnk = ?
O4 - Global Startup: NETGEAR Media Server.lnk = C:\Program Files\NETGEAR\Media Server\MediaServer.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
O9 - Extra button: ComcastHSI - {669B269B-0D4E-41FB-A3D8-FD67CA94F646} - http://www.comcast.net/ (file missing)
O9 - Extra button: Support - {8828075D-D097-4055-AA02-2DBFA9D85E8A} - http://www.comcastsupport.com/ (file missing)
O9 - Extra button: Help - {97809617-3937-4F84-B335-9BB05EF1A8D4} - http://online.comcast.net/help/ (file missing)
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/english/kavwebscan_unicode.cab
O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} - http://download.mcafee.com/molbin/shared/mcinsctl/4,0,0,101/mcinsctl.cab
O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} - http://download.mcafee.com/molbin/shared/mcgdmgr/1,0,0,26/mcgdmgr.cab
O20 - Winlogon Notify: iiffdee - iiffdee.dll (file missing)
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Integrated Multimedia Server - Unknown owner - C:\PROGRA~1\NETGEAR\MEDIAS~1\ImmsService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe

--
End of file - 7566 bytes
 
p1

KASPERSKY ONLINE SCANNER REPORT
Friday, February 01, 2008 2:44:15 PM
Operating System: Microsoft Windows XP Professional, Service Pack 2 (Build 2600)
Kaspersky Online Scanner version: 5.0.98.0
Kaspersky Anti-Virus database last update: 1/02/2008
Kaspersky Anti-Virus database records: 544928
-------------------------------------------------------------------------------

Scan Settings:
Scan using the following antivirus database: extended
Scan Archives: true
Scan Mail Bases: true

Scan Target - My Computer:
A:\
C:\
D:\
E:\

Scan Statistics:
Total number of scanned objects: 73334
Number of viruses found: 10
Number of infected objects: 174
Number of suspicious objects: 88
Duration of the scan process: 02:27:29

Infected Object Name / Virus Name / Last Action
C:\Documents and Settings\All Users\Application Data\avg7\Log\emc.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Grisoft\Avg7Data\avg7log.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Grisoft\Avg7Data\avg7log.log.lck Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\015decb2eb7b1f5d4c8381304fefaf90_ebab9ece-be32-4425-8e87-b4167122a1ed Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\03f7b0476be320df948aa02e95af29ba_ebab9ece-be32-4425-8e87-b4167122a1ed Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\08ff03aa19ea16bd326f3e328a1cbca4_ebab9ece-be32-4425-8e87-b4167122a1ed Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1874dca3a9a2e2c1546affa741efaf5e_ebab9ece-be32-4425-8e87-b4167122a1ed Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1fa4a1093678b85969f73cea8c49f98f_ebab9ece-be32-4425-8e87-b4167122a1ed Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\22c46a0536b78d0d50d245863e228b5c_ebab9ece-be32-4425-8e87-b4167122a1ed Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2eb5fae4a8eab52b69968d252d7f7742_ebab9ece-be32-4425-8e87-b4167122a1ed Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\30906daf7b108d7b995cfa0e103e25a2_ebab9ece-be32-4425-8e87-b4167122a1ed Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\65c9f804d91cb41f61d50bcd76007975_ebab9ece-be32-4425-8e87-b4167122a1ed Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\706787f7d0635f24af38ea66fe09551b_ebab9ece-be32-4425-8e87-b4167122a1ed Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\8180d1ca294ece5f6af12b102aff5bf1_ebab9ece-be32-4425-8e87-b4167122a1ed Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\86ae17ba493c01ea7e37437d039f9e9c_ebab9ece-be32-4425-8e87-b4167122a1ed Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\888275f2bca22f7f4e92da8805072743_ebab9ece-be32-4425-8e87-b4167122a1ed Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\b19fea0f67e9203005ca414a3e0c8575_ebab9ece-be32-4425-8e87-b4167122a1ed Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\b7ad9521055bd6414436103399502212_ebab9ece-be32-4425-8e87-b4167122a1ed Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\b889657a979a0ee0d1f1fc771e5051ca_ebab9ece-be32-4425-8e87-b4167122a1ed Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\df52cdc46787ea75522788692cb5a620_ebab9ece-be32-4425-8e87-b4167122a1ed Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\e1d61a919689f1b4a272092a14398590_ebab9ece-be32-4425-8e87-b4167122a1ed Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\f713c46c3efbda25565c2c2ebd588ac2_ebab9ece-be32-4425-8e87-b4167122a1ed Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\fb5dcd1eea0e1c77c41dc16dedb36d61_ebab9ece-be32-4425-8e87-b4167122a1ed Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Dr Watson\user.dmp Object is locked skipped
C:\Documents and Settings\Carly.OFFICE\Local Settings\Temp\sdexe.exe Object is locked skipped
C:\Documents and Settings\Carly.OFFICE\Local Settings\Temporary Internet Files\Content.IE5\BYJ6QZHJ\css4[1] Object is locked skipped
C:\Documents and Settings\LocalService\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\NetworkService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Fri, 17 Oct 2003 08:44:20 -0700]/text/[From "Doug Oppedal" <Doug_Oppedal@pgn.com>][Date Fri, 17 Oct 2003 11:17:39 -0700]/UNNAMED/[From "Postmaster" < >][Date Fri, 17 Oct 2003 19:38:40 +0100]/html Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Fri, 17 Oct 2003 08:44:20 -0700]/text/[From "Doug Oppedal" <Doug_Oppedal@pgn.com>][Date Fri, 17 Oct 2003 11:17:39 -0700]/UNNAMED/[From "Admin" <mailbot@netmail.net>][Date Fri, 17 Oct 2003 15:08:12 -0500]/html Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Fri, 17 Oct 2003 08:44:20 -0700]/text/[From "Doug Oppedal" <Doug_Oppedal@pgn.com>][Date Fri, 17 Oct 2003 11:17:39 -0700]/UNNAMED/[From "Admin" <mailbot@netmail.net>][Date Fri, 17 Oct 2003 15:08:12 -0500]/evpk.exe Infected: Email-Worm.Win32.Swen skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Fri, 17 Oct 2003 08:44:20 -0700]/text/[From "Doug Oppedal" <Doug_Oppedal@pgn.com>][Date Fri, 17 Oct 2003 11:17:39 -0700]/UNNAMED/[From "Radiant Records" <info@radiantrecords.com>][Date Fri, 17 Oct 2003 15:25:35 -0 ... /[From "" <igzzuwq_chnxdjsb@vfuu.com>][Date Sat, 18 Oct 2003 01:35:44 +0200 (CEST)]/UPGRADE516.exe Infected: Email-Worm.Win32.Swen skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Fri, 17 Oct 2003 08:44:20 -0700]/text/[From "Doug Oppedal" <Doug_Oppedal@pgn.com>][Date Fri, 17 Oct 2003 11:17:39 -0700]/UNNAMED/[From "Radiant Records" <info@radiantrecords.com>][Date Fri, ... /[From "internet email storage service" <masterengine@microsoft.com>][Date Sat, 18 Oct 2003 01:39:24 +0200 (CEST ... /html Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Fri, 17 Oct 2003 08:44:20 -0700]/text/[From "Doug Oppedal" <Doug_Oppedal@pgn.com>][Date Fri, 17 Oct 2003 11:17:39 -0700]/UNNAMED/[From "Radiant Records" <info@radiantrecords.com>][Date Fri, ... /[F ... /[From "ms internet email storage system" <postroutine@bigfoot.com>][Date Sat, 18 Oct 2003 01:04:53 +010 ... /html Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Fri, 17 Oct 2003 08:44:20 -0700]/text/[From "Doug Oppedal" <Doug_Oppedal@pgn.com>][Date Fri, 17 Oct 2003 11:17:39 -0700]/UNNAMED/[From "Radiant Records" <info@radiantrecords.com>][Date Fri, ... /[F ... /[From ... /[From "Administrator" <mailerdaemon@america.com>][Date Sat, 18 Oct 2003 00:29:29 +0000 (GMT ... /html Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Fri, 17 Oct 2003 08:44:20 -0700]/text/[From "Doug Oppedal" <Doug_Oppedal@pgn.com>][Date Fri, 17 Oct 2003 11:17:39 -0700]/UNNAMED/[From "Radiant Records" <info@radiantrecords.com>][Date Fri, ... /[F ... /[From ... /[From "Administrator" <mailerdaemon@america.com>][Date Sat, 18 Oct 2003 00:29:29 +0000 ... /fqmb.exe Infected: Email-Worm.Win32.Swen skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Fri, 17 Oct 2003 08:44:20 -0700]/text/[From "Doug Oppedal" <Doug_Oppedal@pgn.com>][Date Fri, 17 Oct 2003 11:17:39 -0700]/UNNAMED/[From "Radiant Records" <info@radiantrecords.com>][Date Fri, ... /[F ... /[From ... /[From "A ... /[From "Postmaster" <masterdaemon@yahoo.net>][Date Fri, 17 Oct 2003 23:32:03 -0600]/html Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Fri, 17 Oct 2003 08:44:20 -0700]/text/[From "Doug Oppedal" <Doug_Oppedal@pgn.com>][Date Fri, 17 Oct 2003 11:17:39 -0700]/UNNAMED/[From "Radiant Records" <info@radiantrecords.com>][Date Fri, ... /[F ... /[From ... /[From ... /[From "Public Support" <prhhtjstg@qyvi.net>][Date Sat, 18 Oct 2003 09:20:31 +0100]/Qix.exe Infected: Email-Worm.Win32.Swen skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Fri, 17 Oct 2003 08:44:20 -0700]/text/[From "Doug Oppedal" <Doug_Oppedal@pgn.com>][Date Fri, 17 Oct 2003 11:17:39 -0700]/UNNAMED/[From "Radiant Records" <info@radiantrecords.com>][Date Fri, ... /[F ... /[From ... /[From ... /[From "administrator" <tmailbot@microsoft.com>][Date Sat, 18 Oct 2003 04:50:02 -0400]/html Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Fri, 17 Oct 2003 08:44:20 -0700]/text/[From "Doug Oppedal" <Doug_Oppedal@pgn.com>][Date Fri, 17 Oct 2003 11:17:39 -0700]/UNNAMED/[From "Radiant Records" <info@radiantrecords.com>][Date Fri, ... /[F ... /[From ... /[From "html-news@ashampoo.com" <html-news@ashampoo.com>][Date Sat, 18 Oct 2003 10:32:58 +0200]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Fri, 17 Oct 2003 08:44:20 -0700]/text/[From "Doug Oppedal" <Doug_Oppedal@pgn.com>][Date Fri, 17 Oct 2003 11:17:39 -0700]/UNNAMED/[From "Radiant Records" <info@radiantrecords.com>][Date Fri, ... /[F ... /[From ... /[From "Administrator" ... /[From <@leonardointernet.com>][Date Sat, 18 Oct 2003 01:16:00 +0100]/text Infected: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Fri, 17 Oct 2003 08:44:20 -0700]/text/[From "Doug Oppedal" <Doug_Oppedal@pgn.com>][Date Fri, 17 Oct 2003 11:17:39 -0700]/UNNAMED/[From "Radiant Records" <info@radiantrecords.com>][Date Fri, ... /[F ... /[From ... /[From "Administrator" <mailerdaemon@america.com>][Date Sat, 18 Oct 2003 00:29:29 +0000 (GMT)]/UNNAMED Infected: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Fri, 17 Oct 2003 08:44:20 -0700]/text/[From "Doug Oppedal" <Doug_Oppedal@pgn.com>][Date Fri, 17 Oct 2003 11:17:39 -0700]/UNNAMED/[From "Radiant Records" <info@radiantrecords.com>][Date Fri, ... /[F ... /[From "ms internet email storage system" <postroutine@bigfoot.com>][Date Sat, 18 Oct 2003 01:04:53 +0100]/UNNAMED Infected: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Fri, 17 Oct 2003 08:44:20 -0700]/text/[From "Doug Oppedal" <Doug_Oppedal@pgn.com>][Date Fri, 17 Oct 2003 11:17:39 -0700]/UNNAMED/[From "Radiant Records" <info@radiantrecords.com>][Date Fri, ... /[From "internet email storage service" <masterengine@microsoft.com>][Date Sat, 18 Oct 2003 01:39:24 +0200 (CEST)]/UNNAMED Infected: Exploit.HTML.Iframe.FileDownload skipped
 
p2

C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Fri, 17 Oct 2003 08:44:20 -0700]/text/[From "Doug Oppedal" <Doug_Oppedal@pgn.com>][Date Fri, 17 Oct 2003 11:17:39 -0700]/UNNAMED/[From "Radiant Records" <info@radiantrecords.com>][Date Fri, ... /[F ... /[From ... /[From "Administrator" ... /[From <@leonardointernet.com>][Date Sat, 18 Oct 2003 01:16:00 +0100]/text Infected: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Fri, 17 Oct 2003 08:44:20 -0700]/text/[From "Doug Oppedal" <Doug_Oppedal@pgn.com>][Date Fri, 17 Oct 2003 11:17:39 -0700]/UNNAMED/[From "Radiant Records" <info@radiantrecords.com>][Date Fri, ... /[F ... /[From ... /[From "Administrator" <mailerdaemon@america.com>][Date Sat, 18 Oct 2003 00:29:29 +0000 (GMT)]/UNNAMED Infected: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Fri, 17 Oct 2003 08:44:20 -0700]/text/[From "Doug Oppedal" <Doug_Oppedal@pgn.com>][Date Fri, 17 Oct 2003 11:17:39 -0700]/UNNAMED/[From "Radiant Records" <info@radiantrecords.com>][Date Fri, ... /[F ... /[From "ms internet email storage system" <postroutine@bigfoot.com>][Date Sat, 18 Oct 2003 01:04:53 +0100]/UNNAMED Infected: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Fri, 17 Oct 2003 08:44:20 -0700]/text/[From "Doug Oppedal" <Doug_Oppedal@pgn.com>][Date Fri, 17 Oct 2003 11:17:39 -0700]/UNNAMED/[From "Radiant Records" <info@radiantrecords.com>][Date Fri, ... /[From "internet email storage service" <masterengine@microsoft.com>][Date Sat, 18 Oct 2003 01:39:24 +0200 (CEST)]/UNNAMED Infected: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Fri, 17 Oct 2003 08:44:20 -0700]/text/[From "Doug Oppedal" <Doug_Oppedal@pgn.com>][Date Fri, 17 Oct 2003 11:17:39 -0700]/UNNAMED/[From "Radiant Records" <info@radiantrecords.com>][Date Fri, 17 Oct 2003 15:25:35 -0500]/UNNAMED/[From Terry@k8smc.com][Date Fri, 17 Oct 2003 18:31:01 -0400]/UNNAMED Infected: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Fri, 17 Oct 2003 08:44:20 -0700]/text/[From "Doug Oppedal" <Doug_Oppedal@pgn.com>][Date Fri, 17 Oct 2003 11:17:39 -0700]/UNNAMED/[From "Radiant Records" <info@radiantrecords.com>][Date Fri, 17 Oct 2003 15:25:35 -0500]/UNNAMED Infected: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Fri, 17 Oct 2003 08:44:20 -0700]/text/[From "Doug Oppedal" <Doug_Oppedal@pgn.com>][Date Fri, 17 Oct 2003 11:17:39 -0700]/UNNAMED Infected: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Fri, 17 Oct 2003 08:44:20 -0700]/text/[From "Forrest" <rivkasolleral@eudoramail.com>][Date Tue, 21 Oct 2003 23:08:16 -0400]/html/[From "Tom Remily" <taremily@comcast.net>][Date Wed, 22 Oct 2003 07 ... /[From "Yso-8859-1 ... /[From "Postmaster" <dmaildaemon@bigfoot.com>][Date Thu, 23 Oct 2003 19:38:58 +0100]/UNNAMED Infected: Email-Worm.Win32.Swen skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Fri, 17 Oct 2003 08:44:20 -0700]/text/[From "Forrest" <rivkasolleral@eudoramail.com>][Date Tue, 21 Oct 2003 23:08:16 -0400]/html/[From "Tom Remily" <taremily@comcast.net>][Date Wed, 22 Oct 2003 07 ... /[From "net mail delivery service" <webroutine@microsoft.net>][Date Fri, 24 Oct 2003 11:40:14 +0900 (JST)]/UNNAMED Infected: Email-Worm.Win32.Swen skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Fri, 17 Oct 2003 08:44:20 -0700]/text/[From "Forrest" <rivkasolleral@eudoramail.com>][Date Tue, 21 Oct 2003 23:08:16 -0400]/html/[From "Tom Remily" <taremily@comcast.net>][Date Wed, 22 Oct 2003 07 ... /[From "Yso-8 ... /[From "Paul Maduell ... /[From promo@mypcclub.com][Date Thu, 23 Oct 2003 19:03:15 -0700]/UNNAMED Infected: Email-Worm.Win32.Swen skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Fri, 17 Oct 2003 08:44:20 -0700]/text/[From "Forrest" <rivkasolleral@eudoramail.com>][Date Tue, 21 Oct 2003 23:08:16 -0400]/html/[From "Tom Remily" <taremily@comcast.net>][Date Wed, 22 Oct 2003 07 ... /[From "Yso-8 ... /[From "Paul Maduell" <paul@maduellassociates.com>][Date Thu, 23 Oct 2003 13:20:54 -0700]/UNNAMED Infected: Email-Worm.Win32.Swen skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Fri, 17 Oct 2003 08:44:20 -0700]/text/[From "Forrest" <rivkasolleral@eudoramail.com>][Date Tue, 21 Oct 2003 23:08:16 -0400]/html/[From "Tom Remily" <taremily@comcast.net>][Date Wed, 22 Oct 2003 07 ... /[From "Yso-8859-1?Q? ... /[From Yesworld <yesworld@YesWorld.com>][Date Thu, 23 Oct 2003 08:10:38 -0400 (EDT)]/text Infected: Email-Worm.Win32.Swen skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Fri, 17 Oct 2003 08:44:20 -0700]/text/[From "Forrest" <rivkasolleral@eudoramail.com>][Date Tue, 21 Oct 2003 23:08:16 -0400]/html/[From "Tom Remily" <taremily@comcast.net>][Date Wed, 22 Oct 2003 07 ... /[From "Yso-8859-1?Q?Info@RadiantRecords.com?@<Info@RadiantRecords.com>][Date Thu, 23 Oct 2003 12:06:12 -0500]/text Infected: Email-Worm.Win32.Swen skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Fri, 17 Oct 2003 08:44:20 -0700]/text/[From "Forrest" <rivkasolleral@eudoramail.com>][Date Tue, 21 Oct 2003 23:08:16 -0400]/html/[From "Tom Remily" <taremily@comcast.net>][Date Wed, 22 Oct 2003 07:13:13 -0700]/UNNAMED Infected: Email-Worm.Win32.Swen skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Fri, 17 Oct 2003 08:44:20 -0700]/text/[From "Forrest" <rivkasolleral@eudoramail.com>][Date Tue, 21 Oct 2003 23:08:16 -0400]/html Infected: Email-Worm.Win32.Swen skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Fri, 17 Oct 2003 08:44:20 -0700]/text/[From "Paul Maduell" <paul@maduellassociates.com>][Date Fri, 24 Oct 2003 09:45:55 -0700]/UNNAMED/[From "network mail system" <masterservice@aol.com>][Date Fri, 24 Oct 2003 13:33:54 -0500]/html Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Fri, 17 Oct 2003 08:44:20 -0700]/text/[From "Paul Maduell" <paul@maduellassociates.com>][Date Fri, 24 Oct 2003 09:45:55 -0700]/UNNAMED/[From "Administrator" <nmaildaemon@netmail.net>][Date Fri, 24 Oct 2003 16:31:26 -0300]/UNNAMED/html Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Fri, 17 Oct 2003 08:44:20 -0700]/text/[From "Paul Maduell" <paul@maduellassociates.com>][Date Fri, 24 Oct 2003 09:45:55 -0700]/UNNAMED/[From "Administrator" <nmaildaemon@netmail.net>][Date Fri, 24 Oct 2003 16:31:26 ... /[From "P ... /[From "Admin" <qmailform@freemail.net>][Date Tue, 21 Oct 2003 14:36:09 -0500]/html Suspicious: Exploit.HTML.Iframe.FileDownload skipped
 
