Sponsored By

DaDooDaidy

Hijackthis Log - Spybot Can't Get Rid Of Virtumonde - Help![RESOLVED]

Recommended Posts

Logfile of HijackThis v1.99.1

Scan saved at 9:02:03 PM, on 11/7/2007

Platform: Windows XP SP2 (WinNT 5.01.2600)

MSIE: Unable to get Internet Explorer version!

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe

C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe

C:\WINDOWS\system32\spoolsv.exe

C:\Program Files\Intel\ASF Agent\ASFAgent.exe

C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe

C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe

C:\WINDOWS\System32\nvsvc32.exe

C:\WINDOWS\Explorer.EXE

C:\WINDOWS\system32\fxssvc.exe

d:\apps\timbuktupro\tb2launch.exe

d:\apps\timbuktupro\tb2pro.exe

d:\apps\timbuktupro\TNOTIFY.EXE

C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe

C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe

C:\Program Files\InCode Solutions\RemoveIT Pro v4\removeit.exe

C:\Program Files\InCode Solutions\RemoveIT Pro v4\HLP.exe

C:\WINDOWS\system32\wuauclt.exe

C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe

D:\Apps\MozillaFirefox\firefox.exe

C:\HJT\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell.com

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.dell.com

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell.com

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.dell.com

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = \blank.htm

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost

N3 - Netscape 7: user_pref("browser.startup.homepage", "http://home.netscape.com/bookmark/7_1/home.html"); (C:\Documents and Settings\Toomay Technologies\Application Data\Mozilla\Profiles\default\fjdfuyfh.slt\prefs.js)

N3 - Netscape 7: user_pref("browser.search.defaultengine", "engine://D%3A%5CApps%5CNetscape%5Csearchplugins%5CSBWeb_01.src"); (C:\Documents and Settings\Toomay Technologies\Application Data\Mozilla\Profiles\default\fjdfuyfh.slt\prefs.js)

O3 - Toolbar: Show Norton Toolbar - {90222687-F593-4738-B738-FBEE9C7B26DF} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.5\UIBHO.dll

O3 - Toolbar: (no name) - {11A69AE4-FBED-4832-A2BF-45AF82825583} - (no file)

O4 - HKLM\..\RunOnce: [spybotSnD] "C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe" /autocheck

O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background

O4 - HKCU\..\Run: [LDM] D:\Apps\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe

O4 - HKCU\..\Run: [spybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe

O4 - HKCU\..\Run: [RemoveIT Pro v4Ent] C:\Program Files\InCode Solutions\RemoveIT Pro v4\removeit.exe

O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll

O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll

O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll

O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll

O13 - DefaultPrefix:

O13 - WWW Prefix:

O13 - Home Prefix:

O13 - Mosaic Prefix:

O13 - FTP Prefix:

O13 - Gopher Prefix:

O15 - ProtocolDefaults: '@ivt' protocol is in My Computer Zone, should be Intranet Zone (HKLM)

O15 - ProtocolDefaults: 'file' protocol is in My Computer Zone, should be Internet Zone (HKLM)

O15 - ProtocolDefaults: 'ftp' protocol is in My Computer Zone, should be Internet Zone (HKLM)

O15 - ProtocolDefaults: 'http' protocol is in My Computer Zone, should be Internet Zone (HKLM)

O15 - ProtocolDefaults: 'https' protocol is in My Computer Zone, should be Internet Zone (HKLM)

O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/microsoftupdat...b?1175192453156

O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat...b?1175192156937

O17 - HKLM\System\CCS\Services\Tcpip\..\{EEC031E1-756A-457E-B6D4-C970BCB7C18D}: NameServer = 208.57.0.11,208.57.0.10

O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - D:\Apps\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll

O23 - Service: ASF Agent (ASFAgent) - Intel Corporation - C:\Program Files\Intel\ASF Agent\ASFAgent.exe

O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe

O23 - Service: pcAnywhere Host Service (awhost32) - Symantec Corporation - D:\Apps\Symantec\pcAnywhere\awhost32.exe

O23 - Service: Symantec Event Manager (ccEvtMgr) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing)

O23 - Service: Symantec Password Validation (ccPwdSvc) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe (file missing)

O23 - Service: Symantec Settings Manager (ccSetMgr) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing)

O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h cltCommon (file missing)

O23 - Service: COM Host (comHost) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe

O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe

O23 - Service: Symantec IS Password Validation (ISPwdSvc) - Symantec Corporation - D:\Apps\NortonAV7\isPwdSvc.exe

O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE

O23 - Service: LiveUpdate Notice Service Ex (LiveUpdate Notice Ex) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing)

O23 - Service: LiveUpdate Notice Service - Unknown owner - C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /m "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PifEng.dll (file missing)

O23 - Service: Intel NCS NetService (NetSvc) - Intel® Corporation - C:\Program Files\Intel\NCS\Sync\NetSvc.exe

O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe

O23 - Service: ScriptBlocking Service (SBService) - Unknown owner - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe (file missing)

O23 - Service: Symantec Core LC - Unknown owner - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe

O23 - Service: Symantec AppCore Service (SymAppCore) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe

O23 - Service: Tb2 Launch (Tb2Launch) - Netopia, Inc. - d:\apps\timbuktupro\tb2launch.exe

Share this post


Link to post
Share on other sites

Hello and Welcome to BT. :)

I am MoNsTeReNeRgY22 and I will be assisting you with your malware problem today.

Step 1

Download ComboFix from Here or Here to your Desktop.

  • Double click combofix.exe and follow the prompts.
  • When finished, it shall produce a log for you. Post that log and a HiJackthis log in your next reply

Note: Do not mouseclick combofix's window while its running. That may cause it to stall

Step 2

Open HijackThis, click Config, click Misc Tools

Click "Open Uninstall Manager"

Click "Save List" (generates uninstall_list.txt)

Click Save, copy and paste the results in your next post along with teh ComboFix log.

Share this post


Link to post
Share on other sites
Hello and Welcome to BT. :)

I am MoNsTeReNeRgY22 and I will be assisting you with your malware problem today.

Step 1

Download ComboFix from Here or Here to your Desktop.

  • Double click combofix.exe and follow the prompts.
  • When finished, it shall produce a log for you. Post that log and a HiJackthis log in your next reply

Note: Do not mouseclick combofix's window while its running. That may cause it to stall

Step 2

Open HijackThis, click Config, click Misc Tools

Click "Open Uninstall Manager"

Click "Save List" (generates uninstall_list.txt)

Click Save, copy and paste the results in your next post along with teh ComboFix log.

I seem to be stuck on Step 1. ComboFix.exe appears to be running fine. Two DOS windows are open that are blank for about 10 minutes. The first window says C:\WINDOWS\SYSTEM32.EXE in the title bar and the second window is blank. I've done this twice and the same thing happened. I did Step 2 after the first attempt, but no log file was produced and HijinxThis closed. I did not click in combofix's window. Am I just support to wait? Because all my desktop icons have disappeared when the two blank dos windows appear. Help.

Share this post


Link to post
Share on other sites

UPDATE!

I got some other instructions from the downloads I did yesterday. That file that couldn't be deleted is gone. Thanks for your help on that.

I used RemoveIT Pro v4 with Unlocker Assistant to get rid of ddaby.dll and SpyBot blocked it from getting added to the registry.

I have a slightly different problem now that I hope you can help me with. I may have reversed some changes with SpyBot that I didn't mean to do. My Programs list in the start menu is gone, but programs still work. I may have lost iTunes. Please let me know what I can do to help restore some of the stuff.

Edited by DaDooDaidy

Share this post


Link to post
Share on other sites
Try doing last Good Known Configuration.

No, I'm afraid that didn't work. :(

I keep getting a Windows Installer thing periodically.

I am unable to use the modem. :(

Edited by DaDooDaidy

Share this post


Link to post
Share on other sites

Download Deckard's System Scanner (DSS) to your Desktop.

  • Close all applications and windows.
  • Double-click on DSS.exe to run it, and follow the prompts.
  • When it has finished, dss will open two Notepads main.txt and extra.txt -- please copy (CTRL+A and then CTRL+C) and paste (CTRL+V) the contents of main.txt and extra.txt in your next reply.

Extra Note: When running DSS, some firewalls may warn that sigcheck.exe is trying to access the internet - please ensure that you allow sigcheck.exe permission to do so. Also, it may happen that your Antivirus flags DSS as suspicious. Please allow the Deckard's System Scanner to run and don't let your Antivirus delete it. (In this case, it may be better to temporary disable your Antivirus)

Edited by MoNsTeReNeRgY22

Share this post


Link to post
Share on other sites

Here are the files. I also have a hijackthis.log file and a hijackthis dialog window open. What do I do next?

main.txt

Deckard's System Scanner v20071014.68

Run by Toomay Technologies on 2007-11-10 11:35:41

Computer is in Normal Mode.

--------------------------------------------------------------------------------

-- System Restore --------------------------------------------------------------

Failed to create restore point; System Restore is disabled (service is not running).

-- Last 5 Restore Point(s) --

36: 2007-11-07 15:04:51 UTC - RP1076 - Software Distribution Service 3.0

35: 2007-11-06 17:01:58 UTC - RP1075 - Last known good configuration

34: 2007-11-06 00:16:24 UTC - RP1074 - System Checkpoint

33: 2007-11-04 01:37:21 UTC - RP1073 - System Checkpoint

32: 2007-11-02 23:57:52 UTC - RP1072 - System Checkpoint

-- First Restore Point --

1: 2007-09-23 23:32:53 UTC - RP1041 - System Checkpoint

Backed up registry hives.

Performed disk cleanup.

-- HijackThis (run as Toomay Technologies.exe) ---------------------------------

Unable to find log (file not found); running clone.

-- HijackThis Clone ------------------------------------------------------------

Emulating logfile of Trend Micro HijackThis v2.0.2

Scan saved at 2007-11-10 11:37:30

Platform: Windows XP Service Pack 2 (5.01.2600)

MSIE: Internet Explorer (6.0.2900.2180)

Boot mode: Normal

Running processes:

C:\WINDOWS\SYSTEM32\smss.exe

C:\WINDOWS\SYSTEM32\winlogon.exe

C:\WINDOWS\SYSTEM32\services.exe

C:\WINDOWS\SYSTEM32\lsass.exe

C:\WINDOWS\SYSTEM32\svchost.exe

C:\WINDOWS\SYSTEM32\svchost.exe

C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe

C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe

C:\WINDOWS\SYSTEM32\spoolsv.exe

C:\Program Files\Intel\ASF Agent\ASFAgent.exe

C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe

C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe

C:\WINDOWS\SYSTEM32\nvsvc32.exe

D:\Apps\timbuktupro\tb2launch.exe

C:\WINDOWS\SYSTEM32\fxssvc.exe

D:\Apps\timbuktupro\tb2pro.exe

D:\Apps\timbuktupro\TNotify.exe

C:\WINDOWS\explorer.exe

C:\Program Files\Common Files\Symantec Shared\ccApp.exe

C:\Program Files\InCode Solutions\RemoveIT Pro v4\HLP.exe

C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe

C:\Documents and Settings\Toomay Technologies\Desktop\dss.exe

C:\Documents and Settings\Toomay Technologies\Desktop\Toomay Technologies.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell.com

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.dell.com

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = \blank.htm

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell.com

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.dell.com

O2 - BHO: (no name) - {1C1DD717-53B2-485E-A17B-C9977C205E10} - (no file)

O2 - BHO: (no name) - {1E8A6170-7264-4D0F-BEAE-D42A53123C75} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.5\NppBHO.dll

O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll

O2 - BHO: (no name) - {AF4535AA-6BBA-4B92-9F85-7A5488F03926} - (no file)

O2 - BHO: (no name) - {C2FB8A5C-CEC8-4E21-93F3-FF0CE1331C86} - (no file)

O3 - Toolbar: Show Norton Toolbar - {90222687-F593-4738-B738-FBEE9C7B26DF} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.5\UIBHO.dll

O4 - HKLM\..\Run: [unlockerAssistant] "C:\Program Files\Unlocker\UnlockerAssistant.exe"

O4 - HKLM\..\Run: [ccApp] C:\Program Files\Common Files\Symantec Shared\ccApp.exe

O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background

O4 - HKCU\..\Run: [LDM] D:\Apps\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe

O4 - HKCU\..\Run: [spybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe

O4 - HKCU\..\Run: [RemoveIT Pro v4Ent] C:\Program Files\InCode Solutions\RemoveIT Pro v4\removeit.exe

O4 - HKUS\S-1-5-18\..\Run: [ALUAlert] C:\Program Files\Symantec\LiveUpdate\ALUNotify.exe (User 'SYSTEM')

O4 - HKUS\.DEFAULT\..\Run: [ALUAlert] C:\Program Files\Symantec\LiveUpdate\ALUNotify.exe (User 'Default user')

O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - (no file)

O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - (no file)

O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll

O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O15 - Trusted Zone: https://turbotax.com (HKCU)

O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/microsoftupdat...b?1175192453156

O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat...b?1175192156937

O17 - HKLM\SYSTEM\CCS\Services\Tcpip\..\{EEC031E1-756A-457E-B6D4-C970BCB7C18D}: NameServer = 208.57.0.11,208.57.0.10

O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - D:\Apps\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll

O23 - Service: ASF Agent (ASFAgent) - Intel Corporation - C:\Program Files\Intel\ASF Agent\ASFAgent.exe

O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe

O23 - Service: pcAnywhere Host Service (awhost32) - Symantec Corporation - D:\Apps\Symantec\pcAnywhere\AWHOST32.EXE

O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe

O23 - Service: Symantec Password Validation (ccPwdSvc) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe

O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe

O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe

O23 - Service: COM Host (comHost) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe

O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe

O23 - Service: Symantec IS Password Validation (ISPwdSvc) - Symantec Corporation - D:\Apps\NortonAV7\isPwdSvc.exe

O23 - Service: LiveUpdate - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\LuComServer_3_2.EXE

O23 - Service: LiveUpdate Notice Service Ex (LiveUpdate Notice Ex) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe

O23 - Service: LiveUpdate Notice Service - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe

O23 - Service: Intel NCS NetService (NetSvc) - Intel® Corporation - C:\Program Files\Intel\NCS\Sync\NetSvc.exe

O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\SYSTEM32\nvsvc32.exe

O23 - Service: ScriptBlocking Service (SBService) - Unknown owner - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe

O23 - Service: Symantec Core LC - Unknown owner - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe

O23 - Service: Symantec AppCore Service (SymAppCore) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe

O23 - Service: Tb2 Launch (Tb2Launch) - Netopia, Inc. - D:\Apps\timbuktupro\tb2launch.exe

--

End of file - 6953 bytes

-- File Associations -----------------------------------------------------------

All associations okay.

-- Drivers: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled ---------------------

R0 agp440 (Intel AGP Bus Filter) - c:\windows\\systemroot\system32\drivers\agp440.sys (file missing)

R0 Gernuwa - c:\windows\system32\drivers\gernuwa.sys <Not Verified; Symantec Corporation; pcAnywhere>

R1 AW_HOST - c:\windows\system32\drivers\aw_host5.sys <Not Verified; Symantec Corporation; pcAnywhere>

R1 awlegacy - c:\windows\system32\drivers\awlegacy.sys <Not Verified; Symantec Corporation; pcAnywhere>

R1 omci (OMCI WDM Device Driver) - c:\windows\system32\drivers\omci.sys <Not Verified; Dell Computer Corporation; OMCI Driver>

R1 Tb2Device (TB2 Remote Control Driver) - c:\windows\netopiarc\tb2device.sys

R2 AsfAlrt - c:\windows\system32\drivers\asfalrt.sys <Not Verified; Intel Corporation; Intel Alert on LAN® 2>

R2 MCSTRM - c:\windows\system32\drivers\mcstrm.sys <Not Verified; RealNetworks, Inc.; RealNetworks Virtual Path Manager® (32-bit)>

R2 MDC8021X (AEGIS Protocol (IEEE 802.1x) v2.3.1.6) - c:\windows\system32\drivers\mdc8021x.sys <Not Verified; Meetinghouse Data Communications; AEGIS Client 2.3.1>

S1 Tb2MirrorSys (TB2 Remote Control Mirror Driver) - netopiarc\tb2mirrorsys.sys (file missing)

S3 catchme - c:\docume~1\toomay~1\locals~1\temp\catchme.sys (file missing)

-- Services: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled --------------------

R2 ASFAgent (ASF Agent) - c:\program files\intel\asf agent\asfagent.exe <Not Verified; Intel Corporation; Intel® PRO Alerting Suite ASF 1.0 and ASF 2.0 Compatible>

R2 Tb2Launch (Tb2 Launch) - "d:\apps\timbuktupro\tb2launch.exe" <Not Verified; Netopia, Inc.; Timbuktu Pro for Windows>

S2 SBService (ScriptBlocking Service) - c:\progra~1\common~1\symant~1\script~1\sbserv.exe (file missing)

S3 awhost32 (pcAnywhere Host Service) - d:\apps\symantec\pcanywhere\awhost32.exe <Not Verified; Symantec Corporation; pcAnywhere>

S3 ccPwdSvc (Symantec Password Validation) - "c:\program files\common files\symantec shared\ccpwdsvc.exe" (file missing)

-- Device Manager: Disabled ----------------------------------------------------

No disabled devices found.

