Stuck at square one....

Unknown · August 2006

Hey there,

I am trying to fix my brothers computer, and it won't let me run any of the virus removal programs or install a firewall. So before I drive myself crazy, I am going to post a hijackthis log and maybe you can give me an idea of how to even get started here.

Thanks,
Eric

Logfile of HijackThis v1.99.1
Scan saved at 1:48:51 PM, on 8/1/2006
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\TGTSoft\StyleXP\StyleXPService.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\CTsvcCDA.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\Program Files\AlienAutopsy\TEKS_Service.exe
C:\WINDOWS\System32\CTHELPER.EXE
C:\Program Files\AlienAutopsy\Test_BS.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\System32\msiexec.exe
C:\Program Files\Hijackthis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.accoona.com/search_assistant/

accoona_search_assistant.jsp?&utm_id=400011&utm_content=leftnav&utm_source=wdz1&utm_medium=bund&utm_campaign=wdz

0605a
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.gamefaqs.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.alienware.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.accoona.com/search_assistant/

accoona_search_assistant.jsp?&utm_id=400011&utm_content=leftnav&utm_source=wdz1&utm_medium=bund&utm_campaign=wdz

0605a
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://www.accoona.com/search?q=%s
R3 - Default URLSearchHook is missing
O2 - BHO: Yahoo! Companion BHO - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!

\Companion\Installs\cpn\ycomp5_2_3_0.dll
O2 - BHO: MyWay Search Assistant BHO - {04079851-5845-4dea-848C-3ECD647AA554} - C:\Program Files\MyWay\SrchAstt\1.

bin\MYSRCHAS.DLL (file missing)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0

\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.

dll
O2 - BHO: (no name) - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - (no file)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.

dll
O2 - BHO: (no name) - {B56A7D7D-6927-48C8-A975-17DF180C71AC} - (no file)
O3 - Toolbar: Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!

\Companion\Installs\cpn\ycomp5_2_3_0.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [Jet Detection] "C:\Program Files\Creative\SBAudigy\PROGRAM\ADGJDet.exe"
O4 - HKLM\..\Run: [CTStartup] C:\Program Files\Creative\Splash Screen\CTEaxSpl.EXE /run
O4 - HKLM\..\Run: [AlienAutopsy] "C:\Program Files\AlienAutopsy\Test_BS.exe" -h
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto
O4 - HKCU\..\Run: [STYLEXP] C:\Program Files\TGTSoft\StyleXP\StyleXP.exe -Hide
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O8 - Extra context menu item: &AIM Search - res://C:\Program Files\AIM Toolbar\AIMBar.dll/aimsearch.htm
O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html
O8 - Extra context menu item: &Translate English Word - res://c:\program files\google\GoogleToolbar2.dll/

cmwordtrans.html
O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar2.dll/cmcache.

html
O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html
O8 - Extra context menu item: Translate Page into English - res://c:\program files\google\GoogleToolbar2.dll/

cmtrans.html
O9 - Extra button: Spyware Doctor - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - C:\WINDOWS\System32\shdocvw.dll
O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!\Messenger\yhexbmes

0411.dll
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!

\Messenger\yhexbmes0411.dll
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS

.EXE
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O14 - IERESET.INF: START_PAGE_URL=http://www.alienware.com
O16 - DPF: {193C772A-87BE-4B19-A7BB-445B226FE9A1} (ewidoOnlineScan Control) - http://download.ewido.net/

ewidoOnlineScan.cab
O16 - DPF: {41F17733-B041-4099-A042-B518BB6A408C} - http://a1540.g.akamai.net/7/1540/52/20030530/qtinstall.info.

apple.com/bonnie/us/win/QuickTimeInstaller.exe
O16 - DPF: {68BCE50A-DC9B-4519-A118-6FDA19DB450D} (Info Class) - http://www.blizzard.com/register/wowbeta/si.cab
O16 - DPF: {6E5A37BF-FD42-463A-877C-4EB7002E68AE} (Trend Micro ActiveX Scan Agent 6.5) - http://housecall65.

trendmicro.com/housecall/applet/html/native/x86/win32/activex/hcImpl.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/

activescan/as5free/asinst.cab
O16 - DPF: {A2E05F45-F127-4092-B9F7-9A02C3E04C77} (HGPlugin7USA Class) - http://gamedownload.ijjimax.com/

gamedownload/dist/hgstart/HGPlugin7USA.cab
O16 - DPF: {D1E7CBDA-E60E-4970-A01C-37301EF7BF98} (Measurement Service Client v.3.4) - http://ccon.madonion.com/

global/msc34.cab
O16 - DPF: {E06E2E99-0AA1-11D4-ABA6-0060082AA75C} (GpcContainer Class) - https://meeting.webex.com/client/latest/

webex/ieatgpc.cab
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTsvcCDA.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common

Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: ProductivIT Service (ProductivITService) - DynTek, Inc. - C:\Program Files\AlienAutopsy\TEKS_Service

.exe
O23 - Service: StyleXPService - Unknown owner - C:\Program Files\TGTSoft\StyleXP\StyleXPService.exe

mtunick · August 2006

Go here to download ewido anti malware
http://www.grisoft.cz/softw/70/filed...4.0.0.172c.exe
Update it, run a complete system scan, save a log file, post log file.

Is there some reason why your log is so broken up, it makes it more difficult to read and address.

Squeen80 · August 2006

ewido anti-spyware - Scan Report

+ Created at: 1:24:08 PM 8/8/2006

+ Scan result:

