Okay, here's the two logs:
——————————————————————————
KASPERSKY ON-LINE SCANNER REPORT
Tuesday, January 24, 2006 06:29:47
Operating System: Microsoft Windows XP Home Edition, Service Pack 2 (Build 2600)
Kaspersky On-line Scanner version: 5.0.67.0
Kaspersky Anti-Virus database last update: 23/01/2006
Kaspersky Anti-Virus database records: 172695
——————————————————————————-
Scan Settings:
Scan using the following antivirus database: extended
Scan Archives: true
Scan Mail Bases: true
Scan Target - My Computer:
C:\
D:\
Scan Statistics:
Total number of scanned objects: 40557
Number of viruses found: 23
Number of infected objects: 159
Number of suspicious objects: 139
Duration of the scan process: 44048 sec
Infected Object Name - Virus Name
C:\command.exe Infected: Trojan-Dropper.Win32.Delf.ev
C:\Program Files\Internet Explorer\cslsmizk.exe Infected: Trojan-Downloader.Win32.Small.aar
C:\Program Files\Internet Explorer\cxhfbxid.exe Infected: Trojan-Downloader.Win32.Small.aar
C:\Program Files\Internet Explorer\fjvpgvsc.exe Infected: Trojan-Downloader.Win32.Small.aar
C:\Program Files\Internet Explorer\gsdnviiw.exe Infected: Trojan-Downloader.Win32.Small.aar
C:\Program Files\Internet Explorer\nikctvcc.exe Infected: Trojan-Downloader.Win32.Small.aar
C:\Program Files\Internet Explorer\susqgidw.exe Infected: Trojan-Downloader.Win32.Small.aar
C:\Program Files\Internet Explorer\wnoxijlt.exe Infected: Trojan-Downloader.Win32.Small.aar
C:\Program Files\Norton AntiVirus\Quarantine\02931A68.htm Infected: Exploit.HTML.Mht
C:\Program Files\Norton AntiVirus\Quarantine\02A46C56 Infected: Trojan-Clicker.JS.Linker.h
C:\Program Files\Norton AntiVirus\Quarantine\02A46C56.htm Infected: Exploit.HTML.Mht
C:\Program Files\Norton AntiVirus\Quarantine\02A71653.htm Infected: Exploit.HTML.Mht
C:\Program Files\Norton AntiVirus\Quarantine\02B43E44.htm Infected: Exploit.HTML.Mht
C:\Program Files\Norton AntiVirus\Quarantine\030F55E0.htm Infected: Exploit.HTML.Mht
C:\Program Files\Norton AntiVirus\Quarantine\032027CE.htm Infected: Exploit.HTML.Mht
C:\Program Files\Norton AntiVirus\Quarantine\032A25C3.htm Infected: Exploit.HTML.Mht
C:\Program Files\Norton AntiVirus\Quarantine\032D4FBF.htm Infected: Exploit.HTML.Mht
C:\Program Files\Norton AntiVirus\Quarantine\03404BAA.htm Infected: Exploit.HTML.Mht
C:\Program Files\Norton AntiVirus\Quarantine\057E1277 Infected: Email-Worm.Win32.NetSky.q
C:\Program Files\Norton AntiVirus\Quarantine\05E14F5B Infected: Email-Worm.Win32.NetSky.q
C:\Program Files\Norton AntiVirus\Quarantine\061B431A/[From [removed]][Date Tue, 21 Dec 2004 15:52:38 -0600]/UNNAMED/html Suspicious: Exploit.HTML.Iframe.FileDownload
C:\Program Files\Norton AntiVirus\Quarantine\061B431A/[From [removed]][Date Tue, 21 Dec 2004 15:52:38 -0600]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload
C:\Program Files\Norton AntiVirus\Quarantine\061B431A Suspicious: Exploit.HTML.Iframe.FileDownload
C:\Program Files\Norton AntiVirus\Quarantine\062145C3/[From [removed]][Date Fri, 15 Oct 2004 12:03:43 -0500]/UNNAMED/html Suspicious: Exploit.HTML.Iframe.FileDownload
C:\Program Files\Norton AntiVirus\Quarantine\062145C3/[From [removed]][Date Fri, 15 Oct 2004 12:03:43 -0500]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload
C:\Program Files\Norton AntiVirus\Quarantine\062145C3 Suspicious: Exploit.HTML.Iframe.FileDownload
C:\Program Files\Norton AntiVirus\Quarantine\063A0692.class Infected: Trojan-Downloader.Java.OpenConnection.ah
C:\Program Files\Norton AntiVirus\Quarantine\095C3EF5 Infected: Email-Worm.Win32.NetSky.q
C:\Program Files\Norton AntiVirus\Quarantine\096212EE/[From [removed]][Date Mon, 20 Dec 2004 01:51:19 -0600]/UNNAMED/html Suspicious: Exploit.HTML.Iframe.FileDownload
C:\Program Files\Norton AntiVirus\Quarantine\096212EE/[From [removed]][Date Mon, 20 Dec 2004 01:51:19 -0600]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload
C:\Program Files\Norton AntiVirus\Quarantine\096212EE Suspicious: Exploit.HTML.Iframe.FileDownload
C:\Program Files\Norton AntiVirus\Quarantine\09703AE0 Infected: Email-Worm.Win32.NetSky.q
C:\Program Files\Norton AntiVirus\Quarantine\09760ED9/[From [removed]][Date Mon, 20 Dec 2004 02:40:09 -0600]/UNNAMED/html Suspicious: Exploit.HTML.Iframe.FileDownload
C:\Program Files\Norton AntiVirus\Quarantine\09760ED9/[From [removed]][Date Mon, 20 Dec 2004 02:40:09 -0600]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload
C:\Program Files\Norton AntiVirus\Quarantine\09760ED9 Suspicious: Exploit.HTML.Iframe.FileDownload
C:\Program Files\Norton AntiVirus\Quarantine\0C84488A Infected: Email-Worm.Win32.NetSky.q
C:\Program Files\Norton AntiVirus\Quarantine\0C984474/[From [removed]][Date Sat, 19 Feb 2005 20:31:22 -0600]/UNNAMED/html Suspicious: Exploit.HTML.Iframe.FileDownload
C:\Program Files\Norton AntiVirus\Quarantine\0C984474/[From [removed]][Date Sat, 19 Feb 2005 20:31:22 -0600]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload
C:\Program Files\Norton AntiVirus\Quarantine\0C984474 Suspicious: Exploit.HTML.Iframe.FileDownload
C:\Program Files\Norton AntiVirus\Quarantine\0CD66230 Infected: Email-Worm.Win32.NetSky.q