-- Scheduled Tasks -------------------------------------------------------------

2007-11-05 20:02:14 602 --a------ C:\WINDOWS\Tasks\Norton Internet Security - Run Full System Scan - Toomay Technologies.job

-- Files created between 2007-10-10 and 2007-11-10 -----------------------------

2007-11-09 17:08:16 0 d-------- C:44e4deb25fec79f4a780a36a9

2007-11-09 16:47:53 0 d-------- C:\43b7207fd9cdf2d7af24befb

2007-11-08 10:55:44 317 ---hs---- C:\WINDOWS\system32\jjjlm.ini2

2007-11-07 21:01:05 0 d-------- C:\HJT

2007-11-07 19:58:16 0 d-------- C:\Documents and Settings\Toomay Technologies\Application Data\Lavasoft

2007-11-07 19:57:54 0 d-------- C:\Program Files\Lavasoft

2007-11-07 17:48:44 0 d-------- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy

2007-11-07 14:36:01 0 d--hs---- C:\GA6P

2007-11-07 14:30:21 8704 --a------ C:\WINDOWS\system32\SpOrder.dll <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System>

2007-11-07 12:47:11 0 d-------- C:\Program Files\InCode Solutions

2007-11-07 10:29:13 0 d-------- C:\Program Files\NoAdware5.0

2007-11-07 07:07:26 0 d-------- C:\Program Files\MSXML 4.0

2007-11-06 21:39:22 0 d-------- C:\WINDOWS\system32\SoftwareDistribution

2007-11-06 21:04:49 87104 --a------ C:\WINDOWS\system32\hjfiyxxs.dll

2007-11-06 21:04:18 0 --a------ C:\WINDOWS\system32\ifbkicst.dll

-- Find3M Report ---------------------------------------------------------------

2007-11-10 11:37:46 0 d-------- C:\Program Files\Common Files\Symantec Shared

2007-11-10 10:22:55 0 d-------- C:\Program Files\Sagekey Software

2007-11-07 17:08:27 0 d-------- C:\Program Files\Common Files

2007-11-07 07:21:17 0 d-------- C:\Program Files\Messenger

2007-11-06 21:20:01 0 d-------- C:\Program Files\Symantec

2007-08-28 15:08:27 4 --a------ C:\WINDOWS\system32\C8DE69

-- Registry Dump ---------------------------------------------------------------

*Note* empty entries & legit default entries are not shown

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{1C1DD717-53B2-485E-A17B-C9977C205E10}]

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{AF4535AA-6BBA-4B92-9F85-7A5488F03926}]

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{C2FB8A5C-CEC8-4E21-93F3-FF0CE1331C86}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"UnlockerAssistant"="C:\Program Files\Unlocker\UnlockerAssistant.exe" [09/07/2006 09:19 AM]

"ccApp"="C:\Program Files\Common Files\Symantec Shared\ccApp.exe" [01/09/2007 09:59 PM]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" [10/13/2004 08:24 AM]

"LDM"="D:\Apps\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe" []

"SpybotSD TeaTimer"="C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe" [08/31/2007 04:46 PM]

"RemoveIT Pro v4Ent"="C:\Program Files\InCode Solutions\RemoveIT Pro v4\removeit.exe" [11/07/2007 03:28 PM]

[HKEY_USERS\.default\software\microsoft\windows\currentversion\run]

"ALUAlert"=C:\Program Files\Symantec\LiveUpdate\ALUNotify.exe

C:\Documents and Settings\Toomay Technologies\Start Menu\Programs\Startup\

DESKTOP.INI [3/20/2004 9:58:38 AM]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]

"Authentication Packages"= msv1_0 C:\WINDOWS\system32\mljjj.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\vds]

@="Service"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{533C5B84-EC70-11D2-9505-00C04F79DEAF}]

@="Volume shadow copy"

*Newly Created Service* - COMHOST

-- Hosts -----------------------------------------------------------------------

127.0.0.1 007guard.com

127.0.0.1 www.007guard.com

127.0.0.1 008i.com

127.0.0.1 008k.com

127.0.0.1 www.008k.com

127.0.0.1 00hq.com

127.0.0.1 www.00hq.com

127.0.0.1 010402.com

127.0.0.1 032439.com

127.0.0.1 www.032439.com

7429 more entries in hosts file.

-- End of Deckard's System Scanner: finished at 2007-11-10 11:38:41 ------------

extra.txt

Deckard's System Scanner v20071014.68

Extra logfile - please post this as an attachment with your post.

--------------------------------------------------------------------------------

-- System Information ----------------------------------------------------------

Microsoft Windows XP Professional (build 2600) SP 2.0

Architecture: X86; Language: English

CPU 0: Intel® Pentium® 4 CPU 2.80GHz

Percentage of Memory in Use: 56%

Physical Memory (total/avail): 1023 MiB / 441.56 MiB

Pagefile Memory (total/avail): 2464.01 MiB / 2078.53 MiB

Virtual Memory (total/avail): 2047.88 MiB / 1936.39 MiB

A: is Removable (No Media)

C: is Fixed (NTFS) - 74.46 GiB total, 61.3 GiB free.

D: is Fixed (NTFS) - 74.5 GiB total, 0.16 GiB free.

E: is CDROM (No Media)

F: is CDROM (No Media)

U: is Network (NTFS)

Z: is Network (NTFS)

\\.\PHYSICALDRIVE1 - Maxtor 6Y080L0 - 74.5 GiB - 1 partition

\PARTITION0 - Installable File System - 74.5 GiB - D:

\\.\PHYSICALDRIVE0 - Maxtor 6Y080L0 - 74.5 GiB - 2 partitions

\PARTITION0 - Unknown - 39.19 MiB

\PARTITION1 (bootable) - Installable File System - 74.46 GiB - C:

-- Security Center -------------------------------------------------------------

AUOptions is scheduled to auto-install.

Windows Internal Firewall is disabled.

FW: Norton Internet Security v2007 (Symantec Corporation)

AV: Norton Internet Security v2007 (Symantec Corporation)

[HKLM\System\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]

[HKLM\System\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]

-- Environment Variables -------------------------------------------------------

ALLUSERSPROFILE=C:\Documents and Settings\All Users

APPDATA=C:\Documents and Settings\Toomay Technologies\Application Data

CLASSPATH=.;C:\Program Files\Java\j2re1.4.2_03\lib\ext\QTJava.zip

CLIENTNAME=Console

CommonProgramFiles=C:\Program Files\Common Files

COMPUTERNAME=ABDAT10407

ComSpec=C:\WINDOWS\system32\cmd.exe

FP_NO_HOST_CHECK=NO

HOMEDRIVE=C:

HOMEPATH=\Documents and Settings\Toomay Technologies

LOGONSERVER=\\ABDAT10407

NUMBER_OF_PROCESSORS=1

OS=Windows_NT

Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Program Files\Common Files\Adaptec Shared\System;D:\Apps\Symantec\pcAnywhere\;C:\Program Files\QuickTime\QTSystem\

PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH

PROCESSOR_ARCHITECTURE=x86

PROCESSOR_IDENTIFIER=x86 Family 15 Model 3 Stepping 4, GenuineIntel

PROCESSOR_LEVEL=15

PROCESSOR_REVISION=0304

ProgramFiles=C:\Program Files

PROMPT=$P$G

QTJAVA=C:\Program Files\Java\j2re1.4.2_03\lib\ext\QTJava.zip

SESSIONNAME=Console

SystemDrive=C:

SystemRoot=C:\WINDOWS

TEMP=C:\DOCUME~1\TOOMAY~1\LOCALS~1\Temp

TMP=C:\DOCUME~1\TOOMAY~1\LOCALS~1\Temp

USERDOMAIN=ABDAT10407

USERNAME=Toomay Technologies

USERPROFILE=C:\Documents and Settings\Toomay Technologies

windir=C:\WINDOWS

-- User Profiles ---------------------------------------------------------------

Toomay Technologies (admin)

User1 (admin)

Administrator (admin)

-- Add/Remove Programs ---------------------------------------------------------

Ad-Aware SE Personal --> C:\PROGRA~1\Lavasoft\AD-AWA~1\UNWISE.EXE C:\PROGRA~1\Lavasoft\AD-AWA~1\INSTALL.LOG

HijackThis 1.99.1 --> C:\Documents and Settings\Toomay Technologies\Desktop\HijackThis.exe /uninstall

Spybot - Search & Destroy --> "C:\Program Files\Spybot - Search & Destroy\unins000.exe"

Unlocker 1.8.5 --> C:\Program Files\Unlocker\uninst.exe

-- Application Event Log -------------------------------------------------------

Event Record #/Type33683 / Warning

Event Submitted/Written: 11/10/2007 08:35:54 AM

Event ID/Source: 1001 / MsiInstaller

Event Description:

Detection of product '{AAA11090-6E99-4655-AAF5-57EB5F677D0C}', feature 'MarketResearch' failed during request for component '{54DF6C52-5A64-4FBE-B81A-3DD95E0D854D}'

Event Record #/Type33682 / Warning

Event Submitted/Written: 11/10/2007 08:35:53 AM

Event ID/Source: 1001 / MsiInstaller

Event Description:

Detection of product '{AAA11090-6E99-4655-AAF5-57EB5F677D0C}', feature 'MarketResearch' failed during request for component '{54DF6C52-5A64-4FBE-B81A-3DD95E0D854D}'

Event Record #/Type33681 / Warning

Event Submitted/Written: 11/10/2007 08:35:53 AM

Event ID/Source: 1001 / MsiInstaller

Event Description:

Detection of product '{AAA11090-6E99-4655-AAF5-57EB5F677D0C}', feature 'MarketResearch' failed during request for component '{54DF6C52-5A64-4FBE-B81A-3DD95E0D854D}'

Event Record #/Type33680 / Warning

Event Submitted/Written: 11/10/2007 08:35:53 AM

Event ID/Source: 1001 / MsiInstaller

Event Description:

Detection of product '{AAA11090-6E99-4655-AAF5-57EB5F677D0C}', feature 'MarketResearch' failed during request for component '{54DF6C52-5A64-4FBE-B81A-3DD95E0D854D}'

Event Record #/Type33679 / Warning

Event Submitted/Written: 11/10/2007 08:35:53 AM

Event ID/Source: 1001 / MsiInstaller

Event Description:

Detection of product '{AAA11090-6E99-4655-AAF5-57EB5F677D0C}', feature 'MarketResearch' failed during request for component '{54DF6C52-5A64-4FBE-B81A-3DD95E0D854D}'

-- Security Event Log ----------------------------------------------------------

No Errors/Warnings found.

-- System Event Log ------------------------------------------------------------

Event Record #/Type3803 / Warning

Event Submitted/Written: 11/10/2007 08:58:54 AM

Event ID/Source: 4226 / Tcpip

Event Description:

TCP/IP has reached the security limit imposed on the number of concurrent TCP connect attempts.

Event Record #/Type3802 / Warning

Event Submitted/Written: 11/10/2007 08:21:46 AM

Event ID/Source: 4226 / Tcpip

Event Description:

TCP/IP has reached the security limit imposed on the number of concurrent TCP connect attempts.

Event Record #/Type3792 / Warning

Event Submitted/Written: 11/09/2007 07:23:51 PM

Event ID/Source: 3019 / MRxSmb

Event Description:

The redirector failed to determine the connection type.

Event Record #/Type3791 / Warning

Event Submitted/Written: 11/09/2007 07:23:51 PM

Event ID/Source: 3019 / MRxSmb

Event Description:

The redirector failed to determine the connection type.

Event Record #/Type3786 / Warning

Event Submitted/Written: 11/09/2007 07:15:13 PM

Event ID/Source: 3019 / MRxSmb

Event Description:

The redirector failed to determine the connection type.

-- End of Deckard's System Scanner: finished at 2007-11-10 11:38:41 ------------

hijackthis.log

Logfile of HijackThis v1.99.1

Scan saved at 11:37:32 AM, on 11/10/2007

Platform: Windows XP SP2 (WinNT 5.01.2600)

MSIE: Unable to get Internet Explorer version!

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe

C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe

C:\WINDOWS\system32\spoolsv.exe

C:\Program Files\Intel\ASF Agent\ASFAgent.exe

C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe

C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe

C:\WINDOWS\System32\nvsvc32.exe

d:\apps\timbuktupro\tb2launch.exe

C:\WINDOWS\system32\fxssvc.exe

d:\apps\timbuktupro\tb2pro.exe

d:\apps\timbuktupro\TNOTIFY.EXE

C:\WINDOWS\Explorer.EXE

C:\Program Files\Common Files\Symantec Shared\ccApp.exe

C:\Program Files\InCode Solutions\RemoveIT Pro v4\HLP.exe

C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe

C:\Documents and Settings\Toomay Technologies\Desktop\dss.exe

C:\DOCUME~1\TOOMAY~1\Desktop\Toomay Technologies.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell.com

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.dell.com

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell.com

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.dell.com

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = \blank.htm

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost

N3 - Netscape 7: user_pref("browser.startup.homepage", "http://home.netscape.com/bookmark/7_1/home.html"); (C:\Documents and Settings\Toomay Technologies\Application Data\Mozilla\Profiles\default\fjdfuyfh.slt\prefs.js)

N3 - Netscape 7: user_pref("browser.search.defaultengine", "engine://D%3A%5CApps%5CNetscape%5Csearchplugins%5CSBWeb_01.src"); (C:\Documents and Settings\Toomay Technologies\Application Data\Mozilla\Profiles\default\fjdfuyfh.slt\prefs.js)

O2 - BHO: (no name) - {1C1DD717-53B2-485E-A17B-C9977C205E10} - (no file)

O2 - BHO: (no name) - {1E8A6170-7264-4D0F-BEAE-D42A53123C75} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.5\NppBho.dll

O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll

O2 - BHO: (no name) - {AF4535AA-6BBA-4B92-9F85-7A5488F03926} - (no file)

O2 - BHO: (no name) - {C2FB8A5C-CEC8-4E21-93F3-FF0CE1331C86} - (no file)

O3 - Toolbar: Show Norton Toolbar - {90222687-F593-4738-B738-FBEE9C7B26DF} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.5\UIBHO.dll

O4 - HKLM\..\Run: [unlockerAssistant] "C:\Program Files\Unlocker\UnlockerAssistant.exe"

O4 - HKLM\..\Run: [ccApp] C:\Program Files\Common Files\Symantec Shared\ccApp.exe

O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background

O4 - HKCU\..\Run: [LDM] D:\Apps\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe

O4 - HKCU\..\Run: [spybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe

O4 - HKCU\..\Run: [RemoveIT Pro v4Ent] C:\Program Files\InCode Solutions\RemoveIT Pro v4\removeit.exe

O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll

O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll

O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll

O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll

O13 - DefaultPrefix:

O13 - WWW Prefix:

O13 - Home Prefix:

O13 - Mosaic Prefix:

O13 - FTP Prefix:

O13 - Gopher Prefix:

O15 - ProtocolDefaults: '@ivt' protocol is in My Computer Zone, should be Intranet Zone (HKLM)

O15 - ProtocolDefaults: 'file' protocol is in My Computer Zone, should be Internet Zone (HKLM)

O15 - ProtocolDefaults: 'ftp' protocol is in My Computer Zone, should be Internet Zone (HKLM)

O15 - ProtocolDefaults: 'http' protocol is in My Computer Zone, should be Internet Zone (HKLM)

O15 - ProtocolDefaults: 'https' protocol is in My Computer Zone, should be Internet Zone (HKLM)

O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/microsoftupdat...b?1175192453156

O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat...b?1175192156937

O17 - HKLM\System\CCS\Services\Tcpip\..\{EEC031E1-756A-457E-B6D4-C970BCB7C18D}: NameServer = 208.57.0.11,208.57.0.10

O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - D:\Apps\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll

O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll

O23 - Service: Application Layer Gateway Service (ALG) - Unknown owner - cmd.exe (file missing)

O23 - Service: ASF Agent (ASFAgent) - Intel Corporation - C:\Program Files\Intel\ASF Agent\ASFAgent.exe

O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe

O23 - Service: pcAnywhere Host Service (awhost32) - Symantec Corporation - D:\Apps\Symantec\pcAnywhere\awhost32.exe

O23 - Service: Symantec Event Manager (ccEvtMgr) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing)

O23 - Service: Symantec Password Validation (ccPwdSvc) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe (file missing)

O23 - Service: Symantec Settings Manager (ccSetMgr) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing)

O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h cltCommon (file missing)

O23 - Service: COM Host (comHost) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe

O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe

O23 - Service: Symantec IS Password Validation (ISPwdSvc) - Symantec Corporation - D:\Apps\NortonAV7\isPwdSvc.exe

O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE

O23 - Service: LiveUpdate Notice Service Ex (LiveUpdate Notice Ex) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing)

O23 - Service: LiveUpdate Notice Service - Unknown owner - C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /m "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PifEng.dll (file missing)

O23 - Service: Intel NCS NetService (NetSvc) - Intel® Corporation - C:\Program Files\Intel\NCS\Sync\NetSvc.exe

O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe

O23 - Service: ScriptBlocking Service (SBService) - Unknown owner - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe (file missing)

O23 - Service: Symantec Core LC - Unknown owner - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe

O23 - Service: Symantec AppCore Service (SymAppCore) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe

O23 - Service: Tb2 Launch (Tb2Launch) - Netopia, Inc. - d:\apps\timbuktupro\tb2launch.exe

Edited by DaDooDaidy

Share this post


Link to post
Share on other sites

Please download ComboFix from Here or Here to your Desktop.