C:\WINDOWS\system32\c53bFb.dll/bi.dll -> Adware.BiSpy : No action taken.
C:\WINDOWS\system32\c53bFb.dll/biprep.exe -> Adware.BiSpy : No action taken.
C:\WINDOWS\system32\c53bFs.dll/bi.dll -> Adware.BiSpy : No action taken.
C:\WINDOWS\system32\c53bFs.dll/biprep.exe -> Adware.BiSpy : No action taken.
C:\WINDOWS\system32\tdbRs.dll/bi.dll -> Adware.BiSpy : No action taken.
C:\WINDOWS\system32\tdbRs.dll/preInsBI.exe -> Adware.BiSpy : No action taken.
C:\WINDOWS\Downloaded Program Files\ieatgpc.dll -> Adware.WebEx : No action taken.
C:\Documents and Settings\Noah Reuveni\Application Data\m\flec006.exe -> Downloader.Bagle.aw : No action taken.
C:\Documents and Settings\Noah Reuveni\Local Settings\Temp\flec006.exe -> Downloader.Bagle.aw : No action taken.
C:\Documents and Settings\Noah Reuveni\Local Settings\Temporary Internet Files\Content.IE5\FCL1NKG4\777[1].gif -> Downloader.Bagle.y : No action taken.
C:\WINDOWS\memmupdaterV4.exe -> Downloader.Small.ajm : No action taken.
:mozilla.122:C:\Documents and Settings\Noah Reuveni\Application Data\Mozilla\Firefox\Profiles\7tzunkui.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.106:C:\Documents and Settings\Noah Reuveni\Application Data\Mozilla\Firefox\Profiles\7tzunkui.default\cookies.txt -> TrackingCookie.Adrevolver : No action taken.
:mozilla.107:C:\Documents and Settings\Noah Reuveni\Application Data\Mozilla\Firefox\Profiles\7tzunkui.default\cookies.txt -> TrackingCookie.Adrevolver : No action taken.
:mozilla.108:C:\Documents and Settings\Noah Reuveni\Application Data\Mozilla\Firefox\Profiles\7tzunkui.default\cookies.txt -> TrackingCookie.Adrevolver : No action taken.
:mozilla.109:C:\Documents and Settings\Noah Reuveni\Application Data\Mozilla\Firefox\Profiles\7tzunkui.default\cookies.txt -> TrackingCookie.Adrevolver : No action taken.
:mozilla.110:C:\Documents and Settings\Noah Reuveni\Application Data\Mozilla\Firefox\Profiles\7tzunkui.default\cookies.txt -> TrackingCookie.Adrevolver : No action taken.
:mozilla.10:C:\Documents and Settings\Noah Reuveni\Application Data\Mozilla\Firefox\Profiles\7tzunkui.default\cookies.txt -> TrackingCookie.Advertising : No action taken.
:mozilla.11:C:\Documents and Settings\Noah Reuveni\Application Data\Mozilla\Firefox\Profiles\7tzunkui.default\cookies.txt -> TrackingCookie.Advertising : No action taken.
:mozilla.12:C:\Documents and Settings\Noah Reuveni\Application Data\Mozilla\Firefox\Profiles\7tzunkui.default\cookies.txt -> TrackingCookie.Advertising : No action taken.
:mozilla.13:C:\Documents and Settings\Noah Reuveni\Application Data\Mozilla\Firefox\Profiles\7tzunkui.default\cookies.txt -> TrackingCookie.Advertising : No action taken.
:mozilla.9:C:\Documents and Settings\Noah Reuveni\Application Data\Mozilla\Firefox\Profiles\7tzunkui.default\cookies.txt -> TrackingCookie.Advertising : No action taken.
:mozilla.101:C:\Documents and Settings\Noah Reuveni\Application Data\Mozilla\Firefox\Profiles\7tzunkui.default\cookies.txt -> TrackingCookie.Atdmt : No action taken.
:mozilla.123:C:\Documents and Settings\Noah Reuveni\Application Data\Mozilla\Firefox\Profiles\7tzunkui.default\cookies.txt -> TrackingCookie.Bluestreak : No action taken.
:mozilla.69:C:\Documents and Settings\Noah Reuveni\Application Data\Mozilla\Firefox\Profiles\7tzunkui.default\cookies.txt -> TrackingCookie.Casalemedia : No action taken.
:mozilla.70:C:\Documents and Settings\Noah Reuveni\Application Data\Mozilla\Firefox\Profiles\7tzunkui.default\cookies.txt -> TrackingCookie.Casalemedia : No action taken.
:mozilla.71:C:\Documents and Settings\Noah Reuveni\Application Data\Mozilla\Firefox\Profiles\7tzunkui.default\cookies.txt -> TrackingCookie.Casalemedia : No action taken.
:mozilla.72:C:\Documents and Settings\Noah Reuveni\Application Data\Mozilla\Firefox\Profiles\7tzunkui.default\cookies.txt -> TrackingCookie.Casalemedia : No action taken.
:mozilla.73:C:\Documents and Settings\Noah Reuveni\Application Data\Mozilla\Firefox\Profiles\7tzunkui.default\cookies.txt -> TrackingCookie.Casalemedia : No action taken.
:mozilla.74:C:\Documents and Settings\Noah Reuveni\Application Data\Mozilla\Firefox\Profiles\7tzunkui.default\cookies.txt -> TrackingCookie.Casalemedia : No action taken.
:mozilla.127:C:\Documents and Settings\Noah Reuveni\Application Data\Mozilla\Firefox\Profiles\7tzunkui.default\cookies.txt -> TrackingCookie.Com : No action taken.
C:\Documents and Settings\Noah Reuveni\Cookies\noah [email]reuveni@com[2].txt[/email] -> TrackingCookie.Com : No action taken.
:mozilla.68:C:\Documents and Settings\Noah Reuveni\Application Data\Mozilla\Firefox\Profiles\7tzunkui.default\cookies.txt -> TrackingCookie.Doubleclick : No action taken.
:mozilla.64:C:\Documents and Settings\Noah Reuveni\Application Data\Mozilla\Firefox\Profiles\7tzunkui.default\cookies.txt -> TrackingCookie.Fastclick : No action taken.
:mozilla.65:C:\Documents and Settings\Noah Reuveni\Application Data\Mozilla\Firefox\Profiles\7tzunkui.default\cookies.txt -> TrackingCookie.Fastclick : No action taken.
:mozilla.66:C:\Documents and Settings\Noah Reuveni\Application Data\Mozilla\Firefox\Profiles\7tzunkui.default\cookies.txt -> TrackingCookie.Fastclick : No action taken.
:mozilla.67:C:\Documents and Settings\Noah Reuveni\Application Data\Mozilla\Firefox\Profiles\7tzunkui.default\cookies.txt -> TrackingCookie.Fastclick : No action taken.
:mozilla.270:C:\Documents and Settings\Noah Reuveni\Application Data\Mozilla\Firefox\Profiles\7tzunkui.default\cookies.txt -> TrackingCookie.Googleadservices : No action taken.
:mozilla.254:C:\Documents and Settings\Noah Reuveni\Application Data\Mozilla\Firefox\Profiles\7tzunkui.default\cookies.txt -> TrackingCookie.Hitbox : No action taken.
:mozilla.255:C:\Documents and Settings\Noah Reuveni\Application Data\Mozilla\Firefox\Profiles\7tzunkui.default\cookies.txt -> TrackingCookie.Hitbox : No action taken.
:mozilla.256:C:\Documents and Settings\Noah Reuveni\Application Data\Mozilla\Firefox\Profiles\7tzunkui.default\cookies.txt -> TrackingCookie.Hitbox : No action taken.
:mozilla.160:C:\Documents and Settings\Noah Reuveni\Application Data\Mozilla\Firefox\Profiles\7tzunkui.default\cookies.txt -> TrackingCookie.Mediaplex : No action taken.
:mozilla.161:C:\Documents and Settings\Noah Reuveni\Application Data\Mozilla\Firefox\Profiles\7tzunkui.default\cookies.txt -> TrackingCookie.Mediaplex : No action taken.
:mozilla.124:C:\Documents and Settings\Noah Reuveni\Application Data\Mozilla\Firefox\Profiles\7tzunkui.default\cookies.txt -> TrackingCookie.Overture : No action taken.
:mozilla.100:C:\Documents and Settings\Noah Reuveni\Application Data\Mozilla\Firefox\Profiles\7tzunkui.default\cookies.txt -> TrackingCookie.Pointroll : No action taken.
:mozilla.98:C:\Documents and Settings\Noah Reuveni\Application Data\Mozilla\Firefox\Profiles\7tzunkui.default\cookies.txt -> TrackingCookie.Pointroll : No action taken.
:mozilla.99:C:\Documents and Settings\Noah Reuveni\Application Data\Mozilla\Firefox\Profiles\7tzunkui.default\cookies.txt -> TrackingCookie.Pointroll : No action taken.
:mozilla.90:C:\Documents and Settings\Noah Reuveni\Application Data\Mozilla\Firefox\Profiles\7tzunkui.default\cookies.txt -> TrackingCookie.Questionmarket : No action taken.
:mozilla.92:C:\Documents and Settings\Noah Reuveni\Application Data\Mozilla\Firefox\Profiles\7tzunkui.default\cookies.txt -> TrackingCookie.Questionmarket : No action taken.
:mozilla.93:C:\Documents and Settings\Noah Reuveni\Application Data\Mozilla\Firefox\Profiles\7tzunkui.default\cookies.txt -> TrackingCookie.Questionmarket : No action taken.
:mozilla.217:C:\Documents and Settings\Noah Reuveni\Application Data\Mozilla\Firefox\Profiles\7tzunkui.default\cookies.txt -> TrackingCookie.Ru4 : No action taken.
:mozilla.218:C:\Documents and Settings\Noah Reuveni\Application Data\Mozilla\Firefox\Profiles\7tzunkui.default\cookies.txt -> TrackingCookie.Ru4 : No action taken.
:mozilla.224:C:\Documents and Settings\Noah Reuveni\Application Data\Mozilla\Firefox\Profiles\7tzunkui.default\cookies.txt -> TrackingCookie.Serving-sys : No action taken.
:mozilla.225:C:\Documents and Settings\Noah Reuveni\Application Data\Mozilla\Firefox\Profiles\7tzunkui.default\cookies.txt -> TrackingCookie.Serving-sys : No action taken.
:mozilla.226:C:\Documents and Settings\Noah Reuveni\Application Data\Mozilla\Firefox\Profiles\7tzunkui.default\cookies.txt -> TrackingCookie.Serving-sys : No action taken.
:mozilla.227:C:\Documents and Settings\Noah Reuveni\Application Data\Mozilla\Firefox\Profiles\7tzunkui.default\cookies.txt -> TrackingCookie.Serving-sys : No action taken.
:mozilla.18:C:\Documents and Settings\Noah Reuveni\Application Data\Mozilla\Firefox\Profiles\7tzunkui.default\cookies.txt -> TrackingCookie.Tradedoubler : No action taken.
:mozilla.149:C:\Documents and Settings\Noah Reuveni\Application Data\Mozilla\Firefox\Profiles\7tzunkui.default\cookies.txt -> TrackingCookie.Trafficmp : No action taken.
:mozilla.150:C:\Documents and Settings\Noah Reuveni\Application Data\Mozilla\Firefox\Profiles\7tzunkui.default\cookies.txt -> TrackingCookie.Trafficmp : No action taken.
:mozilla.151:C:\Documents and Settings\Noah Reuveni\Application Data\Mozilla\Firefox\Profiles\7tzunkui.default\cookies.txt -> TrackingCookie.Trafficmp : No action taken.
:mozilla.152:C:\Documents and Settings\Noah Reuveni\Application Data\Mozilla\Firefox\Profiles\7tzunkui.default\cookies.txt -> TrackingCookie.Trafficmp : No action taken.
:mozilla.153:C:\Documents and Settings\Noah Reuveni\Application Data\Mozilla\Firefox\Profiles\7tzunkui.default\cookies.txt -> TrackingCookie.Trafficmp : No action taken.
:mozilla.154:C:\Documents and Settings\Noah Reuveni\Application Data\Mozilla\Firefox\Profiles\7tzunkui.default\cookies.txt -> TrackingCookie.Trafficmp : No action taken.
:mozilla.155:C:\Documents and Settings\Noah Reuveni\Application Data\Mozilla\Firefox\Profiles\7tzunkui.default\cookies.txt -> TrackingCookie.Trafficmp : No action taken.
:mozilla.156:C:\Documents and Settings\Noah Reuveni\Application Data\Mozilla\Firefox\Profiles\7tzunkui.default\cookies.txt -> TrackingCookie.Trafficmp : No action taken.
:mozilla.139:C:\Documents and Settings\Noah Reuveni\Application Data\Mozilla\Firefox\Profiles\7tzunkui.default\cookies.txt -> TrackingCookie.Tribalfusion : No action taken.
:mozilla.141:C:\Documents and Settings\Noah Reuveni\Application Data\Mozilla\Firefox\Profiles\7tzunkui.default\cookies.txt -> TrackingCookie.Tribalfusion : No action taken.
:mozilla.142:C:\Documents and Settings\Noah Reuveni\Application Data\Mozilla\Firefox\Profiles\7tzunkui.default\cookies.txt -> TrackingCookie.Tribalfusion : No action taken.
:mozilla.143:C:\Documents and Settings\Noah Reuveni\Application Data\Mozilla\Firefox\Profiles\7tzunkui.default\cookies.txt -> TrackingCookie.Tribalfusion : No action taken.
:mozilla.144:C:\Documents and Settings\Noah Reuveni\Application Data\Mozilla\Firefox\Profiles\7tzunkui.default\cookies.txt -> TrackingCookie.Tribalfusion : No action taken.
:mozilla.145:C:\Documents and Settings\Noah Reuveni\Application Data\Mozilla\Firefox\Profiles\7tzunkui.default\cookies.txt -> TrackingCookie.Tribalfusion : No action taken.
:mozilla.146:C:\Documents and Settings\Noah Reuveni\Application Data\Mozilla\Firefox\Profiles\7tzunkui.default\cookies.txt -> TrackingCookie.Tribalfusion : No action taken.
:mozilla.147:C:\Documents and Settings\Noah Reuveni\Application Data\Mozilla\Firefox\Profiles\7tzunkui.default\cookies.txt -> TrackingCookie.Tribalfusion : No action taken.
:mozilla.148:C:\Documents and Settings\Noah Reuveni\Application Data\Mozilla\Firefox\Profiles\7tzunkui.default\cookies.txt -> TrackingCookie.Tribalfusion : No action taken.