C:\Program Files\Norton AntiVirus\Quarantine\0CDC3629/[From [removed]][Date Fri, 18 Feb 2005 18:24:02 -0600]/UNNAMED/html Suspicious: Exploit.HTML.Iframe.FileDownload
C:\Program Files\Norton AntiVirus\Quarantine\0CDC3629/[From [removed]][Date Fri, 18 Feb 2005 18:24:02 -0600]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload
C:\Program Files\Norton AntiVirus\Quarantine\0CDC3629 Suspicious: Exploit.HTML.Iframe.FileDownload
C:\Program Files\Norton AntiVirus\Quarantine\0D547F1D Infected: Email-Worm.Win32.NetSky.q
C:\Program Files\Norton AntiVirus\Quarantine\0DAF16B9/[From [removed]][Date Fri, 11 Feb 2005 18:36:20 -0600]/UNNAMED/html Suspicious: Exploit.HTML.Iframe.FileDownload
C:\Program Files\Norton AntiVirus\Quarantine\0DAF16B9/[From [removed]][Date Fri, 11 Feb 2005 18:36:20 -0600]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload
C:\Program Files\Norton AntiVirus\Quarantine\0DAF16B9 Suspicious: Exploit.HTML.Iframe.FileDownload
C:\Program Files\Norton AntiVirus\Quarantine\0DE7607C Infected: Email-Worm.Win32.NetSky.q
C:\Program Files\Norton AntiVirus\Quarantine\0E322629 Infected: Email-Worm.Win32.NetSky.q
C:\Program Files\Norton AntiVirus\Quarantine\0E534A05 Infected: Email-Worm.Win32.NetSky.q
C:\Program Files\Norton AntiVirus\Quarantine\0E567401/[From [removed]][Date Sun, 13 Feb 2005 13:09:16 -0600]/UNNAMED/html Suspicious: Exploit.HTML.Iframe.FileDownload
C:\Program Files\Norton AntiVirus\Quarantine\0E567401/[From [removed]][Date Sun, 13 Feb 2005 13:09:16 -0600]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload
C:\Program Files\Norton AntiVirus\Quarantine\0E567401 Suspicious: Exploit.HTML.Iframe.FileDownload
C:\Program Files\Norton AntiVirus\Quarantine\0E6645EF Infected: Email-Worm.Win32.NetSky.q
C:\Program Files\Norton AntiVirus\Quarantine\0E736DE1/[From [removed]][Date Mon, 14 Feb 2005 01:52:50 +0000]/UNNAMED/[From [removed]][Date Sun, 13 Feb 2005 19:53:26 -0600]/UNNAMED/html Suspicious: Exploit.HTML.Iframe.FileDownload
C:\Program Files\Norton AntiVirus\Quarantine\0E736DE1/[From [removed]][Date Mon, 14 Feb 2005 01:52:50 +0000]/UNNAMED/[From [removed]][Date Sun, 13 Feb 2005 19:53:26 -0600]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload
C:\Program Files\Norton AntiVirus\Quarantine\0E736DE1/[From [removed]][Date Mon, 14 Feb 2005 01:52:50 +0000]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload
C:\Program Files\Norton AntiVirus\Quarantine\0E736DE1 Suspicious: Exploit.HTML.Iframe.FileDownload
C:\Program Files\Norton AntiVirus\Quarantine\0EB53599 Infected: Email-Worm.Win32.NetSky.q
C:\Program Files\Norton AntiVirus\Quarantine\0EBB0992/[From [removed]][Date Sun, 13 Feb 2005 20:10:06 -0600]/UNNAMED/html Suspicious: Exploit.HTML.Iframe.FileDownload
C:\Program Files\Norton AntiVirus\Quarantine\0EBB0992/[From [removed]][Date Sun, 13 Feb 2005 20:10:06 -0600]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload
C:\Program Files\Norton AntiVirus\Quarantine\0EBB0992 Suspicious: Exploit.HTML.Iframe.FileDownload
C:\Program Files\Norton AntiVirus\Quarantine\0ECF057C Infected: Email-Worm.Win32.NetSky.q
C:\Program Files\Norton AntiVirus\Quarantine\13B676FA Infected: Email-Worm.Win32.NetSky.q
C:\Program Files\Norton AntiVirus\Quarantine\18617077.exe Infected: Trojan-Downloader.Win32.Small.vq
C:\Program Files\Norton AntiVirus\Quarantine\18D83833.tmp Infected: Trojan-Downloader.Win32.Small.wf
C:\Program Files\Norton AntiVirus\Quarantine\19053397 Infected: Email-Worm.Win32.NetSky.q
C:\Program Files\Norton AntiVirus\Quarantine\190F318D/[From [removed]][Date Mon, 10 Jan 2005 21:55:22 -0600]/UNNAMED/html Suspicious: Exploit.HTML.Iframe.FileDownload
C:\Program Files\Norton AntiVirus\Quarantine\190F318D/[From [removed]][Date Mon, 10 Jan 2005 21:55:22 -0600]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload
C:\Program Files\Norton AntiVirus\Quarantine\190F318D Suspicious: Exploit.HTML.Iframe.FileDownload
C:\Program Files\Norton AntiVirus\Quarantine\1B4861EA Infected: Email-Worm.Win32.NetSky.q
C:\Program Files\Norton AntiVirus\Quarantine\1B4E35E3/[From [removed]][Date Tue, 18 Jan 2005 20:56:22 -0600]/UNNAMED/html Suspicious: Exploit.HTML.Iframe.FileDownload
C:\Program Files\Norton AntiVirus\Quarantine\1B4E35E3/[From [removed]][Date Tue, 18 Jan 2005 20:56:22 -0600]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload
C:\Program Files\Norton AntiVirus\Quarantine\1B4E35E3 Suspicious: Exploit.HTML.Iframe.FileDownload
C:\Program Files\Norton AntiVirus\Quarantine\1D211FE0/[From [removed]][Date Tue, 8 Mar 2005 16:21:04 -0600]/UNNAMED/html Suspicious: Exploit.HTML.Iframe.FileDownload
C:\Program Files\Norton AntiVirus\Quarantine\1D211FE0/[From [removed]][Date Tue, 8 Mar 2005 16:21:04 -0600]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload
C:\Program Files\Norton AntiVirus\Quarantine\1D211FE0 Suspicious: Exploit.HTML.Iframe.FileDownload
C:\Program Files\Norton AntiVirus\Quarantine\1D935B40 Infected: Email-Worm.Win32.Bagle.at
C:\Program Files\Norton AntiVirus\Quarantine\1DF548F7 Infected: Email-Worm.Win32.NetSky.q