**Note: In the event you already have Combofix, this is a new version that I need you to download. It is important that it is saved directly to your desktop**

  1. Close any open browsers.
  2. Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.

    -----------------------------------------------------------

    • Very Important! Temporarily disable your anti-virus, script blocking and any anti-malware real-time protection before performing a scan. They can interfere with ComboFix or remove some of its embedded files which may cause "unpredictable results".
    • Click on this link to see a list of programs that should be disabled. The list is not all inclusive. If yours is not listed and you don't know how to disable it, please ask.

      -----------------------------------------------------------


[*]Double click on combofix.exe & follow the prompts.

[*]When finished, it will produce a report for you.

[*]Please post the "C:\ComboFix.txt" along with a new DSS log for further review.

**Note: Do not mouseclick combofix's window while it's running. That may cause it to stall**

Edited by MoNsTeReNeRgY22

Share this post


Link to post
Share on other sites

Computer restarted itself in the middle, but it finished. Here are the results.

ComboFix.txt

ComboFix 07-11-08.1 - Toomay Technologies 2007-11-10 12:27:55.3 - NTFSx86

Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.622 [GMT -8:00]

Running from: C:\Documents and Settings\Toomay Technologies\Desktop\ComboFix.exe

.

Unable to gain System Privileges

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))

.

C:\WINDOWS\system32\ddaby.dll

C:\WINDOWS\system32\pmkhg.dll

.

---- Previous Run -------

.

C:\Documents and Settings\Toomay Technologies\Desktop\Live Safety Center.lnk

C:\Documents and Settings\Toomay Technologies\Desktop\Online Security Guide.lnk

C:\Documents and Settings\Toomay Technologies\Favorites\Online Security Guide.lnk

C:\WINDOWS\SYSTEM32\ghkmp.ini

C:\WINDOWS\SYSTEM32\ybadd.ini

C:\WINDOWS\SYSTEM32\ybadd.ini2

C:\WINDOWS\SYSTEM32\ybadd.tmp

.

((((((((((((((((((((((((( Files Created from 2007-10-10 to 2007-11-10 )))))))))))))))))))))))))))))))

.

2007-11-10 12:27 51,200 --a------ C:\WINDOWS\NirCmd.exe

2007-11-10 11:35 <DIR> d-------- C:\Deckard

2007-11-08 10:55 317 ---hs---- C:\WINDOWS\SYSTEM32\jjjlm.ini2

2007-11-07 21:01 <DIR> d-------- C:\HJT

2007-11-07 19:58 <DIR> d-------- C:\Documents and Settings\Toomay Technologies\Application Data\Lavasoft

2007-11-07 19:57 <DIR> d-------- C:\Program Files\Lavasoft

2007-11-07 17:48 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy

2007-11-07 14:36 <DIR> d--hs---- C:\GA6P

2007-11-07 14:30 8,704 --a------ C:\WINDOWS\SYSTEM32\SpOrder.dll

2007-11-07 12:47 <DIR> d-------- C:\Program Files\InCode Solutions

2007-11-07 10:29 <DIR> d-------- C:\Program Files\NoAdware5.0

2007-11-07 07:17 128,896 --------- C:\WINDOWS\SYSTEM32\DLLCACHE\fltmgr.sys

2007-11-07 07:17 23,040 --------- C:\WINDOWS\SYSTEM32\DLLCACHE\fltmc.exe

2007-11-07 07:17 16,896 --------- C:\WINDOWS\SYSTEM32\DLLCACHE\fltlib.dll

2007-11-07 07:07 <DIR> d-------- C:\Program Files\MSXML 4.0

2007-11-06 22:22 584,192 --------- C:\WINDOWS\SYSTEM32\DLLCACHE\rpcrt4.dll

2007-11-06 21:39 271,224 --a------ C:\WINDOWS\SYSTEM32\mucltui.dll

2007-11-06 21:25 22,112 -ra------ C:\WINDOWS\SYSTEM32\DRIVERS\COH_Mon.sys

2007-11-06 21:04 87,104 --a------ C:\WINDOWS\SYSTEM32\hjfiyxxs.dll

2007-11-06 21:04 0 --a------ C:\WINDOWS\SYSTEM32\ifbkicst.dll

2007-10-31 06:00 127,034 -r------- C:\WINDOWS\bwUnin-8.1.1.50-8876480SL.exe

2007-10-30 19:55 625,032 --a------ C:\WINDOWS\SYSTEM32\SymNeti.dll

2007-10-30 19:55 242,056 --a------ C:\WINDOWS\SYSTEM32\SymRedir.dll

2007-10-30 19:55 191,536 --a------ C:\WINDOWS\SYSTEM32\DRIVERS\symtdi.sys

2007-10-30 19:55 145,968 --a------ C:\WINDOWS\SYSTEM32\DRIVERS\symfw.sys

2007-10-30 19:55 39,856 --a------ C:\WINDOWS\SYSTEM32\DRIVERS\symids.sys

2007-10-30 19:55 37,936 --a------ C:\WINDOWS\SYSTEM32\DRIVERS\symndisv.sys

2007-10-30 19:55 35,120 --a------ C:\WINDOWS\SYSTEM32\DRIVERS\symndis.sys

2007-10-30 19:55 27,696 --a------ C:\WINDOWS\SYSTEM32\DRIVERS\symredrv.sys

2007-10-30 19:55 12,848 --a------ C:\WINDOWS\SYSTEM32\DRIVERS\symdns.sys

.

(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2007-11-10 20:07 --------- d-----w C:\Program Files\Common Files\Symantec Shared

2007-11-10 18:22 --------- d-----w C:\Program Files\Sagekey Software

2007-11-08 02:52 --------- d-----w C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec

2007-11-07 05:20 --------- d-----w C:\Program Files\Symantec

2007-11-07 05:19 805 ----a-w C:\WINDOWS\system32\drivers\SYMEVENT.INF

2007-11-07 05:19 60,800 ----a-w C:\WINDOWS\SYSTEM32\S32EVNT1.DLL

2007-11-07 05:19 123,952 ----a-w C:\WINDOWS\system32\drivers\SYMEVENT.SYS

2007-11-07 05:19 10,740 ----a-w C:\WINDOWS\system32\drivers\SYMEVENT.CAT

2007-10-31 03:24 12,963 ----a-w C:\WINDOWS\system32\drivers\SymRedir.cat

2007-10-31 03:24 1,358 ----a-w C:\WINDOWS\system32\drivers\SymRedir.inf

2007-09-18 22:44 10,662 ----a-w C:\WINDOWS\system32\drivers\srtspx.cat

2007-09-18 22:44 10,662 ----a-w C:\WINDOWS\system32\drivers\srtspl.cat

2007-09-18 22:44 10,658 ----a-w C:\WINDOWS\system32\drivers\srtsp.cat

2007-09-18 22:44 1,430 ----a-w C:\WINDOWS\system32\drivers\srtspl.inf

2007-09-18 22:44 1,421 ----a-w C:\WINDOWS\system32\drivers\srtspx.inf

2007-09-18 22:44 1,415 ----a-w C:\WINDOWS\system32\drivers\srtsp.inf

2007-09-18 22:43 43,696 ----a-w C:\WINDOWS\system32\drivers\srtspx.sys

2007-09-18 22:43 317,616 ----a-w C:\WINDOWS\system32\drivers\srtspl.sys

2007-09-18 22:43 278,576 ----a-w C:\WINDOWS\system32\drivers\srtsp.sys

2007-08-22 13:12 96,256 ------w C:\WINDOWS\SYSTEM32\DLLCACHE\inseng.dll

2007-08-22 13:12 658,944 ------w C:\WINDOWS\SYSTEM32\DLLCACHE\wininet.dll

2007-08-22 13:12 615,424 ------w C:\WINDOWS\SYSTEM32\DLLCACHE\urlmon.dll

2007-08-22 13:12 55,808 ------w C:\WINDOWS\SYSTEM32\DLLCACHE\extmgr.dll

2007-08-22 13:12 532,480 ------w C:\WINDOWS\SYSTEM32\DLLCACHE\mstime.dll

2007-08-22 13:12 474,112 ------w C:\WINDOWS\SYSTEM32\DLLCACHE\shlwapi.dll

2007-08-22 13:12 449,024 ------w C:\WINDOWS\SYSTEM32\DLLCACHE\mshtmled.dll

2007-08-22 13:12 39,424 ------w C:\WINDOWS\SYSTEM32\DLLCACHE\pngfilt.dll

2007-08-22 13:12 357,888 ------w C:\WINDOWS\SYSTEM32\DLLCACHE\dxtmsft.dll

2007-08-22 13:12 3,058,176 ------w C:\WINDOWS\SYSTEM32\DLLCACHE\mshtml.dll

2007-08-22 13:12 251,392 ------w C:\WINDOWS\SYSTEM32\DLLCACHE\iepeers.dll

2007-08-22 13:12 205,312 ------w C:\WINDOWS\SYSTEM32\DLLCACHE\dxtrans.dll

2007-08-22 13:12 16,384 ------w C:\WINDOWS\SYSTEM32\DLLCACHE\jsproxy.dll

2007-08-22 13:12 151,040 ------w C:\WINDOWS\SYSTEM32\DLLCACHE\cdfview.dll

2007-08-22 13:12 146,432 ------w C:\WINDOWS\SYSTEM32\DLLCACHE\msrating.dll

2007-08-22 13:12 1,494,528 ------w C:\WINDOWS\SYSTEM32\DLLCACHE\shdocvw.dll

2007-08-22 13:12 1,054,208 ------w C:\WINDOWS\SYSTEM32\DLLCACHE\danim.dll

2007-08-22 13:12 1,022,976 ------w C:\WINDOWS\SYSTEM32\DLLCACHE\browseui.dll

2007-08-21 10:30 18,432 ------w C:\WINDOWS\SYSTEM32\DLLCACHE\iedw.exe

2007-08-21 06:15 683,520 ----a-w C:\WINDOWS\SYSTEM32\inetcomm.dll

2007-08-21 06:15 683,520 ------w C:\WINDOWS\SYSTEM32\DLLCACHE\inetcomm.dll

.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))

.

.

*Note* empty entries & legit default entries are not shown

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{1C1DD717-53B2-485E-A17B-C9977C205E10}]

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{AF4535AA-6BBA-4B92-9F85-7A5488F03926}]

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{C2FB8A5C-CEC8-4E21-93F3-FF0CE1331C86}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"UnlockerAssistant"="C:\Program Files\Unlocker\UnlockerAssistant.exe" [2006-09-07 09:19]

"ccApp"="C:\Program Files\Common Files\Symantec Shared\ccApp.exe" [2007-01-09 21:59]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" [2004-10-13 08:24]

"LDM"="D:\Apps\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe" []

"SpybotSD TeaTimer"="C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe" [2007-08-31 16:46]

"RemoveIT Pro v4Ent"="C:\Program Files\InCode Solutions\RemoveIT Pro v4\removeit.exe" [2007-11-07 15:28]

[HKEY_USERS\.default\software\microsoft\windows\currentversion\run]

"ALUAlert"=C:\Program Files\Symantec\LiveUpdate\ALUNotify.exe

R2 ASFAgent;ASF Agent;C:\Program Files\Intel\ASF Agent\ASFAgent.exe

R2 AsfAlrt;AsfAlrt;\??\C:\WINDOWS\System32\drivers\AsfAlrt.sys

S3 HPFXBULK;HPFXBULK;C:\WINDOWS\system32\drivers\hpfxbulk.sys

*Newly Created Service* - COMHOST

.

Contents of the 'Scheduled Tasks' folder

"2007-11-06 04:02:14 C:\WINDOWS\Tasks\Norton Internet Security - Run Full System Scan - Toomay Technologies.job"

- D:\Apps\NortonAV7\Norton AntiVirus\Navw32.exe

.

**************************************************************************

catchme 0.3.1250 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net

Rootkit scan 2007-11-10 12:41:27

Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully

hidden files: 0

**************************************************************************

.

Completion time: 2007-11-10 12:43:07 - machine was rebooted

.

--- E O F ---

log.txt

ComboFix 07-11-08.1 - Toomay Technologies 2007-11-10 12:27:55.3 - NTFSx86

Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.622 [GMT -8:00]

Running from: C:\Documents and Settings\Toomay Technologies\Desktop\ComboFix.exe

.

Unable to gain System Privileges

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))

.

C:\WINDOWS\system32\ddaby.dll

C:\WINDOWS\system32\pmkhg.dll

.

---- Previous Run -------

.

C:\Documents and Settings\Toomay Technologies\Desktop\Live Safety Center.lnk

C:\Documents and Settings\Toomay Technologies\Desktop\Online Security Guide.lnk

C:\Documents and Settings\Toomay Technologies\Favorites\Online Security Guide.lnk

C:\WINDOWS\SYSTEM32\ghkmp.ini

C:\WINDOWS\SYSTEM32\ybadd.ini

C:\WINDOWS\SYSTEM32\ybadd.ini2

C:\WINDOWS\SYSTEM32\ybadd.tmp

.

((((((((((((((((((((((((( Files Created from 2007-10-10 to 2007-11-10 )))))))))))))))))))))))))))))))

.