C:\Documents and Settings\Noah Reuveni\Cookies\noah [email]reuveni@tribalfusion[1].txt[/email] -> TrackingCookie.Tribalfusion : No action taken.
:mozilla.76:C:\Documents and Settings\Noah Reuveni\Application Data\Mozilla\Firefox\Profiles\7tzunkui.default\cookies.txt -> TrackingCookie.Yieldmanager : No action taken.
:mozilla.77:C:\Documents and Settings\Noah Reuveni\Application Data\Mozilla\Firefox\Profiles\7tzunkui.default\cookies.txt -> TrackingCookie.Yieldmanager : No action taken.
:mozilla.78:C:\Documents and Settings\Noah Reuveni\Application Data\Mozilla\Firefox\Profiles\7tzunkui.default\cookies.txt -> TrackingCookie.Yieldmanager : No action taken.
:mozilla.87:C:\Documents and Settings\Noah Reuveni\Application Data\Mozilla\Firefox\Profiles\7tzunkui.default\cookies.txt -> TrackingCookie.Yieldmanager : No action taken.
:mozilla.88:C:\Documents and Settings\Noah Reuveni\Application Data\Mozilla\Firefox\Profiles\7tzunkui.default\cookies.txt -> TrackingCookie.Yieldmanager : No action taken.
:mozilla.89:C:\Documents and Settings\Noah Reuveni\Application Data\Mozilla\Firefox\Profiles\7tzunkui.default\cookies.txt -> TrackingCookie.Yieldmanager : No action taken.
C:\WINDOWS\110451843.exe -> Worm.Bagle.bp : No action taken.
C:\WINDOWS\110470437.exe -> Worm.Bagle.bp : No action taken.
C:\WINDOWS\132493546.exe -> Worm.Bagle.bp : No action taken.
C:\WINDOWS\132508484.exe -> Worm.Bagle.bp : No action taken.
C:\WINDOWS\154534531.exe -> Worm.Bagle.bp : No action taken.
C:\WINDOWS\154559046.exe -> Worm.Bagle.bp : No action taken.
C:\WINDOWS\22247390.exe -> Worm.Bagle.bp : No action taken.
C:\WINDOWS\22283671.exe -> Worm.Bagle.bp : No action taken.
C:\WINDOWS\22468812.exe -> Worm.Bagle.bp : No action taken.
C:\WINDOWS\22487640.exe -> Worm.Bagle.bp : No action taken.
C:\WINDOWS\22655828.exe -> Worm.Bagle.bp : No action taken.
C:\WINDOWS\22731843.exe -> Worm.Bagle.bp : No action taken.
C:\WINDOWS\229906.exe -> Worm.Bagle.bp : No action taken.
C:\WINDOWS\243203.exe -> Worm.Bagle.bp : No action taken.
C:\WINDOWS\243937.exe -> Worm.Bagle.bp : No action taken.
C:\WINDOWS\244390.exe -> Worm.Bagle.bp : No action taken.
C:\WINDOWS\257609.exe -> Worm.Bagle.bp : No action taken.
C:\WINDOWS\262812.exe -> Worm.Bagle.bp : No action taken.
C:\WINDOWS\44254687.exe -> Worm.Bagle.bp : No action taken.
C:\WINDOWS\44273921.exe -> Worm.Bagle.bp : No action taken.
C:\WINDOWS\44300125.exe -> Worm.Bagle.bp : No action taken.
C:\WINDOWS\44321687.exe -> Worm.Bagle.bp : No action taken.
C:\WINDOWS\44447906.exe -> Worm.Bagle.bp : No action taken.
C:\WINDOWS\44470000.exe -> Worm.Bagle.bp : No action taken.
C:\WINDOWS\44729843.exe -> Worm.Bagle.bp : No action taken.
C:\WINDOWS\44753265.exe -> Worm.Bagle.bp : No action taken.
C:\WINDOWS\455140.exe -> Worm.Bagle.bp : No action taken.
C:\WINDOWS\471500.exe -> Worm.Bagle.bp : No action taken.
C:\WINDOWS\66342500.exe -> Worm.Bagle.bp : No action taken.
C:\WINDOWS\66365890.exe -> Worm.Bagle.bp : No action taken.
C:\WINDOWS\66457843.exe -> Worm.Bagle.bp : No action taken.
C:\WINDOWS\66475984.exe -> Worm.Bagle.bp : No action taken.
C:\WINDOWS\88404218.exe -> Worm.Bagle.bp : No action taken.
C:\WINDOWS\88421125.exe -> Worm.Bagle.bp : No action taken.
C:\WINDOWS\88427750.exe -> Worm.Bagle.bp : No action taken.
C:\WINDOWS\88442281.exe -> Worm.Bagle.bp : No action taken.
C:\WINDOWS\22255031.exe -> Worm.Bagle.bq : No action taken.
C:\WINDOWS\44269468.exe -> Worm.Bagle.bq : No action taken.
C:\WINDOWS\185109.exe/f5434.exe -> Worm.Bagle.br : No action taken.
C:\WINDOWS\188156.exe/f5434.exe -> Worm.Bagle.br : No action taken.
C:\WINDOWS\113403828.exe -> Worm.Bagle.bu : No action taken.
C:\WINDOWS\113428234.exe -> Worm.Bagle.bu : No action taken.
C:\WINDOWS\135562015.exe -> Worm.Bagle.bu : No action taken.
C:\WINDOWS\135584765.exe -> Worm.Bagle.bu : No action taken.
C:\WINDOWS\157911421.exe -> Worm.Bagle.bu : No action taken.
C:\WINDOWS\157913937.exe -> Worm.Bagle.bu : No action taken.
C:\WINDOWS\179845000.exe -> Worm.Bagle.bu : No action taken.
C:\WINDOWS\201852437.exe -> Worm.Bagle.bu : No action taken.
C:\WINDOWS\201875421.exe -> Worm.Bagle.bu : No action taken.
C:\WINDOWS\22231156.exe -> Worm.Bagle.bu : No action taken.
C:\WINDOWS\22253875.exe -> Worm.Bagle.bu : No action taken.
C:\WINDOWS\22274484.exe -> Worm.Bagle.bu : No action taken.
C:\WINDOWS\22276531.exe -> Worm.Bagle.bu : No action taken.
C:\WINDOWS\22288531.exe -> Worm.Bagle.bu : No action taken.
C:\WINDOWS\22300312.exe -> Worm.Bagle.bu : No action taken.
C:\WINDOWS\22308796.exe -> Worm.Bagle.bu : No action taken.
C:\WINDOWS\22333234.exe -> Worm.Bagle.bu : No action taken.
C:\WINDOWS\22338531.exe -> Worm.Bagle.bu : No action taken.
C:\WINDOWS\223807328.exe -> Worm.Bagle.bu : No action taken.
C:\WINDOWS\223838890.exe -> Worm.Bagle.bu : No action taken.
C:\WINDOWS\22554234.exe -> Worm.Bagle.bu : No action taken.
C:\WINDOWS\245962406.exe -> Worm.Bagle.bu : No action taken.
C:\WINDOWS\25382765.exe -> Worm.Bagle.bu : No action taken.
C:\WINDOWS\268093859.exe -> Worm.Bagle.bu : No action taken.
C:\WINDOWS\290207484.exe -> Worm.Bagle.bu : No action taken.
C:\WINDOWS\290239406.exe -> Worm.Bagle.bu : No action taken.
C:\WINDOWS\290687.exe -> Worm.Bagle.bu : No action taken.
C:\WINDOWS\308750.exe -> Worm.Bagle.bu : No action taken.
C:\WINDOWS\311187.exe -> Worm.Bagle.bu : No action taken.
C:\WINDOWS\312281.exe -> Worm.Bagle.bu : No action taken.
C:\WINDOWS\312464203.exe -> Worm.Bagle.bu : No action taken.
C:\WINDOWS\312487312.exe -> Worm.Bagle.bu : No action taken.
C:\WINDOWS\314296.exe -> Worm.Bagle.bu : No action taken.
C:\WINDOWS\315015.exe -> Worm.Bagle.bu : No action taken.
C:\WINDOWS\315156.exe -> Worm.Bagle.bu : No action taken.
C:\WINDOWS\316312.exe -> Worm.Bagle.bu : No action taken.
C:\WINDOWS\318781.exe -> Worm.Bagle.bu : No action taken.
C:\WINDOWS\320515.exe -> Worm.Bagle.bu : No action taken.
C:\WINDOWS\325046.exe -> Worm.Bagle.bu : No action taken.
C:\WINDOWS\325171.exe -> Worm.Bagle.bu : No action taken.
C:\WINDOWS\328281.exe -> Worm.Bagle.bu : No action taken.
C:\WINDOWS\334648203.exe -> Worm.Bagle.bu : No action taken.
C:\WINDOWS\334670156.exe -> Worm.Bagle.bu : No action taken.
C:\WINDOWS\342734.exe -> Worm.Bagle.bu : No action taken.
C:\WINDOWS\343656.exe -> Worm.Bagle.bu : No action taken.
C:\WINDOWS\347921.exe -> Worm.Bagle.bu : No action taken.
C:\WINDOWS\356627140.exe -> Worm.Bagle.bu : No action taken.
C:\WINDOWS\356651953.exe -> Worm.Bagle.bu : No action taken.
C:\WINDOWS\378594593.exe -> Worm.Bagle.bu : No action taken.
C:\WINDOWS\378603640.exe -> Worm.Bagle.bu : No action taken.
C:\WINDOWS\380359.exe -> Worm.Bagle.bu : No action taken.
C:\WINDOWS\400552328.exe -> Worm.Bagle.bu : No action taken.
C:\WINDOWS\400554312.exe -> Worm.Bagle.bu : No action taken.
C:\WINDOWS\422781125.exe -> Worm.Bagle.bu : No action taken.
C:\WINDOWS\422792500.exe -> Worm.Bagle.bu : No action taken.
C:\WINDOWS\44186640.exe -> Worm.Bagle.bu : No action taken.
C:\WINDOWS\44260781.exe -> Worm.Bagle.bu : No action taken.
C:\WINDOWS\44268734.exe -> Worm.Bagle.bu : No action taken.
C:\WINDOWS\44272359.exe -> Worm.Bagle.bu : No action taken.
C:\WINDOWS\44277437.exe -> Worm.Bagle.bu : No action taken.
C:\WINDOWS\44284937.exe -> Worm.Bagle.bu : No action taken.
C:\WINDOWS\44293796.exe -> Worm.Bagle.bu : No action taken.
C:\WINDOWS\44297125.exe -> Worm.Bagle.bu : No action taken.
C:\WINDOWS\44354953.exe -> Worm.Bagle.bu : No action taken.
C:\WINDOWS\444915640.exe -> Worm.Bagle.bu : No action taken.
C:\WINDOWS\444921203.exe -> Worm.Bagle.bu : No action taken.
C:\WINDOWS\44510843.exe -> Worm.Bagle.bu : No action taken.
C:\WINDOWS\44514296.exe -> Worm.Bagle.bu : No action taken.
C:\WINDOWS\456890.exe -> Worm.Bagle.bu : No action taken.
C:\WINDOWS\467047156.exe -> Worm.Bagle.bu : No action taken.
C:\WINDOWS\467052875.exe -> Worm.Bagle.bu : No action taken.
C:\WINDOWS\47432109.exe -> Worm.Bagle.bu : No action taken.
C:\WINDOWS\66218828.exe -> Worm.Bagle.bu : No action taken.
C:\WINDOWS\66221609.exe -> Worm.Bagle.bu : No action taken.
C:\WINDOWS\66491875.exe -> Worm.Bagle.bu : No action taken.
C:\WINDOWS\66498390.exe -> Worm.Bagle.bu : No action taken.
C:\WINDOWS\69512906.exe -> Worm.Bagle.bu : No action taken.
C:\WINDOWS\88494312.exe -> Worm.Bagle.bu : No action taken.
C:\WINDOWS\88497015.exe -> Worm.Bagle.bu : No action taken.
C:\WINDOWS\91451265.exe -> Worm.Bagle.bu : No action taken.
C:\WINDOWS\91453312.exe -> Worm.Bagle.bu : No action taken.
C:\WINDOWS\22372000.exe -> Worm.Bagle.bx : No action taken.
C:\WINDOWS\22517953.exe -> Worm.Bagle.bx : No action taken.
C:\WINDOWS\327421.exe -> Worm.Bagle.bx : No action taken.
C:\WINDOWS\381375.exe -> Worm.Bagle.bx : No action taken.
C:\WINDOWS\390953.exe -> Worm.Bagle.bx : No action taken.
C:\WINDOWS\449968.exe -> Worm.Bagle.bx : No action taken.
C:\WINDOWS\488687.exe -> Worm.Bagle.bx : No action taken.
C:\WINDOWS\66413453.exe -> Worm.Bagle.cb : No action taken.
C:\WINDOWS\88379031.exe/Taxes.exe -> Worm.Bagle.cf : No action taken.
C:\WINDOWS\88382156.exe/Taxes.exe -> Worm.Bagle.cf : No action taken.
C:\WINDOWS\313437.exe/1212.exe -> Worm.Bagle.cg : No action taken.
C:\WINDOWS\110343968.exe/Taxes.exe -> Worm.Bagle.ch : No action taken.
C:\WINDOWS\110366515.exe/Taxes.exe -> Worm.Bagle.ch : No action taken.
C:\WINDOWS\132328421.exe/Taxes.exe -> Worm.Bagle.ch : No action taken.
C:\WINDOWS\132336265.exe/Taxes.exe -> Worm.Bagle.ch : No action taken.
C:\WINDOWS\system32\svc111.exe/(-).cpl -> Worm.Bagle.cr : No action taken.
C:\WINDOWS\22355125.exe -> Worm.Bagle.cz : No action taken.
C:\WINDOWS\247750.exe -> Worm.Bagle.cz : No action taken.
C:\WINDOWS\270078.exe -> Worm.Bagle.cz : No action taken.
C:\WINDOWS\322578.exe -> Worm.Bagle.dm : No action taken.
C:\WINDOWS\343859.exe -> Worm.Bagle.dm : No action taken.
C:\WINDOWS\22515062.exe -> Worm.Bagle.du : No action taken.
C:\WINDOWS\22546578.exe -> Worm.Bagle.du : No action taken.
C:\WINDOWS\284937.exe -> Worm.Bagle.du : No action taken.
C:\WINDOWS\303671.exe -> Worm.Bagle.du : No action taken.
C:\WINDOWS\1419515.exe -> Worm.Bagle.dw : No action taken.
C:\WINDOWS\1443765.exe -> Worm.Bagle.dw : No action taken.
C:\WINDOWS\22504609.exe -> Worm.Bagle.dw : No action taken.
C:\WINDOWS\357625.exe -> Worm.Bagle.dw : No action taken.
C:\WINDOWS\44534531.exe -> Worm.Bagle.dw : No action taken.
C:\WINDOWS\50591546.exe -> Worm.Bagle.dw : No action taken.
C:\WINDOWS\50609937.exe -> Worm.Bagle.dw : No action taken.
C:\WINDOWS\131880578.exe -> Worm.Bagle.ex : No action taken.
C:\WINDOWS\149234.exe -> Worm.Bagle.ex : No action taken.
C:\WINDOWS\153870015.exe -> Worm.Bagle.ex : No action taken.
C:\WINDOWS\175823687.exe -> Worm.Bagle.ex : No action taken.
C:\WINDOWS\197799953.exe -> Worm.Bagle.ex : No action taken.
C:\WINDOWS\219802484.exe -> Worm.Bagle.ex : No action taken.
C:\WINDOWS\22029718.exe -> Worm.Bagle.ex : No action taken.
C:\WINDOWS\43999390.exe -> Worm.Bagle.ex : No action taken.
C:\WINDOWS\48593.exe -> Worm.Bagle.ex : No action taken.
C:\WINDOWS\52953.exe -> Worm.Bagle.ex : No action taken.
C:\WINDOWS\65964031.exe -> Worm.Bagle.ex : No action taken.
C:\WINDOWS\87918062.exe -> Worm.Bagle.ex : No action taken.
C:\WINDOWS\system32\winb2.exe/15-06-2006.exe -> Worm.Bagle.gh : No action taken.
C:\Documents and Settings\Noah Reuveni\Local Settings\Temporary Internet Files\Content.IE5\89YRCHQJ\777[1].gif -> Worm.Bagle.gi : No action taken.
C:\Documents and Settings\Noah Reuveni\Local Settings\Temporary Internet Files\Content.IE5\CPMN89UF\777[1].gif -> Worm.Bagle.gi : No action taken.