C:\Program Files\Norton AntiVirus\Quarantine\1DFF46EC/[From [removed]][Date Tue, 8 Mar 2005 16:21:04 -0600]/UNNAMED/html Suspicious: Exploit.HTML.Iframe.FileDownload
C:\Program Files\Norton AntiVirus\Quarantine\1DFF46EC/[From [removed]][Date Tue, 8 Mar 2005 16:21:04 -0600]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload
C:\Program Files\Norton AntiVirus\Quarantine\1DFF46EC Suspicious: Exploit.HTML.Iframe.FileDownload
C:\Program Files\Norton AntiVirus\Quarantine\21487917.class Infected: Trojan-Downloader.Java.OpenConnection.ah
C:\Program Files\Norton AntiVirus\Quarantine\246647EF Infected: Email-Worm.Win32.NetSky.q
C:\Program Files\Norton AntiVirus\Quarantine\247045E4/[From [removed]][Date Fri, 7 Jan 2005 02:33:59 -0600]/UNNAMED/html Suspicious: Exploit.HTML.Iframe.FileDownload
C:\Program Files\Norton AntiVirus\Quarantine\247045E4/[From [removed]][Date Fri, 7 Jan 2005 02:33:59 -0600]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload
C:\Program Files\Norton AntiVirus\Quarantine\247045E4 Suspicious: Exploit.HTML.Iframe.FileDownload
C:\Program Files\Norton AntiVirus\Quarantine\24BC735B Infected: Email-Worm.Win32.NetSky.q
C:\Program Files\Norton AntiVirus\Quarantine\24E04133/[From [removed]][Date Mon, 14 Feb 2005 10:25:13 -0600]/UNNAMED/html Suspicious: Exploit.HTML.Iframe.FileDownload
C:\Program Files\Norton AntiVirus\Quarantine\24E04133/[From [removed]][Date Mon, 14 Feb 2005 10:25:13 -0600]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload
C:\Program Files\Norton AntiVirus\Quarantine\24E04133 Suspicious: Exploit.HTML.Iframe.FileDownload
C:\Program Files\Norton AntiVirus\Quarantine\25363981 Infected: Email-Worm.Win32.NetSky.q
C:\Program Files\Norton AntiVirus\Quarantine\254D5F68/[From [removed]][Date Fri, 10 Dec 2004 00:14:30 -0600]/UNNAMED/html Suspicious: Exploit.HTML.Iframe.FileDownload
C:\Program Files\Norton AntiVirus\Quarantine\254D5F68/[From [removed]][Date Fri, 10 Dec 2004 00:14:30 -0600]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload
C:\Program Files\Norton AntiVirus\Quarantine\254D5F68 Suspicious: Exploit.HTML.Iframe.FileDownload
C:\Program Files\Norton AntiVirus\Quarantine\26257750/[From [removed]][Date Wed, 15 Dec 2004 00:09:19 GMT]/bechtel2379.com Infected: Email-Worm.Win32.Sober.i
C:\Program Files\Norton AntiVirus\Quarantine\26257750 Infected: Email-Worm.Win32.Sober.i
C:\Program Files\Norton AntiVirus\Quarantine\284B2A5D/[From [removed]][Date Fri, 17 Dec 2004 01:45:03 GMT]/mail.bat Infected: Email-Worm.Win32.Sober.i
C:\Program Files\Norton AntiVirus\Quarantine\284B2A5D Infected: Email-Worm.Win32.Sober.i
C:\Program Files\Norton AntiVirus\Quarantine\2858524F/details.txt .pif Infected: Email-Worm.Win32.NetSky.q
C:\Program Files\Norton AntiVirus\Quarantine\2858524F Infected: Email-Worm.Win32.NetSky.q
C:\Program Files\Norton AntiVirus\Quarantine\28754C2E/[From [removed]][Date Fri, 17 Dec 2004 00:01:37 GMT]/oh_nono.pif Infected: Email-Worm.Win32.Sober.i
C:\Program Files\Norton AntiVirus\Quarantine\28754C2E Infected: Email-Worm.Win32.Sober.i
C:\Program Files\Norton AntiVirus\Quarantine\2896700A/[From [removed]][Date Fri, 17 Dec 2004 16:54:42 UTC]/mail.9907.zip/message_text.txt .pif Infected: Email-Worm.Win32.Sober.i
C:\Program Files\Norton AntiVirus\Quarantine\2896700A/[From [removed]][Date Fri, 17 Dec 2004 16:54:42 UTC]/mail.9907.zip Infected: Email-Worm.Win32.Sober.i
C:\Program Files\Norton AntiVirus\Quarantine\2896700A Infected: Email-Worm.Win32.Sober.i
C:\Program Files\Norton AntiVirus\Quarantine\29A55D20 Infected: Email-Worm.Win32.NetSky.q
C:\Program Files\Norton AntiVirus\Quarantine\29B20512/[From [removed]][Date Wed, 9 Feb 2005 16:15:23 -0600]/UNNAMED/html Suspicious: Exploit.HTML.Iframe.FileDownload
C:\Program Files\Norton AntiVirus\Quarantine\29B20512/[From [removed]][Date Wed, 9 Feb 2005 16:15:23 -0600]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload
C:\Program Files\Norton AntiVirus\Quarantine\29B20512 Suspicious: Exploit.HTML.Iframe.FileDownload
C:\Program Files\Norton AntiVirus\Quarantine\2C60465E Infected: Email-Worm.Win32.NetSky.q
C:\Program Files\Norton AntiVirus\Quarantine\2CF050C7 Infected: Email-Worm.Win32.NetSky.q
C:\Program Files\Norton AntiVirus\Quarantine\2D552103 Infected: Email-Worm.Win32.NetSky.q
C:\Program Files\Norton AntiVirus\Quarantine\2D6672F1/[From [removed]][Date Thu, 17 Feb 2005 21:38:58 -0600]/UNNAMED/html Suspicious: Exploit.HTML.Iframe.FileDownload
C:\Program Files\Norton AntiVirus\Quarantine\2D6672F1/[From [removed]][Date Thu, 17 Feb 2005 21:38:58 -0600]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload
C:\Program Files\Norton AntiVirus\Quarantine\2D6672F1 Suspicious: Exploit.HTML.Iframe.FileDownload
C:\Program Files\Norton AntiVirus\Quarantine\2DC14FE1/[From [removed]][Date Thu, 14 Oct 2004 09:48:58 -0700]/UNNAMED/html Suspicious: Exploit.HTML.Iframe.FileDownload
C:\Program Files\Norton AntiVirus\Quarantine\2DC14FE1/[From [removed]][Date Thu, 14 Oct 2004 09:48:58 -0700]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload
C:\Program Files\Norton AntiVirus\Quarantine\2DC14FE1 Suspicious: Exploit.HTML.Iframe.FileDownload