p3

C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Fri, 17 Oct 2003 08:44:20 -0700]/text/[From "Paul Maduell" <paul@maduellassociates.com>][Date Fri, 24 Oct 2003 09:45:55 -0700]/UNNAMED/[From "Administrator" <nmaildaemon@netmail.net>][Date Fri, 24 O ... /[From JobsOnline Career Tip of the Day <careertips@ncube.com>][Date Sat, 25 Oct 2003 01:04:39 +0000 (GMT)]/html Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Fri, 17 Oct 2003 08:44:20 -0700]/text/[From "Paul Maduell" <paul@maduellassociates.com>][Date Fri, 24 Oct 2003 09:45:55 -0700]/UNNAMED/[From "Administrator" <nmaildaemon@netmail.net>][Date Fri, 24 Oct 2003 16 ... /[From "History Channel" <HistoryChannel@aetv.chtah.com>][Date Sat, 25 Oct 2003 00:17:53 -0000]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Fri, 17 Oct 2003 08:44:20 -0700]/text/[From "Paul Maduell" <paul@maduellassociates.com>][Date Fri, 24 Oct 2003 09:45:55 -0700]/UNNAMED/[From "Administrator" <nmaildaemon@netmail.net>][Date Fri, 24 Oct 2003 16:31:26 ... /[From "Paul Maduell" <paul@maduellassociates.com>][Date Fri, 24 Oct 2003 12:45:20 -0700]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Fri, 17 Oct 2003 08:44:20 -0700]/text/[From "Paul Maduell" <paul@maduellassociates.com>][Date Fri, 24 Oct 2003 09:45:55 -0700]/UNNAMED/[From "Administrator" <nmaildaemon@netmail.net>][Date Fri, 24 Oct 2003 16:31:26 -0300]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Fri, 17 Oct 2003 08:44:20 -0700]/text/[From "Paul Maduell" <paul@maduellassociates.com>][Date Fri, 24 Oct 2003 09:45:55 -0700]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Fri, 17 Oct 2003 08:44:20 -0700]/text Infected: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From "Jill King" <kingbv@wissen.de>][Date Mon, 17 Nov 2003 09:04:48 +0000]/html/[From "John and Susan Signor" <jsignor@e-z.net>][Date Mon, 17 Nov 2003 08:20:10 -0800 (Pacific Standard Time)]/UNNAMED/[From Culin Edward W <Edward.Culin@irs.gov>][Date Mon, 17 Nov 2003 10:36:41 ... /[From "Network Mail Storage Service" <>][Date Tue, 18 Nov 2003 05:31:40 +0100 (CET ... /html Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From "Jill King" <kingbv@wissen.de>][Date Mon, 17 Nov 2003 09:04:48 +0000]/html/[From "John and Susan Signor" <jsignor@e-z.net>][Date Mon, 17 Nov 2003 08:20:10 -0800 (Pacific Standard Time)]/UNNAMED/[From Culin Edward W <Edward.Culin@irs.gov>][Date Mon, 17 Nov 2003 10:36:41 ... /[From "Network Mail Storage Service" <>][Date Tue, 18 Nov 2003 05:31:40 +0100 (CET)]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From "Jill King" <kingbv@wissen.de>][Date Mon, 17 Nov 2003 09:04:48 +0000]/html/[From "John and Susan Signor" <jsignor@e-z.net>][Date Mon, 17 Nov 2003 08:20:10 -0800 (Pacific Standard Time)]/UNNAMED/[From Culin Edward W <Edward.Culin@irs.gov>][Date Mon, 17 Nov 2003 10:36:41 -0 ... /[F ... /[From mike.w.knifong@exgate.tek.com][Date Mon, 17 Nov 2003 15:33:27 -0800]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From "Jill King" <kingbv@wissen.de>][Date Mon, 17 Nov 2003 09:04:48 +0000]/html/[From "John and Susan Signor" <jsignor@e-z.net>][Date Mon, 17 Nov 2003 08:20:10 -0800 (Pacific Standard Time)]/UNNAMED/[From Culin Edward W <Edward.Culin@irs.gov>][Date Mon, 17 Nov 2003 10:36:41 -0 ... /[From Culin Edward W <Edward.Culin@irs.gov>][Date Mon, 17 Nov 2003 12:53:55 -0600]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From "Jill King" <kingbv@wissen.de>][Date Mon, 17 Nov 2003 09:04:48 +0000]/html/[From "John and Susan Signor" <jsignor@e-z.net>][Date Mon, 17 Nov 2003 08:20:10 -0800 (Pacific Standard Time)]/UNNAMED/[From Culin Edward W <Edward.Culin@irs.gov>][Date Mon, 17 Nov 2003 10:36:41 -0600]/UNNAMED/[From "Argentia" <wvhjy6@yahoo.com.hk>][Date Mon, 17 Nov 2003 12:51:58 -0600]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From "Jill King" <kingbv@wissen.de>][Date Mon, 17 Nov 2003 09:04:48 +0000]/html/[From "John and Susan Signor" <jsignor@e-z.net>][Date Mon, 17 Nov 2003 08:20:10 -0800 (Pacific Standard Time)]/UNNAMED/[From Culin Edward W <Edward.Culin@irs.gov>][Date Mon, 17 Nov 2003 10:36:41 -0600]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From "Jill King" <kingbv@wissen.de>][Date Mon, 17 Nov 2003 09:04:48 +0000]/html/[From "John and Susan Signor" <jsignor@e-z.net>][Date Mon, 17 Nov 2003 08:20:10 -0800 (Pacific Standard Time)]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From "Jill King" <kingbv@wissen.de>][Date Mon, 17 Nov 2003 09:04:48 +0000]/html Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Greg Mace <MaceG@esi.com>][Date Wed, 26 Nov 2003 06:55:14 -0800]/text/[From "inet email delivery system" <webengine@america.com>][Date Wed, 26 Nov 2003 10:12:18 -0600]/html Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Greg Mace <MaceG@esi.com>][Date Wed, 26 Nov 2003 06:55:14 -0800]/text/[From "Administrator" <mailautomat@freemail.com>][Date 26 Nov 2003 16:40:16 +0000]/UNNAMED/html Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Greg Mace <MaceG@esi.com>][Date Wed, 26 Nov 2003 06:55:14 -0800]/text/[From "Administrator" <mailautomat@freemail.com>][Date 26 Nov 2003 16:40:16 +0000]/UNNAMED/[From Shelby Martz <shellieprevatte@eudoramail.com>][Date Wed, 26 Nov 2003 11:45:13 -0500]/text/[From Ticketmaster <newsletter@reply.ticketmaster.com>][Date 26 Nov 2003 09:56:10 -0800]/UNNAMED Infected: Email-Worm.Win32.Swen skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Greg Mace <MaceG@esi.com>][Date Wed, 26 Nov 2003 06:55:14 -0800]/text/[From "Administrator" <mailautomat@freemail.com>][Date 26 Nov 2003 16:40:16 +0000]/UNNAMED/[From Shelby Martz <shellieprevatte@eudoramail.com>][Date Wed, 26 Nov 2003 11:45:13 -0500]/text/[From promo@mypc ... /[From "delivery service" <mmailbot@america.com>][Date 27 Nov 2003 18:43:20 +0100]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Greg Mace <MaceG@esi.com>][Date Wed, 26 Nov 2003 06:55:14 -0800]/text/[From "Administrator" <mailautomat@freemail.com>][Date 26 Nov 2003 16:40:16 +0000]/UNNAMED/[From Shelby Martz <shellieprevatte@eudoramail.com>][Date Wed, 26 Nov 2003 11:45:13 -0500]/text/[From promo@mypcclub.com][Date Wed, 26 Nov 2003 20:29:11 -0800]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Greg Mace <MaceG@esi.com>][Date Wed, 26 Nov 2003 06:55:14 -0800]/text/[From "Administrator" <mailautomat@freemail.com>][Date 26 Nov 2003 16:40:16 +0000]/UNNAMED/[From Shelby Martz <shellieprevatte@eudoramail.com>][Date Wed, 26 Nov 2003 11:45:13 -0500]/text/[F ... /[From "I ... /[From "Postmaster" <xmailform@bigfoot.com>][Date Sun, 30 Nov 2003 16:47:46 -0600]/UNNAMED Infected: Email-Worm.Win32.Swen skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Greg Mace <MaceG@esi.com>][Date Wed, 26 Nov 2003 06:55:14 -0800]/text/[From "Administrator" <mailautomat@freemail.com>][Date 26 Nov 2003 16:40:16 +0000]/UNNAMED/[From Shelby Martz <shellieprevatte@eudoramail.com>][Date Wed, 26 Nov 2003 11:45:13 -0500]/text/[F ... /[From "I ... /[From "Administrator" <dmailprogram@netmail.com>][Date 1 Dec 2003 13:01:29 +0100]/UNNAMED Infected: Email-Worm.Win32.Swen skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Greg Mace <MaceG@esi.com>][Date Wed, 26 Nov 2003 06:55:14 -0800]/text/[From "Administrator" <mailautomat@freemail.com>][Date 26 Nov 2003 16:40:16 +0000]/UNNAMED/[From Shelby Martz <shellieprevatte@eudoramail.com>][Date Wed, 26 Nov 2003 11:45:13 -0500]/text/[F ... /[From "Inet Storage ... /[From Greg Mace <MaceG@esi.com>][Date Mon, 1 Dec 2003 09:59:17 -0800]/UNNAMED Infected: Email-Worm.Win32.Swen skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Greg Mace <MaceG@esi.com>][Date Wed, 26 Nov 2003 06:55:14 -0800]/text/[From "Administrator" <mailautomat@freemail.com>][Date 26 Nov 2003 16:40:16 +0000]/UNNAMED/[From Shelby Martz <shellieprevatte@eudoramail.com>][Date Wed, 26 Nov 2003 11:45:13 -0500]/text/[F ... /[From "Inet Storage Syste ... /[From sdshuman@harbornet.com][Date Mon, 01 Dec 2003 08:26:24 -0800]/text Infected: Email-Worm.Win32.Swen skipped
 
P4

C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Greg Mace <MaceG@esi.com>][Date Wed, 26 Nov 2003 06:55:14 -0800]/text/[From "Administrator" <mailautomat@freemail.com>][Date 26 Nov 2003 16:40:16 +0000]/UNNAMED/[From Shelby Martz <shellieprevatte@eudoramail.com>][Date Wed, 26 Nov 2003 11:45:13 -0500]/text/[F ... /[From "Inet Storage ... /[From Greg Mace <MaceG@esi.com>][Date Mon, 1 Dec 2003 09:59:17 -0800]/UNNAMED Infected: Email-Worm.Win32.Swen skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Greg Mace <MaceG@esi.com>][Date Wed, 26 Nov 2003 06:55:14 -0800]/text/[From "Administrator" <mailautomat@freemail.com>][Date 26 Nov 2003 16:40:16 +0000]/UNNAMED/[From Shelby Martz <shellieprevatte@eudoramail.com>][Date Wed, 26 Nov 2003 11:45:13 -0500]/text/[F ... /[From "Inet Storage Syste ... /[From sdshuman@harbornet.com][Date Mon, 01 Dec 2003 08:26:24 -0800]/text Infected: Email-Worm.Win32.Swen skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Greg Mace <MaceG@esi.com>][Date Wed, 26 Nov 2003 06:55:14 -0800]/text/[From "Administrator" <mailautomat@freemail.com>][Date 26 Nov 2003 16:40:16 +0000]/UNNAMED/[From Shelby Martz <shellieprevatte@eudoramail.com>][Date Wed, 26 Nov 2003 11:45:13 -0500]/text/[F ... /[From "Inet Storage System" <jmai ... /[From DHSID@aol.com][Date Sun, 30 Nov 2003 16:35:47 EST]/UNNAMED Infected: Email-Worm.Win32.Swen skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Greg Mace <MaceG@esi.com>][Date Wed, 26 Nov 2003 06:55:14 -0800]/text/[From "Administrator" <mailautomat@freemail.com>][Date 26 Nov 2003 16:40:16 +0000]/UNNAMED/[From Shelby Martz <shellieprevatte@eudoramail.com>][Date Wed, 26 Nov 2003 11:45:13 -0500]/text/[F ... /[From "Inet Storage System" <jmailprogram@aol.net>][Date Sun, 30 Nov 2003 21:23:35 +0100 (CET)]/UNNAMED Infected: Email-Worm.Win32.Swen skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Greg Mace <MaceG@esi.com>][Date Wed, 26 Nov 2003 06:55:14 -0800]/text/[From "Administrator" <mailautomat@freemail.com>][Date 26 Nov 2003 16:40:16 +0000]/UNNAMED/[From Shelby Martz <shellieprevatte@eudoramail.com>][Date Wed, 26 Nov 2003 11:45:13 -0500]/text/[Fr ... /[From "network mail service" <imailprogram@netmail.net>][Date Tue, 2 Dec 2003 14:49:59 -0500]/UNNAMED Infected: Email-Worm.Win32.Swen skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Greg Mace <MaceG@esi.com>][Date Wed, 26 Nov 2003 06:55:14 -0800]/text/[From "Administrator" <mailautomat@freemail.com>][Date 26 Nov 2003 16:40:16 +0000]/UNNAMED/[From Shelby Martz <shellieprevatte@eudoramail.com>][Date Wed, 26 Nov 2003 11:45:13 -0500]/text/[Fr ... /[From " ... /[From ... /[From Greg Mace <MaceG@esi.com>][Date Tue, 2 Dec 2003 07:27:53 -0800]/UNNAMED Infected: Email-Worm.Win32.Swen skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Greg Mace <MaceG@esi.com>][Date Wed, 26 Nov 2003 06:55:14 -0800]/text/[From "Administrator" <mailautomat@freemail.com>][Date 26 Nov 2003 16:40:16 +0000]/UNNAMED/[From Shelby Martz <shellieprevatte@eudoramail.com>][Date Wed, 26 Nov 2003 11:45:13 -0500]/text/[Fr ... /[From " ... /[From Greg Hardy <GHardy@rocketmail.com>][Date Tue, 2 Dec 2003 07:12:04 -0800 (PST)]/text Infected: Email-Worm.Win32.Swen skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Greg Mace <MaceG@esi.com>][Date Wed, 26 Nov 2003 06:55:14 -0800]/text/[From "Administrator" <mailautomat@freemail.com>][Date 26 Nov 2003 16:40:16 +0000]/UNNAMED/[From Shelby Martz <shellieprevatte@eudoramail.com>][Date Wed, 26 Nov 2003 11:45:13 -0500]/text/[Fr ... /[From "html-news@ashampoo.com" <html-news@ashampoo.com>][Date Sat, 29 Nov 2003 19:46:18 +0100]/UNNAMED Infected: Email-Worm.Win32.Swen skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Greg Mace <MaceG@esi.com>][Date Wed, 26 Nov 2003 06:55:14 -0800]/text/[From "Administrator" <mailautomat@freemail.com>][Date 26 Nov 2003 16:40:16 +0000]/UNNAMED/[From Shelby Martz <shellieprevatte@eudoramail.com>][Date Wed, 26 Nov 2003 11:45:13 -0500]/text/[From <modest ... /[From Rodney Walbright <zherdtas@spinster.co.uk>][Date Sat, 29 Nov 2003 04:55:08 -0500]/text Infected: Email-Worm.Win32.Swen skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Greg Mace <MaceG@esi.com>][Date Wed, 26 Nov 2003 06:55:14 -0800]/text/[From "Administrator" <mailautomat@freemail.com>][Date 26 Nov 2003 16:40:16 +0000]/UNNAMED/[From Shelby Martz <shellieprevatte@eudoramail.com>][Date Wed, 26 Nov 2003 11:45:13 -0500]/text/[From <modestacutler@mail15.com>][Date Sat, 29 Nov 2003 10:33:30 +0000]/UNNAMED Infected: Email-Worm.Win32.Swen skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Greg Mace <MaceG@esi.com>][Date Wed, 26 Nov 2003 06:55:14 -0800]/text/[From "Administrator" <mailautomat@freemail.com>][Date 26 Nov 2003 16:40:16 +0000]/UNNAMED/[From Shelby Martz <shellieprevatte@eudoramail.com>][Date Wed, 26 Nov 2003 11:45:13 -0500]/text/ ... /[From "Net Storage System" <postautomat@america.com>][Date Wed, 3 Dec 2003 12:35:35 +0100 (CET)]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Greg Mace <MaceG@esi.com>][Date Wed, 26 Nov 2003 06:55:14 -0800]/text/[From "Administrator" <mailautomat@freemail.com>][Date 26 Nov 2003 16:40:16 +0000]/UNNAMED/[From Shelby Martz <shellieprevatte@eudoramail.com>][Date Wed, 26 Nov 2003 11:45:13 -0500]/text/[From Bahram Adrangi <adrangi@up.edu>][Date Tue, 02 Dec 2003 21:06:49 -0800]/text Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Greg Mace <MaceG@esi.com>][Date Wed, 26 Nov 2003 06:55:14 -0800]/text/[From "Administrator" <mailautomat@freemail.com>][Date 26 Nov 2003 16:40:16 +0000]/UNNAMED/[From Shelby Martz <shellieprevatte@eudoramail.com> ... /[From Submi ... /[From "Administrator" <postbot@rocketmail.net>][Date Wed, 10 Dec 2003 15:02:19 +0100 (added by postmaster@mail-1.tiscali ... /UNNAMED Infected: Email-Worm.Win32.Swen skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Greg Mace <MaceG@esi.com>][Date Wed, 26 Nov 2003 06:55:14 -0800]/text/[From "Administrator" <mailautomat@freemail.com>][Date 26 Nov 2003 16:40:16 +0000]/UNNAMED/[From Shelby Martz <shellieprevatte@eudoramail.com> ... /[From Submi ... /[From "Administrator" <postbot@rocketmail.net>][Date Wed, 10 Dec 2003 15:02:19 +0100 (added by postmaster@mail-1.tiscali.it)]/UNNAMED Infected: Email-Worm.Win32.Swen skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Greg Mace <MaceG@esi.com>][Date Wed, 26 Nov 2003 06:55:14 -0800]/text/[From "Administrator" <mailautomat@freemail.com>][Date 26 Nov 2003 16:40:16 +0000]/UNNAMED/[From Shelby Martz <shellieprevatte@eudoramail.com> ... /[From Submitted using SMTP AUTH at out005.verizon. ... /[From "archer wright" <abunkie55@earthlink.net>][Date Wed, 10 Dec 2003 06:34:49 -0600]/UNNAMED Infected: Email-Worm.Win32.Swen skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Greg Mace <MaceG@esi.com>][Date Wed, 26 Nov 2003 06:55:14 -0800]/text/[From "Administrator" <mailautomat@freemail.com>][Date 26 Nov 2003 16:40:16 +0000]/UNNAMED/[From Shelby Martz <shellieprevatte@eudoramail.com> ... /[From Submitted using SMTP AUTH at out005.verizon.net from [4.5.54.87] at Tue, 9 D ... /[From Nw.Phl@kp.org][Date Tue, 9 Dec 2003 16:01:49 -0800]/text Infected: Email-Worm.Win32.Swen skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Greg Mace <MaceG@esi.com>][Date Wed, 26 Nov 2003 06:55:14 -0800]/text/[From "Administrator" <mailautomat@freemail.com>][Date 26 Nov 2003 16:40:16 +0000]/UNNAMED/[From Shelby Martz <shellieprevatte@eudoramail.com> ... /[From Submitted using SMTP AUTH at out005.verizon.net from [4.5.54.87] at Tue, 9 Dec 2003 14:32:58 -0600][Date Tue, 9 Dec 2003 12:32:59 -0800]/UNNAMED Infected: Email-Worm.Win32.Swen skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Greg Mace <MaceG@esi.com>][Date Wed, 26 Nov 2003 06:55:14 -0800]/text/[From "Administrator" <mailautomat@freemail.com>][Date 26 Nov 2003 16:40:16 +0000]/UNNAMED/[From Shelby Martz <shellieprevatte@eudoramail.com>][D ... /[From Submitted using SMTP AUTH at out004.verizon.net from [4.5.54.87] at Tue, 9 Dec 2003 12:46:40 -0600][Date Tue, 9 Dec 2003 10:46:41 -0800]/text Infected: Email-Worm.Win32.Swen skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Greg Mace <MaceG@esi.com>][Date Wed, 26 Nov 2003 06:55:14 -0800]/text/[From "Administrator" <mailautomat@freemail.com>][Date 26 Nov 2003 16:40:16 +0000]/UNNAMED/[From Shelby Martz <shellieprevatte@eudoramail.com>][Date Wed, 26 Nov 2003 11:45:13 -0500]/text/[From Yesworld <yesworld@YesWorld.com>][Date Tue, 9 Dec 2003 07:52:35 -0500 (EST)]/text Infected: Email-Worm.Win32.Swen skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Greg Mace <MaceG@esi.com>][Date Wed, 26 Nov 2003 06:55:14 -0800]/text/[From "Administrator" <mailautomat@freemail.com>][Date 26 Nov 2003 16:40:16 +0000]/UNNAMED/[From Shelby Martz <shellieprevatte@eudoramail.com>][Date Wed, 26 Nov 2003 11:45:13 -0500]/text Infected: Email-Worm.Win32.Swen skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Greg Mace <MaceG@esi.com>][Date Wed, 26 Nov 2003 06:55:14 -0800]/text/[From "Administrator" <mailautomat@freemail.com>][Date 26 Nov 2003 16:40:16 +0000]/UNNAMED Infected: Email-Worm.Win32.Swen skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Greg Mace <MaceG@esi.com>][Date Wed, 26 Nov 2003 06:55:14 -0800]/text Infected: Email-Worm.Win32.Swen skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From orders@cabelas.com][Date Sat, 17 Jan 2004 00:53:04 -0700]/text/[From "Admin" <webengine@bigfoot.com>][Date Sat, 17 Jan 2004 18:21:32 +0100 (MET)]/UNNAMED/html Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From orders@cabelas.com][Date Sat, 17 Jan 2004 00:53:04 -0700]/text/[From "Admin" <webengine@bigfoot.com>][Date Sat, 17 Jan 2004 18:21:32 +0100 (MET)]/UNNAMED/[From "Postmaster" <mailerservice@microsoft.net>][Date Sat, 17 Jan 2004 11:56:38 -0600]/UNNAMED/html Suspicious: Exploit.HTML.Iframe.FileDownload skipped
 