::Report end

Squeen80 · August 2006

I don't know why the hijackthis log is broken up the way it is, let me know if you want me to re run it and paste it. Also, wanted to let you know that I am also having difficulty using my wireless network card (as in not working at all). Not sure if this is related or not.

Thanks,
Eric

mtunick · August 2006

Whoa, I did not see that coming. Go here http://housecall.trendmicro.com/ And have them scan your computer, save the log and repost it. It should take a while hours depending on your computer.

Squeen80 · August 2006

No dice. The virus scan crashes in the middle. I tried it with IE and Firefox. I also tried the other virus scans you guys recommend and same problem. I can't install Norton Anti-Virus either. Says it can't find a program or something (installing directly from the CD). Bah. :sad2:

mtunick · August 2006

I just realized something. When you ran Ewido, did you select delete or quarantine on the results? Or did you just save the log file and exit, because you have to select Apply All Actions.

Squeen80 · August 2006

OK, so I went back to Ewido and Applied all actions. Then I tried to run the housecall at the link you provided. Again nothing doing. I was however able to run the virus scans from Panda and from Kaspersky. Here are those logs:

Panda:

Incident Status Location

Virus:Trj/Mitglieder.JW Disinfected Operating system
Adware:adware/ezula Not disinfected c:\windows\system32\ezStub3.dll
Spyware:spyware/betterinet Not disinfected c:\windows\inf\biini.inf
Adware:adware/tvmedia Not disinfected c:\windows\cmuninstall.bat
Adware:adware/powerstrip Not disinfected c:\windows\preprocess.data
Potentially unwanted tool:application/myway Not disinfected hkey_local_machine\software\microsoft\windows\currentversion\uninstall\MyWaySearchAssistant
Hacktool:rootkit/mhook Not disinfected hkey_local_machine\system\currentcontrolset\services\m_hook
Spyware:spyware/clipgenie Not disinfected Windows Registry
Adware:adware/sahagent Not disinfected Windows Registry
Spyware:Cookie/Target Not disinfected C:\Documents and Settings\Eric\Cookies\eric@target[1].txt
Virus:Trj/Mitglieder.KD Disinfected C:\Documents and Settings\Noah Reuveni\Application Data\m\data.oct
Spyware:Cookie/Atlas DMT Not disinfected C:\Documents and Settings\Noah Reuveni\Application Data\Mozilla\Firefox\Profiles\7tzunkui.default\cookies.txt[.atdmt.com/]
Spyware:Cookie/Advertising Not disinfected C:\Documents and Settings\Noah Reuveni\Application Data\Mozilla\Firefox\Profiles\7tzunkui.default\cookies.txt[.advertising.com/]
Spyware:Cookie/Tradedoubler Not disinfected C:\Documents and Settings\Noah Reuveni\Application Data\Mozilla\Firefox\Profiles\7tzunkui.default\cookies.txt[.tradedoubler.com/]
Spyware:Cookie/FastClick Not disinfected C:\Documents and Settings\Noah Reuveni\Application Data\Mozilla\Firefox\Profiles\7tzunkui.default\cookies.txt[.fastclick.net/]
Spyware:Cookie/Doubleclick Not disinfected C:\Documents and Settings\Noah Reuveni\Application Data\Mozilla\Firefox\Profiles\7tzunkui.default\cookies.txt[.doubleclick.net/]
Spyware:Cookie/Casalemedia Not disinfected C:\Documents and Settings\Noah Reuveni\Application Data\Mozilla\Firefox\Profiles\7tzunkui.default\cookies.txt[.casalemedia.com/]
Spyware:Cookie/YieldManager Not disinfected C:\Documents and Settings\Noah Reuveni\Application Data\Mozilla\Firefox\Profiles\7tzunkui.default\cookies.txt[ad.yieldmanager.com/]
Spyware:Cookie/PointRoll Not disinfected C:\Documents and Settings\Noah Reuveni\Application Data\Mozilla\Firefox\Profiles\7tzunkui.default\cookies.txt[.ads.pointroll.com/]
Spyware:Cookie/Adrevolver Not disinfected C:\Documents and Settings\Noah Reuveni\Application Data\Mozilla\Firefox\Profiles\7tzunkui.default\cookies.txt[.adrevolver.com/]
Spyware:Cookie/Com.com Not disinfected C:\Documents and Settings\Noah Reuveni\Application Data\Mozilla\Firefox\Profiles\7tzunkui.default\cookies.txt[.com.com/]
Spyware:Cookie/Tribalfusion Not disinfected C:\Documents and Settings\Noah Reuveni\Application Data\Mozilla\Firefox\Profiles\7tzunkui.default\cookies.txt[.tribalfusion.com/]
Spyware:Cookie/Traffic Marketplace Not disinfected C:\Documents and Settings\Noah Reuveni\Application Data\Mozilla\Firefox\Profiles\7tzunkui.default\cookies.txt[.trafficmp.com/]
Spyware:Cookie/Mediaplex Not disinfected C:\Documents and Settings\Noah Reuveni\Application Data\Mozilla\Firefox\Profiles\7tzunkui.default\cookies.txt[.mediaplex.com/]
Spyware:Cookie/Serving-sys Not disinfected C:\Documents and Settings\Noah Reuveni\Application Data\Mozilla\Firefox\Profiles\7tzunkui.default\cookies.txt[.serving-sys.com/]
Spyware:Cookie/FortuneCity Not disinfected C:\Documents and Settings\Noah Reuveni\Application Data\Mozilla\Firefox\Profiles\7tzunkui.default\cookies.txt[.fortunecity.com/]
Spyware:Cookie/RealMedia Not disinfected C:\Documents and Settings\Noah Reuveni\Application Data\Mozilla\Firefox\Profiles\7tzunkui.default\cookies.txt[.realmedia.com/]
Spyware:Cookie/Hitbox Not disinfected C:\Documents and Settings\Noah Reuveni\Application Data\Mozilla\Firefox\Profiles\7tzunkui.default\cookies.txt[.hitbox.com/]
Spyware:Cookie/WebPower Not disinfected C:\Documents and Settings\Noah Reuveni\Application Data\Mozilla\Firefox\Profiles\7tzunkui.default\cookies.txt[.webpower.com/]
Spyware:Cookie/Go Not disinfected C:\Documents and Settings\Noah Reuveni\Application Data\Mozilla\Firefox\Profiles\7tzunkui.default\cookies.txt[.go.com/]
Spyware:Cookie/Atwola Not disinfected C:\Documents and Settings\Noah Reuveni\Application Data\Mozilla\Firefox\Profiles\7tzunkui.default\cookies.txt[.atwola.com/]
Spyware:Cookie/bravenetA Not disinfected C:\Documents and Settings\Noah Reuveni\Application Data\Mozilla\Firefox\Profiles\7tzunkui.default\cookies.txt[.bravenet.com/]
Spyware:Cookie/Xiti Not disinfected C:\Documents and Settings\Noah Reuveni\Application Data\Mozilla\Firefox\Profiles\7tzunkui.default\cookies.txt[.xiti.com/]
Spyware:Cookie/Apmebf Not disinfected C:\Documents and Settings\Noah Reuveni\Application Data\Mozilla\Firefox\Profiles\7tzunkui.default\cookies.txt[.apmebf.com/]
Spyware:Cookie/Maxserving Not disinfected C:\Documents and Settings\Noah Reuveni\Application Data\Mozilla\Firefox\Profiles\7tzunkui.default\cookies.txt[.maxserving.com/]
Spyware:Cookie/DomainSponsor Not disinfected C:\Documents and Settings\Noah Reuveni\Application Data\Mozilla\Firefox\Profiles\7tzunkui.default\cookies.txt[landing.domainsponsor.com/]
Spyware:Cookie/Belnk Not disinfected C:\Documents and Settings\Noah Reuveni\Application Data\Mozilla\Firefox\Profiles\7tzunkui.default\cookies.txt[.belnk.com/]
Spyware:Cookie/Humanclick Not disinfected C:\Documents and Settings\Noah Reuveni\Application Data\Mozilla\Firefox\Profiles\7tzunkui.default\cookies.txt[hc2.humanclick.com/hc/74330191]
Spyware:Cookie/Humanclick Not disinfected C:\Documents and Settings\Noah Reuveni\Application Data\Mozilla\Firefox\Profiles\7tzunkui.default\cookies.txt[hc2.humanclick.com/]
Spyware:Cookie/Atwola Not disinfected C:\Documents and Settings\Noah Reuveni\Cookies\noah [email]reuveni@atwola[1].txt[/email]
Spyware:Cookie/Com.com Not disinfected C:\Documents and Settings\Noah Reuveni\Cookies\noah [email]reuveni@com[1].txt[/email]
Spyware:Cookie/Tribalfusion Not disinfected C:\Documents and Settings\Noah Reuveni\Cookies\noah [email]reuveni@tribalfusion[1].txt[/email]
Spyware:Cookie/Atwola Not disinfected C:\Documents and Settings\Noah Reuveni\Local Settings\Temp\Cookies\noah [email]reuveni@atwola[2].txt[/email]
Spyware:Cookie/Banner Not disinfected C:\Documents and Settings\Noah Reuveni\Local Settings\Temp\Cookies\noah [email]reuveni@banner[1].txt[/email]
Spyware:Cookie/Rightmedia Not disinfected C:\Documents and Settings\Noah Reuveni\Local Settings\Temp\Cookies\noah [email]reuveni@rightmedia[2].txt[/email]
Virus:Trj/Mitglieder.JW Disinfected C:\Documents and Settings\Noah Reuveni\Local Settings\Temp\flec006.exe
Adware:Adware/Exact.SearchBar Not disinfected C:\Documents and Settings\Noah Reuveni\Local Settings\Temp\is-K722O.tmp\exactSetup.exe
Virus:Trj/Mitglieder.JW Disinfected C:\Documents and Settings\Noah Reuveni\Local Settings\Temporary Internet Files\Content.IE5\4HA7S5U3\777[1].gif
Virus:W32/Informer.A.worm Disinfected C:\Documents and Settings\Noah Reuveni\Local Settings\Temporary Internet Files\Content.IE5\89YRCHQJ\777[1].gif
Virus:W32/Bagle.JT.worm Disinfected C:\Documents and Settings\Noah Reuveni\Local Settings\Temporary Internet Files\Content.IE5\WNIPQD23\777[1].gif
Virus:W32/Bagle.JT.worm Disinfected C:\Documents and Settings\Noah Reuveni\Local Settings\Temporary Internet Files\Content.IE5\YUZMRMN1\777[1].gif