C:\Program Files\Norton AntiVirus\Quarantine\2DF15878 Infected: Email-Worm.Win32.NetSky.q
C:\Program Files\Norton AntiVirus\Quarantine\2E773778/[From [removed]][Date Mon, 03 Jan 2005 20:50:14 GMT]/anvilcorp.xls.com Infected: Email-Worm.Win32.Sober.i
C:\Program Files\Norton AntiVirus\Quarantine\2E773778 Infected: Email-Worm.Win32.Sober.i
C:\Program Files\Norton AntiVirus\Quarantine\2EEC6829 Infected: Email-Worm.Win32.NetSky.q
C:\Program Files\Norton AntiVirus\Quarantine\2EFF6413/[From [removed]][Date Mon, 8 Nov 2004 10:07:01 -0600]/UNNAMED/html Suspicious: Exploit.HTML.Iframe.FileDownload
C:\Program Files\Norton AntiVirus\Quarantine\2EFF6413/[From [removed]][Date Mon, 8 Nov 2004 10:07:01 -0600]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload
C:\Program Files\Norton AntiVirus\Quarantine\2EFF6413 Suspicious: Exploit.HTML.Iframe.FileDownload
C:\Program Files\Norton AntiVirus\Quarantine\2FAD31F7 Infected: Email-Worm.Win32.NetSky.q
C:\Program Files\Norton AntiVirus\Quarantine\2FB72FEC/[From [removed]][Date Wed, 15 Dec 2004 10:38:25 -0600]/UNNAMED/html Suspicious: Exploit.HTML.Iframe.FileDownload
C:\Program Files\Norton AntiVirus\Quarantine\2FB72FEC/[From [removed]][Date Wed, 15 Dec 2004 10:38:25 -0600]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload
C:\Program Files\Norton AntiVirus\Quarantine\2FB72FEC Suspicious: Exploit.HTML.Iframe.FileDownload
C:\Program Files\Norton AntiVirus\Quarantine\308B04BF Infected: Backdoor.Win32.Rbot.sp
C:\Program Files\Norton AntiVirus\Quarantine\32F67149 Infected: Email-Worm.Win32.NetSky.d
C:\Program Files\Norton AntiVirus\Quarantine\3A1213D5 Infected: Email-Worm.Win32.NetSky.q
C:\Program Files\Norton AntiVirus\Quarantine\3A2265C3/[From [removed]][Date Wed, 5 Jan 2005 12:14:13 +0100]/UNNAMED/html Suspicious: Exploit.HTML.Iframe.FileDownload
C:\Program Files\Norton AntiVirus\Quarantine\3A2265C3/[From [removed]][Date Wed, 5 Jan 2005 12:14:13 +0100]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload
C:\Program Files\Norton AntiVirus\Quarantine\3A2265C3 Suspicious: Exploit.HTML.Iframe.FileDownload
C:\Program Files\Norton AntiVirus\Quarantine\3A4E74DF.class Infected: Trojan.Java.ClassLoader.ak
C:\Program Files\Norton AntiVirus\Quarantine\3A511EDB.class Infected: Trojan.Java.ClassLoader.ak
C:\Program Files\Norton AntiVirus\Quarantine\3CD446DE Infected: Email-Worm.Win32.NetSky.q
C:\Program Files\Norton AntiVirus\Quarantine\3EB608C3.class Infected: Trojan.Java.ClassLoader.ak
C:\Program Files\Norton AntiVirus\Quarantine\3EDE294C Infected: Email-Worm.Win32.NetSky.d
C:\Program Files\Norton AntiVirus\Quarantine\3FAA142B/document.txt .exe Infected: Email-Worm.Win32.NetSky.q
C:\Program Files\Norton AntiVirus\Quarantine\3FAA142B Infected: Email-Worm.Win32.NetSky.q
C:\Program Files\Norton AntiVirus\Quarantine\401A7D98 Infected: Email-Worm.Win32.NetSky.q
C:\Program Files\Norton AntiVirus\Quarantine\40247B8D/[From [removed]][Date Wed, 23 Mar 2005 08:07:16 +0900]/UNNAMED/html Suspicious: Exploit.HTML.Iframe.FileDownload
C:\Program Files\Norton AntiVirus\Quarantine\40247B8D/[From [removed]][Date Wed, 23 Mar 2005 08:07:16 +0900]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload
C:\Program Files\Norton AntiVirus\Quarantine\40247B8D Suspicious: Exploit.HTML.Iframe.FileDownload
C:\Program Files\Norton AntiVirus\Quarantine\40883B0E/[From [removed]][Date Tue, 28 Dec 2004 00:23:27 UTC]/ppco_1809.zip/message_text.txt .pif Infected: Email-Worm.Win32.Sober.i
C:\Program Files\Norton AntiVirus\Quarantine\40883B0E/[From [removed]][Date Tue, 28 Dec 2004 00:23:27 UTC]/ppco_1809.zip Infected: Email-Worm.Win32.Sober.i
C:\Program Files\Norton AntiVirus\Quarantine\40883B0E Infected: Email-Worm.Win32.Sober.i
C:\Program Files\Norton AntiVirus\Quarantine\40A343B7.zip/Counter.class Infected: Trojan.Java.Femad
C:\Program Files\Norton AntiVirus\Quarantine\40A343B7.zip/VerifierBug.class Infected: Trojan.Java.Femad
C:\Program Files\Norton AntiVirus\Quarantine\40A343B7.zip/web.exe Infected: Trojan.Win32.LowZones.cp
C:\Program Files\Norton AntiVirus\Quarantine\40A343B7.zip/Worker.class Infected: Trojan.Java.Femad
C:\Program Files\Norton AntiVirus\Quarantine\40A343B7.zip/Xeyond.class Infected: Trojan.Java.Femad
C:\Program Files\Norton AntiVirus\Quarantine\40A343B7.zip Infected: Trojan.Java.Femad
C:\Program Files\Norton AntiVirus\Quarantine\40AF32E3 Infected: Email-Worm.Win32.NetSky.q
C:\Program Files\Norton AntiVirus\Quarantine\40C902C6 Infected: Email-Worm.Win32.NetSky.q
C:\Program Files\Norton AntiVirus\Quarantine\40CC2CC2/[From [removed]][Date Tue, 28 Dec 2004 00:05:35 -0600]/UNNAMED/html Suspicious: Exploit.HTML.Iframe.FileDownload
C:\Program Files\Norton AntiVirus\Quarantine\40CC2CC2/[From [removed]][Date Tue, 28 Dec 2004 00:05:35 -0600]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload
C:\Program Files\Norton AntiVirus\Quarantine\40CC2CC2 Suspicious: Exploit.HTML.Iframe.FileDownload
C:\Program Files\Norton AntiVirus\Quarantine\40E028AD/[From [removed]][Date Tue, 28 Dec 2004 17:20:21 UTC]/mail.bat Infected: Email-Worm.Win32.Sober.i