2007-11-10 12:27 51,200 --a------ C:\WINDOWS\NirCmd.exe

2007-11-10 11:35 <DIR> d-------- C:\Deckard

2007-11-08 10:55 317 ---hs---- C:\WINDOWS\SYSTEM32\jjjlm.ini2

2007-11-07 21:01 <DIR> d-------- C:\HJT

2007-11-07 19:58 <DIR> d-------- C:\Documents and Settings\Toomay Technologies\Application Data\Lavasoft

2007-11-07 19:57 <DIR> d-------- C:\Program Files\Lavasoft

2007-11-07 17:48 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy

2007-11-07 14:36 <DIR> d--hs---- C:\GA6P

2007-11-07 14:30 8,704 --a------ C:\WINDOWS\SYSTEM32\SpOrder.dll

2007-11-07 12:47 <DIR> d-------- C:\Program Files\InCode Solutions

2007-11-07 10:29 <DIR> d-------- C:\Program Files\NoAdware5.0

2007-11-07 07:17 128,896 --------- C:\WINDOWS\SYSTEM32\DLLCACHE\fltmgr.sys

2007-11-07 07:17 23,040 --------- C:\WINDOWS\SYSTEM32\DLLCACHE\fltmc.exe

2007-11-07 07:17 16,896 --------- C:\WINDOWS\SYSTEM32\DLLCACHE\fltlib.dll

2007-11-07 07:07 <DIR> d-------- C:\Program Files\MSXML 4.0

2007-11-06 22:22 584,192 --------- C:\WINDOWS\SYSTEM32\DLLCACHE\rpcrt4.dll

2007-11-06 21:39 271,224 --a------ C:\WINDOWS\SYSTEM32\mucltui.dll

2007-11-06 21:25 22,112 -ra------ C:\WINDOWS\SYSTEM32\DRIVERS\COH_Mon.sys

2007-11-06 21:04 87,104 --a------ C:\WINDOWS\SYSTEM32\hjfiyxxs.dll

2007-11-06 21:04 0 --a------ C:\WINDOWS\SYSTEM32\ifbkicst.dll

2007-10-31 06:00 127,034 -r------- C:\WINDOWS\bwUnin-8.1.1.50-8876480SL.exe

2007-10-30 19:55 625,032 --a------ C:\WINDOWS\SYSTEM32\SymNeti.dll

2007-10-30 19:55 242,056 --a------ C:\WINDOWS\SYSTEM32\SymRedir.dll

2007-10-30 19:55 191,536 --a------ C:\WINDOWS\SYSTEM32\DRIVERS\symtdi.sys

2007-10-30 19:55 145,968 --a------ C:\WINDOWS\SYSTEM32\DRIVERS\symfw.sys

2007-10-30 19:55 39,856 --a------ C:\WINDOWS\SYSTEM32\DRIVERS\symids.sys

2007-10-30 19:55 37,936 --a------ C:\WINDOWS\SYSTEM32\DRIVERS\symndisv.sys

2007-10-30 19:55 35,120 --a------ C:\WINDOWS\SYSTEM32\DRIVERS\symndis.sys

2007-10-30 19:55 27,696 --a------ C:\WINDOWS\SYSTEM32\DRIVERS\symredrv.sys

2007-10-30 19:55 12,848 --a------ C:\WINDOWS\SYSTEM32\DRIVERS\symdns.sys

.

(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2007-11-10 20:07 --------- d-----w C:\Program Files\Common Files\Symantec Shared

2007-11-10 18:22 --------- d-----w C:\Program Files\Sagekey Software

2007-11-08 02:52 --------- d-----w C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec

2007-11-07 05:20 --------- d-----w C:\Program Files\Symantec

2007-11-07 05:19 805 ----a-w C:\WINDOWS\system32\drivers\SYMEVENT.INF

2007-11-07 05:19 60,800 ----a-w C:\WINDOWS\SYSTEM32\S32EVNT1.DLL

2007-11-07 05:19 123,952 ----a-w C:\WINDOWS\system32\drivers\SYMEVENT.SYS

2007-11-07 05:19 10,740 ----a-w C:\WINDOWS\system32\drivers\SYMEVENT.CAT

2007-10-31 03:24 12,963 ----a-w C:\WINDOWS\system32\drivers\SymRedir.cat

2007-10-31 03:24 1,358 ----a-w C:\WINDOWS\system32\drivers\SymRedir.inf

2007-09-18 22:44 10,662 ----a-w C:\WINDOWS\system32\drivers\srtspx.cat

2007-09-18 22:44 10,662 ----a-w C:\WINDOWS\system32\drivers\srtspl.cat

2007-09-18 22:44 10,658 ----a-w C:\WINDOWS\system32\drivers\srtsp.cat

2007-09-18 22:44 1,430 ----a-w C:\WINDOWS\system32\drivers\srtspl.inf

2007-09-18 22:44 1,421 ----a-w C:\WINDOWS\system32\drivers\srtspx.inf

2007-09-18 22:44 1,415 ----a-w C:\WINDOWS\system32\drivers\srtsp.inf

2007-09-18 22:43 43,696 ----a-w C:\WINDOWS\system32\drivers\srtspx.sys

2007-09-18 22:43 317,616 ----a-w C:\WINDOWS\system32\drivers\srtspl.sys

2007-09-18 22:43 278,576 ----a-w C:\WINDOWS\system32\drivers\srtsp.sys

2007-08-22 13:12 96,256 ------w C:\WINDOWS\SYSTEM32\DLLCACHE\inseng.dll

2007-08-22 13:12 658,944 ------w C:\WINDOWS\SYSTEM32\DLLCACHE\wininet.dll

2007-08-22 13:12 615,424 ------w C:\WINDOWS\SYSTEM32\DLLCACHE\urlmon.dll

2007-08-22 13:12 55,808 ------w C:\WINDOWS\SYSTEM32\DLLCACHE\extmgr.dll

2007-08-22 13:12 532,480 ------w C:\WINDOWS\SYSTEM32\DLLCACHE\mstime.dll

2007-08-22 13:12 474,112 ------w C:\WINDOWS\SYSTEM32\DLLCACHE\shlwapi.dll

2007-08-22 13:12 449,024 ------w C:\WINDOWS\SYSTEM32\DLLCACHE\mshtmled.dll

2007-08-22 13:12 39,424 ------w C:\WINDOWS\SYSTEM32\DLLCACHE\pngfilt.dll

2007-08-22 13:12 357,888 ------w C:\WINDOWS\SYSTEM32\DLLCACHE\dxtmsft.dll

2007-08-22 13:12 3,058,176 ------w C:\WINDOWS\SYSTEM32\DLLCACHE\mshtml.dll

2007-08-22 13:12 251,392 ------w C:\WINDOWS\SYSTEM32\DLLCACHE\iepeers.dll

2007-08-22 13:12 205,312 ------w C:\WINDOWS\SYSTEM32\DLLCACHE\dxtrans.dll

2007-08-22 13:12 16,384 ------w C:\WINDOWS\SYSTEM32\DLLCACHE\jsproxy.dll

2007-08-22 13:12 151,040 ------w C:\WINDOWS\SYSTEM32\DLLCACHE\cdfview.dll

2007-08-22 13:12 146,432 ------w C:\WINDOWS\SYSTEM32\DLLCACHE\msrating.dll

2007-08-22 13:12 1,494,528 ------w C:\WINDOWS\SYSTEM32\DLLCACHE\shdocvw.dll

2007-08-22 13:12 1,054,208 ------w C:\WINDOWS\SYSTEM32\DLLCACHE\danim.dll

2007-08-22 13:12 1,022,976 ------w C:\WINDOWS\SYSTEM32\DLLCACHE\browseui.dll

2007-08-21 10:30 18,432 ------w C:\WINDOWS\SYSTEM32\DLLCACHE\iedw.exe

2007-08-21 06:15 683,520 ----a-w C:\WINDOWS\SYSTEM32\inetcomm.dll

2007-08-21 06:15 683,520 ------w C:\WINDOWS\SYSTEM32\DLLCACHE\inetcomm.dll

.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))

.

.

*Note* empty entries & legit default entries are not shown

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{1C1DD717-53B2-485E-A17B-C9977C205E10}]

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{AF4535AA-6BBA-4B92-9F85-7A5488F03926}]

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{C2FB8A5C-CEC8-4E21-93F3-FF0CE1331C86}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"UnlockerAssistant"="C:\Program Files\Unlocker\UnlockerAssistant.exe" [2006-09-07 09:19]

"ccApp"="C:\Program Files\Common Files\Symantec Shared\ccApp.exe" [2007-01-09 21:59]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" [2004-10-13 08:24]

"LDM"="D:\Apps\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe" []

"SpybotSD TeaTimer"="C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe" [2007-08-31 16:46]

"RemoveIT Pro v4Ent"="C:\Program Files\InCode Solutions\RemoveIT Pro v4\removeit.exe" [2007-11-07 15:28]

[HKEY_USERS\.default\software\microsoft\windows\currentversion\run]

"ALUAlert"=C:\Program Files\Symantec\LiveUpdate\ALUNotify.exe

R2 ASFAgent;ASF Agent;C:\Program Files\Intel\ASF Agent\ASFAgent.exe

R2 AsfAlrt;AsfAlrt;\??\C:\WINDOWS\System32\drivers\AsfAlrt.sys

S3 HPFXBULK;HPFXBULK;C:\WINDOWS\system32\drivers\hpfxbulk.sys

*Newly Created Service* - COMHOST

.

Contents of the 'Scheduled Tasks' folder

"2007-11-06 04:02:14 C:\WINDOWS\Tasks\Norton Internet Security - Run Full System Scan - Toomay Technologies.job"

- D:\Apps\NortonAV7\Norton AntiVirus\Navw32.exe

.

**************************************************************************

catchme 0.3.1250 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net

Rootkit scan 2007-11-10 12:41:27

Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully

hidden files: 0

**************************************************************************

.

Completion time: 2007-11-10 12:43:07 - machine was rebooted

.

--- E O F ---

Share this post


Link to post
Share on other sites

I'm very sorry for the delay, I have been very busy lately. I also live in CA and will post back within 30 minutes.

Share this post


Link to post
Share on other sites

Open notepad and copy/paste the text in the quotebox below into it:

File::

C:\WINDOWS\SYSTEM32\jjjlm.ini2

C:\WINDOWS\SYSTEM32\hjfiyxxs.dll

C:\WINDOWS\SYSTEM32\ifbkicst.dll

C:\WINDOWS\bwUnin-8.1.1.50-8876480SL.exe

Save this as CFScript.txt

Then drag the CFScript.txt into ComboFix.exe as you see in the screenshot below.

CFScript.gif

This will start ComboFix again. After reboot, (in case it asks to reboot), post the contents of Combofix.txt in your next reply together with a new HijackThis log.

Then

Please do an online scan with Kaspersky WebScanner

Click on Kaspersky Online Scanner

You will be promted to install an ActiveX component from Kaspersky, Click Yes.

  • The program will launch and then begin downloading the latest definition files:
  • Once the files have been downloaded click on NEXT

  • Now click on Scan Settings
  • In the scan settings make that the following are selected:
    • Scan using the following Anti-Virus database:

    • Extended (if available otherwise Standard)

    • Scan Options:

    • Scan Archives
      Scan Mail Bases

    [*]Click OK

    [*]Now under select a target to scan:

    • Select My Computer

    [*]This will program will start and scan your system.

    [*]The scan will take a while so be patient and let it run.

    [*]Once the scan is complete it will display if your system has been infected.

    • Now click on the Save as Text button:

    [*]Save the file to your desktop.

    [*]Copy and paste that information in your next post.

Share this post


Link to post
Share on other sites
Open notepad and copy/paste the text in the quotebox below into it:
File::

C:\WINDOWS\SYSTEM32\jjjlm.ini2

C:\WINDOWS\SYSTEM32\hjfiyxxs.dll

C:\WINDOWS\SYSTEM32\ifbkicst.dll

C:\WINDOWS\bwUnin-8.1.1.50-8876480SL.exe

Save this as CFScript.txt

Then drag the CFScript.txt into ComboFix.exe as you see in the screenshot below.

CFScript.gif

This will start ComboFix again. After reboot, (in case it asks to reboot), post the contents of Combofix.txt in your next reply together with a new HijackThis log.

Then

Please do an online scan with Kaspersky WebScanner

Click on Kaspersky Online Scanner

You will be promted to install an ActiveX component from Kaspersky, Click Yes.

  • The program will launch and then begin downloading the latest definition files:
  • Once the files have been downloaded click on NEXT

  • Now click on Scan Settings
  • In the scan settings make that the following are selected:
    • Scan using the following Anti-Virus database:

    • Extended (if available otherwise Standard)

    • Scan Options:

    • Scan Archives
      Scan Mail Bases

    [*]Click OK

    [*]Now under select a target to scan:

    • Select My Computer

    [*]This will program will start and scan your system.

    [*]The scan will take a while so be patient and let it run.

    [*]Once the scan is complete it will display if your system has been infected.

    • Now click on the Save as Text button:

    [*]Save the file to your desktop.

    [*]Copy and paste that information in your next post.

Here are the files. I will continue with Kaspersky Online Scanner.

ComboFix.txt

ComboFix 07-11-08.1 - Toomay Technologies 2007-11-11 10:35:11.4 - NTFSx86

Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.588 [GMT -8:00]

Running from: C:\Documents and Settings\Toomay Technologies\Desktop\ComboFix.exe

Command switches used :: C:\Documents and Settings\Toomay Technologies\Desktop\CFScript.txt

FILE

C:\WINDOWS\bwUnin-8.1.1.50-8876480SL.exe

C:\WINDOWS\SYSTEM32\hjfiyxxs.dll

C:\WINDOWS\SYSTEM32\ifbkicst.dll

C:\WINDOWS\SYSTEM32\jjjlm.ini2

.

Unable to gain System Privileges

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))

.

C:\WINDOWS\bwUnin-8.1.1.50-8876480SL.exe

C:\WINDOWS\SYSTEM32\hjfiyxxs.dll

C:\WINDOWS\SYSTEM32\ifbkicst.dll

C:\WINDOWS\SYSTEM32\jjjlm.ini2

.

((((((((((((((((((((((((( Files Created from 2007-10-11 to 2007-11-11 )))))))))))))))))))))))))))))))

.

2007-11-10 12:27 51,200 --a------ C:\WINDOWS\NirCmd.exe

2007-11-10 11:35 <DIR> d-------- C:\Deckard

2007-11-07 21:01 <DIR> d-------- C:\HJT

2007-11-07 19:58 <DIR> d-------- C:\Documents and Settings\Toomay Technologies\Application Data\Lavasoft

2007-11-07 19:57 <DIR> d-------- C:\Program Files\Lavasoft

2007-11-07 17:48 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy

2007-11-07 14:36 <DIR> d--hs---- C:\GA6P

2007-11-07 14:30 8,704 --a------ C:\WINDOWS\SYSTEM32\SpOrder.dll

2007-11-07 12:47 <DIR> d-------- C:\Program Files\InCode Solutions

2007-11-07 10:29 <DIR> d-------- C:\Program Files\NoAdware5.0

2007-11-07 07:17 128,896 --------- C:\WINDOWS\SYSTEM32\DLLCACHE\fltmgr.sys

2007-11-07 07:17 23,040 --------- C:\WINDOWS\SYSTEM32\DLLCACHE\fltmc.exe

2007-11-07 07:17 16,896 --------- C:\WINDOWS\SYSTEM32\DLLCACHE\fltlib.dll

2007-11-07 07:07 <DIR> d-------- C:\Program Files\MSXML 4.0

2007-11-06 22:22 584,192 --------- C:\WINDOWS\SYSTEM32\DLLCACHE\rpcrt4.dll

2007-11-06 21:39 271,224 --a------ C:\WINDOWS\SYSTEM32\mucltui.dll

2007-11-06 21:25 22,112 -ra------ C:\WINDOWS\SYSTEM32\DRIVERS\COH_Mon.sys

2007-10-30 19:55 625,032 --a------ C:\WINDOWS\SYSTEM32\SymNeti.dll

2007-10-30 19:55 242,056 --a------ C:\WINDOWS\SYSTEM32\SymRedir.dll

2007-10-30 19:55 191,536 --a------ C:\WINDOWS\SYSTEM32\DRIVERS\symtdi.sys

2007-10-30 19:55 145,968 --a------ C:\WINDOWS\SYSTEM32\DRIVERS\symfw.sys

2007-10-30 19:55 39,856 --a------ C:\WINDOWS\SYSTEM32\DRIVERS\symids.sys

2007-10-30 19:55 37,936 --a------ C:\WINDOWS\SYSTEM32\DRIVERS\symndisv.sys

2007-10-30 19:55 35,120 --a------ C:\WINDOWS\SYSTEM32\DRIVERS\symndis.sys

2007-10-30 19:55 27,696 --a------ C:\WINDOWS\SYSTEM32\DRIVERS\symredrv.sys

2007-10-30 19:55 12,848 --a------ C:\WINDOWS\SYSTEM32\DRIVERS\symdns.sys

.