Squeen80 · August 2006

And Kaspersky:

KASPERSKY ONLINE SCANNER REPORT
Sunday, August 13, 2006 3:46:18 PM
Operating System: Microsoft Windows XP Home Edition, Service Pack 1 (Build 2600)
Kaspersky Online Scanner version: 5.0.83.0
Kaspersky Anti-Virus database last update: 13/08/2006
Kaspersky Anti-Virus database records: 201910

Scan Settings:
Scan using the following antivirus database: standard
Scan Archives: true
Scan Mail Bases: true

Scan Target - My Computer:
A:\
C:\
D:\

Scan Statistics:
Total number of scanned objects: 78376
Number of viruses found: 32
Number of infected objects: 401 / 0
Number of suspicious objects: 0
Duration of the scan process: 00:55:13

Infected Object Name / Virus Name / Last Action
C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\27437CD6.exe Infected: Email-Worm.Win32.Bagle.bo skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS0756F18A-48BB-4467-B41D-92FDC1108B66.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS0823C1B7-ACF7-4A3A-845A-2FDF5D37F1FD.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS09182637-DE66-44D2-B78B-8951EB605181.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS0952A666-FE6E-4B71-BDA5-9184BC50A1B0.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS127BE582-3B3A-42FD-AD6C-0B33673305BC.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS135196D0-07AA-4421-A2CC-CDE440112434.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS16439663-A3C0-40B3-9BFC-D0EC8840BAC3.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS166292C9-E2BF-46C1-9E61-D2F9C3C54D0A.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS1ACB899B-D06E-4FC5-B508-553EE5844D7D.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS1D95F725-264D-4878-A427-95B959F93EA2.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS1DB0977E-8B7A-47A7-8346-AE68CF6FC547.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS1F53242A-89F0-49FB-9B37-5C868E73A9ED.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS20AA0403-855D-4E95-8FF6-6CABD7BDA140.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS21584834-D01A-4079-A4A6-54924F326117.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS2975DDC8-1A91-4548-B92A-3C02DF471E6D.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS29BE4B93-B16B-48A2-9D17-65192B77BDEA.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS2A272BC1-56B8-4F09-99B3-C92D6D5D9B94.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS2BE29B7C-5916-4B95-A797-89160E037CC2.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS2C555585-D9BA-4FD5-9B19-6BC2FA19F3EF.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS32CDF36E-9187-4AB5-9881-D6359C2F2AA0.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS3C4F7A73-3D19-4D88-B5F7-2A90F3212509.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS3C895C67-7C39-4E2A-926E-986826FCBF06.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS3D4EB93E-1950-4FB7-B373-FB2496ADBBD6.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS3F4A8924-CCF2-4EC4-A866-DDA647C818F0.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS4507814E-04C2-4363-8D5A-C5C5372AD086.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS56DABF47-06C5-41E5-A2E5-490464BA736E.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS5A621063-16B4-4E21-8ADD-F311F8AD05DD.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS61715092-838B-42FE-A6CB-C46D1DBC11B5.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS6396CDC8-2F8B-4D2C-9F85-F0F7F7527649.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS671F3AE9-9390-44FB-99A0-B5421C2C13FA.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS67E2BB9C-EA47-4B66-ACCE-AFAA456112A9.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS6CE85595-E9EC-4697-B2AA-484CCA39EB3D.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS6F8009F5-6405-4B5B-BDCF-028AD59021F6.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS708196CC-DF74-40AC-8281-4986CAA7C452.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS77D21A74-67F5-4EA9-9654-594C75D46F28.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS7B739AC1-8194-44FA-AA7C-938F62AD8FA4.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS7C53D048-6630-4D7D-8A1E-2C9F4754EE35.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS7CF667FF-3480-4355-98A8-BBBAAE07434A.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS7D997274-0C88-4649-81E8-F24635F4692F.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS7E1EAE29-1305-4E01-8F1D-E9D921BB0586.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS8602FC28-71CC-4799-BBDD-3C7DDEDB92EC.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS88C40603-423F-49CD-B3F8-0BC2DEA14CEC.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS90F80589-47A9-4DA1-80A3-BF39D2AFCAB8.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS99B4DA0D-58D3-4A68-B235-9F1A26AC115C.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCSA39EDF31-7B68-4066-9942-021363177D6D.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCSA89CDA4E-E34B-4B78-A90D-0E5DA2940E45.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCSAE592CB8-0D74-49D9-99D6-232B670F6092.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCSB06889D6-8072-4065-B8FE-1A402AF603BD.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCSB4A84C25-CEF3-4C30-B13E-78840D404D82.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCSB4F40838-EF15-45B5-815B-E899610B8BF2.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCSB822D388-E50C-486A-AFF0-9A1DF61B83CD.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCSB8C0CCD6-CF08-4681-A593-D2DE3C7BF3ED.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCSB9CC3140-A869-431F-A940-65FE43C75E6F.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCSBA4227D7-9FCA-4F43-8666-BE115D4A36AC.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCSBAE34AD9-C911-4A0E-B871-465F90729901.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCSBBC33DEA-53DB-4EA6-A267-2E9CB15B5063.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCSBD3BBF11-1583-4DC9-B2BC-AA188E96E035.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCSCC0DBCAF-68C6-4BFB-9A88-4B51DC8A7137.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCSD041FB1E-ACD2-4007-8033-61D133541E39.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCSD1A03F91-4827-4F5B-A2B7-C682C5157A3F.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCSD7648E1B-AAC7-48BB-A275-4EE065B6510D.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCSDA372428-CC28-42A1-9C8C-2B8C3E0F6633.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCSDA68FC33-AAAC-4438-8EFC-37075F46F71A.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCSDA711A83-A5DC-4BA2-9175-1F62CDC5D990.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCSDB9C113D-3DA2-4221-94D3-66199D678345.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCSDEB07B15-AF88-47DA-B719-AED0D68A3DC9.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCSE73F2BC7-2E97-4F81-A401-917DEEB4C418.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCSF46C5DF2-A591-4DE8-8513-562DD33EE65A.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCSFEFDA483-A92E-4AE8-9AAD-90E8772C2331.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\Noah Reuveni\Application Data\m\data.oct Infected: Trojan-Downloader.Win32.Bagle.ay skipped
C:\Documents and Settings\Noah Reuveni\Application Data\m\flec006.exe Infected: Trojan-Downloader.Win32.Bagle.aw skipped
C:\Documents and Settings\Noah Reuveni\Application Data\Sun\Java\Deployment\log\plugin150_06.trace Object is locked skipped
C:\Documents and Settings\Noah Reuveni\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\Noah Reuveni\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\Noah Reuveni\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\Noah Reuveni\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\Noah Reuveni\Local Settings\Temp\flec006.exe Infected: Trojan-Downloader.Win32.Bagle.aw skipped
C:\Documents and Settings\Noah Reuveni\Local Settings\Temp\hsperfdata_Noah Reuveni\444 Object is locked skipped
C:\Documents and Settings\Noah Reuveni\Local Settings\Temp\Perflib_Perfdata_458.dat Object is locked skipped
C:\Documents and Settings\Noah Reuveni\Local Settings\Temporary Internet Files\Content.IE5\FCL1NKG4\777[1].gif Infected: Trojan-Downloader.Win32.Bagle.aw skipped
C:\Documents and Settings\Noah Reuveni\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\Noah Reuveni\Local Settings\Temporary Internet Files\Content.IE5\YUZMRMN1\777[1].gif Infected: Email-Worm.Win32.Bagle.gi skipped
C:\Documents and Settings\Noah Reuveni\My Documents\Moshon\marketing\m484.exe/WISE0013.BIN/data299033.zip/Files/td.exe Infected: Trojan-Downloader.Win32.Turown.a skipped
C:\Documents and Settings\Noah Reuveni\My Documents\Moshon\marketing\m484.exe/WISE0013.BIN/data299033.zip Infected: Trojan-Downloader.Win32.Turown.a skipped
C:\Documents and Settings\Noah Reuveni\My Documents\Moshon\marketing\m484.exe/WISE0013.BIN Infected: Trojan-Downloader.Win32.Turown.a skipped
C:\Documents and Settings\Noah Reuveni\My Documents\Moshon\marketing\m484.exe WiseSFX: infected - 3 skipped
C:\Documents and Settings\Noah Reuveni\ntuser.dat Object is locked skipped
C:\Documents and Settings\Noah Reuveni\ntuser.dat.LOG Object is locked skipped
C:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP752\A0608475.exe Infected: Email-Worm.Win32.Bagle.bo skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP752\A0608476.dll Infected: Email-Worm.Win32.Bagle.cv skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP752\A0608493.exe Infected: Email-Worm.Win32.Bagle.bo skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP752\A0608494.dll Infected: Email-Worm.Win32.Bagle.cv skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP752\A0608577.exe Infected: Email-Worm.Win32.Bagle.bo skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP752\A0608578.dll Infected: Email-Worm.Win32.Bagle.cv skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP753\A0608631.exe Infected: Trojan-Downloader.Win32.Bagle.ao skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP754\A0608642.exe Infected: Email-Worm.Win32.Bagle.bo skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP754\A0608643.dll Infected: Email-Worm.Win32.Bagle.cv skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP755\A0608721.exe Infected: Email-Worm.Win32.Bagle.bo skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP755\A0608722.dll Infected: Email-Worm.Win32.Bagle.cv skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP756\A0608757.exe Infected: Trojan-Downloader.Win32.Bagle.ao skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP756\A0608764.exe Infected: Email-Worm.Win32.Bagle.bo skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP756\A0608765.dll Infected: Email-Worm.Win32.Bagle.cv skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP757\A0608809.exe Infected: Email-Worm.Win32.Bagle.bo skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP757\A0608810.dll Infected: Email-Worm.Win32.Bagle.cv skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP758\A0608844.exe Infected: Email-Worm.Win32.Bagle.bo skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP758\A0608845.dll Infected: Email-Worm.Win32.Bagle.cv skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP759\A0608871.exe Infected: Email-Worm.Win32.Bagle.bo skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP759\A0608872.dll Infected: Email-Worm.Win32.Bagle.cv skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP760\A0609002.exe Infected: Email-Worm.Win32.Bagle.bo skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP760\A0609003.dll Infected: Email-Worm.Win32.Bagle.cv skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP760\A0609008.exe Infected: Email-Worm.Win32.Bagle.bo skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP760\A0609009.dll Infected: Email-Worm.Win32.Bagle.cv skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP761\A0609034.exe Infected: Email-Worm.Win32.Bagle.bo skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP761\A0609035.dll Infected: Email-Worm.Win32.Bagle.cv skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP761\A0609036.exe Infected: Email-Worm.Win32.Bagle.bo skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP765\A0609286.dll Infected: Email-Worm.Win32.Bagle.cv skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP765\A0609287.exe Infected: Email-Worm.Win32.Bagle.bo skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP766\A0609304.exe Infected: Email-Worm.Win32.Bagle.bo skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP766\A0609305.dll Infected: Email-Worm.Win32.Bagle.cv skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP766\A0609328.exe Infected: Email-Worm.Win32.Bagle.bo skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP766\A0609329.dll Infected: Email-Worm.Win32.Bagle.cv skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP767\A0609349.exe Infected: Email-Worm.Win32.Bagle.bo skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP767\A0609350.dll Infected: Email-Worm.Win32.Bagle.cv skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP768\A0609501.exe Infected: Email-Worm.Win32.Bagle.bo skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP768\A0609502.dll Infected: Email-Worm.Win32.Bagle.cv skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP768\A0609503.exe Infected: Email-Worm.Win32.Bagle.bo skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP769\A0609543.exe Infected: Email-Worm.Win32.Bagle.bo skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP769\A0609544.dll Infected: Email-Worm.Win32.Bagle.cv skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP770\A0610239.exe Infected: Email-Worm.Win32.Bagle.bo skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP770\A0610240.dll Infected: Email-Worm.Win32.Bagle.cv skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP771\A0610257.exe Infected: Email-Worm.Win32.Bagle.bo skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP771\A0610258.dll Infected: Email-Worm.Win32.Bagle.cv skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP771\A0610259.exe Infected: Email-Worm.Win32.Bagle.gi skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP772\A0610292.exe Infected: Email-Worm.Win32.Bagle.bo skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP772\A0610293.dll Infected: Email-Worm.Win32.Bagle.cv skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP772\A0610306.exe Infected: Email-Worm.Win32.Bagle.bo skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP772\A0610307.dll Infected: Email-Worm.Win32.Bagle.cv skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP772\A0610678.exe Infected: Email-Worm.Win32.Bagle.bo skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP772\A0610679.dll Infected: Email-Worm.Win32.Bagle.cv skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP773\A0610710.exe Infected: Email-Worm.Win32.Bagle.bo skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP773\A0610711.dll Infected: Email-Worm.Win32.Bagle.cv skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP773\A0610712.exe Infected: Email-Worm.Win32.Bagle.bo skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP774\A0610736.exe Infected: Email-Worm.Win32.Bagle.bo skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP774\A0610737.dll Infected: Email-Worm.Win32.Bagle.cv skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP776\A0610787.exe Infected: Email-Worm.Win32.Bagle.bo skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP776\A0610788.dll Infected: Email-Worm.Win32.Bagle.cv skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP776\A0610814.exe Infected: Email-Worm.Win32.Bagle.bo skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP776\A0610815.dll Infected: Email-Worm.Win32.Bagle.cv skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP777\A0610822.exe Infected: Email-Worm.Win32.Bagle.ex skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP779\A0610857.exe Infected: Email-Worm.Win32.Bagle.bo skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP779\A0610858.dll Infected: Email-Worm.Win32.Bagle.cv skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP780\A0610894.exe Infected: Email-Worm.Win32.Bagle.bo skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP780\A0610895.dll Infected: Email-Worm.Win32.Bagle.cv skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP781\A0610926.dll Infected: Email-Worm.Win32.Bagle.cv skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP781\A0610927.exe Infected: Email-Worm.Win32.Bagle.bo skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP781\A0610928.exe Infected: Email-Worm.Win32.Bagle.bo skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP781\A0610949.exe Infected: Email-Worm.Win32.Bagle.bo skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP781\A0610950.dll Infected: Email-Worm.Win32.Bagle.cv skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP781\A0610955.exe Infected: Email-Worm.Win32.Bagle.bo skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP781\A0610956.dll Infected: Email-Worm.Win32.Bagle.cv skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP781\A0610958.sys Infected: Email-Worm.Win32.Bagle.fy skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP781\A0610970.exe Infected: Email-Worm.Win32.Bagle.bo skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP781\A0610971.dll Infected: Email-Worm.Win32.Bagle.cv skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP781\A0610973.sys Infected: Email-Worm.Win32.Bagle.fy skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP782\A0610984.exe Infected: Email-Worm.Win32.Bagle.bo skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP782\A0610985.dll Infected: Email-Worm.Win32.Bagle.cv skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP782\A0610986.sys Infected: Email-Worm.Win32.Bagle.fy skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP783\A0610993.exe Infected: Email-Worm.Win32.Bagle.bo skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP783\A0610994.dll Infected: Email-Worm.Win32.Bagle.cv skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP783\A0610995.sys Infected: Email-Worm.Win32.Bagle.fy skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP783\A0611004.exe Infected: Email-Worm.Win32.Bagle.bo skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP783\A0611005.dll Infected: Email-Worm.Win32.Bagle.cv skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP783\A0611007.sys Infected: Email-Worm.Win32.Bagle.fy skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP784\A0611274.exe Infected: Email-Worm.Win32.Bagle.bo skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP784\A0611275.dll Infected: Email-Worm.Win32.Bagle.cv skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP784\A0611276.sys Infected: Email-Worm.Win32.Bagle.fy skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP785\A0611286.exe Infected: Email-Worm.Win32.Bagle.bo skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP785\A0611287.dll Infected: Email-Worm.Win32.Bagle.cv skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP785\A0611289.sys Infected: Email-Worm.Win32.Bagle.fy skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP786\A0611298.exe Infected: Email-Worm.Win32.Bagle.bo skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP786\A0611299.dll Infected: Email-Worm.Win32.Bagle.cv skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP786\A0611300.sys Infected: Email-Worm.Win32.Bagle.fy skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP787\A0611308.exe Infected: Email-Worm.Win32.Bagle.bo skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP787\A0611309.dll Infected: Email-Worm.Win32.Bagle.cv skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP787\A0611310.sys Infected: Email-Worm.Win32.Bagle.fy skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP787\A0611320.exe Infected: Email-Worm.Win32.Bagle.bo skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP787\A0611321.dll Infected: Email-Worm.Win32.Bagle.cv skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP787\A0611323.sys Infected: Email-Worm.Win32.Bagle.fy skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP788\A0611333.exe Infected: Email-Worm.Win32.Bagle.bo skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP788\A0611334.dll Infected: Email-Worm.Win32.Bagle.cv skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP788\A0611335.sys Infected: Email-Worm.Win32.Bagle.fy skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP789\A0611347.exe Infected: Email-Worm.Win32.Bagle.bo skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP789\A0611348.dll Infected: Email-Worm.Win32.Bagle.cv skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP789\A0611349.sys Infected: Email-Worm.Win32.Bagle.fy skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP790\A0611441.exe Infected: Email-Worm.Win32.Bagle.bo skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP790\A0611442.dll Infected: Email-Worm.Win32.Bagle.cv skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP790\A0611444.sys Infected: Email-Worm.Win32.Bagle.gl skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP790\A0611447.EXE Infected: Email-Worm.Win32.Bagle.fy skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP790\A0611463.exe Infected: Email-Worm.Win32.Bagle.bo skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP790\A0611464.dll Infected: Email-Worm.Win32.Bagle.cv skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP790\A0611465.sys Infected: Email-Worm.Win32.Bagle.gl skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP791\A0611494.exe Infected: Email-Worm.Win32.Bagle.bo skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP791\A0611495.dll Infected: Email-Worm.Win32.Bagle.cv skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP791\A0611496.sys Infected: Email-Worm.Win32.Bagle.gl skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP791\A0611500.exe Infected: Email-Worm.Win32.Bagle.gl skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP791\A0611508.exe Infected: Email-Worm.Win32.Bagle.gi skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP791\A0611525.exe Infected: Email-Worm.Win32.Bagle.bo skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP791\A0611526.dll Infected: Email-Worm.Win32.Bagle.cv skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP791\A0611528.sys Infected: Email-Worm.Win32.Bagle.gl skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP792\A0611547.exe Infected: Email-Worm.Win32.Bagle.bo skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP792\A0611548.dll Infected: Email-Worm.Win32.Bagle.cv skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP792\A0611549.sys Infected: Email-Worm.Win32.Bagle.gl skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP792\A0611552.exe Infected: Email-Worm.Win32.Bagle.gl skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP792\A0611554.exe Infected: Email-Worm.Win32.Bagle.gi skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP793\A0611642.exe Infected: Email-Worm.Win32.Bagle.bo skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP793\A0611643.dll Infected: Email-Worm.Win32.Bagle.cv skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP793\A0611644.sys Infected: Email-Worm.Win32.Bagle.gl skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP794\A0611661.exe Infected: Email-Worm.Win32.Bagle.bo skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP794\A0611662.dll Infected: Email-Worm.Win32.Bagle.cv skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP794\A0611663.sys Infected: Email-Worm.Win32.Bagle.gl skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP794\A0611666.exe Infected: Email-Worm.Win32.Bagle.gl skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP795\A0611709.exe Infected: Email-Worm.Win32.Bagle.bo skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP795\A0611710.dll Infected: Email-Worm.Win32.Bagle.cv skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP795\A0611711.sys Infected: Email-Worm.Win32.Bagle.gl skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP795\A0611715.exe Infected: Email-Worm.Win32.Bagle.gl skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP795\A0611716.exe Infected: Email-Worm.Win32.Bagle.gi skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP796\A0611731.exe Infected: Email-Worm.Win32.Bagle.bo skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP796\A0611732.dll Infected: Email-Worm.Win32.Bagle.cv skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP796\A0611733.exe Infected: Email-Worm.Win32.Bagle.bo skipped