p5

C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From orders@cabelas.com][Date Sat, 17 Jan 2004 00:53:04 -0700]/text/[From "Admin" <webengine@bigfoot.com>][Date Sat, 17 Jan 2004 18:21:32 +0100 (MET)]/UNNAMED/[From "Postmaster" <mailerservice@microsoft.net>][Date Sat, 17 Jan 2004 11:56:38 -0600]/UNNAMED/gqyim.exe Infected: Email-Worm.Win32.Swen skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From orders@cabelas.com][Date Sat, 17 Jan 2004 00:53:04 -0700]/text/[From "Admin" <webengine@bigfoot.com>][Date Sat, 17 Jan 2004 18:21:32 +0100 (MET)]/UNNAMED/[From "Postmaster" <mailerservice@microsoft.net>][Date Sat, 17 Jan 2004 11 ... /[From "message system" <masterengine@puremail.com>][Date Sun, 18 Jan 2004 17:00:47 +1100 (added by postmaster@iprimus.com.au ... /html Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From orders@cabelas.com][Date Sat, 17 Jan 2004 00:53:04 -0700]/text/[From "Admin" <webengine@bigfoot.com>][Date Sat, 17 Jan 2004 18:21:32 +0100 (MET)]/UNNAMED/[From "Postmaster" <mailerservice@microsoft.net>][Date Sat, 17 Jan 2004 11 ... /[From "message system" <masterengine@purem ... /[From postengine@puremail.com][Date Date header was inserted by smtp04.wxs.n ... /html Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From orders@cabelas.com][Date Sat, 17 Jan 2004 00:53:04 -0700]/text/[From "Admin" <webengine@bigfoot.com>][Date Sat, 17 Jan 2004 18:21:32 +0100 (MET)]/UNNAMED/[From "Postmaster" <mailerservice@microsoft.net>][Date Sat, 17 Jan 2004 11 ... /[From "message system" <masterengine@purem ... /[From postengine@puremail.com][Date Date header was inserted by smtp04.wxs.nl]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From orders@cabelas.com][Date Sat, 17 Jan 2004 00:53:04 -0700]/text/[From "Admin" <webengine@bigfoot.com>][Date Sat, 17 Jan 2004 18:21:32 +0100 (MET)]/UNNAMED/[From "Postmaster" <mailerservice@microsoft.net>][Date Sat, 17 Jan 2004 11 ... /[From "message system" <masterengine@puremail.com>][Date Sun, 18 Jan 2004 17:00:47 +1100 (added by postmaster@iprimus.com.au)]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From orders@cabelas.com][Date Sat, 17 Jan 2004 00:53:04 -0700]/text/[From "Admin" <webengine@bigfoot.com>][Date Sat, 17 Jan 2004 18:21:32 +0100 (MET)]/UNNAMED/[From "Postmaster" <mailerservice@microsoft.net>][Date Sat, 17 Jan 2004 11:56:38 -0600]/UNNAMED/[From "archer wright" <a ... /[From "Tom Remily" <taremily@comcast.net>][Date Sat, 17 Jan 2004 17:53:46 -0800]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From orders@cabelas.com][Date Sat, 17 Jan 2004 00:53:04 -0700]/text/[From "Admin" <webengine@bigfoot.com>][Date Sat, 17 Jan 2004 18:21:32 +0100 (MET)]/UNNAMED/[From "Postmaster" <mailerservice@microsoft.net>][Date Sat, 17 Jan 2004 11:56:38 -0600]/UNNAMED/[From "archer wright" <abunkie55@earthlink.net>][Date Sat, 17 Jan 2004 13:56:32 -0600]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From orders@cabelas.com][Date Sat, 17 Jan 2004 00:53:04 -0700]/text/[From "Admin" <webengine@bigfoot.com>][Date Sat, 17 Jan 2004 18:21:32 +0100 (MET)]/UNNAMED/[From "Postmaster" <mailerservice@microsoft.net>][Date Sat, 17 Jan 2004 11:56:38 -0600]/UNNAMED Infected: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From orders@cabelas.com][Date Sat, 17 Jan 2004 00:53:04 -0700]/text/[From "Admin" <webengine@bigfoot.com>][Date Sat, 17 Jan 2004 18:21:32 +0100 (MET)]/UNNAMED Infected: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From orders@cabelas.com][Date Sat, 17 Jan 2004 00:53:04 -0700]/text Infected: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From "Dave Bax" <coinopper@hotmail.com>][Date Wed, 18 Feb 2004 14:20:26 -0800]/UNNAMED/[From "" <nmailform@rocketmail.com>][Date Thu, 19 Feb 2004 16:52:03 +1300 (NZDT)]/html Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From "Dave Bax" <coinopper@hotmail.com>][Date Wed, 18 Feb 2004 14:20:26 -0800]/UNNAMED/[From "Radiant Records" <info@radiantrecords.com>][Date Wed, 24 Mar 2004 13:24:14 -0600]/UNNAMED/[From Richard M Craig <k7rmc@juno.com>][Date Sat, 6 Dec 2003 21:47:18 -0800]/disco.zip/disco.pif Infected: Email-Worm.Win32.NetSky.c skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From "Dave Bax" <coinopper@hotmail.com>][Date Wed, 18 Feb 2004 14:20:26 -0800]/UNNAMED/[From "Radiant Records" <info@radiantrecords.com>][Date Wed, 24 Mar 2004 13:24:14 -0600]/UNNAMED/[From Richard M Craig <k7rmc@juno.com>][Date Sat, 6 Dec 2003 21:47:18 -0800]/disco.zip Infected: Email-Worm.Win32.NetSky.c skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From "Dave Bax" <coinopper@hotmail.com>][Date Wed, 18 Feb 2004 14:20:26 -0800]/UNNAMED/[From "Radiant Records" <info@radiantrecords.com>][Date Wed, 24 Mar 2004 13:24:14 -0600]/UNNAMED Infected: Email-Worm.Win32.NetSky.c skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From "Dave Bax" <coinopper@hotmail.com>][Date Wed, 18 Feb 2004 14:20:26 -0800]/UNNAMED/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Wed, 7 Apr 2004 15:57:36 -0700]/UNNAMED/[From Submitted using SMTP AUTH at out009.verizon.net from [ ... /[From "Administrator" <mailerbot@aol.net>][Date Thu, 8 Apr 2004 08:00:35 +0200 (added by postmaster@mail.tiscali.cz)]/html Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From "Dave Bax" <coinopper@hotmail.com>][Date Wed, 18 Feb 2004 14:20:26 -0800]/UNNAMED/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Wed, 7 Apr 2004 15:57:36 -0700]/UNNAMED/[From Submitted using SMTP AUTH at out009.verizon.net from [4.5.54.87] at Wed, 7 Apr 2004 18:16:48 -0500][Date Wed, 7 Apr 2004 16:16:50 -0700]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From "Dave Bax" <coinopper@hotmail.com>][Date Wed, 18 Feb 2004 14:20:26 -0800]/UNNAMED/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Wed, 7 Apr 2004 15:57:36 -0700]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From "Dave Bax" <coinopper@hotmail.com>][Date Wed, 18 Feb 2004 14:20:26 -0800]/UNNAMED Infected: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From George Yazz <kc7hkp@teleport.com>][Date Tue, 20 Apr 2004 13:22:22 -0700]/text/[From "email system" <webengine@america.net>][Date Wed, 21 Apr 2004 18:06:43 -0500]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From George Yazz <kc7hkp@teleport.com>][Date Tue, 20 Apr 2004 13:22:22 -0700]/text/[From "Ron Boyd" <ronbyd@dsl-only.net>][Date Sun, 25 Apr 2004 11:47:41 -0700]/text/[From United Mileage Plus <MileagePlus@UnitedOffers.com>][Date Mon, 26 Apr 2004 08:46:21 -0500]/UNNAMED/[From "Ron Boyd" < ... /[From Ted.Peterson@gecapital.com][Date Mon, 26 Apr 2004 23:58:56 -0800]/UNNAMED Infected: Email-Worm.Win32.Bagle.n skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From George Yazz <kc7hkp@teleport.com>][Date Tue, 20 Apr 2004 13:22:22 -0700]/text/[From "Ron Boyd" <ronbyd@dsl-only.net>][Date Sun, 25 Apr 2004 11:47:41 -0700]/text/[From United Mileage Plus <MileagePlus@UnitedOffers.com>][Date Mon, 26 Apr 2004 08:46:21 -0500]/UNNAMED/[From "Ron Boyd" <ronbyd@dsl-only.net>][Date Mon, 26 Apr 2004 23:32:38 -0700]/UNNAMED Infected: Email-Worm.Win32.Bagle.n skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From George Yazz <kc7hkp@teleport.com>][Date Tue, 20 Apr 2004 13:22:22 -0700]/text/[From "Ron Boyd" <ronbyd@dsl-only.net>][Date Sun, 25 Apr 2004 11:47:41 -0700]/text/[From United Mileage Plus <MileagePlus@UnitedOffers.com>][Date Mon, 26 Apr 2004 08:46:21 -0500]/UNNAMED Infected: Email-Worm.Win32.Bagle.n skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From George Yazz <kc7hkp@teleport.com>][Date Tue, 20 Apr 2004 13:22:22 -0700]/text/[From "Ron Boyd" <ronbyd@dsl-only.net>][Date Sun, 25 Apr 2004 11:47:41 -0700]/text Infected: Email-Worm.Win32.Bagle.n skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From George Yazz <kc7hkp@teleport.com>][Date Tue, 20 Apr 2004 13:22:22 -0700]/text Infected: Email-Worm.Win32.Bagle.n skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From "Lucinda Drake" <don.kennedy@gte.net>][Date Sat, 19 Jun 2004 16:28:04 +0400]/UNNAMED/[From "Ramon Rivera" <vtopydhflr@hotmail.com>][Date Sat, 19 Jun 2004 01:51:27 +0400]/UNNAMED/[From "Patsy Ray" <ajyenr@yahoo.com>][Date Wed, 30 Jun 2004 08:27:43 ... /[From Mail ... /[From ... /data.rtf .scr Infected: Email-Worm.Win32.NetSky.q skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From "Lucinda Drake" <don.kennedy@gte.net>][Date Sat, 19 Jun 2004 16:28:04 +0400]/UNNAMED/[From "Ramon Rivera" <vtopydhflr@hotmail.com>][Date Sat, 19 Jun 2004 01:51:27 +0400]/UNNAMED/[From "Patsy Ray" <ajyenr@yahoo.com>][Date Wed, 30 Jun 2004 08:27:43 ... /[From Mail ... /[From ... /[ . ... /[From don.morrison@chordiant.com][Date Fri, 16 Jul 2004 19:36:06 -0400]/UNNAMED Infected: Email-Worm.Win32.NetSky.q skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From "Lucinda Drake" <don.kennedy@gte.net>][Date Sat, 19 Jun 2004 16:28:04 +0400]/UNNAMED/[From "Ramon Rivera" <vtopydhflr@hotmail.com>][Date Sat, 19 Jun 2004 01:51:27 +0400]/UNNAMED/[From "Patsy Ray" <ajyenr@yahoo.com>][Date Wed, 30 Jun 2004 08:27:43 ... /[From Mail ... /[From ... /[ ... /[From "Gay" <Monte489@hotmail.com>][Date Sat, 17 Jul 2004 01:46:56 +0500]/UNNAMED Infected: Email-Worm.Win32.NetSky.q skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From "Lucinda Drake" <don.kennedy@gte.net>][Date Sat, 19 Jun 2004 16:28:04 +0400]/UNNAMED/[From "Ramon Rivera" <vtopydhflr@hotmail.com>][Date Sat, 19 Jun 2004 01:51:27 +0400]/UNNAMED/[From "Patsy Ray" <ajyenr@yahoo.com>][Date Wed, 30 Jun 2004 08:27:43 ... /[From Mail ... /[From ... /[From "Roberta Souza" <ted.culin@gte.net>][Date Mon, 12 Jul 2004 10:19:25 +0400]/UNNAMED Infected: Email-Worm.Win32.NetSky.q skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From "Lucinda Drake" <don.kennedy@gte.net>][Date Sat, 19 Jun 2004 16:28:04 +0400]/UNNAMED/[From "Ramon Rivera" <vtopydhflr@hotmail.com>][Date Sat, 19 Jun 2004 01:51:27 +0400]/UNNAMED/[From "Patsy Ray" <ajyenr@yahoo.com>][Date Wed, 30 Jun 2004 08:27:43 ... /[From Mail ... /[From Ca ... /[From "Lucy Jordache" <lucy@marillion.com>][Date Fri, 9 Jul 2004 16:05:08 +0100]/text Infected: Email-Worm.Win32.NetSky.q skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From "Lucinda Drake" <don.kennedy@gte.net>][Date Sat, 19 Jun 2004 16:28:04 +0400]/UNNAMED/[From "Ramon Rivera" <vtopydhflr@hotmail.com>][Date Sat, 19 Jun 2004 01:51:27 +0400]/UNNAMED/[From "Patsy Ray" <ajyenr@yahoo.com>][Date Wed, 30 Jun 2004 08:27:43 ... /[From Mail ... /[From Car ... /[From "B ... /[From promo@mypcclub.net][Date Thu, 8 Jul 2004 20:08:58 -0700]/UNNAMED Infected: Email-Worm.Win32.NetSky.q skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From "Lucinda Drake" <don.kennedy@gte.net>][Date Sat, 19 Jun 2004 16:28:04 +0400]/UNNAMED/[From "Ramon Rivera" <vtopydhflr@hotmail.com>][Date Sat, 19 Jun 2004 01:51:27 +0400]/UNNAMED/[From "Patsy Ray" <ajyenr@yahoo.com>][Date Wed, 30 Jun 2004 08:27:43 ... /[From Mail ... /[From Car ... /[From "Brad Sims" <ted.culin@gte.net>][Date Sat, 10 Jul 2004 22:18:15 +0500]/UNNAMED Infected: Email-Worm.Win32.NetSky.q skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From "Lucinda Drake" <don.kennedy@gte.net>][Date Sat, 19 Jun 2004 16:28:04 +0400]/UNNAMED/[From "Ramon Rivera" <vtopydhflr@hotmail.com>][Date Sat, 19 Jun 2004 01:51:27 +0400]/UNNAMED/[From "Patsy Ray" <ajyenr@yahoo.com>][Date Wed, 30 Jun 2004 08:27:43 ... /[From Mail ... /[From Carlson Jim-rjj ... /[From Tom Popp <ka0tp@aol.com>][Date Tue, 29 Jun 2004 10:31:51 EDT]/text Infected: Email-Worm.Win32.NetSky.q skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From "Lucinda Drake" <don.kennedy@gte.net>][Date Sat, 19 Jun 2004 16:28:04 +0400]/UNNAMED/[From "Ramon Rivera" <vtopydhflr@hotmail.com>][Date Sat, 19 Jun 2004 01:51:27 +0400]/UNNAMED/[From "Patsy Ray" <ajyenr@yahoo.com>][Date Wed, 30 Jun 2004 08:27:43 ... /[From Mail ... /[From Carlson Jim-rjjr90 <Jim.Carlson@freescale.com>][Date Tue, 29 Jun 2004 06:29:26 -0700]/UNNAMED Infected: Email-Worm.Win32.NetSky.q skipped
 