(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2007-11-11 18:22 --------- d-----w C:\Program Files\Common Files\Symantec Shared

2007-11-10 22:44 --------- d-----w C:\Program Files\Sagekey Software

2007-11-08 02:52 --------- d-----w C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec

2007-11-07 05:20 --------- d-----w C:\Program Files\Symantec

2007-11-07 05:19 805 ----a-w C:\WINDOWS\system32\drivers\SYMEVENT.INF

2007-11-07 05:19 123,952 ----a-w C:\WINDOWS\system32\drivers\SYMEVENT.SYS

2007-11-07 05:19 10,740 ----a-w C:\WINDOWS\system32\drivers\SYMEVENT.CAT

2007-10-31 03:24 12,963 ----a-w C:\WINDOWS\system32\drivers\SymRedir.cat

2007-10-31 03:24 1,358 ----a-w C:\WINDOWS\system32\drivers\SymRedir.inf

2007-09-18 22:44 10,662 ----a-w C:\WINDOWS\system32\drivers\srtspx.cat

2007-09-18 22:44 10,662 ----a-w C:\WINDOWS\system32\drivers\srtspl.cat

2007-09-18 22:44 10,658 ----a-w C:\WINDOWS\system32\drivers\srtsp.cat

2007-09-18 22:44 1,430 ----a-w C:\WINDOWS\system32\drivers\srtspl.inf

2007-09-18 22:44 1,421 ----a-w C:\WINDOWS\system32\drivers\srtspx.inf

2007-09-18 22:44 1,415 ----a-w C:\WINDOWS\system32\drivers\srtsp.inf

2007-09-18 22:43 43,696 ----a-w C:\WINDOWS\system32\drivers\srtspx.sys

2007-09-18 22:43 317,616 ----a-w C:\WINDOWS\system32\drivers\srtspl.sys

2007-09-18 22:43 278,576 ----a-w C:\WINDOWS\system32\drivers\srtsp.sys

.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))

.

.

*Note* empty entries & legit default entries are not shown

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{1C1DD717-53B2-485E-A17B-C9977C205E10}]

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{AF4535AA-6BBA-4B92-9F85-7A5488F03926}]

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{C2FB8A5C-CEC8-4E21-93F3-FF0CE1331C86}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"UnlockerAssistant"="C:\Program Files\Unlocker\UnlockerAssistant.exe" [2006-09-07 09:19]

"ccApp"="C:\Program Files\Common Files\Symantec Shared\ccApp.exe" [2007-01-09 21:59]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" [2004-10-13 08:24]

"LDM"="D:\Apps\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe" []

"SpybotSD TeaTimer"="C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe" [2007-08-31 16:46]

"RemoveIT Pro v4Ent"="C:\Program Files\InCode Solutions\RemoveIT Pro v4\removeit.exe" [2007-11-07 15:28]

[HKEY_USERS\.default\software\microsoft\windows\currentversion\run]

"ALUAlert"=C:\Program Files\Symantec\LiveUpdate\ALUNotify.exe

R2 ASFAgent;ASF Agent;C:\Program Files\Intel\ASF Agent\ASFAgent.exe

R2 AsfAlrt;AsfAlrt;\??\C:\WINDOWS\System32\drivers\AsfAlrt.sys

S3 HPFXBULK;HPFXBULK;C:\WINDOWS\system32\drivers\hpfxbulk.sys

*Newly Created Service* - COMHOST

.

Contents of the 'Scheduled Tasks' folder

"2007-11-06 04:02:14 C:\WINDOWS\Tasks\Norton Internet Security - Run Full System Scan - Toomay Technologies.job"

- D:\Apps\NortonAV7\Norton AntiVirus\Navw32.exe

.

**************************************************************************

catchme 0.3.1250 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net

Rootkit scan 2007-11-11 10:48:08

Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully

hidden files: 0

**************************************************************************

.

Completion time: 2007-11-11 10:50:00 - machine was rebooted

C:\ComboFix2.txt ... 2007-11-10 12:43

.

--- E O F ---

log.txt

ComboFix 07-11-08.1 - Toomay Technologies 2007-11-11 10:35:11.4 - NTFSx86

Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.588 [GMT -8:00]

Running from: C:\Documents and Settings\Toomay Technologies\Desktop\ComboFix.exe

Command switches used :: C:\Documents and Settings\Toomay Technologies\Desktop\CFScript.txt

FILE

C:\WINDOWS\bwUnin-8.1.1.50-8876480SL.exe

C:\WINDOWS\SYSTEM32\hjfiyxxs.dll

C:\WINDOWS\SYSTEM32\ifbkicst.dll

C:\WINDOWS\SYSTEM32\jjjlm.ini2

.

Unable to gain System Privileges

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))

.

C:\WINDOWS\bwUnin-8.1.1.50-8876480SL.exe

C:\WINDOWS\SYSTEM32\hjfiyxxs.dll

C:\WINDOWS\SYSTEM32\ifbkicst.dll

C:\WINDOWS\SYSTEM32\jjjlm.ini2

.

((((((((((((((((((((((((( Files Created from 2007-10-11 to 2007-11-11 )))))))))))))))))))))))))))))))

.

2007-11-10 12:27 51,200 --a------ C:\WINDOWS\NirCmd.exe

2007-11-10 11:35 <DIR> d-------- C:\Deckard

2007-11-07 21:01 <DIR> d-------- C:\HJT

2007-11-07 19:58 <DIR> d-------- C:\Documents and Settings\Toomay Technologies\Application Data\Lavasoft

2007-11-07 19:57 <DIR> d-------- C:\Program Files\Lavasoft

2007-11-07 17:48 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy

2007-11-07 14:36 <DIR> d--hs---- C:\GA6P

2007-11-07 14:30 8,704 --a------ C:\WINDOWS\SYSTEM32\SpOrder.dll

2007-11-07 12:47 <DIR> d-------- C:\Program Files\InCode Solutions

2007-11-07 10:29 <DIR> d-------- C:\Program Files\NoAdware5.0

2007-11-07 07:17 128,896 --------- C:\WINDOWS\SYSTEM32\DLLCACHE\fltmgr.sys

2007-11-07 07:17 23,040 --------- C:\WINDOWS\SYSTEM32\DLLCACHE\fltmc.exe

2007-11-07 07:17 16,896 --------- C:\WINDOWS\SYSTEM32\DLLCACHE\fltlib.dll

2007-11-07 07:07 <DIR> d-------- C:\Program Files\MSXML 4.0

2007-11-06 22:22 584,192 --------- C:\WINDOWS\SYSTEM32\DLLCACHE\rpcrt4.dll

2007-11-06 21:39 271,224 --a------ C:\WINDOWS\SYSTEM32\mucltui.dll

2007-11-06 21:25 22,112 -ra------ C:\WINDOWS\SYSTEM32\DRIVERS\COH_Mon.sys

2007-10-30 19:55 625,032 --a------ C:\WINDOWS\SYSTEM32\SymNeti.dll

2007-10-30 19:55 242,056 --a------ C:\WINDOWS\SYSTEM32\SymRedir.dll

2007-10-30 19:55 191,536 --a------ C:\WINDOWS\SYSTEM32\DRIVERS\symtdi.sys

2007-10-30 19:55 145,968 --a------ C:\WINDOWS\SYSTEM32\DRIVERS\symfw.sys

2007-10-30 19:55 39,856 --a------ C:\WINDOWS\SYSTEM32\DRIVERS\symids.sys

2007-10-30 19:55 37,936 --a------ C:\WINDOWS\SYSTEM32\DRIVERS\symndisv.sys

2007-10-30 19:55 35,120 --a------ C:\WINDOWS\SYSTEM32\DRIVERS\symndis.sys

2007-10-30 19:55 27,696 --a------ C:\WINDOWS\SYSTEM32\DRIVERS\symredrv.sys

2007-10-30 19:55 12,848 --a------ C:\WINDOWS\SYSTEM32\DRIVERS\symdns.sys

.

(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2007-11-11 18:22 --------- d-----w C:\Program Files\Common Files\Symantec Shared

2007-11-10 22:44 --------- d-----w C:\Program Files\Sagekey Software

2007-11-08 02:52 --------- d-----w C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec

2007-11-07 05:20 --------- d-----w C:\Program Files\Symantec

2007-11-07 05:19 805 ----a-w C:\WINDOWS\system32\drivers\SYMEVENT.INF

2007-11-07 05:19 123,952 ----a-w C:\WINDOWS\system32\drivers\SYMEVENT.SYS

2007-11-07 05:19 10,740 ----a-w C:\WINDOWS\system32\drivers\SYMEVENT.CAT

2007-10-31 03:24 12,963 ----a-w C:\WINDOWS\system32\drivers\SymRedir.cat

2007-10-31 03:24 1,358 ----a-w C:\WINDOWS\system32\drivers\SymRedir.inf

2007-09-18 22:44 10,662 ----a-w C:\WINDOWS\system32\drivers\srtspx.cat

2007-09-18 22:44 10,662 ----a-w C:\WINDOWS\system32\drivers\srtspl.cat

2007-09-18 22:44 10,658 ----a-w C:\WINDOWS\system32\drivers\srtsp.cat

2007-09-18 22:44 1,430 ----a-w C:\WINDOWS\system32\drivers\srtspl.inf

2007-09-18 22:44 1,421 ----a-w C:\WINDOWS\system32\drivers\srtspx.inf

2007-09-18 22:44 1,415 ----a-w C:\WINDOWS\system32\drivers\srtsp.inf

2007-09-18 22:43 43,696 ----a-w C:\WINDOWS\system32\drivers\srtspx.sys

2007-09-18 22:43 317,616 ----a-w C:\WINDOWS\system32\drivers\srtspl.sys

2007-09-18 22:43 278,576 ----a-w C:\WINDOWS\system32\drivers\srtsp.sys

.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))

.

.

*Note* empty entries & legit default entries are not shown

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{1C1DD717-53B2-485E-A17B-C9977C205E10}]

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{AF4535AA-6BBA-4B92-9F85-7A5488F03926}]

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{C2FB8A5C-CEC8-4E21-93F3-FF0CE1331C86}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"UnlockerAssistant"="C:\Program Files\Unlocker\UnlockerAssistant.exe" [2006-09-07 09:19]

"ccApp"="C:\Program Files\Common Files\Symantec Shared\ccApp.exe" [2007-01-09 21:59]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" [2004-10-13 08:24]

"LDM"="D:\Apps\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe" []

"SpybotSD TeaTimer"="C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe" [2007-08-31 16:46]

"RemoveIT Pro v4Ent"="C:\Program Files\InCode Solutions\RemoveIT Pro v4\removeit.exe" [2007-11-07 15:28]

[HKEY_USERS\.default\software\microsoft\windows\currentversion\run]

"ALUAlert"=C:\Program Files\Symantec\LiveUpdate\ALUNotify.exe

R2 ASFAgent;ASF Agent;C:\Program Files\Intel\ASF Agent\ASFAgent.exe

R2 AsfAlrt;AsfAlrt;\??\C:\WINDOWS\System32\drivers\AsfAlrt.sys

S3 HPFXBULK;HPFXBULK;C:\WINDOWS\system32\drivers\hpfxbulk.sys

*Newly Created Service* - COMHOST

.

Contents of the 'Scheduled Tasks' folder

"2007-11-06 04:02:14 C:\WINDOWS\Tasks\Norton Internet Security - Run Full System Scan - Toomay Technologies.job"

- D:\Apps\NortonAV7\Norton AntiVirus\Navw32.exe

.

**************************************************************************

catchme 0.3.1250 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net

Rootkit scan 2007-11-11 10:48:08

Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully

hidden files: 0

**************************************************************************

.

Completion time: 2007-11-11 10:50:00 - machine was rebooted

C:\ComboFix2.txt ... 2007-11-10 12:43

.

--- E O F ---

Share this post


Link to post
Share on other sites

The Kaspersky Online Scanner has stopped.

Failed to load Kaspersky Online Scanner ActiveX control!

You must have administrative rights on this computer;

you also must have the IE security settings to the Medium level.

I don't normally use IE, but had to open it, because Mozilla Firefox wouldn't get past the Accept button.

I'm not sure what to do, because I do have administrative rights on this computer.

The IE version is 6. I think the settings were set to Medium, but I reset them anyway. I verified I'm a computer administrator under user accounts.

UPDATE!

I got it to work. I clicked on the message at the top. It started and I clicked Next. Got a Windows Installer thing again, but closed it. It's currently updating the Kaspersky AV databases...

Started scanning now...

Edited by DaDooDaidy

Share this post


Link to post
Share on other sites

Here are the results.

-------------------------------------------------------------------------------

KASPERSKY ONLINE SCANNER REPORT

Monday, November 12, 2007 7:25:12 AM

Operating System: Microsoft Windows XP Professional, Service Pack 2 (Build 2600)

Kaspersky Online Scanner version: 5.0.98.0

Kaspersky Anti-Virus database last update: 11/11/2007

Kaspersky Anti-Virus database records: 456467

-------------------------------------------------------------------------------

Scan Settings:

Scan using the following antivirus database: extended

Scan Archives: true

Scan Mail Bases: true

Scan Target - My Computer:

A:\

C:\

D:\

E:\

F:\

J:\

Z:\

Scan Statistics:

Total number of scanned objects: 110748

Number of viruses found: 42

Number of infected objects: 585

Number of suspicious objects: 0

Duration of the scan process: 14:01:26

Infected Object Name / Virus Name / Last Action

C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Windows NT\MSFax\ActivityLog\InboxLOG.txt Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Windows NT\MSFax\ActivityLog\OutboxLOG.txt Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Symantec\Common Client\settings.dat Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate\2007-11-11_Log.ALUSchedulerSvc.LiveUpdate Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Symantec\SPBBC\BBConfig.log Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Symantec\SPBBC\BBDebug.log Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Symantec\SPBBC\BBDetect.log Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Symantec\SPBBC\BBNotify.log Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Symantec\SPBBC\BBRefr.log Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Symantec\SPBBC\BBSetCfg.log Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Symantec\SPBBC\BBSetCfg2.log Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Symantec\SPBBC\BBSetDev.log Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Symantec\SPBBC\BBSetLoc.log Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Symantec\SPBBC\BBSetUsr.log Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Symantec\SPBBC\BBStHash.log Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Symantec\SPBBC\BBValid.log Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Symantec\SPBBC\SPPolicy.log Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Symantec\SPBBC\SPStart.log Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Symantec\SPBBC\SPStop.log Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Symantec\SRTSP\SrtErEvt.log Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Symantec\SRTSP\SrtETmp\3878FA78.TMP Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Symantec\SRTSP\SrtMoEvt.log Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Symantec\SRTSP\SrtNvEvt.log Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Symantec\SRTSP\SrtScEvt.log Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Symantec\SRTSP\SrtTxFEvt.log Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Symantec\SRTSP\SrtViEvt.log Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Symantec\SubEng\submissions.idx Object is locked skipped

C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped

C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped

C:\Documents and Settings\LocalService\Local Settings\Temp\Cookies\index.dat Object is locked skipped

C:\Documents and Settings\LocalService\Local Settings\Temp\History\History.IE5\index.dat Object is locked skipped

C:\Documents and Settings\LocalService\Local Settings\Temp\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped

C:\Documents and Settings\LocalService\NTUSER.DAT Object is locked skipped

C:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked skipped

C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped

C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped

C:\Documents and Settings\NetworkService\NTUSER.DAT Object is locked skipped

C:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked skipped

C:\Documents and Settings\Toomay Technologies\Application Data\Mozilla\Firefox\Profiles\xwwafcgz.default\cert8.db Object is locked skipped

C:\Documents and Settings\Toomay Technologies\Application Data\Mozilla\Firefox\Profiles\xwwafcgz.default\formhistory.dat Object is locked skipped

C:\Documents and Settings\Toomay Technologies\Application Data\Mozilla\Firefox\Profiles\xwwafcgz.default\history.dat Object is locked skipped

C:\Documents and Settings\Toomay Technologies\Application Data\Mozilla\Firefox\Profiles\xwwafcgz.default\key3.db Object is locked skipped

C:\Documents and Settings\Toomay Technologies\Application Data\Mozilla\Firefox\Profiles\xwwafcgz.default\parent.lock Object is locked skipped

C:\Documents and Settings\Toomay Technologies\Application Data\Mozilla\Firefox\Profiles\xwwafcgz.default\search.sqlite Object is locked skipped

C:\Documents and Settings\Toomay Technologies\Application Data\Mozilla\Firefox\Profiles\xwwafcgz.default\urlclassifier2.sqlite Object is locked skipped

C:\Documents and Settings\Toomay Technologies\Cookies\INDEX.DAT Object is locked skipped

C:\Documents and Settings\Toomay Technologies\Desktop\SmitfraudFix.exe/data.rar/SmitfraudFix/Reboot.exe Infected: not-a-virus:RiskTool.Win32.Reboot.f skipped