C:\Program Files\Norton AntiVirus\Quarantine\40E028AD Infected: Email-Worm.Win32.Sober.i
C:\Program Files\Norton AntiVirus\Quarantine\41D47CDC Infected: Trojan-Dropper.Win32.Delf.ev
C:\Program Files\Norton AntiVirus\Quarantine\41D726D8 Infected: Trojan-Downloader.Win32.IstBar.lc
C:\Program Files\Norton AntiVirus\Quarantine\42330CB8 Infected: Email-Worm.Win32.NetSky.q
C:\Program Files\Norton AntiVirus\Quarantine\43DA3AE1 Infected: Email-Worm.Win32.NetSky.q
C:\Program Files\Norton AntiVirus\Quarantine\46396340 Infected: Email-Worm.Win32.NetSky.q
C:\Program Files\Norton AntiVirus\Quarantine\46582FE8.htm Infected: Exploit.HTML.Mht
C:\Program Files\Norton AntiVirus\Quarantine\469B4ED4/[From [removed]][Date Sun, 28 Nov 2004 23:38:57 -0600]/UNNAMED/html Suspicious: Exploit.HTML.Iframe.FileDownload
C:\Program Files\Norton AntiVirus\Quarantine\469B4ED4/[From [removed]][Date Sun, 28 Nov 2004 23:38:57 -0600]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload
C:\Program Files\Norton AntiVirus\Quarantine\469B4ED4 Suspicious: Exploit.HTML.Iframe.FileDownload
C:\Program Files\Norton AntiVirus\Quarantine\48DA3B4A/[From [removed]][Date Mon, 03 Jan 2005 18:52:30 GMT]/poyry4749.word.zip/message_text.txt .pif Infected: Email-Worm.Win32.Sober.i
C:\Program Files\Norton AntiVirus\Quarantine\48DA3B4A/[From [removed]][Date Mon, 03 Jan 2005 18:52:30 GMT]/poyry4749.word.zip Infected: Email-Worm.Win32.Sober.i
C:\Program Files\Norton AntiVirus\Quarantine\48DA3B4A Infected: Email-Worm.Win32.Sober.i
C:\Program Files\Norton AntiVirus\Quarantine\49BA2630.class Infected: Trojan.Java.ClassLoader.ak
C:\Program Files\Norton AntiVirus\Quarantine\4A6D2B6A.zip/GetAccess.class Infected: Trojan.Java.ClassLoader.c
C:\Program Files\Norton AntiVirus\Quarantine\4A6D2B6A.zip/InsecureClassLoader.class Infected: Exploit.Java.ByteVerify
C:\Program Files\Norton AntiVirus\Quarantine\4A6D2B6A.zip/Dummy.class Infected: Trojan.Java.ClassLoader.Dummy.a
C:\Program Files\Norton AntiVirus\Quarantine\4A6D2B6A.zip/Installer.class Infected: Trojan-Downloader.Java.OpenConnection.v
C:\Program Files\Norton AntiVirus\Quarantine\4A6D2B6A.zip Infected: Trojan-Downloader.Java.OpenConnection.v
C:\Program Files\Norton AntiVirus\Quarantine\4BFA4BFC Infected: Email-Worm.Win32.NetSky.q
C:\Program Files\Norton AntiVirus\Quarantine\4BFB61F7 Infected: Email-Worm.Win32.NetSky.q
C:\Program Files\Norton AntiVirus\Quarantine\4C001FF5/[From [removed]][Date Mon, 25 Oct 2004 08:19:04 -0700]/UNNAMED/html Suspicious: Exploit.HTML.Iframe.FileDownload
C:\Program Files\Norton AntiVirus\Quarantine\4C001FF5/[From [removed]][Date Mon, 25 Oct 2004 08:19:04 -0700]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload
C:\Program Files\Norton AntiVirus\Quarantine\4C001FF5 Suspicious: Exploit.HTML.Iframe.FileDownload
C:\Program Files\Norton AntiVirus\Quarantine\4CC047A6.class Infected: Trojan-Downloader.Java.OpenConnection.ah
C:\Program Files\Norton AntiVirus\Quarantine\4CCD1F96/[From [removed]][Date Fri, 25 Mar 2005 15:02:59 -0500]/your_details.pif Infected: Email-Worm.Win32.NetSky.d
C:\Program Files\Norton AntiVirus\Quarantine\4CCD1F96 Infected: Email-Worm.Win32.NetSky.d
C:\Program Files\Norton AntiVirus\Quarantine\4D2D50D7.php Infected: Exploit.HTML.Mht
C:\Program Files\Norton AntiVirus\Quarantine\4D674497.php Infected: Exploit.HTML.Mht
C:\Program Files\Norton AntiVirus\Quarantine\4E2B1BBF.php Infected: Exploit.HTML.Mht
C:\Program Files\Norton AntiVirus\Quarantine\4F403E20.class Infected: Trojan.Java.ClassLoader.ak
C:\Program Files\Norton AntiVirus\Quarantine\53C47768 Infected: Email-Worm.Win32.NetSky.q
C:\Program Files\Norton AntiVirus\Quarantine\53DB1D4F Infected: Email-Worm.Win32.NetSky.q
C:\Program Files\Norton AntiVirus\Quarantine\53E17147/[From [removed]][Date Sun, 12 Dec 2004 19:12:25 -0600]/UNNAMED/html Suspicious: Exploit.HTML.Iframe.FileDownload
C:\Program Files\Norton AntiVirus\Quarantine\53E17147/[From [removed]][Date Sun, 12 Dec 2004 19:12:25 -0600]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload
C:\Program Files\Norton AntiVirus\Quarantine\53E17147 Suspicious: Exploit.HTML.Iframe.FileDownload
C:\Program Files\Norton AntiVirus\Quarantine\581A0B0B Infected: Email-Worm.Win32.NetSky.q
C:\Program Files\Norton AntiVirus\Quarantine\58215F04/[From [removed]][Date Mon, 22 Nov 2004 12:17:59 -0600]/UNNAMED/html Suspicious: Exploit.HTML.Iframe.FileDownload
C:\Program Files\Norton AntiVirus\Quarantine\58215F04/[From [removed]][Date Mon, 22 Nov 2004 12:17:59 -0600]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload
C:\Program Files\Norton AntiVirus\Quarantine\58215F04 Suspicious: Exploit.HTML.Iframe.FileDownload
C:\Program Files\Norton AntiVirus\Quarantine\58F71036 Infected: Email-Worm.Win32.NetSky.q
C:\Program Files\Norton AntiVirus\Quarantine\59255C04 Infected: Email-Worm.Win32.NetSky.q
C:\Program Files\Norton AntiVirus\Quarantine\5AD95139.cab/counter.exe Infected: Trojan-Dropper.Win32.Agent.az
C:\Program Files\Norton AntiVirus\Quarantine\5AD95139.cab Infected: Trojan-Dropper.Win32.Agent.az
C:\Program Files\Norton AntiVirus\Quarantine\5BAD4D82 Infected: Email-Worm.Win32.NetSky.q