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From "Lucinda Drake" <don.kennedy@gte.net>][Date Sat, 19 Jun 2004 16:28:04 +0400]/UNNAMED/[From "Ramon Rivera" <vtopydhflr@hotmail.com>][Date Sat, 19 Jun 2004 01:51:27 +0400]/UNNAMED/[From "Patsy Ray" <ajyenr@yahoo.com>][Date Wed, 30 Jun 2004 08:27:43 ... /[From Mail Delivery Subsystem <MAILER-DAEMON@motgate5.mot.com>][Date Tue, 29 Jun 2004 06:24:14 -0700 (MST)]/UNNAMED Infected: Email-Worm.Win32.NetSky.q skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From "Lucinda Drake" <don.kennedy@gte.net>][Date Sat, 19 Jun 2004 16:28:04 +0400]/UNNAMED/[From "Ramon Rivera" <vtopydhflr@hotmail.com>][Date Sat, 19 Jun 2004 01:51:27 +0400]/UNNAMED/[From "Patsy Ray" <ajyenr@yahoo.com>][Date Wed, 30 Jun 2004 08:27:43 -0400]/UNNAMED/[From Culin Edward W <Edward.Culin@irs.gov>][Date Mon, 28 Jun 2004 11:43:49 -0500]/UNNAMED Infected: Email-Worm.Win32.NetSky.q skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From "Lucinda Drake" <don.kennedy@gte.net>][Date Sat, 19 Jun 2004 16:28:04 +0400]/UNNAMED/[From "Ramon Rivera" <vtopydhflr@hotmail.com>][Date Sat, 19 Jun 2004 01:51:27 +0400]/UNNAMED/[From "Patsy Ray" <ajyenr@yahoo.com>][Date Wed, 30 Jun 2004 08:27:43 -0400]/UNNAMED Infected: Email-Worm.Win32.NetSky.q skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From "Lucinda Drake" <don.kennedy@gte.net>][Date Sat, 19 Jun 2004 16:28:04 +0400]/UNNAMED/[From "Ramon Rivera" <vtopydhflr@hotmail.com>][Date Sat, 19 Jun 2004 01:51:27 +0400]/UNNAMED Infected: Email-Worm.Win32.NetSky.q skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From "Lucinda Drake" <don.kennedy@gte.net>][Date Sat, 19 Jun 2004 16:28:04 +0400]/UNNAMED Infected: Email-Worm.Win32.NetSky.q skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From "Paul Maduell" <paul@maduellassociates.com>][Date Mon, 23 Aug 2004 12:37:04 -0700]/UNNAMED/[From linda@gte.net][Date Mon, 23 Aug 2004 14:27:13 -0600]/UNNAMED/transcript-txt.scr Infected: Email-Worm.Win32.Mydoom.o skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From "Paul Maduell" <paul@maduellassociates.com>][Date Mon, 23 Aug 2004 12:37:04 -0700]/UNNAMED/[From linda@gte.net][Date Mon, 23 Aug 2004 14:27:13 -0600]/UNNAMED Infected: Email-Worm.Win32.Mydoom.o skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From "Paul Maduell" <paul@maduellassociates.com>][Date Mon, 23 Aug 2004 12:37:04 -0700]/UNNAMED Infected: Email-Worm.Win32.Mydoom.o skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Sauvie <wuoregon@worldnet.att.net>][Date Fri, 22 Oct 2004 13:55:48 -0700]/text/[From "eBay" <eBay@reply3.ebay.com>][Date Wed, 27 Oct 2004 14:21:16 -0700]/UNNAMED/[From "Barry Posey" <barryposeyjc@devparadise.com>][Date Thu, 28 Oct 2004 19:10:10 +0000 ... /[From "Lesa Stinson" <lesastinsonvq@cim.se.fujitsu.co.jp>][Date Sun, 31 Oct 2004 10:41:22 +0000]/Loves_money.scr Infected: Email-Worm.Win32.Bagle.z skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Sauvie <wuoregon@worldnet.att.net>][Date Fri, 22 Oct 2004 13:55:48 -0700]/text/[From "eBay" <eBay@reply3.ebay.com>][Date Wed, 27 Oct 2004 14:21:16 -0700]/UNNAMED/[From "Barry Posey" <barryposeyjc@devparadise.com>][Date Thu, 28 Oct 2004 19:10:10 +0000]/html/[From "Connie Fox" <foxaccounting@comcast.net>][Date Fri, 29 Oct 2004 07:09:01 -0700]/UNNAMED Infected: Email-Worm.Win32.Bagle.z skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Sauvie <wuoregon@worldnet.att.net>][Date Fri, 22 Oct 2004 13:55:48 -0700]/text/[From "eBay" <eBay@reply3.ebay.com>][Date Wed, 27 Oct 2004 14:21:16 -0700]/UNNAMED/[From "Barry Posey" <barryposeyjc@devparadise.com>][Date Thu, 28 Oct 2004 19:10:10 +0000]/html Infected: Email-Worm.Win32.Bagle.z skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Sauvie <wuoregon@worldnet.att.net>][Date Fri, 22 Oct 2004 13:55:48 -0700]/text/[From "eBay" <eBay@reply3.ebay.com>][Date Wed, 27 Oct 2004 14:21:16 -0700]/UNNAMED Infected: Email-Worm.Win32.Bagle.z skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Sauvie <wuoregon@worldnet.att.net>][Date Fri, 22 Oct 2004 13:55:48 -0700]/text Infected: Email-Worm.Win32.Bagle.z skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html Infected: Email-Worm.Win32.Bagle.z skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Inbox Mail Berkeley mbox: infected - 79, suspicious - 43 skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Junk/[From "Lucinda Drake" <don.kennedy@gte.net>][Date Sat, 19 Jun 2004 16:28:04 +0400]/UNNAMED/[From "Ramon Rivera" <vtopydhflr@hotmail.com>][Date Sat, 19 Jun 2004 01:51:27 +0400]/UNNAMED/[From "Patsy Ray" <ajyenr@yahoo.com>][Date Wed, 30 Jun 2004 08:27:43 -0400]/UNNAMED/[From <service@usbank.com>][Date Thu, 10 Jun 2004 11:05:56 -0600]/html Infected: Trojan-Spy.HTML.Usbankfraud.b skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Junk/[From "Lucinda Drake" <don.kennedy@gte.net>][Date Sat, 19 Jun 2004 16:28:04 +0400]/UNNAMED/[From "Ramon Rivera" <vtopydhflr@hotmail.com>][Date Sat, 19 Jun 2004 01:51:27 +0400]/UNNAMED/[From "Patsy Ray" <ajyenr@yahoo.com>][Date Wed, 30 Jun 2004 08:27:43 -0400]/UNNAMED Infected: Trojan-Spy.HTML.Usbankfraud.b skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Junk/[From "Lucinda Drake" <don.kennedy@gte.net>][Date Sat, 19 Jun 2004 16:28:04 +0400]/UNNAMED/[From "Ramon Rivera" <vtopydhflr@hotmail.com>][Date Sat, 19 Jun 2004 01:51:27 +0400]/UNNAMED Infected: Trojan-Spy.HTML.Usbankfraud.b skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Junk/[From "Lucinda Drake" <don.kennedy@gte.net>][Date Sat, 19 Jun 2004 16:28:04 +0400]/UNNAMED Infected: Trojan-Spy.HTML.Usbankfraud.b skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Profiles\default\zf3xtp2f.slt\Mail\incoming.verizon-1.net\Junk Mail Berkeley mbox: infected - 4 skipped
C:\Documents and Settings\Ted\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\jvmimpro.jar-b825669-35bab9bb.zip/vmain.class Infected: Exploit.Java.Gimsh.b skipped
C:\Documents and Settings\Ted\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\jvmimpro.jar-b825669-35bab9bb.zip ZIP: infected - 1 skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Fri, 17 Oct 2003 08:44:20 -0700]/text/[From "Doug Oppedal" <Doug_Oppedal@pgn.com>][Date Fri, 17 Oct 2003 11:17:39 -0700]/UNNAMED/[From "Postmaster" < >][Date Fri, 17 Oct 2003 19:38:40 +0100]/html Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Fri, 17 Oct 2003 08:44:20 -0700]/text/[From "Doug Oppedal" <Doug_Oppedal@pgn.com>][Date Fri, 17 Oct 2003 11:17:39 -0700]/UNNAMED/[From "Admin" <mailbot@netmail.net>][Date Fri, 17 Oct 2003 15:08:12 -0500]/html Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Fri, 17 Oct 2003 08:44:20 -0700]/text/[From "Doug Oppedal" <Doug_Oppedal@pgn.com>][Date Fri, 17 Oct 2003 11:17:39 -0700]/UNNAMED/[From "Admin" <mailbot@netmail.net>][Date Fri, 17 Oct 2003 15:08:12 -0500]/evpk.exe Infected: Email-Worm.Win32.Swen skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Fri, 17 Oct 2003 08:44:20 -0700]/text/[From "Doug Oppedal" <Doug_Oppedal@pgn.com>][Date Fri, 17 Oct 2003 11:17:39 -0700]/UNNAMED/[From "Radiant Records" <info@radiantrecords.com>][Date Fri, 17 Oct 2003 15:25:35 -0 ... /[From "" <igzzuwq_chnxdjsb@vfuu.com>][Date Sat, 18 Oct 2003 01:35:44 +0200 (CEST)]/UPGRADE516.exe Infected: Email-Worm.Win32.Swen skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Fri, 17 Oct 2003 08:44:20 -0700]/text/[From "Doug Oppedal" <Doug_Oppedal@pgn.com>][Date Fri, 17 Oct 2003 11:17:39 -0700]/UNNAMED/[From "Radiant Records" <info@radiantrecords.com>][Date Fri, ... /[From "internet email storage service" <masterengine@microsoft.com>][Date Sat, 18 Oct 2003 01:39:24 +0200 (CEST ... /html Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Fri, 17 Oct 2003 08:44:20 -0700]/text/[From "Doug Oppedal" <Doug_Oppedal@pgn.com>][Date Fri, 17 Oct 2003 11:17:39 -0700]/UNNAMED/[From "Radiant Records" <info@radiantrecords.com>][Date Fri, ... /[F ... /[From "ms internet email storage system" <postroutine@bigfoot.com>][Date Sat, 18 Oct 2003 01:04:53 +010 ... /html Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Fri, 17 Oct 2003 08:44:20 -0700]/text/[From "Doug Oppedal" <Doug_Oppedal@pgn.com>][Date Fri, 17 Oct 2003 11:17:39 -0700]/UNNAMED/[From "Radiant Records" <info@radiantrecords.com>][Date Fri, ... /[F ... /[From ... /[From "Administrator" <mailerdaemon@america.com>][Date Sat, 18 Oct 2003 00:29:29 +0000 (GMT ... /html Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Fri, 17 Oct 2003 08:44:20 -0700]/text/[From "Doug Oppedal" <Doug_Oppedal@pgn.com>][Date Fri, 17 Oct 2003 11:17:39 -0700]/UNNAMED/[From "Radiant Records" <info@radiantrecords.com>][Date Fri, ... /[F ... /[From ... /[From "Administrator" <mailerdaemon@america.com>][Date Sat, 18 Oct 2003 00:29:29 +0000 ... /fqmb.exe Infected: Email-Worm.Win32.Swen skipped
 
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Fri, 17 Oct 2003 08:44:20 -0700]/text/[From "Doug Oppedal" <Doug_Oppedal@pgn.com>][Date Fri, 17 Oct 2003 11:17:39 -0700]/UNNAMED/[From "Radiant Records" <info@radiantrecords.com>][Date Fri, ... /[F ... /[From ... /[From "A ... /[From "Postmaster" <masterdaemon@yahoo.net>][Date Fri, 17 Oct 2003 23:32:03 -0600]/html Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Fri, 17 Oct 2003 08:44:20 -0700]/text/[From "Doug Oppedal" <Doug_Oppedal@pgn.com>][Date Fri, 17 Oct 2003 11:17:39 -0700]/UNNAMED/[From "Radiant Records" <info@radiantrecords.com>][Date Fri, ... /[F ... /[From ... /[From ... /[From "Public Support" <prhhtjstg@qyvi.net>][Date Sat, 18 Oct 2003 09:20:31 +0100]/Qix.exe Infected: Email-Worm.Win32.Swen skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Fri, 17 Oct 2003 08:44:20 -0700]/text/[From "Doug Oppedal" <Doug_Oppedal@pgn.com>][Date Fri, 17 Oct 2003 11:17:39 -0700]/UNNAMED/[From "Radiant Records" <info@radiantrecords.com>][Date Fri, ... /[F ... /[From ... /[From ... /[From "administrator" <tmailbot@microsoft.com>][Date Sat, 18 Oct 2003 04:50:02 -0400]/html Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Fri, 17 Oct 2003 08:44:20 -0700]/text/[From "Doug Oppedal" <Doug_Oppedal@pgn.com>][Date Fri, 17 Oct 2003 11:17:39 -0700]/UNNAMED/[From "Radiant Records" <info@radiantrecords.com>][Date Fri, ... /[F ... /[From ... /[From "html-news@ashampoo.com" <html-news@ashampoo.com>][Date Sat, 18 Oct 2003 10:32:58 +0200]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Fri, 17 Oct 2003 08:44:20 -0700]/text/[From "Doug Oppedal" <Doug_Oppedal@pgn.com>][Date Fri, 17 Oct 2003 11:17:39 -0700]/UNNAMED/[From "Radiant Records" <info@radiantrecords.com>][Date Fri, ... /[F ... /[From ... /[From "Administrator" ... /[From <@leonardointernet.com>][Date Sat, 18 Oct 2003 01:16:00 +0100]/text Infected: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Fri, 17 Oct 2003 08:44:20 -0700]/text/[From "Doug Oppedal" <Doug_Oppedal@pgn.com>][Date Fri, 17 Oct 2003 11:17:39 -0700]/UNNAMED/[From "Radiant Records" <info@radiantrecords.com>][Date Fri, ... /[F ... /[From ... /[From "Administrator" <mailerdaemon@america.com>][Date Sat, 18 Oct 2003 00:29:29 +0000 (GMT)]/UNNAMED Infected: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Fri, 17 Oct 2003 08:44:20 -0700]/text/[From "Doug Oppedal" <Doug_Oppedal@pgn.com>][Date Fri, 17 Oct 2003 11:17:39 -0700]/UNNAMED/[From "Radiant Records" <info@radiantrecords.com>][Date Fri, ... /[F ... /[From "ms internet email storage system" <postroutine@bigfoot.com>][Date Sat, 18 Oct 2003 01:04:53 +0100]/UNNAMED Infected: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Fri, 17 Oct 2003 08:44:20 -0700]/text/[From "Doug Oppedal" <Doug_Oppedal@pgn.com>][Date Fri, 17 Oct 2003 11:17:39 -0700]/UNNAMED/[From "Radiant Records" <info@radiantrecords.com>][Date Fri, ... /[From "internet email storage service" <masterengine@microsoft.com>][Date Sat, 18 Oct 2003 01:39:24 +0200 (CEST)]/UNNAMED Infected: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Fri, 17 Oct 2003 08:44:20 -0700]/text/[From "Doug Oppedal" <Doug_Oppedal@pgn.com>][Date Fri, 17 Oct 2003 11:17:39 -0700]/UNNAMED/[From "Radiant Records" <info@radiantrecords.com>][Date Fri, 17 Oct 2003 15:25:35 -0500]/UNNAMED/[From Terry@k8smc.com][Date Fri, 17 Oct 2003 18:31:01 -0400]/UNNAMED Infected: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Fri, 17 Oct 2003 08:44:20 -0700]/text/[From "Doug Oppedal" <Doug_Oppedal@pgn.com>][Date Fri, 17 Oct 2003 11:17:39 -0700]/UNNAMED/[From "Radiant Records" <info@radiantrecords.com>][Date Fri, 17 Oct 2003 15:25:35 -0500]/UNNAMED Infected: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Fri, 17 Oct 2003 08:44:20 -0700]/text/[From "Doug Oppedal" <Doug_Oppedal@pgn.com>][Date Fri, 17 Oct 2003 11:17:39 -0700]/UNNAMED Infected: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Fri, 17 Oct 2003 08:44:20 -0700]/text/[From "Forrest" <rivkasolleral@eudoramail.com>][Date Tue, 21 Oct 2003 23:08:16 -0400]/html/[From "Tom Remily" <taremily@comcast.net>][Date Wed, 22 Oct 2003 07 ... /[From "Yso-8859-1 ... /[From "Postmaster" <dmaildaemon@bigfoot.com>][Date Thu, 23 Oct 2003 19:38:58 +0100]/UNNAMED Infected: Email-Worm.Win32.Swen skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Fri, 17 Oct 2003 08:44:20 -0700]/text/[From "Forrest" <rivkasolleral@eudoramail.com>][Date Tue, 21 Oct 2003 23:08:16 -0400]/html/[From "Tom Remily" <taremily@comcast.net>][Date Wed, 22 Oct 2003 07 ... /[From "net mail delivery service" <webroutine@microsoft.net>][Date Fri, 24 Oct 2003 11:40:14 +0900 (JST)]/UNNAMED Infected: Email-Worm.Win32.Swen skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Fri, 17 Oct 2003 08:44:20 -0700]/text/[From "Forrest" <rivkasolleral@eudoramail.com>][Date Tue, 21 Oct 2003 23:08:16 -0400]/html/[From "Tom Remily" <taremily@comcast.net>][Date Wed, 22 Oct 2003 07 ... /[From "Yso-8 ... /[From "Paul Maduell ... /[From promo@mypcclub.com][Date Thu, 23 Oct 2003 19:03:15 -0700]/UNNAMED Infected: Email-Worm.Win32.Swen skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Fri, 17 Oct 2003 08:44:20 -0700]/text/[From "Forrest" <rivkasolleral@eudoramail.com>][Date Tue, 21 Oct 2003 23:08:16 -0400]/html/[From "Tom Remily" <taremily@comcast.net>][Date Wed, 22 Oct 2003 07 ... /[From "Yso-8 ... /[From "Paul Maduell" <paul@maduellassociates.com>][Date Thu, 23 Oct 2003 13:20:54 -0700]/UNNAMED Infected: Email-Worm.Win32.Swen skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Fri, 17 Oct 2003 08:44:20 -0700]/text/[From "Forrest" <rivkasolleral@eudoramail.com>][Date Tue, 21 Oct 2003 23:08:16 -0400]/html/[From "Tom Remily" <taremily@comcast.net>][Date Wed, 22 Oct 2003 07 ... /[From "Yso-8859-1?Q? ... /[From Yesworld <yesworld@YesWorld.com>][Date Thu, 23 Oct 2003 08:10:38 -0400 (EDT)]/text Infected: Email-Worm.Win32.Swen skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Fri, 17 Oct 2003 08:44:20 -0700]/text/[From "Forrest" <rivkasolleral@eudoramail.com>][Date Tue, 21 Oct 2003 23:08:16 -0400]/html/[From "Tom Remily" <taremily@comcast.net>][Date Wed, 22 Oct 2003 07 ... /[From "Yso-8859-1?Q?Info@RadiantRecords.com?@<Info@RadiantRecords.com>][Date Thu, 23 Oct 2003 12:06:12 -0500]/text Infected: Email-Worm.Win32.Swen skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Fri, 17 Oct 2003 08:44:20 -0700]/text/[From "Forrest" <rivkasolleral@eudoramail.com>][Date Tue, 21 Oct 2003 23:08:16 -0400]/html/[From "Tom Remily" <taremily@comcast.net>][Date Wed, 22 Oct 2003 07:13:13 -0700]/UNNAMED Infected: Email-Worm.Win32.Swen skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Fri, 17 Oct 2003 08:44:20 -0700]/text/[From "Forrest" <rivkasolleral@eudoramail.com>][Date Tue, 21 Oct 2003 23:08:16 -0400]/html Infected: Email-Worm.Win32.Swen skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Fri, 17 Oct 2003 08:44:20 -0700]/text/[From "Paul Maduell" <paul@maduellassociates.com>][Date Fri, 24 Oct 2003 09:45:55 -0700]/UNNAMED/[From "network mail system" <masterservice@aol.com>][Date Fri, 24 Oct 2003 13:33:54 -0500]/html Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Fri, 17 Oct 2003 08:44:20 -0700]/text/[From "Paul Maduell" <paul@maduellassociates.com>][Date Fri, 24 Oct 2003 09:45:55 -0700]/UNNAMED/[From "Administrator" <nmaildaemon@netmail.net>][Date Fri, 24 Oct 2003 16:31:26 -0300]/UNNAMED/html Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Fri, 17 Oct 2003 08:44:20 -0700]/text/[From "Paul Maduell" <paul@maduellassociates.com>][Date Fri, 24 Oct 2003 09:45:55 -0700]/UNNAMED/[From "Administrator" <nmaildaemon@netmail.net>][Date Fri, 24 Oct 2003 16:31:26 ... /[From "P ... /[From "Admin" <qmailform@freemail.net>][Date Tue, 21 Oct 2003 14:36:09 -0500]/html Suspicious: Exploit.HTML.Iframe.FileDownload skipped
 