C:\Documents and Settings\Toomay Technologies\Desktop\SmitfraudFix.exe/data.rar Infected: not-a-virus:RiskTool.Win32.Reboot.f skipped

C:\Documents and Settings\Toomay Technologies\Desktop\SmitfraudFix.exe RarSFX: infected - 2 skipped

C:\Documents and Settings\Toomay Technologies\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped

C:\Documents and Settings\Toomay Technologies\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped

C:\Documents and Settings\Toomay Technologies\Local Settings\Application Data\Mozilla\Firefox\Profiles\xwwafcgz.default\Cache\_CACHE_001_ Object is locked skipped

C:\Documents and Settings\Toomay Technologies\Local Settings\Application Data\Mozilla\Firefox\Profiles\xwwafcgz.default\Cache\_CACHE_002_ Object is locked skipped

C:\Documents and Settings\Toomay Technologies\Local Settings\Application Data\Mozilla\Firefox\Profiles\xwwafcgz.default\Cache\_CACHE_003_ Object is locked skipped

C:\Documents and Settings\Toomay Technologies\Local Settings\Application Data\Mozilla\Firefox\Profiles\xwwafcgz.default\Cache\_CACHE_MAP_ Object is locked skipped

C:\Documents and Settings\Toomay Technologies\Local Settings\History\History.IE5\INDEX.DAT Object is locked skipped

C:\Documents and Settings\Toomay Technologies\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped

C:\Documents and Settings\Toomay Technologies\NTUSER.DAT Object is locked skipped

C:\Documents and Settings\Toomay Technologies\ntuser.dat.LOG Object is locked skipped

C:\Program Files\Common Files\Symantec Shared\EENGINE\EPERSIST.DAT Object is locked skipped

C:\Program Files\Common Files\Symantec Shared\NFWEVT.LOG Object is locked skipped

C:\Program Files\Common Files\Symantec Shared\SNDALRT.log Object is locked skipped

C:\Program Files\Common Files\Symantec Shared\SNDCON.log Object is locked skipped

C:\Program Files\Common Files\Symantec Shared\SNDDBG.log Object is locked skipped

C:\Program Files\Common Files\Symantec Shared\SNDFW.log Object is locked skipped

C:\Program Files\Common Files\Symantec Shared\SNDIDS.log Object is locked skipped

C:\Program Files\Common Files\Symantec Shared\SNDSYS.log Object is locked skipped

C:\System Volume Information\_restore{CCA15F78-7193-4CA6-8115-2B570DD6546C}\RP1076\A0092861.old Infected: not-a-virus:FraudTool.Win32.BestSeller.a skipped

C:\System Volume Information\_restore{CCA15F78-7193-4CA6-8115-2B570DD6546C}\RP1076\A0092862.old Infected: not-a-virus:FraudTool.Win32.BestSeller.a skipped

C:\System Volume Information\_restore{CCA15F78-7193-4CA6-8115-2B570DD6546C}\RP1076\A0092871.old Infected: not-a-virus:FraudTool.Win32.BestSeller.a skipped

C:\System Volume Information\_restore{CCA15F78-7193-4CA6-8115-2B570DD6546C}\RP1076\A0092904.exe Infected: not-a-virus:FraudTool.Win32.BestSeller.a skipped

C:\System Volume Information\_restore{CCA15F78-7193-4CA6-8115-2B570DD6546C}\RP1076\A0092905.sys Infected: not-a-virus:FraudTool.Win32.BestSeller.a skipped

C:\System Volume Information\_restore{CCA15F78-7193-4CA6-8115-2B570DD6546C}\RP1076\A0092906.sys Infected: not-a-virus:FraudTool.Win32.BestSeller.a skipped

C:\System Volume Information\_restore{CCA15F78-7193-4CA6-8115-2B570DD6546C}\RP1076\A0092907.dll Infected: not-a-virus:FraudTool.Win32.BestSeller.a skipped

C:\System Volume Information\_restore{CCA15F78-7193-4CA6-8115-2B570DD6546C}\RP1076\A0092955.exe Infected: not-a-virus:Downloader.Win32.WinFixer.at skipped

C:\System Volume Information\_restore{CCA15F78-7193-4CA6-8115-2B570DD6546C}\RP1076\A0093115.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.ahr skipped

C:\System Volume Information\_restore{CCA15F78-7193-4CA6-8115-2B570DD6546C}\RP1076\A0093120.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.ahr skipped

C:\System Volume Information\_restore{CCA15F78-7193-4CA6-8115-2B570DD6546C}\RP1076\A0104377.exe/WISE0070.BIN Infected: not-a-virus:AdTool.Win32.WhenU.a skipped

C:\System Volume Information\_restore{CCA15F78-7193-4CA6-8115-2B570DD6546C}\RP1076\A0104377.exe/WISE0071.BIN Infected: not-a-virus:AdWare.Win32.NewDotNet skipped

C:\System Volume Information\_restore{CCA15F78-7193-4CA6-8115-2B570DD6546C}\RP1076\A0104377.exe/WISE0072.BIN/data.rar/WhAgent.exe Infected: not-a-virus:AdWare.Win32.WebHancer skipped

C:\System Volume Information\_restore{CCA15F78-7193-4CA6-8115-2B570DD6546C}\RP1076\A0104377.exe/WISE0072.BIN/data.rar/whInstaller.exe Infected: not-a-virus:AdWare.Win32.WebHancer skipped

C:\System Volume Information\_restore{CCA15F78-7193-4CA6-8115-2B570DD6546C}\RP1076\A0104377.exe/WISE0072.BIN/data.rar/WhSurvey.exe Infected: not-a-virus:AdWare.Win32.WebHancer skipped

C:\System Volume Information\_restore{CCA15F78-7193-4CA6-8115-2B570DD6546C}\RP1076\A0104377.exe/WISE0072.BIN/data.rar/Webhdll.dll Infected: not-a-virus:AdWare.Win32.WebHancer skipped

C:\System Volume Information\_restore{CCA15F78-7193-4CA6-8115-2B570DD6546C}\RP1076\A0104377.exe/WISE0072.BIN/data.rar/whiehlpr.dll Infected: not-a-virus:AdWare.Win32.WebHancer skipped

C:\System Volume Information\_restore{CCA15F78-7193-4CA6-8115-2B570DD6546C}\RP1076\A0104377.exe/WISE0072.BIN/data.rar Infected: not-a-virus:AdWare.Win32.WebHancer skipped

C:\System Volume Information\_restore{CCA15F78-7193-4CA6-8115-2B570DD6546C}\RP1076\A0104377.exe/WISE0072.BIN Infected: not-a-virus:AdWare.Win32.WebHancer skipped

C:\System Volume Information\_restore{CCA15F78-7193-4CA6-8115-2B570DD6546C}\RP1076\A0104377.exe/WISE0073.BIN Infected: not-a-virus:Server-Proxy.Win32.MarketScore.h skipped

C:\System Volume Information\_restore{CCA15F78-7193-4CA6-8115-2B570DD6546C}\RP1076\A0104377.exe/WISE0074.BIN Infected: not-a-virus:Server-Proxy.Win32.MarketScore.k skipped

C:\System Volume Information\_restore{CCA15F78-7193-4CA6-8115-2B570DD6546C}\RP1076\A0104377.exe WiseSFX: infected - 11 skipped

C:\System Volume Information\_restore{CCA15F78-7193-4CA6-8115-2B570DD6546C}\RP1076\A0104377.exe WiseSFX Dropper: infected - 11 skipped

C:\System Volume Information\_restore{CCA15F78-7193-4CA6-8115-2B570DD6546C}\RP1076\A0104386.exe/WISE0084.BIN/data0001.cab/VVSN.exe Infected: not-a-virus:AdWare.Win32.SaveNow.z skipped

C:\System Volume Information\_restore{CCA15F78-7193-4CA6-8115-2B570DD6546C}\RP1076\A0104386.exe/WISE0084.BIN/data0001.cab Infected: not-a-virus:AdWare.Win32.SaveNow.z skipped

C:\System Volume Information\_restore{CCA15F78-7193-4CA6-8115-2B570DD6546C}\RP1076\A0104386.exe/WISE0084.BIN Infected: not-a-virus:AdWare.Win32.SaveNow.z skipped

C:\System Volume Information\_restore{CCA15F78-7193-4CA6-8115-2B570DD6546C}\RP1076\A0104386.exe/WISE0087.BIN/data0001.cab/VVSN.exe Infected: not-a-virus:AdWare.Win32.SaveNow.z skipped

C:\System Volume Information\_restore{CCA15F78-7193-4CA6-8115-2B570DD6546C}\RP1076\A0104386.exe/WISE0087.BIN/data0001.cab Infected: not-a-virus:AdWare.Win32.SaveNow.z skipped

C:\System Volume Information\_restore{CCA15F78-7193-4CA6-8115-2B570DD6546C}\RP1076\A0104386.exe/WISE0087.BIN Infected: not-a-virus:AdWare.Win32.SaveNow.z skipped

C:\System Volume Information\_restore{CCA15F78-7193-4CA6-8115-2B570DD6546C}\RP1076\A0104386.exe/WISE0088.BIN Infected: not-a-virus:AdWare.Win32.NewDotNet skipped

C:\System Volume Information\_restore{CCA15F78-7193-4CA6-8115-2B570DD6546C}\RP1076\A0104386.exe/WISE0089.BIN/data.rar/WhAgent.exe Infected: not-a-virus:AdWare.Win32.WebHancer skipped

C:\System Volume Information\_restore{CCA15F78-7193-4CA6-8115-2B570DD6546C}\RP1076\A0104386.exe/WISE0089.BIN/data.rar/whInstaller.exe Infected: not-a-virus:AdWare.Win32.WebHancer skipped

C:\System Volume Information\_restore{CCA15F78-7193-4CA6-8115-2B570DD6546C}\RP1076\A0104386.exe/WISE0089.BIN/data.rar/WhSurvey.exe Infected: not-a-virus:AdWare.Win32.WebHancer skipped

C:\System Volume Information\_restore{CCA15F78-7193-4CA6-8115-2B570DD6546C}\RP1076\A0104386.exe/WISE0089.BIN/data.rar/Webhdll.dll Infected: not-a-virus:AdWare.Win32.WebHancer skipped

C:\System Volume Information\_restore{CCA15F78-7193-4CA6-8115-2B570DD6546C}\RP1076\A0104386.exe/WISE0089.BIN/data.rar/whiehlpr.dll Infected: not-a-virus:AdWare.Win32.WebHancer skipped

C:\System Volume Information\_restore{CCA15F78-7193-4CA6-8115-2B570DD6546C}\RP1076\A0104386.exe/WISE0089.BIN/data.rar Infected: not-a-virus:AdWare.Win32.WebHancer skipped

C:\System Volume Information\_restore{CCA15F78-7193-4CA6-8115-2B570DD6546C}\RP1076\A0104386.exe/WISE0089.BIN Infected: not-a-virus:AdWare.Win32.WebHancer skipped

C:\System Volume Information\_restore{CCA15F78-7193-4CA6-8115-2B570DD6546C}\RP1076\A0104386.exe/WISE0090.BIN Infected: not-a-virus:Server-Proxy.Win32.MarketScore.h skipped

C:\System Volume Information\_restore{CCA15F78-7193-4CA6-8115-2B570DD6546C}\RP1076\A0104386.exe/WISE0091.BIN Infected: not-a-virus:Server-Proxy.Win32.MarketScore.i skipped

C:\System Volume Information\_restore{CCA15F78-7193-4CA6-8115-2B570DD6546C}\RP1076\A0104386.exe WiseSFX: infected - 16 skipped

C:\System Volume Information\_restore{CCA15F78-7193-4CA6-8115-2B570DD6546C}\RP1076\A0104386.exe WiseSFX Dropper: infected - 16 skipped

C:\System Volume Information\_restore{CCA15F78-7193-4CA6-8115-2B570DD6546C}\RP1076\A0105525.exe Infected: not-a-virus:Downloader.Win32.WinFixer.au skipped

C:\System Volume Information\_restore{CCA15F78-7193-4CA6-8115-2B570DD6546C}\RP1076\change.log Object is locked skipped

C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped

C:\WINDOWS\SchedLgU.Txt Object is locked skipped

C:\WINDOWS\SoftwareDistribution\ReportingEvents.log Object is locked skipped

C:\WINDOWS\SYSTEM32\CatRoot2\edb.log Object is locked skipped

C:\WINDOWS\SYSTEM32\CatRoot2\tmp.edb Object is locked skipped

C:\WINDOWS\SYSTEM32\CONFIG\AppEvent.Evt Object is locked skipped

C:\WINDOWS\SYSTEM32\CONFIG\DEFAULT Object is locked skipped

C:\WINDOWS\SYSTEM32\CONFIG\DEFAULT.LOG Object is locked skipped

C:\WINDOWS\SYSTEM32\CONFIG\SAM Object is locked skipped

C:\WINDOWS\SYSTEM32\CONFIG\SAM.LOG Object is locked skipped

C:\WINDOWS\SYSTEM32\CONFIG\SecEvent.Evt Object is locked skipped

C:\WINDOWS\SYSTEM32\CONFIG\SECURITY Object is locked skipped

C:\WINDOWS\SYSTEM32\CONFIG\SECURITY.LOG Object is locked skipped

C:\WINDOWS\SYSTEM32\CONFIG\SOFTWARE Object is locked skipped

C:\WINDOWS\SYSTEM32\CONFIG\SOFTWARE.LOG Object is locked skipped

C:\WINDOWS\SYSTEM32\CONFIG\SysEvent.Evt Object is locked skipped

C:\WINDOWS\SYSTEM32\CONFIG\SYSTEM Object is locked skipped

C:\WINDOWS\SYSTEM32\CONFIG\SYSTEM.LOG Object is locked skipped

C:\WINDOWS\SYSTEM32\HPPDEVX.DLL.log Object is locked skipped

C:\WINDOWS\SYSTEM32\WBEM\Repository\FS\INDEX.BTR Object is locked skipped

C:\WINDOWS\SYSTEM32\WBEM\Repository\FS\INDEX.MAP Object is locked skipped

C:\WINDOWS\SYSTEM32\WBEM\Repository\FS\MAPPING.VER Object is locked skipped

C:\WINDOWS\SYSTEM32\WBEM\Repository\FS\MAPPING1.MAP Object is locked skipped

C:\WINDOWS\SYSTEM32\WBEM\Repository\FS\MAPPING2.MAP Object is locked skipped

C:\WINDOWS\SYSTEM32\WBEM\Repository\FS\OBJECTS.DATA Object is locked skipped

C:\WINDOWS\SYSTEM32\WBEM\Repository\FS\OBJECTS.MAP Object is locked skipped

C:\WINDOWS\Temp\T30DebugLogFile.txt Object is locked skipped

C:\WINDOWS\WindowsUpdate.log Object is locked skipped

D:\Apps\NortonAV7\Norton AntiVirus\AVApp.log Object is locked skipped

D:\Apps\NortonAV7\Norton AntiVirus\AVError.log Object is locked skipped

D:\Apps\NortonAV7\Norton AntiVirus\AVVirus.log Object is locked skipped

D:\AWK\DP550NT\K\TimBakup\Netscape\toomayt2\Mail\Recvd.sbd\MOA/[From [email protected] (Jack Stuster)][Date Mon, 8 Jun 1998 11:39:02 -0700]/UNNAMED/UNNAMED/Conversion_File.doc Infected: Virus.MSWord.Wazzu skipped

D:\AWK\DP550NT\K\TimBakup\Netscape\toomayt2\Mail\Recvd.sbd\MOA/[From [email protected] (Jack Stuster)][Date Mon, 8 Jun 1998 11:39:02 -0700]/UNNAMED/UNNAMED Infected: Virus.MSWord.Wazzu skipped

D:\AWK\DP550NT\K\TimBakup\Netscape\toomayt2\Mail\Recvd.sbd\MOA/[From [email protected] (Jack Stuster)][Date Mon, 8 Jun 1998 11:39:02 -0700]/UNNAMED Infected: Virus.MSWord.Wazzu skipped

D:\AWK\DP550NT\K\TimBakup\Netscape\toomayt2\Mail\Recvd.sbd\MOA Mail Berkeley mbox: infected - 3 skipped

D:\AWK\DP550NT\K\TimBakup\SampVirg\NT\SPY\DLL\HOOK.DLL Infected: not-a-virus:Monitor.Win32.PCProtect.21 skipped