C:\Program Files\Norton AntiVirus\Quarantine\5BD86F54/[From [removed]][Date Tue, 21 Dec 2004 03:01:20 -0600]/UNNAMED/html Suspicious: Exploit.HTML.Iframe.FileDownload
C:\Program Files\Norton AntiVirus\Quarantine\5BD86F54/[From [removed]][Date Tue, 21 Dec 2004 03:01:20 -0600]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload
C:\Program Files\Norton AntiVirus\Quarantine\5BD86F54 Suspicious: Exploit.HTML.Iframe.FileDownload
C:\Program Files\Norton AntiVirus\Quarantine\5C126313 Infected: Email-Worm.Win32.NetSky.q
C:\Program Files\Norton AntiVirus\Quarantine\5C2908FA/[From [removed]][Date Tue, 21 Dec 2004 03:25:15 -0600]/UNNAMED/html Suspicious: Exploit.HTML.Iframe.FileDownload
C:\Program Files\Norton AntiVirus\Quarantine\5C2908FA/[From [removed]][Date Tue, 21 Dec 2004 03:25:15 -0600]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload
C:\Program Files\Norton AntiVirus\Quarantine\5C2908FA Suspicious: Exploit.HTML.Iframe.FileDownload
C:\Program Files\Norton AntiVirus\Quarantine\5C653CA1 Infected: Backdoor.Win32.Rbot.gen
C:\Program Files\Norton AntiVirus\Quarantine\5D54359B Infected: Backdoor.Win32.Rbot.gen
C:\Program Files\Norton AntiVirus\Quarantine\5DE021DB/[From [removed]][Date Sat, 9 Apr 2005 11:29:27 -0400]/my_details.pif Infected: Email-Worm.Win32.NetSky.d
C:\Program Files\Norton AntiVirus\Quarantine\5DE021DB Infected: Email-Worm.Win32.NetSky.d
C:\Program Files\Norton AntiVirus\Quarantine\5E6931A7/[From [removed]][Date Mon, 1 Nov 2004 16:56:20 -0600]/UNNAMED/html Suspicious: Exploit.HTML.Iframe.FileDownload
C:\Program Files\Norton AntiVirus\Quarantine\5E6931A7/[From [removed]][Date Mon, 1 Nov 2004 16:56:20 -0600]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload
C:\Program Files\Norton AntiVirus\Quarantine\5E6931A7 Suspicious: Exploit.HTML.Iframe.FileDownload
C:\Program Files\Norton AntiVirus\Quarantine\5F3A30C1 Infected: Email-Worm.Win32.NetSky.q
C:\Program Files\Norton AntiVirus\Quarantine\5F442EB7/[From [removed]][Date Mon, 1 Nov 2004 16:56:20 -0600]/UNNAMED/html Suspicious: Exploit.HTML.Iframe.FileDownload
C:\Program Files\Norton AntiVirus\Quarantine\5F442EB7/[From [removed]][Date Mon, 1 Nov 2004 16:56:20 -0600]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload
C:\Program Files\Norton AntiVirus\Quarantine\5F442EB7 Suspicious: Exploit.HTML.Iframe.FileDownload
C:\Program Files\Norton AntiVirus\Quarantine\60561631 Infected: Email-Worm.Win32.NetSky.q
C:\Program Files\Norton AntiVirus\Quarantine\60C529B6/[From [removed]][Date Mon, 18 Oct 2004 14:30:43 -0500]/UNNAMED/html Suspicious: Exploit.HTML.Iframe.FileDownload
C:\Program Files\Norton AntiVirus\Quarantine\60C529B6/[From [removed]][Date Mon, 18 Oct 2004 14:30:43 -0500]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload
C:\Program Files\Norton AntiVirus\Quarantine\60C529B6 Suspicious: Exploit.HTML.Iframe.FileDownload
C:\Program Files\Norton AntiVirus\Quarantine\624205FB Infected: Email-Worm.Win32.NetSky.q
C:\Program Files\Norton AntiVirus\Quarantine\64045581/[From [removed]][Date Thu, 16 Dec 2004 15:35:37 -0600]/UNNAMED/html Suspicious: Exploit.HTML.Iframe.FileDownload
C:\Program Files\Norton AntiVirus\Quarantine\64045581/[From [removed]][Date Thu, 16 Dec 2004 15:35:37 -0600]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload
C:\Program Files\Norton AntiVirus\Quarantine\64045581 Suspicious: Exploit.HTML.Iframe.FileDownload
C:\Program Files\Norton AntiVirus\Quarantine\64D5549B Infected: Email-Worm.Win32.NetSky.q
C:\Program Files\Norton AntiVirus\Quarantine\65A329B8/[From [removed]][Date Thu, 16 Dec 2004 15:35:37 -0600]/UNNAMED/html Suspicious: Exploit.HTML.Iframe.FileDownload
C:\Program Files\Norton AntiVirus\Quarantine\65A329B8/[From [removed]][Date Thu, 16 Dec 2004 15:35:37 -0600]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload
C:\Program Files\Norton AntiVirus\Quarantine\65A329B8 Suspicious: Exploit.HTML.Iframe.FileDownload
C:\Program Files\Norton AntiVirus\Quarantine\65D5039A/[From [removed]][Date Tue, 30 Nov 2004 08:44:31 +0800]/UNNAMED/your_text.pif Infected: Email-Worm.Win32.NetSky.d
C:\Program Files\Norton AntiVirus\Quarantine\65D5039A/[From [removed]][Date Tue, 30 Nov 2004 08:44:31 +0800]/UNNAMED Infected: Email-Worm.Win32.NetSky.d
C:\Program Files\Norton AntiVirus\Quarantine\65D5039A Infected: Email-Worm.Win32.NetSky.d
C:\Program Files\Norton AntiVirus\Quarantine\67E5620F Infected: Email-Worm.Win32.NetSky.q
C:\Program Files\Norton AntiVirus\Quarantine\681C2BD2 Infected: Email-Worm.Win32.NetSky.q
C:\Program Files\Norton AntiVirus\Quarantine\68B97C37 Infected: Email-Worm.Win32.NetSky.q
C:\Program Files\Norton AntiVirus\Quarantine\68E2452E Infected: Email-Worm.Win32.NetSky.q
C:\Program Files\Norton AntiVirus\Quarantine\694F0791/[From [removed]][Date Tue, 4 Jan 2005 01:27:12 -0600]/UNNAMED/html Suspicious: Exploit.HTML.Iframe.FileDownload
C:\Program Files\Norton AntiVirus\Quarantine\694F0791/[From [removed]][Date Tue, 4 Jan 2005 01:27:12 -0600]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload
C:\Program Files\Norton AntiVirus\Quarantine\694F0791 Suspicious: Exploit.HTML.Iframe.FileDownload
C:\Program Files\Norton AntiVirus\Quarantine\6A840DA4 Infected: Email-Worm.Win32.NetSky.q
C:\Program Files\Norton AntiVirus\Quarantine\6AAB0579/[From [removed]][Date Wed, 17 Nov 2004 20:38:06 -0600]/UNNAMED/html Suspicious: Exploit.HTML.Iframe.FileDownload
C:\Program Files\Norton AntiVirus\Quarantine\6AAB0579/[From [removed]][Date Wed, 17 Nov 2004 20:38:06 -0600]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload
C:\Program Files\Norton AntiVirus\Quarantine\6AAB0579 Suspicious: Exploit.HTML.Iframe.FileDownload
C:\Program Files\Norton AntiVirus\Quarantine\6AE256BE.class Infected: Trojan.Java.ClassLoader.ak
C:\Program Files\Norton AntiVirus\Quarantine\6BB77852 Infected: Email-Worm.Win32.NetSky.q
C:\Program Files\Norton AntiVirus\Quarantine\6BC42044/[From [removed]][Date Sat, 20 Nov 2004 20:05:37 -0600]/UNNAMED/html Suspicious: Exploit.HTML.Iframe.FileDownload
C:\Program Files\Norton AntiVirus\Quarantine\6BC42044/[From [removed]][Date Sat, 20 Nov 2004 20:05:37 -0600]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload
C:\Program Files\Norton AntiVirus\Quarantine\6BC42044 Suspicious: Exploit.HTML.Iframe.FileDownload
C:\Program Files\Norton AntiVirus\Quarantine\6C186EFB Infected: Email-Worm.Win32.NetSky.q
C:\Program Files\Norton AntiVirus\Quarantine\6CE248A2.class Infected: Trojan-Downloader.Java.OpenConnection.ah
C:\Program Files\Norton AntiVirus\Quarantine\70E972B6.class Infected: Trojan.Java.ClassLoader.ak
C:\Program Files\Norton AntiVirus\Quarantine\76D44C82 Infected: Email-Worm.Win32.NetSky.q
C:\Program Files\Norton AntiVirus\Quarantine\76E8486D/[From [removed]][Date Thu, 24 Mar 2005 07:36:32 +0900]/UNNAMED/html Suspicious: Exploit.HTML.Iframe.FileDownload
C:\Program Files\Norton AntiVirus\Quarantine\76E8486D/[From [removed]][Date Thu, 24 Mar 2005 07:36:32 +0900]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload
C:\Program Files\Norton AntiVirus\Quarantine\76E8486D Suspicious: Exploit.HTML.Iframe.FileDownload
C:\Program Files\Norton AntiVirus\Quarantine\770A38A9 Infected: Email-Worm.Win32.NetSky.q
C:\Program Files\Norton AntiVirus\Quarantine\7714369E/[From [removed]][Date Mon, 17 Jan 2005 19:54:52 -0600]/UNNAMED/html Suspicious: Exploit.HTML.Iframe.FileDownload
C:\Program Files\Norton AntiVirus\Quarantine\7714369E/[From [removed]][Date Mon, 17 Jan 2005 19:54:52 -0600]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload
C:\Program Files\Norton AntiVirus\Quarantine\7714369E Suspicious: Exploit.HTML.Iframe.FileDownload
C:\Program Files\Norton AntiVirus\Quarantine\778E42D6/[From [removed]][Date Mon, 20 Dec 2004 21:21:29 GMT]/mail.2560.zip/message_text.txt .pif Infected: Email-Worm.Win32.Sober.i
C:\Program Files\Norton AntiVirus\Quarantine\778E42D6/[From [removed]][Date Mon, 20 Dec 2004 21:21:29 GMT]/mail.2560.zip Infected: Email-Worm.Win32.Sober.i
C:\Program Files\Norton AntiVirus\Quarantine\778E42D6 Infected: Email-Worm.Win32.Sober.i
C:\Program Files\Norton AntiVirus\Quarantine\77A53E3C Infected: Email-Worm.Win32.NetSky.q
C:\Program Files\Norton AntiVirus\Quarantine\77AF3C31/[From -[removed]][Date Thu, 21 Oct 2004 18:16:12 -0500]/UNNAMED/html Suspicious: Exploit.HTML.Iframe.FileDownload
C:\Program Files\Norton AntiVirus\Quarantine\77AF3C31/[From -[removed]][Date Thu, 21 Oct 2004 18:16:12 -0500]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload
C:\Program Files\Norton AntiVirus\Quarantine\77AF3C31 Suspicious: Exploit.HTML.Iframe.FileDownload
C:\Program Files\Norton AntiVirus\Quarantine\78C07176 Infected: Email-Worm.Win32.NetSky.q
C:\Program Files\Norton AntiVirus\Quarantine\78D04364/[From [removed]][Date Wed, 29 Dec 2004 04:03:06 -0600]/UNNAMED/html Suspicious: Exploit.HTML.Iframe.FileDownload
C:\Program Files\Norton AntiVirus\Quarantine\78D04364/[From [removed]][Date Wed, 29 Dec 2004 04:03:06 -0600]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload
C:\Program Files\Norton AntiVirus\Quarantine\78D04364 Suspicious: Exploit.HTML.Iframe.FileDownload
C:\Program Files\Norton AntiVirus\Quarantine\7ADA028C/[From [removed]][Date Tue, 4 Jan 2005 11:58:28 -0600]/UNNAMED/html Suspicious: Exploit.HTML.Iframe.FileDownload
C:\Program Files\Norton AntiVirus\Quarantine\7ADA028C/[From [removed]][Date Tue, 4 Jan 2005 11:58:28 -0600]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload
C:\Program Files\Norton AntiVirus\Quarantine\7ADA028C Suspicious: Exploit.HTML.Iframe.FileDownload
C:\Program Files\Norton AntiVirus\Quarantine\7B700DE6 Infected: Email-Worm.Win32.NetSky.q
C:\Program Files\Norton AntiVirus\Quarantine\7B7761DF/[From [removed]][Date Tue, 4 Jan 2005 11:58:28 -0600]/UNNAMED/html Suspicious: Exploit.HTML.Iframe.FileDownload
C:\Program Files\Norton AntiVirus\Quarantine\7B7761DF/[From [removed]][Date Tue, 4 Jan 2005 11:58:28 -0600]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload
C:\Program Files\Norton AntiVirus\Quarantine\7B7761DF Suspicious: Exploit.HTML.Iframe.FileDownload
C:\Program Files\Norton AntiVirus\Quarantine\7C146A4D Infected: Email-Worm.Win32.NetSky.q