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Fri, 17 Oct 2003 08:44:20 -0700]/text/[From "Paul Maduell" <paul@maduellassociates.com>][Date Fri, 24 Oct 2003 09:45:55 -0700]/UNNAMED/[From "Administrator" <nmaildaemon@netmail.net>][Date Fri, 24 O ... /[From JobsOnline Career Tip of the Day <careertips@ncube.com>][Date Sat, 25 Oct 2003 01:04:39 +0000 (GMT)]/html Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Fri, 17 Oct 2003 08:44:20 -0700]/text/[From "Paul Maduell" <paul@maduellassociates.com>][Date Fri, 24 Oct 2003 09:45:55 -0700]/UNNAMED/[From "Administrator" <nmaildaemon@netmail.net>][Date Fri, 24 Oct 2003 16 ... /[From "History Channel" <HistoryChannel@aetv.chtah.com>][Date Sat, 25 Oct 2003 00:17:53 -0000]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Fri, 17 Oct 2003 08:44:20 -0700]/text/[From "Paul Maduell" <paul@maduellassociates.com>][Date Fri, 24 Oct 2003 09:45:55 -0700]/UNNAMED/[From "Administrator" <nmaildaemon@netmail.net>][Date Fri, 24 Oct 2003 16:31:26 ... /[From "Paul Maduell" <paul@maduellassociates.com>][Date Fri, 24 Oct 2003 12:45:20 -0700]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Fri, 17 Oct 2003 08:44:20 -0700]/text/[From "Paul Maduell" <paul@maduellassociates.com>][Date Fri, 24 Oct 2003 09:45:55 -0700]/UNNAMED/[From "Administrator" <nmaildaemon@netmail.net>][Date Fri, 24 Oct 2003 16:31:26 -0300]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Fri, 17 Oct 2003 08:44:20 -0700]/text/[From "Paul Maduell" <paul@maduellassociates.com>][Date Fri, 24 Oct 2003 09:45:55 -0700]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Fri, 17 Oct 2003 08:44:20 -0700]/text Infected: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From "Jill King" <kingbv@wissen.de>][Date Mon, 17 Nov 2003 09:04:48 +0000]/html/[From "John and Susan Signor" <jsignor@e-z.net>][Date Mon, 17 Nov 2003 08:20:10 -0800 (Pacific Standard Time)]/UNNAMED/[From Culin Edward W <Edward.Culin@irs.gov>][Date Mon, 17 Nov 2003 10:36:41 ... /[From "Network Mail Storage Service" <>][Date Tue, 18 Nov 2003 05:31:40 +0100 (CET ... /html Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From "Jill King" <kingbv@wissen.de>][Date Mon, 17 Nov 2003 09:04:48 +0000]/html/[From "John and Susan Signor" <jsignor@e-z.net>][Date Mon, 17 Nov 2003 08:20:10 -0800 (Pacific Standard Time)]/UNNAMED/[From Culin Edward W <Edward.Culin@irs.gov>][Date Mon, 17 Nov 2003 10:36:41 ... /[From "Network Mail Storage Service" <>][Date Tue, 18 Nov 2003 05:31:40 +0100 (CET)]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From "Jill King" <kingbv@wissen.de>][Date Mon, 17 Nov 2003 09:04:48 +0000]/html/[From "John and Susan Signor" <jsignor@e-z.net>][Date Mon, 17 Nov 2003 08:20:10 -0800 (Pacific Standard Time)]/UNNAMED/[From Culin Edward W <Edward.Culin@irs.gov>][Date Mon, 17 Nov 2003 10:36:41 -0 ... /[F ... /[From mike.w.knifong@exgate.tek.com][Date Mon, 17 Nov 2003 15:33:27 -0800]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From "Jill King" <kingbv@wissen.de>][Date Mon, 17 Nov 2003 09:04:48 +0000]/html/[From "John and Susan Signor" <jsignor@e-z.net>][Date Mon, 17 Nov 2003 08:20:10 -0800 (Pacific Standard Time)]/UNNAMED/[From Culin Edward W <Edward.Culin@irs.gov>][Date Mon, 17 Nov 2003 10:36:41 -0 ... /[From Culin Edward W <Edward.Culin@irs.gov>][Date Mon, 17 Nov 2003 12:53:55 -0600]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From "Jill King" <kingbv@wissen.de>][Date Mon, 17 Nov 2003 09:04:48 +0000]/html/[From "John and Susan Signor" <jsignor@e-z.net>][Date Mon, 17 Nov 2003 08:20:10 -0800 (Pacific Standard Time)]/UNNAMED/[From Culin Edward W <Edward.Culin@irs.gov>][Date Mon, 17 Nov 2003 10:36:41 -0600]/UNNAMED/[From "Argentia" <wvhjy6@yahoo.com.hk>][Date Mon, 17 Nov 2003 12:51:58 -0600]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From "Jill King" <kingbv@wissen.de>][Date Mon, 17 Nov 2003 09:04:48 +0000]/html/[From "John and Susan Signor" <jsignor@e-z.net>][Date Mon, 17 Nov 2003 08:20:10 -0800 (Pacific Standard Time)]/UNNAMED/[From Culin Edward W <Edward.Culin@irs.gov>][Date Mon, 17 Nov 2003 10:36:41 -0600]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From "Jill King" <kingbv@wissen.de>][Date Mon, 17 Nov 2003 09:04:48 +0000]/html/[From "John and Susan Signor" <jsignor@e-z.net>][Date Mon, 17 Nov 2003 08:20:10 -0800 (Pacific Standard Time)]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From "Jill King" <kingbv@wissen.de>][Date Mon, 17 Nov 2003 09:04:48 +0000]/html Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Greg Mace <MaceG@esi.com>][Date Wed, 26 Nov 2003 06:55:14 -0800]/text/[From "inet email delivery system" <webengine@america.com>][Date Wed, 26 Nov 2003 10:12:18 -0600]/html Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Greg Mace <MaceG@esi.com>][Date Wed, 26 Nov 2003 06:55:14 -0800]/text/[From "Administrator" <mailautomat@freemail.com>][Date 26 Nov 2003 16:40:16 +0000]/UNNAMED/html Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Greg Mace <MaceG@esi.com>][Date Wed, 26 Nov 2003 06:55:14 -0800]/text/[From "Administrator" <mailautomat@freemail.com>][Date 26 Nov 2003 16:40:16 +0000]/UNNAMED/[From Shelby Martz <shellieprevatte@eudoramail.com>][Date Wed, 26 Nov 2003 11:45:13 -0500]/text/[From Ticketmaster <newsletter@reply.ticketmaster.com>][Date 26 Nov 2003 09:56:10 -0800]/UNNAMED Infected: Email-Worm.Win32.Swen skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Greg Mace <MaceG@esi.com>][Date Wed, 26 Nov 2003 06:55:14 -0800]/text/[From "Administrator" <mailautomat@freemail.com>][Date 26 Nov 2003 16:40:16 +0000]/UNNAMED/[From Shelby Martz <shellieprevatte@eudoramail.com>][Date Wed, 26 Nov 2003 11:45:13 -0500]/text/[From promo@mypc ... /[From "delivery service" <mmailbot@america.com>][Date 27 Nov 2003 18:43:20 +0100]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Greg Mace <MaceG@esi.com>][Date Wed, 26 Nov 2003 06:55:14 -0800]/text/[From "Administrator" <mailautomat@freemail.com>][Date 26 Nov 2003 16:40:16 +0000]/UNNAMED/[From Shelby Martz <shellieprevatte@eudoramail.com>][Date Wed, 26 Nov 2003 11:45:13 -0500]/text/[From promo@mypcclub.com][Date Wed, 26 Nov 2003 20:29:11 -0800]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Greg Mace <MaceG@esi.com>][Date Wed, 26 Nov 2003 06:55:14 -0800]/text/[From "Administrator" <mailautomat@freemail.com>][Date 26 Nov 2003 16:40:16 +0000]/UNNAMED/[From Shelby Martz <shellieprevatte@eudoramail.com>][Date Wed, 26 Nov 2003 11:45:13 -0500]/text/[F ... /[From "I ... /[From "Postmaster" <xmailform@bigfoot.com>][Date Sun, 30 Nov 2003 16:47:46 -0600]/UNNAMED Infected: Email-Worm.Win32.Swen skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Greg Mace <MaceG@esi.com>][Date Wed, 26 Nov 2003 06:55:14 -0800]/text/[From "Administrator" <mailautomat@freemail.com>][Date 26 Nov 2003 16:40:16 +0000]/UNNAMED/[From Shelby Martz <shellieprevatte@eudoramail.com>][Date Wed, 26 Nov 2003 11:45:13 -0500]/text/[F ... /[From "I ... /[From "Administrator" <dmailprogram@netmail.com>][Date 1 Dec 2003 13:01:29 +0100]/UNNAMED Infected: Email-Worm.Win32.Swen skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Greg Mace <MaceG@esi.com>][Date Wed, 26 Nov 2003 06:55:14 -0800]/text/[From "Administrator" <mailautomat@freemail.com>][Date 26 Nov 2003 16:40:16 +0000]/UNNAMED/[From Shelby Martz <shellieprevatte@eudoramail.com>][Date Wed, 26 Nov 2003 11:45:13 -0500]/text/[F ... /[From "Inet Storage ... /[From Greg Mace <MaceG@esi.com>][Date Mon, 1 Dec 2003 09:59:17 -0800]/UNNAMED Infected: Email-Worm.Win32.Swen skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Greg Mace <MaceG@esi.com>][Date Wed, 26 Nov 2003 06:55:14 -0800]/text/[From "Administrator" <mailautomat@freemail.com>][Date 26 Nov 2003 16:40:16 +0000]/UNNAMED/[From Shelby Martz <shellieprevatte@eudoramail.com>][Date Wed, 26 Nov 2003 11:45:13 -0500]/text/[F ... /[From "Inet Storage Syste ... /[From sdshuman@harbornet.com][Date Mon, 01 Dec 2003 08:26:24 -0800]/text Infected: Email-Worm.Win32.Swen skipped
 