Squeen80 · August 2006

C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP796\A0611734.sys Infected: Email-Worm.Win32.Bagle.gl skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP796\A0611738.exe Infected: Email-Worm.Win32.Bagle.gl skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP796\A0611739.exe Infected: Trojan-Downloader.Win32.Bagle.aq skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP796\A0611740.exe Infected: Trojan-Downloader.Win32.Bagle.y skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP797\A0611771.exe Infected: Email-Worm.Win32.Bagle.bo skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP797\A0611772.dll Infected: Email-Worm.Win32.Bagle.cv skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP797\A0611773.sys Infected: Email-Worm.Win32.Bagle.gl skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP797\A0611788.exe Infected: Email-Worm.Win32.Bagle.gl skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP797\A0611789.exe Infected: Trojan-Downloader.Win32.Bagle.aq skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP798\A0611798.exe Infected: Email-Worm.Win32.Bagle.bo skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP798\A0611799.dll Infected: Email-Worm.Win32.Bagle.cv skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP798\A0611800.sys Infected: Email-Worm.Win32.Bagle.gl skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP798\A0611805.exe Infected: Email-Worm.Win32.Bagle.gl skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP798\A0611806.exe Infected: Email-Worm.Win32.Bagle.gi skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP798\A0611813.exe Infected: Email-Worm.Win32.Bagle.bu skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP798\A0611814.exe Infected: Email-Worm.Win32.Bagle.cj skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP798\A0611815.exe Infected: Email-Worm.Win32.Bagle.dw skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP798\A0611816.exe Infected: Email-Worm.Win32.Bagle.ex skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP798\A0611817.exe Infected: Email-Worm.Win32.Bagle.cv skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP798\A0611881.sys Infected: Email-Worm.Win32.Bagle.gl skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP798\A0611884.exe Infected: Trojan-Downloader.Win32.Bagle.aw skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP798\A0611891.exe Infected: Email-Worm.Win32.Bagle.bo skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP798\A0611892.exe Infected: Email-Worm.Win32.Bagle.bo skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP798\A0611894.sys Infected: Email-Worm.Win32.Bagle.gl skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP799\A0611917.exe Infected: Email-Worm.Win32.Bagle.bo skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP799\A0611918.sys Infected: Email-Worm.Win32.Bagle.gl skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP799\A0611945.exe Infected: Email-Worm.Win32.Bagle.gi skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP799\A0611946.exe Infected: Trojan-Downloader.Win32.Bagle.y skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP799\A0611951.exe Infected: Email-Worm.Win32.Bagle.bo skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP799\A0611952.exe Infected: Email-Worm.Win32.Bagle.bo skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP799\A0611953.sys Infected: Email-Worm.Win32.Bagle.gl skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP799\A0611958.exe Infected: Email-Worm.Win32.Bagle.gi skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP799\A0611959.exe Infected: Trojan-Downloader.Win32.Bagle.y skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP800\A0611975.exe Infected: Trojan-Downloader.Win32.Bagle.y skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP800\A0611976.exe Infected: Trojan-Downloader.Win32.Bagle.y skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP800\A0611978.exe Infected: Email-Worm.Win32.Bagle.gi skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP800\A0611983.sys Infected: Email-Worm.Win32.Bagle.gl skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP800\A0611986.exe Infected: Trojan-Downloader.Win32.Bagle.y skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP800\A0611990.exe Infected: Trojan-Downloader.Win32.Bagle.y skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP801\A0612017.exe Infected: Email-Worm.Win32.Bagle.bo skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP801\A0612018.exe Infected: Email-Worm.Win32.Bagle.gi skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP801\A0612023.sys Infected: Email-Worm.Win32.Bagle.gl skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP801\A0612026.exe Infected: Trojan-Downloader.Win32.Bagle.y skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP802\A0613020.exe Infected: Email-Worm.Win32.Bagle.bo skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP802\A0613021.sys Infected: Email-Worm.Win32.Bagle.gl skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP803\A0613027.exe Infected: Email-Worm.Win32.Bagle.bo skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP804\A0613029.exe Infected: Email-Worm.Win32.Bagle.gi skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP804\A0613034.sys Infected: Email-Worm.Win32.Bagle.gl skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP804\A0613045.exe Infected: Email-Worm.Win32.Bagle.bo skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP804\A0613046.sys Infected: Email-Worm.Win32.Bagle.gl skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP804\A0614042.exe Infected: Email-Worm.Win32.Bagle.bo skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP804\A0614047.sys Infected: Email-Worm.Win32.Bagle.gl skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP805\A0614050.exe Infected: Email-Worm.Win32.Bagle.bo skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP806\A0614101.exe Infected: Email-Worm.Win32.Bagle.bo skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP806\A0614137.exe Infected: Trojan-Downloader.Win32.Bagle.y skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP806\A0614138.exe Infected: Trojan-Downloader.Win32.Bagle.ao skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP806\A0614139.exe Infected: Trojan-Downloader.Win32.Bagle.ag skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP806\A0615075.sys Infected: Email-Worm.Win32.Bagle.gl skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP806\A0615082.sys Infected: Email-Worm.Win32.Bagle.gl skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP806\A0615086.exe Infected: Trojan-Downloader.Win32.Bagle.aw skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP806\A0615105.sys Infected: Email-Worm.Win32.Bagle.gl skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP806\A0615106.exe Infected: Trojan-Downloader.Win32.Bagle.aw skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP806\A0615134.sys Infected: Email-Worm.Win32.Bagle.gl skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP806\A0615172.sys Infected: Email-Worm.Win32.Bagle.gl skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP806\A0615173.exe Infected: Trojan-Downloader.Win32.Bagle.aw skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP806\A0615176.exe Infected: Email-Worm.Win32.Bagle.gi skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP806\A0615177.exe Infected: Email-Worm.Win32.Bagle.ex skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP806\A0615199.sys Infected: Email-Worm.Win32.Bagle.gl skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP807\A0615237.exe Infected: Trojan-Downloader.Win32.Bagle.aw skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP807\A0616195.exe Infected: Email-Worm.Win32.Bagle.gi skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP807\A0616199.sys Infected: Email-Worm.Win32.Bagle.gl skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP807\A0616200.exe Infected: Trojan-Downloader.Win32.Bagle.aw skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP807\A0616271.exe Infected: Email-Worm.Win32.Bagle.gi skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP807\A0616275.sys Infected: Email-Worm.Win32.Bagle.gl skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616405.exe Infected: Trojan-Downloader.Win32.Bagle.aw skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616406.exe Infected: Email-Worm.Win32.Bagle.cg skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616407.exe Infected: Email-Worm.Win32.Bagle.cg skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616408.exe Infected: Email-Worm.Win32.Bagle.cg skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616409.exe Infected: Email-Worm.Win32.Bagle.cg skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616410.exe Infected: Email-Worm.Win32.Bagle.cv skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616411.exe Infected: Email-Worm.Win32.Bagle.cv skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616412.exe Infected: Email-Worm.Win32.Bagle.cv skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616413.exe Infected: Email-Worm.Win32.Bagle.cv skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616414.exe Infected: Email-Worm.Win32.Bagle.cv skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616415.exe Infected: Email-Worm.Win32.Bagle.cv skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616416.exe Infected: Email-Worm.Win32.Bagle.cv skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616417.exe Infected: Email-Worm.Win32.Bagle.cv skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616418.exe Infected: Email-Worm.Win32.Bagle.cv skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616419.exe Infected: Email-Worm.Win32.Bagle.cv skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616420.exe Infected: Email-Worm.Win32.Bagle.cv skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616421.exe Infected: Email-Worm.Win32.Bagle.cv skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616422.exe Infected: Email-Worm.Win32.Bagle.cv skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616423.exe Infected: Email-Worm.Win32.Bagle.cv skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616424.exe Infected: Email-Worm.Win32.Bagle.cv skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616425.exe Infected: Email-Worm.Win32.Bagle.cv skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616426.exe Infected: Email-Worm.Win32.Bagle.cv skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616427.exe Infected: Email-Worm.Win32.Bagle.cv skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616428.exe Infected: Email-Worm.Win32.Bagle.cv skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616429.exe Infected: Email-Worm.Win32.Bagle.cv skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616430.exe Infected: Email-Worm.Win32.Bagle.cv skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616431.exe Infected: Email-Worm.Win32.Bagle.cv skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616432.exe Infected: Email-Worm.Win32.Bagle.cv skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616433.exe Infected: Email-Worm.Win32.Bagle.cv skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616434.exe Infected: Email-Worm.Win32.Bagle.cv skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616435.exe Infected: Email-Worm.Win32.Bagle.cv skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616436.exe Infected: Email-Worm.Win32.Bagle.cv skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616437.exe Infected: Email-Worm.Win32.Bagle.cv skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616438.exe Infected: Email-Worm.Win32.Bagle.cv skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616439.exe Infected: Email-Worm.Win32.Bagle.cv skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616440.exe Infected: Email-Worm.Win32.Bagle.cv skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616441.exe Infected: Email-Worm.Win32.Bagle.cv skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616442.exe Infected: Email-Worm.Win32.Bagle.cv skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616443.exe Infected: Email-Worm.Win32.Bagle.cv skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616444.exe Infected: Email-Worm.Win32.Bagle.cv skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616445.exe Infected: Email-Worm.Win32.Bagle.cv skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616446.exe Infected: Email-Worm.Win32.Bagle.bu skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616447.exe Infected: Email-Worm.Win32.Bagle.bu skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616448.exe Infected: Email-Worm.Win32.Bagle.bu skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616449.exe Infected: Email-Worm.Win32.Bagle.bu skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616450.exe Infected: Email-Worm.Win32.Bagle.bu skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616451.exe Infected: Email-Worm.Win32.Bagle.bu skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616452.exe Infected: Email-Worm.Win32.Bagle.bu skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616453.exe Infected: Email-Worm.Win32.Bagle.bu skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616454.exe Infected: Email-Worm.Win32.Bagle.bu skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616455.exe Infected: Email-Worm.Win32.Bagle.bu skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616456.exe Infected: Email-Worm.Win32.Bagle.bu skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616457.exe Infected: Email-Worm.Win32.Bagle.bu skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616458.exe Infected: Email-Worm.Win32.Bagle.bu skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616459.exe Infected: Email-Worm.Win32.Bagle.bu skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616460.exe Infected: Email-Worm.Win32.Bagle.bu skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616461.exe Infected: Email-Worm.Win32.Bagle.bu skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616462.exe Infected: Email-Worm.Win32.Bagle.bu skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616463.exe Infected: Email-Worm.Win32.Bagle.bu skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616464.exe Infected: Email-Worm.Win32.Bagle.bu skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616465.exe Infected: Email-Worm.Win32.Bagle.bu skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616466.exe Infected: Email-Worm.Win32.Bagle.bu skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616467.exe Infected: Email-Worm.Win32.Bagle.bu skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616468.exe Infected: Email-Worm.Win32.Bagle.bu skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616469.exe Infected: Email-Worm.Win32.Bagle.bu skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616470.exe Infected: Email-Worm.Win32.Bagle.bu skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616471.exe Infected: Email-Worm.Win32.Bagle.bu skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616472.exe Infected: Email-Worm.Win32.Bagle.bu skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616473.exe Infected: Email-Worm.Win32.Bagle.bu skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616474.exe Infected: Email-Worm.Win32.Bagle.bu skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616475.exe Infected: Email-Worm.Win32.Bagle.bu skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616476.exe Infected: Email-Worm.Win32.Bagle.bu skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616477.exe Infected: Email-Worm.Win32.Bagle.bu skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616478.exe Infected: Email-Worm.Win32.Bagle.bu skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616479.exe Infected: Email-Worm.Win32.Bagle.bu skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616480.exe Infected: Email-Worm.Win32.Bagle.bu skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616481.exe Infected: Email-Worm.Win32.Bagle.bu skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616482.exe Infected: Email-Worm.Win32.Bagle.bu skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616483.exe Infected: Email-Worm.Win32.Bagle.bu skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616484.exe Infected: Email-Worm.Win32.Bagle.bu skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616485.exe Infected: Email-Worm.Win32.Bagle.bu skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616486.exe Infected: Email-Worm.Win32.Bagle.bu skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616487.exe Infected: Email-Worm.Win32.Bagle.bu skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616488.exe Infected: Email-Worm.Win32.Bagle.bu skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616489.exe Infected: Email-Worm.Win32.Bagle.bu skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616490.exe Infected: Email-Worm.Win32.Bagle.bu skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616491.exe Infected: Email-Worm.Win32.Bagle.bu skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616492.exe Infected: Email-Worm.Win32.Bagle.bu skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616493.exe Infected: Email-Worm.Win32.Bagle.bu skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616494.exe Infected: Email-Worm.Win32.Bagle.bu skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616495.exe Infected: Email-Worm.Win32.Bagle.bu skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616496.exe Infected: Email-Worm.Win32.Bagle.bu skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616497.exe Infected: Email-Worm.Win32.Bagle.bu skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616498.exe Infected: Email-Worm.Win32.Bagle.bu skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616499.exe Infected: Email-Worm.Win32.Bagle.bu skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616500.exe Infected: Email-Worm.Win32.Bagle.bu skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616501.exe Infected: Email-Worm.Win32.Bagle.bu skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616502.exe Infected: Email-Worm.Win32.Bagle.bu skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616503.exe Infected: Email-Worm.Win32.Bagle.bu skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616504.exe Infected: Email-Worm.Win32.Bagle.bu skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616505.exe Infected: Email-Worm.Win32.Bagle.bu skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616506.exe Infected: Email-Worm.Win32.Bagle.bu skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616507.exe Infected: Email-Worm.Win32.Bagle.bu skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616508.exe Infected: Email-Worm.Win32.Bagle.bu skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616509.exe Infected: Email-Worm.Win32.Bagle.bu skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616510.exe Infected: Email-Worm.Win32.Bagle.bu skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616511.exe Infected: Email-Worm.Win32.Bagle.bu skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616512.exe Infected: Email-Worm.Win32.Bagle.bu skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616513.exe Infected: Email-Worm.Win32.Bagle.bu skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616514.exe Infected: Email-Worm.Win32.Bagle.bu skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616515.exe Infected: Email-Worm.Win32.Bagle.bu skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616516.exe Infected: Email-Worm.Win32.Bagle.bu skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616517.exe Infected: Email-Worm.Win32.Bagle.bu skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616518.exe Infected: Email-Worm.Win32.Bagle.bu skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616519.exe Infected: Email-Worm.Win32.Bagle.bu skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616520.exe Infected: Email-Worm.Win32.Bagle.bu skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616521.exe Infected: Email-Worm.Win32.Bagle.bu skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616522.exe Infected: Email-Worm.Win32.Bagle.bu skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616523.exe Infected: Email-Worm.Win32.Bagle.bu skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616524.exe Infected: Email-Worm.Win32.Bagle.bu skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616525.exe Infected: Email-Worm.Win32.Bagle.bu skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616526.exe Infected: Email-Worm.Win32.Bagle.bu skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616527.exe Infected: Email-Worm.Win32.Bagle.ex skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616528.exe Infected: Email-Worm.Win32.Bagle.ex skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616529.exe Infected: Email-Worm.Win32.Bagle.ex skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616530.exe Infected: Email-Worm.Win32.Bagle.ex skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616531.exe Infected: Email-Worm.Win32.Bagle.ex skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616532.exe Infected: Email-Worm.Win32.Bagle.ex skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616533.exe Infected: Email-Worm.Win32.Bagle.ex skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616534.exe Infected: Email-Worm.Win32.Bagle.ex skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616535.exe Infected: Email-Worm.Win32.Bagle.ex skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616536.exe Infected: Email-Worm.Win32.Bagle.ex skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616537.exe Infected: Email-Worm.Win32.Bagle.ex skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616538.exe Infected: Email-Worm.Win32.Bagle.ex skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616539.exe Infected: Email-Worm.Win32.Bagle.dw skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616540.exe Infected: Email-Worm.Win32.Bagle.dw skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616541.exe Infected: Email-Worm.Win32.Bagle.dw skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616542.exe Infected: Email-Worm.Win32.Bagle.dw skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616543.exe Infected: Email-Worm.Win32.Bagle.dw skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616544.exe Infected: Email-Worm.Win32.Bagle.dw skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616545.exe Infected: Email-Worm.Win32.Bagle.dw skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616546.exe Infected: Email-Worm.Win32.Bagle.bs skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616547.exe Infected: Email-Worm.Win32.Bagle.bs skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616548.exe Infected: Email-Worm.Win32.Bagle.bq skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616549.exe Infected: Email-Worm.Win32.Bagle.bq skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616550.exe Infected: Email-Worm.Win32.Bagle.cz skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616551.exe Infected: Email-Worm.Win32.Bagle.cz skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616552.exe Infected: Email-Worm.Win32.Bagle.cz skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616553.exe Infected: Email-Worm.Win32.Bagle.bx skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616554.exe Infected: Email-Worm.Win32.Bagle.bx skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616555.exe Infected: Email-Worm.Win32.Bagle.bx skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616556.exe Infected: Email-Worm.Win32.Bagle.bx skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616557.exe Infected: Email-Worm.Win32.Bagle.bx skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616558.exe Infected: Email-Worm.Win32.Bagle.bx skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616559.exe Infected: Email-Worm.Win32.Bagle.bx skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616560.exe Infected: Email-Worm.Win32.Bagle.du skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616561.exe Infected: Email-Worm.Win32.Bagle.du skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616562.exe Infected: Email-Worm.Win32.Bagle.du skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616563.exe Infected: Email-Worm.Win32.Bagle.du skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616564.exe Infected: Email-Worm.Win32.Bagle.ca skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616565.exe Infected: Email-Worm.Win32.Bagle.dm skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616566.exe Infected: Email-Worm.Win32.Bagle.dm skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616567.exe Infected: Email-Worm.Win32.Bagle.cb skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616568.exe Infected: Email-Worm.Win32.Bagle.ce skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616569.exe Infected: Email-Worm.Win32.Bagle.ce skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616570.exe Infected: Trojan-Downloader.Win32.Small.ajm skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616571.exe Infected: Email-Worm.Win32.Bagle.cr skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616572.exe Infected: Email-Worm.Win32.Bagle.gj skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616573.dll Infected: Trojan-Dropper.Win32.Agent.of skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616574.dll Infected: Trojan-Dropper.Win32.Agent.of skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP815\A0616575.dll Infected: Trojan-Dropper.Win32.Agent.og skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP816\A0616583.sys Infected: Email-Worm.Win32.Bagle.gl skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP817\A0616640.exe Infected: Trojan-Downloader.Win32.Bagle.aw skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP817\A0616655.exe Infected: Email-Worm.Win32.Bagle.gi skipped
C:\System Volume Information\_restore{EA74C3DC-87BE-444E-A79B-C8856EFFC261}\RP817\change.log Object is locked skipped
C:\temp.zip Infected: Email-Worm.Win32.Bagle.gen skipped
C:\WINDOWS\Debug\oakley.log Object is locked skipped
C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped
C:\WINDOWS\SchedLgU.Txt Object is locked skipped
C:\WINDOWS\system32\biR.exe Infected: Trojan-Dropper.Win32.Agent.og skipped
C:\WINDOWS\system32\config\AppEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\default Object is locked skipped
C:\WINDOWS\system32\config\default.LOG Object is locked skipped
C:\WINDOWS\system32\config\SAM Object is locked skipped
C:\WINDOWS\system32\config\SAM.LOG Object is locked skipped
C:\WINDOWS\system32\config\SecEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\SECURITY Object is locked skipped
C:\WINDOWS\system32\config\SECURITY.LOG Object is locked skipped
C:\WINDOWS\system32\config\software Object is locked skipped
C:\WINDOWS\system32\config\software.LOG Object is locked skipped
C:\WINDOWS\system32\config\SysEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\system Object is locked skipped
C:\WINDOWS\system32\config\system.LOG Object is locked skipped
C:\WINDOWS\system32\h323log.txt Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA Object is locked skipped

Scan process completed.

Stuck at square one....

Comments