C:\Program Files\Norton AntiVirus\Quarantine\7C36300A/[From [removed]][Date Mon, 13 Dec 2004 19:25:50 GMT]/symteclab.scr Infected: Email-Worm.Win32.Sober.i
C:\Program Files\Norton AntiVirus\Quarantine\7C36300A Infected: Email-Worm.Win32.Sober.i
C:\Program Files\Norton AntiVirus\Quarantine\7C4C3410/details.txt .pif Infected: Email-Worm.Win32.NetSky.q
C:\Program Files\Norton AntiVirus\Quarantine\7C4C3410 Infected: Email-Worm.Win32.NetSky.q
C:\Program Files\Norton AntiVirus\Quarantine\7F16457C.class Infected: Trojan.Java.ClassLoader.ak
C:\Program Files\Norton AntiVirus\Quarantine\7F6E2F29 Infected: Email-Worm.Win32.NetSky.q
C:\Program Files\Norton AntiVirus\Quarantine\7F887F0C Infected: Email-Worm.Win32.NetSky.q
C:\Program Files\Norton AntiVirus\Quarantine\7F8E5305/[From [removed]][Date Sun, 10 Oct 2004 21:51:33 -0500]/UNNAMED/html Suspicious: Exploit.HTML.Iframe.FileDownload
C:\Program Files\Norton AntiVirus\Quarantine\7F8E5305/[From [removed]][Date Sun, 10 Oct 2004 21:51:33 -0500]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload
C:\Program Files\Norton AntiVirus\Quarantine\7F8E5305 Suspicious: Exploit.HTML.Iframe.FileDownload
C:\Program Files\Norton AntiVirus\Quarantine\7FB974D7/document.txt .exe Infected: Email-Worm.Win32.NetSky.q
C:\Program Files\Norton AntiVirus\Quarantine\7FB974D7 Infected: Email-Worm.Win32.NetSky.q
Scan process completed.
Logfile of HijackThis v1.99.1
Scan saved at 6:43:07 AM, on 1/24/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Dell\AccessDirect\dadapp.exe
C:\WINDOWS\BCMSMMSG.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Dell\QuickSet\quickset.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Linksys\Wireless-G Notebook Adapter\NICServ.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\Program Files\Norton AntiVirus\SAVScan.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Webroot\Washer\wwDisp.exe
C:\Program Files\Linksys\Wireless-G Notebook Adapter\Gcc.exe
C:\Program Files\SpywareGuard\sgmain.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\Program Files\Linksys\Wireless-G Notebook Adapter\OdHost.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\SpywareGuard\sgbhp.exe
C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Program Files\Norton AntiVirus\OPScan.exe
C:\Documents and Settings\Owner\My Documents\downloads tlc\hijackthis\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = gopher=local/host:1
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: SpywareGuard Download Protection - {4A368E80-174F-4872-96B5-0B27DDD11DB2} - C:\Program Files\SpywareGuard\dlprotect.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [DadApp] C:\Program Files\Dell\AccessDirect\dadapp.exe
O4 - HKLM\..\Run: [BCMSMMSG] BCMSMMSG.exe
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
O4 - HKLM\..\Run: [Dell QuickSet] C:\Program Files\Dell\QuickSet\quickset.exe
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Window Washer] C:\Program Files\Webroot\Washer\wwDisp.exe
O4 - Startup: SpywareGuard.lnk = C:\Program Files\SpywareGuard\sgmain.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: Wireless-G Notebook Adapter.lnk = C:\Program Files\Linksys\Wireless-G Notebook Adapter\Gcc.exe
O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar1.dll/cmcache.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar1.dll/cmsimilar.html
O8 - Extra context menu item: Translate into English - res://c:\program files\google\GoogleToolbar1.dll/cmtrans.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\npjpi150_06.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\npjpi150_06.dll
O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INetRepl.dll
O9 - Extra 'Tools' menuitem: Create Mobile Favorite… - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INetRepl.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) -
http://www.kaspersky.com/downloads/kws/kav…can_unicode.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {41F17733-B041-4099-A042-B518BB6A408C} -
http://appldnld.m7z.net/qtinstall.info.app…llInstaller.exe
O17 - HKLM\System\CCS\Services\Tcpip\..\{0DC51BB4-016E-4CBA-A877-93257F2C5D99}: NameServer = 206.13.28.12,206.13.29.12
O17 - HKLM\System\CCS\Services\Tcpip\..\{1C9B32E8-89B2-4BD6-9702-D7707B3C3D86}: NameServer = 206.13.28.12,206.13.29.12
O17 - HKLM\System\CS1\Services\Tcpip\..\{0DC51BB4-016E-4CBA-A877-93257F2C5D99}: NameServer = 206.13.28.12,206.13.29.12
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: Norton AntiVirus Auto Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
O23 - Service: NICSer_WPC54G - Unknown owner - C:\Program Files\Linksys\Wireless-G Notebook Adapter\NICServ.exe
O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs Inc. - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
nothing apparent shows in your log, i have some questions for you:
which version of norton, internet security or just the antivirus, tell me the year too ( 2003, 2004 or else )?
we can try to reduce the amount of autostarting programs, to see if it makes a difference, but are you getting popups, redirects or anything like that ?