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Greg Mace <MaceG@esi.com>][Date Wed, 26 Nov 2003 06:55:14 -0800]/text/[From "Administrator" <mailautomat@freemail.com>][Date 26 Nov 2003 16:40:16 +0000]/UNNAMED/[From Shelby Martz <shellieprevatte@eudoramail.com>][Date Wed, 26 Nov 2003 11:45:13 -0500]/text/[F ... /[From "Inet Storage System" <jmai ... /[From DHSID@aol.com][Date Sun, 30 Nov 2003 16:35:47 EST]/UNNAMED Infected: Email-Worm.Win32.Swen skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Greg Mace <MaceG@esi.com>][Date Wed, 26 Nov 2003 06:55:14 -0800]/text/[From "Administrator" <mailautomat@freemail.com>][Date 26 Nov 2003 16:40:16 +0000]/UNNAMED/[From Shelby Martz <shellieprevatte@eudoramail.com>][Date Wed, 26 Nov 2003 11:45:13 -0500]/text/[F ... /[From "Inet Storage System" <jmailprogram@aol.net>][Date Sun, 30 Nov 2003 21:23:35 +0100 (CET)]/UNNAMED Infected: Email-Worm.Win32.Swen skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Greg Mace <MaceG@esi.com>][Date Wed, 26 Nov 2003 06:55:14 -0800]/text/[From "Administrator" <mailautomat@freemail.com>][Date 26 Nov 2003 16:40:16 +0000]/UNNAMED/[From Shelby Martz <shellieprevatte@eudoramail.com>][Date Wed, 26 Nov 2003 11:45:13 -0500]/text/[Fr ... /[From "network mail service" <imailprogram@netmail.net>][Date Tue, 2 Dec 2003 14:49:59 -0500]/UNNAMED Infected: Email-Worm.Win32.Swen skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Greg Mace <MaceG@esi.com>][Date Wed, 26 Nov 2003 06:55:14 -0800]/text/[From "Administrator" <mailautomat@freemail.com>][Date 26 Nov 2003 16:40:16 +0000]/UNNAMED/[From Shelby Martz <shellieprevatte@eudoramail.com>][Date Wed, 26 Nov 2003 11:45:13 -0500]/text/[Fr ... /[From " ... /[From ... /[From Greg Mace <MaceG@esi.com>][Date Tue, 2 Dec 2003 07:27:53 -0800]/UNNAMED Infected: Email-Worm.Win32.Swen skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Greg Mace <MaceG@esi.com>][Date Wed, 26 Nov 2003 06:55:14 -0800]/text/[From "Administrator" <mailautomat@freemail.com>][Date 26 Nov 2003 16:40:16 +0000]/UNNAMED/[From Shelby Martz <shellieprevatte@eudoramail.com>][Date Wed, 26 Nov 2003 11:45:13 -0500]/text/[Fr ... /[From " ... /[From Greg Hardy <GHardy@rocketmail.com>][Date Tue, 2 Dec 2003 07:12:04 -0800 (PST)]/text Infected: Email-Worm.Win32.Swen skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Greg Mace <MaceG@esi.com>][Date Wed, 26 Nov 2003 06:55:14 -0800]/text/[From "Administrator" <mailautomat@freemail.com>][Date 26 Nov 2003 16:40:16 +0000]/UNNAMED/[From Shelby Martz <shellieprevatte@eudoramail.com>][Date Wed, 26 Nov 2003 11:45:13 -0500]/text/[Fr ... /[From "html-news@ashampoo.com" <html-news@ashampoo.com>][Date Sat, 29 Nov 2003 19:46:18 +0100]/UNNAMED Infected: Email-Worm.Win32.Swen skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Greg Mace <MaceG@esi.com>][Date Wed, 26 Nov 2003 06:55:14 -0800]/text/[From "Administrator" <mailautomat@freemail.com>][Date 26 Nov 2003 16:40:16 +0000]/UNNAMED/[From Shelby Martz <shellieprevatte@eudoramail.com>][Date Wed, 26 Nov 2003 11:45:13 -0500]/text/[From <modest ... /[From Rodney Walbright <zherdtas@spinster.co.uk>][Date Sat, 29 Nov 2003 04:55:08 -0500]/text Infected: Email-Worm.Win32.Swen skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Greg Mace <MaceG@esi.com>][Date Wed, 26 Nov 2003 06:55:14 -0800]/text/[From "Administrator" <mailautomat@freemail.com>][Date 26 Nov 2003 16:40:16 +0000]/UNNAMED/[From Shelby Martz <shellieprevatte@eudoramail.com>][Date Wed, 26 Nov 2003 11:45:13 -0500]/text/[From <modestacutler@mail15.com>][Date Sat, 29 Nov 2003 10:33:30 +0000]/UNNAMED Infected: Email-Worm.Win32.Swen skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Greg Mace <MaceG@esi.com>][Date Wed, 26 Nov 2003 06:55:14 -0800]/text/[From "Administrator" <mailautomat@freemail.com>][Date 26 Nov 2003 16:40:16 +0000]/UNNAMED/[From Shelby Martz <shellieprevatte@eudoramail.com>][Date Wed, 26 Nov 2003 11:45:13 -0500]/text/ ... /[From "Net Storage System" <postautomat@america.com>][Date Wed, 3 Dec 2003 12:35:35 +0100 (CET)]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Greg Mace <MaceG@esi.com>][Date Wed, 26 Nov 2003 06:55:14 -0800]/text/[From "Administrator" <mailautomat@freemail.com>][Date 26 Nov 2003 16:40:16 +0000]/UNNAMED/[From Shelby Martz <shellieprevatte@eudoramail.com>][Date Wed, 26 Nov 2003 11:45:13 -0500]/text/[From Bahram Adrangi <adrangi@up.edu>][Date Tue, 02 Dec 2003 21:06:49 -0800]/text Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Greg Mace <MaceG@esi.com>][Date Wed, 26 Nov 2003 06:55:14 -0800]/text/[From "Administrator" <mailautomat@freemail.com>][Date 26 Nov 2003 16:40:16 +0000]/UNNAMED/[From Shelby Martz <shellieprevatte@eudoramail.com> ... /[From Submi ... /[From "Administrator" <postbot@rocketmail.net>][Date Wed, 10 Dec 2003 15:02:19 +0100 (added by postmaster@mail-1.tiscali ... /UNNAMED Infected: Email-Worm.Win32.Swen skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Greg Mace <MaceG@esi.com>][Date Wed, 26 Nov 2003 06:55:14 -0800]/text/[From "Administrator" <mailautomat@freemail.com>][Date 26 Nov 2003 16:40:16 +0000]/UNNAMED/[From Shelby Martz <shellieprevatte@eudoramail.com> ... /[From Submi ... /[From "Administrator" <postbot@rocketmail.net>][Date Wed, 10 Dec 2003 15:02:19 +0100 (added by postmaster@mail-1.tiscali.it)]/UNNAMED Infected: Email-Worm.Win32.Swen skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Greg Mace <MaceG@esi.com>][Date Wed, 26 Nov 2003 06:55:14 -0800]/text/[From "Administrator" <mailautomat@freemail.com>][Date 26 Nov 2003 16:40:16 +0000]/UNNAMED/[From Shelby Martz <shellieprevatte@eudoramail.com> ... /[From Submitted using SMTP AUTH at out005.verizon. ... /[From "archer wright" <abunkie55@earthlink.net>][Date Wed, 10 Dec 2003 06:34:49 -0600]/UNNAMED Infected: Email-Worm.Win32.Swen skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Greg Mace <MaceG@esi.com>][Date Wed, 26 Nov 2003 06:55:14 -0800]/text/[From "Administrator" <mailautomat@freemail.com>][Date 26 Nov 2003 16:40:16 +0000]/UNNAMED/[From Shelby Martz <shellieprevatte@eudoramail.com> ... /[From Submitted using SMTP AUTH at out005.verizon.net from [4.5.54.87] at Tue, 9 D ... /[From Nw.Phl@kp.org][Date Tue, 9 Dec 2003 16:01:49 -0800]/text Infected: Email-Worm.Win32.Swen skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Greg Mace <MaceG@esi.com>][Date Wed, 26 Nov 2003 06:55:14 -0800]/text/[From "Administrator" <mailautomat@freemail.com>][Date 26 Nov 2003 16:40:16 +0000]/UNNAMED/[From Shelby Martz <shellieprevatte@eudoramail.com> ... /[From Submitted using SMTP AUTH at out005.verizon.net from [4.5.54.87] at Tue, 9 Dec 2003 14:32:58 -0600][Date Tue, 9 Dec 2003 12:32:59 -0800]/UNNAMED Infected: Email-Worm.Win32.Swen skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Greg Mace <MaceG@esi.com>][Date Wed, 26 Nov 2003 06:55:14 -0800]/text/[From "Administrator" <mailautomat@freemail.com>][Date 26 Nov 2003 16:40:16 +0000]/UNNAMED/[From Shelby Martz <shellieprevatte@eudoramail.com>][D ... /[From Submitted using SMTP AUTH at out004.verizon.net from [4.5.54.87] at Tue, 9 Dec 2003 12:46:40 -0600][Date Tue, 9 Dec 2003 10:46:41 -0800]/text Infected: Email-Worm.Win32.Swen skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Greg Mace <MaceG@esi.com>][Date Wed, 26 Nov 2003 06:55:14 -0800]/text/[From "Administrator" <mailautomat@freemail.com>][Date 26 Nov 2003 16:40:16 +0000]/UNNAMED/[From Shelby Martz <shellieprevatte@eudoramail.com>][Date Wed, 26 Nov 2003 11:45:13 -0500]/text/[From Yesworld <yesworld@YesWorld.com>][Date Tue, 9 Dec 2003 07:52:35 -0500 (EST)]/text Infected: Email-Worm.Win32.Swen skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Greg Mace <MaceG@esi.com>][Date Wed, 26 Nov 2003 06:55:14 -0800]/text/[From "Administrator" <mailautomat@freemail.com>][Date 26 Nov 2003 16:40:16 +0000]/UNNAMED/[From Shelby Martz <shellieprevatte@eudoramail.com>][Date Wed, 26 Nov 2003 11:45:13 -0500]/text Infected: Email-Worm.Win32.Swen skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Greg Mace <MaceG@esi.com>][Date Wed, 26 Nov 2003 06:55:14 -0800]/text/[From "Administrator" <mailautomat@freemail.com>][Date 26 Nov 2003 16:40:16 +0000]/UNNAMED Infected: Email-Worm.Win32.Swen skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Greg Mace <MaceG@esi.com>][Date Wed, 26 Nov 2003 06:55:14 -0800]/text Infected: Email-Worm.Win32.Swen skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From orders@cabelas.com][Date Sat, 17 Jan 2004 00:53:04 -0700]/text/[From "Admin" <webengine@bigfoot.com>][Date Sat, 17 Jan 2004 18:21:32 +0100 (MET)]/UNNAMED/html Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From orders@cabelas.com][Date Sat, 17 Jan 2004 00:53:04 -0700]/text/[From "Admin" <webengine@bigfoot.com>][Date Sat, 17 Jan 2004 18:21:32 +0100 (MET)]/UNNAMED/[From "Postmaster" <mailerservice@microsoft.net>][Date Sat, 17 Jan 2004 11:56:38 -0600]/UNNAMED/html Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From orders@cabelas.com][Date Sat, 17 Jan 2004 00:53:04 -0700]/text/[From "Admin" <webengine@bigfoot.com>][Date Sat, 17 Jan 2004 18:21:32 +0100 (MET)]/UNNAMED/[From "Postmaster" <mailerservice@microsoft.net>][Date Sat, 17 Jan 2004 11:56:38 -0600]/UNNAMED/gqyim.exe Infected: Email-Worm.Win32.Swen skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From orders@cabelas.com][Date Sat, 17 Jan 2004 00:53:04 -0700]/text/[From "Admin" <webengine@bigfoot.com>][Date Sat, 17 Jan 2004 18:21:32 +0100 (MET)]/UNNAMED/[From "Postmaster" <mailerservice@microsoft.net>][Date Sat, 17 Jan 2004 11 ... /[From "message system" <masterengine@puremail.com>][Date Sun, 18 Jan 2004 17:00:47 +1100 (added by postmaster@iprimus.com.au ... /html Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From orders@cabelas.com][Date Sat, 17 Jan 2004 00:53:04 -0700]/text/[From "Admin" <webengine@bigfoot.com>][Date Sat, 17 Jan 2004 18:21:32 +0100 (MET)]/UNNAMED/[From "Postmaster" <mailerservice@microsoft.net>][Date Sat, 17 Jan 2004 11 ... /[From "message system" <masterengine@purem ... /[From postengine@puremail.com][Date Date header was inserted by smtp04.wxs.n ... /html Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From orders@cabelas.com][Date Sat, 17 Jan 2004 00:53:04 -0700]/text/[From "Admin" <webengine@bigfoot.com>][Date Sat, 17 Jan 2004 18:21:32 +0100 (MET)]/UNNAMED/[From "Postmaster" <mailerservice@microsoft.net>][Date Sat, 17 Jan 2004 11 ... /[From "message system" <masterengine@purem ... /[From postengine@puremail.com][Date Date header was inserted by smtp04.wxs.nl]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From orders@cabelas.com][Date Sat, 17 Jan 2004 00:53:04 -0700]/text/[From "Admin" <webengine@bigfoot.com>][Date Sat, 17 Jan 2004 18:21:32 +0100 (MET)]/UNNAMED/[From "Postmaster" <mailerservice@microsoft.net>][Date Sat, 17 Jan 2004 11 ... /[From "message system" <masterengine@puremail.com>][Date Sun, 18 Jan 2004 17:00:47 +1100 (added by postmaster@iprimus.com.au)]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload skipped
 
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From orders@cabelas.com][Date Sat, 17 Jan 2004 00:53:04 -0700]/text/[From "Admin" <webengine@bigfoot.com>][Date Sat, 17 Jan 2004 18:21:32 +0100 (MET)]/UNNAMED/[From "Postmaster" <mailerservice@microsoft.net>][Date Sat, 17 Jan 2004 11:56:38 -0600]/UNNAMED/[From "archer wright" <a ... /[From "Tom Remily" <taremily@comcast.net>][Date Sat, 17 Jan 2004 17:53:46 -0800]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From orders@cabelas.com][Date Sat, 17 Jan 2004 00:53:04 -0700]/text/[From "Admin" <webengine@bigfoot.com>][Date Sat, 17 Jan 2004 18:21:32 +0100 (MET)]/UNNAMED/[From "Postmaster" <mailerservice@microsoft.net>][Date Sat, 17 Jan 2004 11:56:38 -0600]/UNNAMED/[From "archer wright" <abunkie55@earthlink.net>][Date Sat, 17 Jan 2004 13:56:32 -0600]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From orders@cabelas.com][Date Sat, 17 Jan 2004 00:53:04 -0700]/text/[From "Admin" <webengine@bigfoot.com>][Date Sat, 17 Jan 2004 18:21:32 +0100 (MET)]/UNNAMED/[From "Postmaster" <mailerservice@microsoft.net>][Date Sat, 17 Jan 2004 11:56:38 -0600]/UNNAMED Infected: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From orders@cabelas.com][Date Sat, 17 Jan 2004 00:53:04 -0700]/text/[From "Admin" <webengine@bigfoot.com>][Date Sat, 17 Jan 2004 18:21:32 +0100 (MET)]/UNNAMED Infected: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From orders@cabelas.com][Date Sat, 17 Jan 2004 00:53:04 -0700]/text Infected: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From "Dave Bax" <coinopper@hotmail.com>][Date Wed, 18 Feb 2004 14:20:26 -0800]/UNNAMED/[From "" <nmailform@rocketmail.com>][Date Thu, 19 Feb 2004 16:52:03 +1300 (NZDT)]/html Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From "Dave Bax" <coinopper@hotmail.com>][Date Wed, 18 Feb 2004 14:20:26 -0800]/UNNAMED/[From "Radiant Records" <info@radiantrecords.com>][Date Wed, 24 Mar 2004 13:24:14 -0600]/UNNAMED/[From Richard M Craig <k7rmc@juno.com>][Date Sat, 6 Dec 2003 21:47:18 -0800]/disco.zip/disco.pif Infected: Email-Worm.Win32.NetSky.c skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From "Dave Bax" <coinopper@hotmail.com>][Date Wed, 18 Feb 2004 14:20:26 -0800]/UNNAMED/[From "Radiant Records" <info@radiantrecords.com>][Date Wed, 24 Mar 2004 13:24:14 -0600]/UNNAMED/[From Richard M Craig <k7rmc@juno.com>][Date Sat, 6 Dec 2003 21:47:18 -0800]/disco.zip Infected: Email-Worm.Win32.NetSky.c skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From "Dave Bax" <coinopper@hotmail.com>][Date Wed, 18 Feb 2004 14:20:26 -0800]/UNNAMED/[From "Radiant Records" <info@radiantrecords.com>][Date Wed, 24 Mar 2004 13:24:14 -0600]/UNNAMED Infected: Email-Worm.Win32.NetSky.c skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From "Dave Bax" <coinopper@hotmail.com>][Date Wed, 18 Feb 2004 14:20:26 -0800]/UNNAMED/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Wed, 7 Apr 2004 15:57:36 -0700]/UNNAMED/[From Submitted using SMTP AUTH at out009.verizon.net from [ ... /[From "Administrator" <mailerbot@aol.net>][Date Thu, 8 Apr 2004 08:00:35 +0200 (added by postmaster@mail.tiscali.cz)]/html Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From "Dave Bax" <coinopper@hotmail.com>][Date Wed, 18 Feb 2004 14:20:26 -0800]/UNNAMED/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Wed, 7 Apr 2004 15:57:36 -0700]/UNNAMED/[From Submitted using SMTP AUTH at out009.verizon.net from [4.5.54.87] at Wed, 7 Apr 2004 18:16:48 -0500][Date Wed, 7 Apr 2004 16:16:50 -0700]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From "Dave Bax" <coinopper@hotmail.com>][Date Wed, 18 Feb 2004 14:20:26 -0800]/UNNAMED/[From Carlson Jim-rjjr90 <Jim.Carlson@motorola.com>][Date Wed, 7 Apr 2004 15:57:36 -0700]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From "Dave Bax" <coinopper@hotmail.com>][Date Wed, 18 Feb 2004 14:20:26 -0800]/UNNAMED Infected: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From George Yazz <kc7hkp@teleport.com>][Date Tue, 20 Apr 2004 13:22:22 -0700]/text/[From "email system" <webengine@america.net>][Date Wed, 21 Apr 2004 18:06:43 -0500]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From George Yazz <kc7hkp@teleport.com>][Date Tue, 20 Apr 2004 13:22:22 -0700]/text/[From "Ron Boyd" <ronbyd@dsl-only.net>][Date Sun, 25 Apr 2004 11:47:41 -0700]/text/[From United Mileage Plus <MileagePlus@UnitedOffers.com>][Date Mon, 26 Apr 2004 08:46:21 -0500]/UNNAMED/[From "Ron Boyd" < ... /[From Ted.Peterson@gecapital.com][Date Mon, 26 Apr 2004 23:58:56 -0800]/UNNAMED Infected: Email-Worm.Win32.Bagle.n skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From George Yazz <kc7hkp@teleport.com>][Date Tue, 20 Apr 2004 13:22:22 -0700]/text/[From "Ron Boyd" <ronbyd@dsl-only.net>][Date Sun, 25 Apr 2004 11:47:41 -0700]/text/[From United Mileage Plus <MileagePlus@UnitedOffers.com>][Date Mon, 26 Apr 2004 08:46:21 -0500]/UNNAMED/[From "Ron Boyd" <ronbyd@dsl-only.net>][Date Mon, 26 Apr 2004 23:32:38 -0700]/UNNAMED Infected: Email-Worm.Win32.Bagle.n skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From George Yazz <kc7hkp@teleport.com>][Date Tue, 20 Apr 2004 13:22:22 -0700]/text/[From "Ron Boyd" <ronbyd@dsl-only.net>][Date Sun, 25 Apr 2004 11:47:41 -0700]/text/[From United Mileage Plus <MileagePlus@UnitedOffers.com>][Date Mon, 26 Apr 2004 08:46:21 -0500]/UNNAMED Infected: Email-Worm.Win32.Bagle.n skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From George Yazz <kc7hkp@teleport.com>][Date Tue, 20 Apr 2004 13:22:22 -0700]/text/[From "Ron Boyd" <ronbyd@dsl-only.net>][Date Sun, 25 Apr 2004 11:47:41 -0700]/text Infected: Email-Worm.Win32.Bagle.n skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From George Yazz <kc7hkp@teleport.com>][Date Tue, 20 Apr 2004 13:22:22 -0700]/text Infected: Email-Worm.Win32.Bagle.n skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From "Lucinda Drake" <don.kennedy@gte.net>][Date Sat, 19 Jun 2004 16:28:04 +0400]/UNNAMED/[From "Ramon Rivera" <vtopydhflr@hotmail.com>][Date Sat, 19 Jun 2004 01:51:27 +0400]/UNNAMED/[From "Patsy Ray" <ajyenr@yahoo.com>][Date Wed, 30 Jun 2004 08:27:43 ... /[From Mail ... /[From ... /data.rtf .scr Infected: Email-Worm.Win32.NetSky.q skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From "Lucinda Drake" <don.kennedy@gte.net>][Date Sat, 19 Jun 2004 16:28:04 +0400]/UNNAMED/[From "Ramon Rivera" <vtopydhflr@hotmail.com>][Date Sat, 19 Jun 2004 01:51:27 +0400]/UNNAMED/[From "Patsy Ray" <ajyenr@yahoo.com>][Date Wed, 30 Jun 2004 08:27:43 ... /[From Mail ... /[From ... /[ . ... /[From don.morrison@chordiant.com][Date Fri, 16 Jul 2004 19:36:06 -0400]/UNNAMED Infected: Email-Worm.Win32.NetSky.q skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From "Lucinda Drake" <don.kennedy@gte.net>][Date Sat, 19 Jun 2004 16:28:04 +0400]/UNNAMED/[From "Ramon Rivera" <vtopydhflr@hotmail.com>][Date Sat, 19 Jun 2004 01:51:27 +0400]/UNNAMED/[From "Patsy Ray" <ajyenr@yahoo.com>][Date Wed, 30 Jun 2004 08:27:43 ... /[From Mail ... /[From ... /[ ... /[From "Gay" <Monte489@hotmail.com>][Date Sat, 17 Jul 2004 01:46:56 +0500]/UNNAMED Infected: Email-Worm.Win32.NetSky.q skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From "Lucinda Drake" <don.kennedy@gte.net>][Date Sat, 19 Jun 2004 16:28:04 +0400]/UNNAMED/[From "Ramon Rivera" <vtopydhflr@hotmail.com>][Date Sat, 19 Jun 2004 01:51:27 +0400]/UNNAMED/[From "Patsy Ray" <ajyenr@yahoo.com>][Date Wed, 30 Jun 2004 08:27:43 ... /[From Mail ... /[From ... /[From "Roberta Souza" <ted.culin@gte.net>][Date Mon, 12 Jul 2004 10:19:25 +0400]/UNNAMED Infected: Email-Worm.Win32.NetSky.q skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From "Lucinda Drake" <don.kennedy@gte.net>][Date Sat, 19 Jun 2004 16:28:04 +0400]/UNNAMED/[From "Ramon Rivera" <vtopydhflr@hotmail.com>][Date Sat, 19 Jun 2004 01:51:27 +0400]/UNNAMED/[From "Patsy Ray" <ajyenr@yahoo.com>][Date Wed, 30 Jun 2004 08:27:43 ... /[From Mail ... /[From Ca ... /[From "Lucy Jordache" <lucy@marillion.com>][Date Fri, 9 Jul 2004 16:05:08 +0100]/text Infected: Email-Worm.Win32.NetSky.q skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From "Lucinda Drake" <don.kennedy@gte.net>][Date Sat, 19 Jun 2004 16:28:04 +0400]/UNNAMED/[From "Ramon Rivera" <vtopydhflr@hotmail.com>][Date Sat, 19 Jun 2004 01:51:27 +0400]/UNNAMED/[From "Patsy Ray" <ajyenr@yahoo.com>][Date Wed, 30 Jun 2004 08:27:43 ... /[From Mail ... /[From Car ... /[From "B ... /[From promo@mypcclub.net][Date Thu, 8 Jul 2004 20:08:58 -0700]/UNNAMED Infected: Email-Worm.Win32.NetSky.q skipped
 
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From "Lucinda Drake" <don.kennedy@gte.net>][Date Sat, 19 Jun 2004 16:28:04 +0400]/UNNAMED/[From "Ramon Rivera" <vtopydhflr@hotmail.com>][Date Sat, 19 Jun 2004 01:51:27 +0400]/UNNAMED/[From "Patsy Ray" <ajyenr@yahoo.com>][Date Wed, 30 Jun 2004 08:27:43 ... /[From Mail ... /[From Car ... /[From "Brad Sims" <ted.culin@gte.net>][Date Sat, 10 Jul 2004 22:18:15 +0500]/UNNAMED Infected: Email-Worm.Win32.NetSky.q skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From "Lucinda Drake" <don.kennedy@gte.net>][Date Sat, 19 Jun 2004 16:28:04 +0400]/UNNAMED/[From "Ramon Rivera" <vtopydhflr@hotmail.com>][Date Sat, 19 Jun 2004 01:51:27 +0400]/UNNAMED/[From "Patsy Ray" <ajyenr@yahoo.com>][Date Wed, 30 Jun 2004 08:27:43 ... /[From Mail ... /[From Carlson Jim-rjj ... /[From Tom Popp <ka0tp@aol.com>][Date Tue, 29 Jun 2004 10:31:51 EDT]/text Infected: Email-Worm.Win32.NetSky.q skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From "Lucinda Drake" <don.kennedy@gte.net>][Date Sat, 19 Jun 2004 16:28:04 +0400]/UNNAMED/[From "Ramon Rivera" <vtopydhflr@hotmail.com>][Date Sat, 19 Jun 2004 01:51:27 +0400]/UNNAMED/[From "Patsy Ray" <ajyenr@yahoo.com>][Date Wed, 30 Jun 2004 08:27:43 ... /[From Mail ... /[From Carlson Jim-rjjr90 <Jim.Carlson@freescale.com>][Date Tue, 29 Jun 2004 06:29:26 -0700]/UNNAMED Infected: Email-Worm.Win32.NetSky.q skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From "Lucinda Drake" <don.kennedy@gte.net>][Date Sat, 19 Jun 2004 16:28:04 +0400]/UNNAMED/[From "Ramon Rivera" <vtopydhflr@hotmail.com>][Date Sat, 19 Jun 2004 01:51:27 +0400]/UNNAMED/[From "Patsy Ray" <ajyenr@yahoo.com>][Date Wed, 30 Jun 2004 08:27:43 ... /[From Mail Delivery Subsystem <MAILER-DAEMON@motgate5.mot.com>][Date Tue, 29 Jun 2004 06:24:14 -0700 (MST)]/UNNAMED Infected: Email-Worm.Win32.NetSky.q skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From "Lucinda Drake" <don.kennedy@gte.net>][Date Sat, 19 Jun 2004 16:28:04 +0400]/UNNAMED/[From "Ramon Rivera" <vtopydhflr@hotmail.com>][Date Sat, 19 Jun 2004 01:51:27 +0400]/UNNAMED/[From "Patsy Ray" <ajyenr@yahoo.com>][Date Wed, 30 Jun 2004 08:27:43 -0400]/UNNAMED/[From Culin Edward W <Edward.Culin@irs.gov>][Date Mon, 28 Jun 2004 11:43:49 -0500]/UNNAMED Infected: Email-Worm.Win32.NetSky.q skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From "Lucinda Drake" <don.kennedy@gte.net>][Date Sat, 19 Jun 2004 16:28:04 +0400]/UNNAMED/[From "Ramon Rivera" <vtopydhflr@hotmail.com>][Date Sat, 19 Jun 2004 01:51:27 +0400]/UNNAMED/[From "Patsy Ray" <ajyenr@yahoo.com>][Date Wed, 30 Jun 2004 08:27:43 -0400]/UNNAMED Infected: Email-Worm.Win32.NetSky.q skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From "Lucinda Drake" <don.kennedy@gte.net>][Date Sat, 19 Jun 2004 16:28:04 +0400]/UNNAMED/[From "Ramon Rivera" <vtopydhflr@hotmail.com>][Date Sat, 19 Jun 2004 01:51:27 +0400]/UNNAMED Infected: Email-Worm.Win32.NetSky.q skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From "Lucinda Drake" <don.kennedy@gte.net>][Date Sat, 19 Jun 2004 16:28:04 +0400]/UNNAMED Infected: Email-Worm.Win32.NetSky.q skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From "Paul Maduell" <paul@maduellassociates.com>][Date Mon, 23 Aug 2004 12:37:04 -0700]/UNNAMED/[From linda@gte.net][Date Mon, 23 Aug 2004 14:27:13 -0600]/UNNAMED/transcript-txt.scr Infected: Email-Worm.Win32.Mydoom.o skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From "Paul Maduell" <paul@maduellassociates.com>][Date Mon, 23 Aug 2004 12:37:04 -0700]/UNNAMED/[From linda@gte.net][Date Mon, 23 Aug 2004 14:27:13 -0600]/UNNAMED Infected: Email-Worm.Win32.Mydoom.o skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From "Paul Maduell" <paul@maduellassociates.com>][Date Mon, 23 Aug 2004 12:37:04 -0700]/UNNAMED Infected: Email-Worm.Win32.Mydoom.o skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Sauvie <wuoregon@worldnet.att.net>][Date Fri, 22 Oct 2004 13:55:48 -0700]/text/[From "eBay" <eBay@reply3.ebay.com>][Date Wed, 27 Oct 2004 14:21:16 -0700]/UNNAMED/[From "Barry Posey" <barryposeyjc@devparadise.com>][Date Thu, 28 Oct 2004 19:10:10 +0000 ... /[From "Lesa Stinson" <lesastinsonvq@cim.se.fujitsu.co.jp>][Date Sun, 31 Oct 2004 10:41:22 +0000]/Loves_money.scr Infected: Email-Worm.Win32.Bagle.z skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Sauvie <wuoregon@worldnet.att.net>][Date Fri, 22 Oct 2004 13:55:48 -0700]/text/[From "eBay" <eBay@reply3.ebay.com>][Date Wed, 27 Oct 2004 14:21:16 -0700]/UNNAMED/[From "Barry Posey" <barryposeyjc@devparadise.com>][Date Thu, 28 Oct 2004 19:10:10 +0000]/html/[From "Connie Fox" <foxaccounting@comcast.net>][Date Fri, 29 Oct 2004 07:09:01 -0700]/UNNAMED Infected: Email-Worm.Win32.Bagle.z skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Sauvie <wuoregon@worldnet.att.net>][Date Fri, 22 Oct 2004 13:55:48 -0700]/text/[From "eBay" <eBay@reply3.ebay.com>][Date Wed, 27 Oct 2004 14:21:16 -0700]/UNNAMED/[From "Barry Posey" <barryposeyjc@devparadise.com>][Date Thu, 28 Oct 2004 19:10:10 +0000]/html Infected: Email-Worm.Win32.Bagle.z skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Sauvie <wuoregon@worldnet.att.net>][Date Fri, 22 Oct 2004 13:55:48 -0700]/text/[From "eBay" <eBay@reply3.ebay.com>][Date Wed, 27 Oct 2004 14:21:16 -0700]/UNNAMED Infected: Email-Worm.Win32.Bagle.z skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html/[From Sauvie <wuoregon@worldnet.att.net>][Date Fri, 22 Oct 2004 13:55:48 -0700]/text Infected: Email-Worm.Win32.Bagle.z skipped
 
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox/[From Hewlett-Packard <Hewlett-Packard.6610rq66.fk@CcmNewsgram.hpccm.p0.com>][Date Wed, 17 Sep 2003 20:51:28 PDT]/html Infected: Email-Worm.Win32.Bagle.z skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Inbox Mail Berkeley mbox: infected - 79, suspicious - 43 skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Junk/[From "Lucinda Drake" <don.kennedy@gte.net>][Date Sat, 19 Jun 2004 16:28:04 +0400]/UNNAMED/[From "Ramon Rivera" <vtopydhflr@hotmail.com>][Date Sat, 19 Jun 2004 01:51:27 +0400]/UNNAMED/[From "Patsy Ray" <ajyenr@yahoo.com>][Date Wed, 30 Jun 2004 08:27:43 -0400]/UNNAMED/[From <service@usbank.com>][Date Thu, 10 Jun 2004 11:05:56 -0600]/html Infected: Trojan-Spy.HTML.Usbankfraud.b skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Junk/[From "Lucinda Drake" <don.kennedy@gte.net>][Date Sat, 19 Jun 2004 16:28:04 +0400]/UNNAMED/[From "Ramon Rivera" <vtopydhflr@hotmail.com>][Date Sat, 19 Jun 2004 01:51:27 +0400]/UNNAMED/[From "Patsy Ray" <ajyenr@yahoo.com>][Date Wed, 30 Jun 2004 08:27:43 -0400]/UNNAMED Infected: Trojan-Spy.HTML.Usbankfraud.b skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Junk/[From "Lucinda Drake" <don.kennedy@gte.net>][Date Sat, 19 Jun 2004 16:28:04 +0400]/UNNAMED/[From "Ramon Rivera" <vtopydhflr@hotmail.com>][Date Sat, 19 Jun 2004 01:51:27 +0400]/UNNAMED Infected: Trojan-Spy.HTML.Usbankfraud.b skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Junk/[From "Lucinda Drake" <don.kennedy@gte.net>][Date Sat, 19 Jun 2004 16:28:04 +0400]/UNNAMED Infected: Trojan-Spy.HTML.Usbankfraud.b skipped
C:\Documents and Settings\Ted\Application Data\Thunderbird\Profiles\cqnv94nf.default\Mail\incoming.verizon.net\Junk Mail Berkeley mbox: infected - 4 skipped
C:\Documents and Settings\Ted\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\Ted\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\Ted\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\Ted\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\Ted\Local Settings\History\History.IE5\MSHist012008020120080202\index.dat Object is locked skipped
C:\Documents and Settings\Ted\Local Settings\Temp\~DF33CE.tmp Object is locked skipped
C:\Documents and Settings\Ted\Local Settings\Temporary Internet Files\AntiPhishing\B3BB5BBA-E7D5-40AB-A041-A5B1C0B26C8F.dat Object is locked skipped
C:\Documents and Settings\Ted\Local Settings\Temporary Internet Files\Content.IE5\339XLLHM\css4[1] Object is locked skipped
C:\Documents and Settings\Ted\Local Settings\Temporary Internet Files\Content.IE5\339XLLHM\css4[2] Object is locked skipped
C:\Documents and Settings\Ted\Local Settings\Temporary Internet Files\Content.IE5\339XLLHM\css4[3] Object is locked skipped
C:\Documents and Settings\Ted\Local Settings\Temporary Internet Files\Content.IE5\41234HA3\css4[1] Object is locked skipped
C:\Documents and Settings\Ted\Local Settings\Temporary Internet Files\Content.IE5\41234HA3\css4[2] Object is locked skipped
C:\Documents and Settings\Ted\Local Settings\Temporary Internet Files\Content.IE5\41234HA3\css4[3] Object is locked skipped
C:\Documents and Settings\Ted\Local Settings\Temporary Internet Files\Content.IE5\CQ68SSTP\css4[1] Object is locked skipped
C:\Documents and Settings\Ted\Local Settings\Temporary Internet Files\Content.IE5\HYE8BLOJ\css4[1] Object is locked skipped
C:\Documents and Settings\Ted\Local Settings\Temporary Internet Files\Content.IE5\HYE8BLOJ\css4[2] Object is locked skipped
C:\Documents and Settings\Ted\Local Settings\Temporary Internet Files\Content.IE5\IM6PPXCE\css4[1] Object is locked skipped
C:\Documents and Settings\Ted\Local Settings\Temporary Internet Files\Content.IE5\IM6PPXCE\css4[2] Object is locked skipped
C:\Documents and Settings\Ted\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\Ted\Local Settings\Temporary Internet Files\Content.IE5\YJ8V9YFU\css4[1] Object is locked skipped
C:\Documents and Settings\Ted\Local Settings\Temporary Internet Files\Content.IE5\YJ8V9YFU\css4[2] Object is locked skipped
C:\Documents and Settings\Ted\My Documents\backup.pst/Personal Folders/Achrives/26 Sep 2003 15:23 from System:Error Notice.html Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\My Documents\backup.pst Mail MS Mail: suspicious - 1 skipped
C:\Documents and Settings\Ted\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\Ted\NTUSER.DAT.LOG Object is locked skipped
C:\Program Files\NETGEAR\Media Server\BerkeleyDB\Berkeley.db Object is locked skipped
C:\Program Files\NETGEAR\Media Server\BerkeleyDB\log.0000000037 Object is locked skipped
C:\Program Files\Verizon\SmartBridge\AlertFilter.log Object is locked skipped
C:\Program Files\Verizon\SmartBridge\log\httpclient.log Object is locked skipped
C:\Program Files\Verizon\SmartBridge\SmartBridge.log Object is locked skipped
C:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped
C:\TEMP\Test\New Text Document.txt Object is locked skipped
C:\WINDOWS\CSC\00000001 Object is locked skipped
C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped
C:\WINDOWS\SchedLgU.Txt Object is locked skipped
C:\WINDOWS\SoftwareDistribution\ReportingEvents.log Object is locked skipped
C:\WINDOWS\Sti_Trace.log Object is locked skipped
C:\WINDOWS\system32\config\AppEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\default Object is locked skipped
C:\WINDOWS\system32\config\default.LOG Object is locked skipped
C:\WINDOWS\system32\config\Internet.evt Object is locked skipped
C:\WINDOWS\system32\config\SAM Object is locked skipped
C:\WINDOWS\system32\config\SAM.LOG Object is locked skipped
C:\WINDOWS\system32\config\SecEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\SECURITY Object is locked skipped
C:\WINDOWS\system32\config\SECURITY.LOG Object is locked skipped
C:\WINDOWS\system32\config\software Object is locked skipped
C:\WINDOWS\system32\config\software.LOG Object is locked skipped
C:\WINDOWS\system32\config\SysEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\system Object is locked skipped
C:\WINDOWS\system32\config\system.LOG Object is locked skipped
C:\WINDOWS\system32\ddabb.dll Object is locked skipped
C:\WINDOWS\system32\h323log.txt Object is locked skipped
C:\WINDOWS\system32\L36F6.tmp/data0002 Infected: Trojan.Win32.Scapur.k skipped
C:\WINDOWS\system32\L36F6.tmp NSIS: infected - 1 skipped
C:\WINDOWS\system32\LogFiles\HTTPERR\httperr1.log Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP Object is locked skipped
C:\WINDOWS\wiadebug.log Object is locked skipped
C:\WINDOWS\wiaservc.log Object is locked skipped
C:\WINDOWS\WindowsUpdate.log Object is locked skipped
D:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped

Scan process completed.
 
Been having plenty of time to wait so I took some of the log on myself. Realizing that many of the objects detected were in old e-mail archives and e-mail profiles no longer in use they have been saved off to CD and deleted.

Here is the new Kaspersky log

-------------------------------------------------------------------------------
KASPERSKY ONLINE SCANNER REPORT
Wednesday, February 06, 2008 5:20:26 PM
Operating System: Microsoft Windows XP Professional, Service Pack 2 (Build 2600)
Kaspersky Online Scanner version: 5.0.98.0
Kaspersky Anti-Virus database last update: 6/02/2008
Kaspersky Anti-Virus database records: 552584
-------------------------------------------------------------------------------

Scan Settings:
Scan using the following antivirus database: extended
Scan Archives: true
Scan Mail Bases: true

Scan Target - My Computer:
A:\
C:\
D:\
E:\

Scan Statistics:
Total number of scanned objects: 72634
Number of viruses found: 3
Number of infected objects: 4
Number of suspicious objects: 2
Duration of the scan process: 01:44:09

Infected Object Name / Virus Name / Last Action
C:\Documents and Settings\All Users\Application Data\avg7\Log\emc.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Grisoft\Avg7Data\avg7log.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Grisoft\Avg7Data\avg7log.log.lck Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\015decb2eb7b1f5d4c8381304fefaf90_ebab9ece-be32-4425-8e87-b4167122a1ed Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\03f7b0476be320df948aa02e95af29ba_ebab9ece-be32-4425-8e87-b4167122a1ed Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\08ff03aa19ea16bd326f3e328a1cbca4_ebab9ece-be32-4425-8e87-b4167122a1ed Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1874dca3a9a2e2c1546affa741efaf5e_ebab9ece-be32-4425-8e87-b4167122a1ed Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1fa4a1093678b85969f73cea8c49f98f_ebab9ece-be32-4425-8e87-b4167122a1ed Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\22c46a0536b78d0d50d245863e228b5c_ebab9ece-be32-4425-8e87-b4167122a1ed Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2eb5fae4a8eab52b69968d252d7f7742_ebab9ece-be32-4425-8e87-b4167122a1ed Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\30906daf7b108d7b995cfa0e103e25a2_ebab9ece-be32-4425-8e87-b4167122a1ed Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\65c9f804d91cb41f61d50bcd76007975_ebab9ece-be32-4425-8e87-b4167122a1ed Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\706787f7d0635f24af38ea66fe09551b_ebab9ece-be32-4425-8e87-b4167122a1ed Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\8180d1ca294ece5f6af12b102aff5bf1_ebab9ece-be32-4425-8e87-b4167122a1ed Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\86ae17ba493c01ea7e37437d039f9e9c_ebab9ece-be32-4425-8e87-b4167122a1ed Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\888275f2bca22f7f4e92da8805072743_ebab9ece-be32-4425-8e87-b4167122a1ed Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\b19fea0f67e9203005ca414a3e0c8575_ebab9ece-be32-4425-8e87-b4167122a1ed Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\b7ad9521055bd6414436103399502212_ebab9ece-be32-4425-8e87-b4167122a1ed Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\b889657a979a0ee0d1f1fc771e5051ca_ebab9ece-be32-4425-8e87-b4167122a1ed Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\df52cdc46787ea75522788692cb5a620_ebab9ece-be32-4425-8e87-b4167122a1ed Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\e1d61a919689f1b4a272092a14398590_ebab9ece-be32-4425-8e87-b4167122a1ed Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\f713c46c3efbda25565c2c2ebd588ac2_ebab9ece-be32-4425-8e87-b4167122a1ed Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\fb5dcd1eea0e1c77c41dc16dedb36d61_ebab9ece-be32-4425-8e87-b4167122a1ed Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Dr Watson\user.dmp Object is locked skipped
C:\Documents and Settings\LocalService\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\NetworkService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\Ted\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\jvmimpro.jar-b825669-35bab9bb.zip/vmain.class Infected: Exploit.Java.Gimsh.b skipped
C:\Documents and Settings\Ted\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\jvmimpro.jar-b825669-35bab9bb.zip ZIP: infected - 1 skipped
C:\Documents and Settings\Ted\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\Ted\Local Settings\Application Data\Microsoft\Feeds Cache\index.dat Object is locked skipped
C:\Documents and Settings\Ted\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\Ted\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\Ted\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\Ted\Local Settings\History\History.IE5\MSHist012008020620080207\index.dat Object is locked skipped
C:\Documents and Settings\Ted\Local Settings\Temp\~DF2EC9.tmp Object is locked skipped
C:\Documents and Settings\Ted\Local Settings\Temporary Internet Files\AntiPhishing\B3BB5BBA-E7D5-40AB-A041-A5B1C0B26C8F.dat Object is locked skipped
C:\Documents and Settings\Ted\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\Ted\My Documents\backup.pst/Personal Folders/Achrives/26 Sep 2003 15:23 from System:Error Notice.html Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Ted\My Documents\backup.pst Mail MS Mail: suspicious - 1 skipped
C:\Documents and Settings\Ted\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\Ted\NTUSER.DAT.LOG Object is locked skipped
C:\Documents and Settings\Ted\UserData\index.dat Object is locked skipped
C:\Program Files\NETGEAR\Media Server\BerkeleyDB\Berkeley.db Object is locked skipped
C:\Program Files\NETGEAR\Media Server\BerkeleyDB\log.0000000037 Object is locked skipped
C:\Program Files\Verizon\SmartBridge\AlertFilter.log Object is locked skipped
C:\Program Files\Verizon\SmartBridge\log\httpclient.log Object is locked skipped
C:\Program Files\Verizon\SmartBridge\SmartBridge.log Object is locked skipped
C:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped
C:\TEMP\Test\New Text Document.txt Object is locked skipped
C:\WINDOWS\CSC\00000001 Object is locked skipped
C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped
C:\WINDOWS\SchedLgU.Txt Object is locked skipped
C:\WINDOWS\SoftwareDistribution\ReportingEvents.log Object is locked skipped
C:\WINDOWS\Sti_Trace.log Object is locked skipped
C:\WINDOWS\system32\config\AppEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\default Object is locked skipped
C:\WINDOWS\system32\config\default.LOG Object is locked skipped
C:\WINDOWS\system32\config\Internet.evt Object is locked skipped
C:\WINDOWS\system32\config\SAM Object is locked skipped
C:\WINDOWS\system32\config\SAM.LOG Object is locked skipped
C:\WINDOWS\system32\config\SecEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\SECURITY Object is locked skipped
C:\WINDOWS\system32\config\SECURITY.LOG Object is locked skipped
C:\WINDOWS\system32\config\software Object is locked skipped
C:\WINDOWS\system32\config\software.LOG Object is locked skipped
C:\WINDOWS\system32\config\SysEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\system Object is locked skipped
C:\WINDOWS\system32\config\system.LOG Object is locked skipped
C:\WINDOWS\system32\ddabb.dll Object is locked skipped
C:\WINDOWS\system32\h323log.txt Object is locked skipped
C:\WINDOWS\system32\L36F6.tmp/data0002 Infected: Trojan.Win32.Scapur.k skipped
C:\WINDOWS\system32\L36F6.tmp NSIS: infected - 1 skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP Object is locked skipped
C:\WINDOWS\wiadebug.log Object is locked skipped
C:\WINDOWS\wiaservc.log Object is locked skipped
C:\WINDOWS\WindowsUpdate.log Object is locked skipped
D:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped

Scan process completed.

HJT log is next
 
here is the HJT Log

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 6:03:47 PM, on 2/6/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16574)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Java\jre1.5.0_02\bin\jusched.exe
C:\Program Files\Adaptec\Easy CD Creator 5\DirectCD\DirectCD.exe
C:\PROGRA~1\Verizon\SMARTB~1\MotiveSB.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\Program Files\Panasonic\LUMIXSimpleViewer\PhLeAutoRun.exe
C:\Program Files\NETGEAR\Media Server\MediaServer.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\PROGRA~1\NETGEAR\MEDIAS~1\ImmsService.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\MsPMSPSv.exe
C:\Program Files\NETGEAR\Media Server\RestartApp.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =

http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =

http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =

http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =

http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by

Comcast
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = :0
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common

Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot -

Search & Destroy\SDHelper.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O3 - Toolbar: (no name) - {0BF43445-2F28-4351-9252-17FE6E806AA0} - (no file)
O3 - Toolbar: (no name) - {4E7BD74F-2B8D-469E-D0FC-E57AF4D5FA7D} - (no file)
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_02\bin\jusched.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [iTunesHelper] C:\Program Files\iTunes\iTunesHelper.exe
O4 - HKLM\..\Run: [AdaptecDirectCD] C:\Program Files\Adaptec\Easy CD Creator 5\DirectCD\DirectCD.exe
O4 - HKLM\..\Run: [Motive SmartBridge] C:\PROGRA~1\Verizon\SMARTB~1\MotiveSB.exe
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [SpyHunter Security Suite] C:\Program Files\Enigma Software Group\SpyHunter\SpyHunter3.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [TaskTray] C:\Program Files\Creative\SBAudigy\Taskbar\CTLTray.exe
O4 - HKCU\..\Run: [Taskbar] C:\Program Files\Creative\SBAudigy\Taskbar\CTLTask.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKUS\S-1-5-19\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'Default user')
O4 - Global Startup: LUMIX Simple Viewer.lnk = ?
O4 - Global Startup: NETGEAR Media Server.lnk = C:\Program Files\NETGEAR\Media Server\MediaServer.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program

Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program

Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
O9 - Extra button: ComcastHSI - {669B269B-0D4E-41FB-A3D8-FD67CA94F646} - http://www.comcast.net/ (file

missing)
O9 - Extra button: Support - {8828075D-D097-4055-AA02-2DBFA9D85E8A} - http://www.comcastsupport.com/ (file

missing)
O9 - Extra button: Help - {97809617-3937-4F84-B335-9BB05EF1A8D4} - http://online.comcast.net/help/ (file

missing)
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search &

Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration -

{DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network

Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} -

C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program

Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program

Files\Messenger\msmsgs.exe
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) -

http://www.kaspersky.com/kos/english/kavwebscan_unicode.cab
O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} -

http://download.mcafee.com/molbin/shared/mcinsctl/4,0,0,101/mcinsctl.cab
O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} -

http://download.mcafee.com/molbin/shared/mcgdmgr/1,0,0,26/mcgdmgr.cab
O20 - Winlogon Notify: iiffdee - iiffdee.dll (file missing)
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware

2007\aawservice.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware

7.5\guard.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. -

C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common

Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Integrated Multimedia Server - Unknown owner - C:\PROGRA~1\NETGEAR\MEDIAS~1\ImmsService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe

--
End of file - 7655 bytes
 
Hi stickfish

The formatting of your post is messed up. This is caused by having Word Wrap checked.
1. Click Start > All Programs > Accessories > Notepad
2. On the menu bar in Notepad select Format and click on WordWrap so it appears unchecked.

After that, please post a fresh HijackThis log :)
 
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 4:56:04 AM, on 2/7/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16574)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\PROGRA~1\NETGEAR\MEDIAS~1\ImmsService.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\MsPMSPSv.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Java\jre1.5.0_02\bin\jusched.exe
C:\Program Files\Adaptec\Easy CD Creator 5\DirectCD\DirectCD.exe
C:\PROGRA~1\Verizon\SMARTB~1\MotiveSB.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Panasonic\LUMIXSimpleViewer\PhLeAutoRun.exe
C:\Program Files\NETGEAR\Media Server\MediaServer.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\NETGEAR\Media Server\RestartApp.exe
C:\Program Files\Mozilla Thunderbird\thunderbird.exe
C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by Comcast
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = :0
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O3 - Toolbar: (no name) - {0BF43445-2F28-4351-9252-17FE6E806AA0} - (no file)
O3 - Toolbar: (no name) - {4E7BD74F-2B8D-469E-D0FC-E57AF4D5FA7D} - (no file)
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_02\bin\jusched.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [iTunesHelper] C:\Program Files\iTunes\iTunesHelper.exe
O4 - HKLM\..\Run: [AdaptecDirectCD] C:\Program Files\Adaptec\Easy CD Creator 5\DirectCD\DirectCD.exe
O4 - HKLM\..\Run: [Motive SmartBridge] C:\PROGRA~1\Verizon\SMARTB~1\MotiveSB.exe
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [SpyHunter Security Suite] C:\Program Files\Enigma Software Group\SpyHunter\SpyHunter3.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [TaskTray] C:\Program Files\Creative\SBAudigy\Taskbar\CTLTray.exe
O4 - HKCU\..\Run: [Taskbar] C:\Program Files\Creative\SBAudigy\Taskbar\CTLTask.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKUS\S-1-5-19\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'Default user')
O4 - Global Startup: LUMIX Simple Viewer.lnk = ?
O4 - Global Startup: NETGEAR Media Server.lnk = C:\Program Files\NETGEAR\Media Server\MediaServer.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
O9 - Extra button: ComcastHSI - {669B269B-0D4E-41FB-A3D8-FD67CA94F646} - http://www.comcast.net/ (file missing)
O9 - Extra button: Support - {8828075D-D097-4055-AA02-2DBFA9D85E8A} - http://www.comcastsupport.com/ (file missing)
O9 - Extra button: Help - {97809617-3937-4F84-B335-9BB05EF1A8D4} - http://online.comcast.net/help/ (file missing)
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/english/kavwebscan_unicode.cab
O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} - http://download.mcafee.com/molbin/shared/mcinsctl/4,0,0,101/mcinsctl.cab
O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} - http://download.mcafee.com/molbin/shared/mcgdmgr/1,0,0,26/mcgdmgr.cab
O20 - Winlogon Notify: iiffdee - iiffdee.dll (file missing)
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Integrated Multimedia Server - Unknown owner - C:\PROGRA~1\NETGEAR\MEDIAS~1\ImmsService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe

--
End of file - 7654 bytes
 
Hi

Empty this folder:

C:\Documents and Settings\Ted\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar

Delete this:

C:\WINDOWS\system32\L36F6.tmp

Empty Recycle Bin

Delete this mail:

C:\Documents and Settings\Ted\My Documents\backup.pst/Personal Folders/Achrives/26 Sep 2003 15:23 from System:Error Notice.html Suspicious: Exploit.HTML.Iframe.FileDownload skipped

Open HijackThis, click do a system scan only and checkmark these:

O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O3 - Toolbar: (no name) - {0BF43445-2F28-4351-9252-17FE6E806AA0} - (no file)
O3 - Toolbar: (no name) - {4E7BD74F-2B8D-469E-D0FC-E57AF4D5FA7D} - (no file)
O20 - Winlogon Notify: iiffdee - iiffdee.dll (file missing)

Close all windows including browser and press fix checked.

Reboot.

Re-scan with kaspersky.

Post:

- a fresh HijackThis log
- kaspersky report
 
Kaspersky Log

-------------------------------------------------------------------------------
KASPERSKY ONLINE SCANNER REPORT
Thursday, February 07, 2008 7:47:38 AM
Operating System: Microsoft Windows XP Professional, Service Pack 2 (Build 2600)
Kaspersky Online Scanner version: 5.0.98.0
Kaspersky Anti-Virus database last update: 7/02/2008
Kaspersky Anti-Virus database records: 553248
-------------------------------------------------------------------------------

Scan Settings:
Scan using the following antivirus database: extended
Scan Archives: true
Scan Mail Bases: true

Scan Target - My Computer:
A:\
C:\
D:\
E:\

Scan Statistics:
Total number of scanned objects: 71405
Number of viruses found: 0
Number of infected objects: 0
Number of suspicious objects: 0
Duration of the scan process: 01:43:25

Infected Object Name / Virus Name / Last Action
C:\Documents and Settings\All Users\Application Data\avg7\Log\emc.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Grisoft\Avg7Data\avg7log.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Grisoft\Avg7Data\avg7log.log.lck Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\015decb2eb7b1f5d4c8381304fefaf90_ebab9ece-be32-4425-8e87-b4167122a1ed Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\03f7b0476be320df948aa02e95af29ba_ebab9ece-be32-4425-8e87-b4167122a1ed Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\08ff03aa19ea16bd326f3e328a1cbca4_ebab9ece-be32-4425-8e87-b4167122a1ed Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1874dca3a9a2e2c1546affa741efaf5e_ebab9ece-be32-4425-8e87-b4167122a1ed Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1fa4a1093678b85969f73cea8c49f98f_ebab9ece-be32-4425-8e87-b4167122a1ed Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\22c46a0536b78d0d50d245863e228b5c_ebab9ece-be32-4425-8e87-b4167122a1ed Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2eb5fae4a8eab52b69968d252d7f7742_ebab9ece-be32-4425-8e87-b4167122a1ed Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\30906daf7b108d7b995cfa0e103e25a2_ebab9ece-be32-4425-8e87-b4167122a1ed Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\65c9f804d91cb41f61d50bcd76007975_ebab9ece-be32-4425-8e87-b4167122a1ed Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\706787f7d0635f24af38ea66fe09551b_ebab9ece-be32-4425-8e87-b4167122a1ed Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\8180d1ca294ece5f6af12b102aff5bf1_ebab9ece-be32-4425-8e87-b4167122a1ed Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\86ae17ba493c01ea7e37437d039f9e9c_ebab9ece-be32-4425-8e87-b4167122a1ed Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\888275f2bca22f7f4e92da8805072743_ebab9ece-be32-4425-8e87-b4167122a1ed Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\b19fea0f67e9203005ca414a3e0c8575_ebab9ece-be32-4425-8e87-b4167122a1ed Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\b7ad9521055bd6414436103399502212_ebab9ece-be32-4425-8e87-b4167122a1ed Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\b889657a979a0ee0d1f1fc771e5051ca_ebab9ece-be32-4425-8e87-b4167122a1ed Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\df52cdc46787ea75522788692cb5a620_ebab9ece-be32-4425-8e87-b4167122a1ed Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\e1d61a919689f1b4a272092a14398590_ebab9ece-be32-4425-8e87-b4167122a1ed Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\f713c46c3efbda25565c2c2ebd588ac2_ebab9ece-be32-4425-8e87-b4167122a1ed Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\fb5dcd1eea0e1c77c41dc16dedb36d61_ebab9ece-be32-4425-8e87-b4167122a1ed Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Dr Watson\user.dmp Object is locked skipped
C:\Documents and Settings\LocalService\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\NetworkService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Firefox\Profiles\49ou0ro0.default\cert8.db Object is locked skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Firefox\Profiles\49ou0ro0.default\history.dat Object is locked skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Firefox\Profiles\49ou0ro0.default\key3.db Object is locked skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Firefox\Profiles\49ou0ro0.default\parent.lock Object is locked skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Firefox\Profiles\49ou0ro0.default\search.sqlite Object is locked skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Firefox\Profiles\49ou0ro0.default\urlclassifier2.sqlite Object is locked skipped
C:\Documents and Settings\Ted\Application Data\Mozilla\Firefox\Profiles\49ou0ro0.default\webappsstore.sqlite Object is locked skipped
C:\Documents and Settings\Ted\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\Ted\Local Settings\Application Data\Microsoft\Feeds Cache\index.dat Object is locked skipped
C:\Documents and Settings\Ted\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\Ted\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\Ted\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\Ted\Local Settings\History\History.IE5\MSHist012008020720080208\index.dat Object is locked skipped
C:\Documents and Settings\Ted\Local Settings\Temp\~DF3454.tmp Object is locked skipped
C:\Documents and Settings\Ted\Local Settings\Temporary Internet Files\AntiPhishing\B3BB5BBA-E7D5-40AB-A041-A5B1C0B26C8F.dat Object is locked skipped
C:\Documents and Settings\Ted\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\Ted\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\Ted\NTUSER.DAT.LOG Object is locked skipped
C:\Program Files\NETGEAR\Media Server\BerkeleyDB\Berkeley.db Object is locked skipped
C:\Program Files\NETGEAR\Media Server\BerkeleyDB\log.0000000038 Object is locked skipped
C:\Program Files\Verizon\SmartBridge\AlertFilter.log Object is locked skipped
C:\Program Files\Verizon\SmartBridge\log\httpclient.log Object is locked skipped
C:\Program Files\Verizon\SmartBridge\SmartBridge.log Object is locked skipped
C:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped
C:\TEMP\Test\New Text Document.txt Object is locked skipped
C:\WINDOWS\CSC\00000001 Object is locked skipped
C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped
C:\WINDOWS\SchedLgU.Txt Object is locked skipped
C:\WINDOWS\SoftwareDistribution\ReportingEvents.log Object is locked skipped
C:\WINDOWS\Sti_Trace.log Object is locked skipped
C:\WINDOWS\system32\config\AppEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\default Object is locked skipped
C:\WINDOWS\system32\config\default.LOG Object is locked skipped
C:\WINDOWS\system32\config\Internet.evt Object is locked skipped
C:\WINDOWS\system32\config\SAM Object is locked skipped
C:\WINDOWS\system32\config\SAM.LOG Object is locked skipped
C:\WINDOWS\system32\config\SecEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\SECURITY Object is locked skipped
C:\WINDOWS\system32\config\SECURITY.LOG Object is locked skipped
C:\WINDOWS\system32\config\software Object is locked skipped
C:\WINDOWS\system32\config\software.LOG Object is locked skipped
C:\WINDOWS\system32\config\SysEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\system Object is locked skipped
C:\WINDOWS\system32\config\system.LOG Object is locked skipped
C:\WINDOWS\system32\h323log.txt Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP Object is locked skipped
C:\WINDOWS\wiadebug.log Object is locked skipped
C:\WINDOWS\wiaservc.log Object is locked skipped
C:\WINDOWS\WindowsUpdate.log Object is locked skipped
D:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped

Scan process completed.
 
You must log in or register to reply here.
Back
Top