D:\AWK\DP550NT\K\TimBakup\SampVirg\SPY\DLL\HOOK.DLL Infected: not-a-virus:Monitor.Win32.PCProtect.21 skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]barnett.com>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAM . ... /[From "David A. Fe ... /[From [email protected]][Date Fri, 27 Jun 2003 12:00:4 ... /details.pif Infected: Email-Worm.Win32.Sobig.e skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAM . ... /[From "David A. Fe ... /[From [email protected]][Date Fri, 27 Jun 2003 12:00:41 --0700]/UNNAMED Infected: Email-Worm.Win32.Sobig.e skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAM . ... /[From "David A. Feinberg, C.D.P." <[email protected]>][Date Fri, 27 Jun 2003 11:29:44 -0700]/text Infected: Email-Worm.Win32.Sobig.e skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAM ... /[From "Michael R Turner" <[email protected]>][Date Fri, 27 Jun 2003 14:28:49 -0400]/UNNAMED Infected: Email-Worm.Win32.Sobig.e skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[Fr ... /[From "William J. Kammerer" <[email protected]>][Date Fri, 27 Jun 2003 14:01:35 -0400]/text Infected: Email-Worm.Win32.Sobig.e skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[From "Phil Burns" < ... /[From [email protected]][Date Mon, 10 Nov 2003 12:20:30 ... /photos.jpg.exe Infected: Email-Worm.Win32.Mimail.c skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[From "Phil Burns" < ... /[From [email protected]][Date Mon, 10 Nov 2003 12:20:30 -0500 (EST)]/UNNAMED Infected: Email-Worm.Win32.Mimail.c skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[From "Phil Burns" <pbur ... /[From <[email protected]>][Date Mon, 10 Nov 2003 04:33:51 -0500]/text Infected: Email-Worm.Win32.Mimail.c skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[From ... /[From "Su ... /[From [email protected]][Date Wed, 12 Nov 2003 11:37:57 ... /photos.jpg.exe Infected: Email-Worm.Win32.Mimail.c skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[From ... /[From "Su ... /[From [email protected]][Date Wed, 12 Nov 2003 11:37:57 -0500 ( ... /UNNAMED Infected: Email-Worm.Win32.Mimail.c skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[From ... /[From "Su ... /[From [email protected]][Date Wed, 12 Nov 2003 11:37:57 -0500 (EST)]/UNNAMED Infected: Email-Worm.Win32.Mimail.c skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[From ... /[From "Susan LAWSON" <[email protected]>][Date Wed, 12 Nov 2003 08:10:30 -0800]/UNNAMED Infected: Email-Worm.Win32.Mimail.c skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[From "Phi ... /[From "Steven Fowler" <[email protected]>][Date Wed, 12 Nov 2003 09:48:35 -0500]/UNNAMED Infected: Email-Worm.Win32.Mimail.c skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[From "Phil ... /[Fro ... /[From "taway3" <[email protected]>][Date Tue, 11 Nov 2003 18:28:38 -0500]/text Infected: Email-Worm.Win32.Mimail.c skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[From "Phil ... /[From "Rachel Foerster" <[email protected]>][Date Tue, 11 Nov 2003 15:01:48 -0600]/text Infected: Email-Worm.Win32.Mimail.c skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/ ... /[From "Michell ... /[From [email protected]][Date Thu, 13 Nov 2003 11:57:00 ... /photos.jpg.exe Infected: Email-Worm.Win32.Mimail.c skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/ ... /[From "Michell ... /[From [email protected]][Date Thu, 13 Nov 2003 11:57:00 -0500 (EST)]/UNNAMED Infected: Email-Worm.Win32.Mimail.c skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/ ... /[From "Michelle Butler-Gorman" <[email protected]>][Date Thu, 13 Nov 2003 16:49:34 +0000]/text Infected: Email-Worm.Win32.Mimail.c skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[From "Phil Burns" ... /[From "Doug Webb" <[email protected]>][Date Thu, 13 Nov 2003 09:12:24 -0600]/UNNAMED Infected: Email-Worm.Win32.Mimail.c skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[ ... /[From "Linda M ... /[From [email protected]][Date Thu, 4 Dec 2003 12:05:36 ... /photos.jpg.exe Infected: Email-Worm.Win32.Mimail.c skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[ ... /[From "Linda M ... /[From [email protected]][Date Thu, 4 Dec 2003 12:05:36 -0500 (EST)]/UNNAMED Infected: Email-Worm.Win32.Mimail.c skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[ ... /[From "Linda McCardel" <[email protected]>][Date Thu, 4 Dec 2003 09:45:28 -0500]/text Infected: Email-Worm.Win32.Mimail.c skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[From "Phil Burns" <p ... /[From [email protected]][Date Mon, 8 Dec 2003 11:39:39 ... /photos.jpg.exe Infected: Email-Worm.Win32.Mimail.c skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[From "Phil Burns" <p ... /[From [email protected]][Date Mon, 8 Dec 2003 11:39:39 -0500 ( ... /UNNAMED Infected: Email-Worm.Win32.Mimail.c skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[From "Phil Burns" <p ... /[From [email protected]][Date Mon, 8 Dec 2003 11:39:39 -0500 (EST)]/UNNAMED Infected: Email-Worm.Win32.Mimail.c skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNA ... /[From "Chris Branca ... /[From [email protected]][Date Mon, 8 Dec 2003 12:43:22 ... /photos.jpg.exe Infected: Email-Worm.Win32.Mimail.c skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNA ... /[From "Chris Branca ... /[From [email protected]][Date Mon, 8 Dec 2003 12:43:22 -0500 (EST)]/UNNAMED Infected: Email-Worm.Win32.Mimail.c skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNA ... /[From "Chr ... /[Fr ... /[From [email protected]][Date Tue, 9 Dec 2003 12:29:15 ... /photos.jpg.exe Infected: Email-Worm.Win32.Mimail.c skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNA ... /[From "Chr ... /[Fr ... /[From [email protected]][Date Tue, 9 Dec 2003 12:29:15 -0500 (EST)]/UNNAMED Infected: Email-Worm.Win32.Mimail.c skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNA ... /[From "Chr ... /[From "Ginger Wright" <[email protected]>][Date Mon, 8 Dec 2003 17:10:07 -0500]/text Infected: Email-Worm.Win32.Mimail.c skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNA ... /[From "Chris Br ... /[From Beth Rixie <[email protected]>][Date Mon, 8 Dec 2003 15:09:48 -0600]/text Infected: Email-Worm.Win32.Mimail.c skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNA ... /[From "Chris Brancato" <[email protected]>][Date Mon, 8 Dec 2003 12:07:27 -0500]/UNNAMED Infected: Email-Worm.Win32.Mimail.c skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[Fr ... /[From "Berl ... /[From [email protected]][Date Wed, 10 Dec 2003 11:14:53 ... /photos.jpg.exe Infected: Email-Worm.Win32.Mimail.c skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[Fr ... /[From "Berl ... /[From [email protected]][Date Wed, 10 Dec 2003 11:14:53 -0500 (EST)]/UNNAMED Infected: Email-Worm.Win32.Mimail.c skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[F ... /[From ... /[ ... /[From [email protected]][Date Thu, 11 Dec 2003 12:02:20 ... /photos.jpg.exe Infected: Email-Worm.Win32.Mimail.c skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[F ... /[From ... /[ ... /[From [email protected]][Date Thu, 11 Dec 2003 12:02:20 -0500 (EST)]/UNNAMED Infected: Email-Worm.Win32.Mimail.c skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/ ... /[From "[email protected] ... /[From [email protected]][Date Thu, 11 Dec 2003 12:39:51 ... /photos.jpg.exe Infected: Email-Worm.Win32.Mimail.c skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/ ... /[From "[email protected] ... /[From [email protected]][Date Thu, 11 Dec 2003 12:39:51 -0500 (EST)]/UNNAMED Infected: Email-Worm.Win32.Mimail.c skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Da ... /[From "Siddha Yoga Bookstores" <Bookstore_Newsletter.UM.A. ... /[From [email protected]][Date Mon, 15 Dec 2003 11:47:13 ... /photos.jpg.exe Infected: Email-Worm.Win32.Mimail.c skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Da ... /[From "Siddha Yoga Bookstores" <Bookstore_Newsletter.UM.A. ... /[From [email protected]][Date Mon, 15 Dec 2003 11:47:13 -0500 (EST)]/UNNAMED Infected: Email-Worm.Win32.Mimail.c skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Da ... /[From "Siddha Yoga Bookstores" <[email protected]>][Date Fri, 12 Dec 2003 21:16:20 -0500]/UNNAMED Infected: Email-Worm.Win32.Mimail.c skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/ ... /[From ... ... / . ... /[From "David Frenkel" <[email protected]>][Date Thu, 11 Dec 2003 22:43:02 -0600]/text Infected: Email-Worm.Win32.Mimail.c skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/ ... /[From ... ... / ... /[From Tim Toomay <[email protected]>][Date Thu, 11 Dec 2003 17:46:57 -0800]/text Infected: Email-Worm.Win32.Mimail.c skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/ ... /[From ... ... /[From "Rachel Foerster" <[email protected]>][Date Thu, 11 Dec 2003 18:09:41 -0600]/UNNAMED Infected: Email-Worm.Win32.Mimail.c skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/ ... /[From ... /[From "Berlinger, Jim" <[email protected]>][Date Thu, 11 Dec 2003 14:26:41 -0500]/text Infected: Email-Worm.Win32.Mimail.c skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/ ... /[From "[email protected]" <[email protected]>][Date Thu, 11 Dec 2003 11:33:39 -0500]/text Infected: Email-Worm.Win32.Mimail.c skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[F ... /[From ... /[From "David Frenkel" <[email protected]>][Date Wed, 10 Dec 2003 22:34:10 -0600]/UNNAMED Infected: Email-Worm.Win32.Mimail.c skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[F ... /[From Staples <[email protected]>][Date Wed, 10 Dec 2003 12:05:04 -0500 (EST)]/text Infected: Email-Worm.Win32.Mimail.c skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[Fr ... /[From "Berlinger, Jim" <[email protected]>][Date Wed, 10 Dec 2003 09:14:15 -0500]/text Infected: Email-Worm.Win32.Mimail.c skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[From "Phil B ... /[ ... /[From [email protected]][Date Wed, 24 Dec 2003 10:14:03 ... /photos.jpg.exe Infected: Email-Worm.Win32.Mimail.c skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[From "Phil B ... /[ ... /[From [email protected]][Date Wed, 24 Dec 2003 10:14:03 -0500 (EST)]/UNNAMED Infected: Email-Worm.Win32.Mimail.c skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED ... / .. ... /[From ... /[From [email protected]][Date Fri, 26 Dec 2003 11:59:03 ... /photos.jpg.exe Infected: Email-Worm.Win32.Mimail.c skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED ... / .. ... /[From ... /[From [email protected]][Date Fri, 26 Dec 2003 11:59:03 -0500 (EST)]/UNNAMED Infected: Email-Worm.Win32.Mimail.c skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED ... / .. ... /[From "Julius Heller" <[email protected]>][Date Thu, 25 Dec 03 15:36:19 GMT]/UNNAMED Infected: Email-Worm.Win32.Mimail.c skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED ... / .. ... /[From "Genevie Vetrano" <[email protected]>][Date Thu, 25 Dec 2003 18:58:10 +0100]/UNNAMED Infected: Email-Worm.Win32.Mimail.c skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED ... / ... /[From "Doug Clifton" <[email protected]>][Date Wed, 24 Dec 2003 15:37:13 - ... /UNNAMED Infected: Email-Worm.Win32.Mimail.c skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED ... / ... /[From "Doug Clifton" <[email protected]>][Date Wed, 24 Dec 2003 15:37:13 -0800]/UNNAMED Infected: Email-Worm.Win32.Mimail.c skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED ... / ... /[From "Doug Clifton" <dcl ... /[From [email protected]][Date Wed, 24 Dec 2003 14:41:30 EST]/text Infected: Email-Worm.Win32.Mimail.c skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED ... / ... /[From "Doug Clifton" <[email protected]>][Date Wed, 24 Dec 2003 11:16:08 - ... /UNNAMED Infected: Email-Worm.Win32.Mimail.c skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED ... / ... /[From "Doug Clifton" <[email protected]>][Date Wed, 24 Dec 2003 11:16:08 -0800]/UNNAMED Infected: Email-Worm.Win32.Mimail.c skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED ... /[From PWW EMS Law Bulletins <[email protected]>][Date Wed, 24 Dec 2003 12:01:20 -0500]/UNNAMED Infected: Email-Worm.Win32.Mimail.c skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[From "Phil B ... /[From "David Frenkel" <[email protected]>][Date Tue, 23 Dec 2003 08:11:22 -0600]/UNNAMED Infected: Email-Worm.Win32.Mimail.c skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[From "Phil Burns" < ... /[From [email protected]][Date Fri, 19 Dec 2003 09:43:23 -0500]/UNNAMED Infected: Email-Worm.Win32.Mimail.c skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[From "Phil Burns" <p ... /[From [email protected]][Date Mon, 5 Jan 2004 11:41:53 ... /photos.jpg.exe Infected: Email-Worm.Win32.Mimail.c skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[From "Phil Burns" <p ... /[From [email protected]][Date Mon, 5 Jan 2004 11:41:53 -0500 ( ... /UNNAMED Infected: Email-Worm.Win32.Mimail.c skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[From "Phil Burns" <p ... /[From [email protected]][Date Mon, 5 Jan 2004 11:41:53 -0500 (EST)]/UNNAMED Infected: Email-Worm.Win32.Mimail.c skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[From "Phil Burns" <p ... /[From [email protected]][Date Fri, 9 Jan 2004 11:25:11 ... /photos.jpg.exe Infected: Email-Worm.Win32.Mimail.c skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[From "Phil Burns" <p ... /[From [email protected]][Date Fri, 9 Jan 2004 11:25:11 -0500 (EST)]/UNNAMED Infected: Email-Worm.Win32.Mimail.c skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[From "Phil Burns" <[email protected] ... /[From [email protected]][Date Thu, 8 Jan 2004 15:57:59 EST]/UNNAMED Infected: Email-Worm.Win32.Mimail.c skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <LMS[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[From . ... /[From " ... /[From [email protected]][Date Tue, 13 Jan 2004 14:24:17 ... /photos.jpg.exe Infected: Email-Worm.Win32.Mimail.c skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[From . ... /[From " ... /[From [email protected]][Date Tue, 13 Jan 2004 14:24:17 -0500 (EST)]/UNNAMED Infected: Email-Worm.Win32.Mimail.c skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[From . ... /[From "Jennifer Christopher" <[email protected]>][Date Tue, 13 Jan 04 11:52:43 GMT]/UNNAMED Infected: Email-Worm.Win32.Mimail.c skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[From ... /[From "Hirsch, ... /[From [email protected]][Date Mon, 12 Jan 2004 21:19:21 -0800]/UNNAMED Infected: Email-Worm.Win32.Mimail.c skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[From ... /[From "Hirsch, Andrea" <[email protected]>][Date Mon, 12 Jan 2004 08:52:40 -0500]/text Infected: Email-Worm.Win32.Mimail.c skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAM ... /[From "David A. F ... /[From [email protected]][Date Wed, 14 Jan 2004 13:36:43 ... /photos.jpg.exe Infected: Email-Worm.Win32.Mimail.c skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAM ... /[From "David A. F ... /[From [email protected]][Date Wed, 14 Jan 2004 13:36:43 -0500 (EST)]/UNNAMED Infected: Email-Worm.Win32.Mimail.c skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAM ... /[From "David A. Feinberg, C.D.P." <[email protected]>][Date Wed, 14 Jan 2004 08:54:20 -0800]/text Infected: Email-Worm.Win32.Mimail.c skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[From ... /[From "Susan LAWSON" <[email protected]>][Date Wed, 14 Jan 2004 08:30:34 -0800]/UNNAMED Infected: Email-Worm.Win32.Mimail.c skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[From "Phil Burns" <[email protected] ... /[From [email protected]][Date Mon, 26 Jan 2004 20:34:20 -0500]/UNNAMED Infected: Email-Worm.Win32.Mydoom.a skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[From "Phil Burns" <pbu ... /[From [email protected]][Date Mon, 26 Jan 2004 17:44:04 ... /text.scr Infected: Email-Worm.Win32.Mydoom.a skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[From "Phil Burns" <pbu ... /[From [email protected]][Date Mon, 26 Jan 2004 17:44:04 - ... /UNNAMED Infected: Email-Worm.Win32.Mydoom.a skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[From "Phil Burns ... /test.htm .pif Infected: Email-Worm.Win32.Mydoom.a skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[From "Phil Burns" <pbu ... /[From [email protected]][Date Tue, 27 Jan 2004 06:42:06 -0500]/UNNAMED Infected: Email-Worm.Win32.Mydoom.a skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[From "Phil Burns" <pbu ... ... /[From [email protected]][Date Tue, 27 Jan 2004 09:37:45 -0500]/UNNAMED Infected: Email-Worm.Win32.Mydoom.a skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[From ... /[Fr ... /[ ... /[From [email protected]][Date Tue, 27 Jan 2004 16:35:47 ... /file.pif Infected: Email-Worm.Win32.Mydoom.a skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[From ... /[Fr ... /[ ... /[From [email protected]][Date Tue, 27 Jan 2004 16:35:47 -0500]/UNNAMED Infected: Email-Worm.Win32.Mydoom.a skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[From ... /[Fr ... /[From "Lori Cano" <[email protected]>][Date Tue, 27 Jan 2004 06:01:26 +0200]/UNNAMED Infected: Email-Worm.Win32.Mydoom.a skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[From ... /[From "Doug Clifton" <[email protected]>][Date Tue, 27 Jan 2004 07:16:48 - ... /UNNAMED Infected: Email-Worm.Win32.Mydoom.a skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[From ... /[From "Doug Clifton" <[email protected]>][Date Tue, 27 Jan 2004 07:16:48 -0800]/UNNAMED Infected: Email-Worm.Win32.Mydoom.a skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[From "Phil Burns" <pbu ... /[From [email protected]][Date Mon, 26 Jan 2004 17:44:04 -1000]/UNNAMED Infected: Email-Worm.Win32.Mydoom.a skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[From "Phil Burns" <[email protected] ... /[From <[email protected]>][Date Mon, 26 Jan 2004 16:23:27 -0500]/text Infected: Email-Worm.Win32.Mydoom.a skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50 ... /[From Bridgeport L .. ... /[From "Chapu ... /[From [email protected]][Date Tue, 17 Feb 2004 17:07:51 -0500]/UNNAMED Infected: Email-Worm.Win32.Bagle.b skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50 ... /[From Bridgeport L .. ... /[From "Chapuis, Matt" <[email protected]>][Date Tue, 17 Feb 2004 14:44:02 -0600]/text Infected: Email-Worm.Win32.Bagle.b skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50 ... /[From Bridgeport L ... /[From Share HIPAA <[email protected]>][Date Tue, 17 Feb 2004 11:07:11 -0800 (PST)]/UNNAMED Infected: Email-Worm.Win32.Bagle.b skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50 ... /[From Bridgeport L ... /[From "Susan LAWSON" <[email protected]>][Date Tue, 17 Feb 2004 11:04:47 -0800]/UNNAMED Infected: Email-Worm.Win32.Bagle.b skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50 ... /[From Bridgeport Labs <[email protected]>][Date Tue, 17 Feb 2004 09:51:39 -0500 (EST)]/UNNAMED Infected: Email-Worm.Win32.Bagle.b skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[From "Phil Burns" <[email protected] ... /[From [email protected]][Date Wed, 18 Feb 2004 12:19:09 -0800]/UNNAMED Infected: Email-Worm.Win32.NetSky.b skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[Fr .. ... /information.txt .pif Infected: Email-Worm.Win32.Mydoom.e skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[Fr ... /[From "Willia ... /[From [email protected]][Date Mon, 23 Feb 2004 22:01:01 -0800]/UNNAMED Infected: Email-Worm.Win32.Mydoom.e skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[Fr ... /[From "William J. Kammerer" <[email protected]>][Date Tue, 24 Feb 2004 08:49:18 -0500]/text Infected: Email-Worm.Win32.Mydoom.e skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[From "Phil Burns" <pburns ... /[From [email protected]][Date Tue, 16 Mar 2004 23:2 ... /xnxmpcgyb.exe Infected: Email-Worm.Win32.Bagle.i skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[From "Phil Burns" <pburns ... /[From [email protected]][Date Tue, 16 Mar 2004 23:20:48 -0500]/UNNAMED Infected: Email-Worm.Win32.Bagle.i skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[F ... /[From "Bentz-Mille ... /[From [email protected]][Date Wed, 17 Mar 2004 16:50:24 - ... /UNNAMED Infected: Email-Worm.Win32.Bagle.i skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[F ... /[From "Bentz-Mille ... /[From [email protected]][Date Wed, 17 Mar 2004 16:50:24 -0500]/UNNAMED Infected: Email-Worm.Win32.Bagle.i skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[F ... /[From "Bentz-Miller, Judith" <[email protected]>][Date Wed, 17 Mar 2004 13:18:13 -0500]/UNNAMED Infected: Email-Worm.Win32.Bagle.i skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[From ... /[From "Doug Clifton" <[email protected]>][Date Wed, 17 Mar 2004 09:22:28 - ... /UNNAMED Infected: Email-Worm.Win32.Bagle.i skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[From ... /[From "Doug Clifton" <[email protected]>][Date Wed, 17 Mar 2004 09:22:28 -0800]/UNNAMED Infected: Email-Worm.Win32.Bagle.i skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[From ... /[From Share HIPAA <[email protected]>][Date Tue, 16 Mar 2004 20:23:49 -0800 (PST)]/UNNAMED Infected: Email-Worm.Win32.Bagle.i skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[From "Phil Burns" <[email protected] ... /[From [email protected]][Date Mon, 15 Mar 2004 17:46:09 EST]/UNNAMED Infected: Email-Worm.Win32.Bagle.i skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[From "Phil Bur ... /[From ... /[From [email protected]][Date Thu, 18 Mar 2004 09:37:51 -0800]/UNNAMED Infected: Password-protected-EXE skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[From "Phil Bur ... /[From "Douglas Webb" <[email protected]>][Date Thu, 18 Mar 2004 09:45:33 -0600]/UNNAMED Infected: Password-protected-EXE skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED .. ... /[From PWW EMS Law Bul ... /[From [email protected]][Date Thu, 1 Apr 2004 06:51:07 -0600]/UNNAMED Infected: Email-Worm.Win32.NetSky.q skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED .. ... /[From PWW EMS Law Bulletins <[email protected]>][Date Wed, 31 Mar 2004 17:10:11 -0500]/text Infected: Email-Worm.Win32.NetSky.q skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED ... / ... /[From "Elizabeth Webb ... /[From [email protected]][Date Wed, 31 Mar 2004 14:59:47 EST]/UNNAMED Infected: Email-Worm.Win32.NetSky.q skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED ... / ... /[From "Elizabeth Webb" <[email protected]>][Date Tue, 30 Mar 2004 20:03:59 -0600]/UNNAMED Infected: Email-Worm.Win32.NetSky.q skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED ... / .. ... /[From "Ken Hoover" <[email protected]>][Date Fri, 26 Mar 2004 12:37:21 -0500]/UNNAMED Infected: Email-Worm.Win32.NetSky.q skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED ... / ... /[From "Doug Clifton" <[email protected]>][Date ... /[Date of Service: 5/1 ... /UNNAMED Infected: Email-Worm.Win32.NetSky.q skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED ... / ... /[From "Doug Clifton" <[email protected]>][Date ... /[Date of Service: 5/12/03]/UNNAMED Infected: Email-Worm.Win32.NetSky.q skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected].com>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED ... / ... /[From "Doug Clifton" <[email protected]>][Date Thu, 25 Mar 2004 15:34:22 -0800]/UNNAMED Infected: Email-Worm.Win32.NetSky.q skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED ... /[From "Candace Foster" <[email protected]>][Date Thu, 25 Mar 2004 07:20:29 -0600]/UNNAMED Infected: Email-Worm.Win32.NetSky.q skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED ... /[From "Kathleen Con ... /[From [email protected]][Date Fri, 16 Apr 2004 0 ... /document.htm.exe Infected: Email-Worm.Win32.NetSky.b skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED ... /[From "Kathleen Con ... /[From [email protected]][Date Fri, 16 Apr 2004 09:58:36 -0400]/UNNAMED Infected: Email-Worm.Win32.NetSky.b skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED ... /[From "Kathleen Connor" <[email protected]>][Date Thu, 15 Apr 2004 17:22:18 -0700]/UNNAMED Infected: Email-Worm.Win32.NetSky.b skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[F .. ... /[From "Gene Carruth" <[email protected]>][Date Thu, 15 Apr 2004 15:31:55 -0700]/UNNAMED Infected: Email-Worm.Win32.NetSky.b skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[F ... /[From "Ellen L. Dutton" <[email protected]>][Date Thu, 15 Apr 2004 19:30:31 -0400]/UNNAMED Infected: Email-Worm.Win32.NetSky.b skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[From "Phil Bur ... /[Fr ... /[From [email protected]][Date Mon, 19 Apr 2004 07:56:51 -0400]/UNNAMED Infected: Email-Worm.Win32.NetSky.b skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[From "Phil Bur ... /[From "Douglas Webb" <[email protected]>][Date Fri, 16 Apr 2004 09:32:39 -0500]/UNNAMED Infected: Email-Worm.Win32.NetSky.b skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[From "Phil Bur ... /details.txt .pif Infected: Email-Worm.Win32.NetSky.q skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[From "Phil Burns" <pburn ... /[From [email protected]][Date Tue, 20 Apr 2004 10:43:39 - ... /UNNAMED Infected: Email-Worm.Win32.NetSky.q skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[From "Phil Burns" <pburn ... /[From [email protected]][Date Tue, 20 Apr 2004 10:43:39 -0700]/UNNAMED Infected: Email-Worm.Win32.NetSky.q skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[ . ... /[From ... /details.txt .pif Infected: Email-Worm.Win32.NetSky.q skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[ . ... /[From "florine shaw" <[email protected]>][Date Sun, 25 Apr 2004 10:02:07 +0900]/UNNAMED Infected: Email-Worm.Win32.NetSky.q skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0 ... /[From Mail Delivery Subsystem <[email protected]>][Date Sat, 24 Apr 2004 21:37:24 -0400]/UNNAMED Infected: Email-Worm.Win32.NetSky.q skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[ ... /[From "Platinum-Deal.com" <[email protected]>][Date Sat, 24 Apr 2004 17:11:59 -0400]/text Infected: Email-Worm.Win32.NetSky.q skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNA ... /[From "McDanie ... /[From "Pshah" <[email protected]>][Date Mon, 10 May 2004 11:25:06 - ... /UNNAMED Infected: Email-Worm.Win32.Bagle.z skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNA ... /[From "McDanie ... /[From "Pshah" <[email protected]>][Date Mon, 10 May 2004 11:25:06 -0600]/UNNAMED Infected: Email-Worm.Win32.Bagle.z skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNA ... /[From "McDanie ... /[From [email protected]][Date Tue, 27 Apr 2004 08:20:23 - ... /UNNAMED Infected: Email-Worm.Win32.Bagle.z skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNA ... /[From "McDanie ... /[From [email protected]][Date Tue, 27 Apr 2004 08:20:23 -0700]/UNNAMED Infected: Email-Worm.Win32.Bagle.z skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNA ... /[From "McDaniel, Mary Kay" <[email protected]>][Date Tue, 27 Apr 2004 08:15:08 -0700]/UNNAMED Infected: Email-Worm.Win32.Bagle.z skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[From ... / ... /[From F ... /[From [email protected]][Date Fri, 28 May 2004 07:2 ... /topseller.exe Infected: Email-Worm.Win32.NetSky.b skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[From ... / ... /[From F ... /[From [email protected]][Date Fri, 28 May 2004 07:28:32 -0400]/UNNAMED Infected: Email-Worm.Win32.NetSky.b skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[From ... / ... /[From FixMyCreditNow <[email protected]>][Date Fri, 28 May 2004 07:08:21 -0400]/UNNAMED Infected: Email-Worm.Win32.NetSky.b skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[From ... /[From Susanne Stiward <[email protected]>][Date Thu, 27 May 2004 20:01:56 -0700]/UNNAMED Infected: Email-Worm.Win32.NetSky.b skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[From "P ... /[From "Rachel Foerster" <[email protected]>][Date Thu, 27 May 2004 13:49:27 -0500]/UNNAMED Infected: Email-Worm.Win32.NetSky.b skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[From "P ... /[From "Margaret Murphey" <[email protected]>][Date Thu, 27 May 2004 10:59:46 -0700]/UNNAMED Infected: Email-Worm.Win32.NetSky.b skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[From "Phil B ... /[From "David Frenkel" <[email protected]>][Date Thu, 27 May 2004 12:51:14 -0500]/UNNAMED Infected: Email-Worm.Win32.NetSky.b skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/ ... /[From Sharr ... /[From "Rmoore" <[email protected]>][Date Tue, 08 Jun 2004 20:43:32 -0600]/UNNAMED Infected: Email-Worm.Win32.Bagle.z skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/ ... /[From Sharry Aschenbrenner <[email protected]>][Date Tue, 8 Jun 2004 10:55:25 -0700 (PDT)]/text Infected: Email-Worm.Win32.Bagle.z skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[From ... /[From Su . ... /[From "Frank " <[email protected]>][Date Tue, 08 Jun 2004 10:18:46 +0100]/UNNAMED Infected: Email-Worm.Win32.Bagle.z skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[From ... /[From Su ... /[From "Neil Ferree" <[email protected]>][Date Mon, 7 Jun 2004 13:06:33 -0700]/text Infected: Email-Worm.Win32.Bagle.z skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[From ... /[From Susanne Stiward <[email protected]>][Date Fri, 04 Jun 2004 20:06:05 -0700]/UNNAMED Infected: Email-Worm.Win32.Bagle.z skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[From ... /[From Susanne Stiward <[email protected]>][Date Fri, 04 Jun 2004 20:03:56 -0700]/UNNAMED Infected: Email-Worm.Win32.Bagle.z skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[From "Phil Bu ... ... /[From "Paul Litwak" <[email protected]>][Date Fri, 4 Jun 2004 10:02:36 -0400]/text Infected: Email-Worm.Win32.Bagle.z skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[From "Phil Bu ... /[From Tim Toomay <[email protected]>][Date Thu, 03 Jun 2004 11:11:09 -0700]/text Infected: Email-Worm.Win32.Bagle.z skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 2 ... /[From Yahoo! Groups Notification <[email protected]>][Date 19 Jun 2004 13:18:01 -0000]/UNNAMED Infected: Email-Worm.Win32.Bagle.z skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNA ... /[F .. ... /[From "Rachel Foerster" <[email protected]>][Date Fri, 18 Jun 2004 11:16:21 -0500]/UNNAMED Infected: Email-Worm.Win32.Bagle.z skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNA ... /[F ... /[F ... /[From "Alex Kaplun" <[email protected]>][Date Fri, 18 Jun 2004 12:17:44 -0400]/UNNAMED Infected: Email-Worm.Win32.Bagle.z skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNA ... /[F ... /[From Art Schenkman <[email protected]>][Date Fri, 18 Jun 2004 08:58:53 -0700]/UNNAMED Infected: Email-Worm.Win32.Bagle.z skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNA ... /[From "David A. Feinberg, C.D.P." <[email protected]>][Date Thu, 17 Jun 2004 17:47:17 -0700]/text Infected: Email-Worm.Win32.Bagle.z skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNA ... /[Fr ... /[From Susanne Stiward <[email protected]>][Date Thu, 17 Jun 2004 16:58:05 -0700]/UNNAMED Infected: Email-Worm.Win32.Bagle.z skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNA ... /[From "McDaniel, Mary Kay" <[email protected]>][Date Thu, 17 Jun 2004 15:07:05 -0700]/UNNAMED Infected: Email-Worm.Win32.Bagle.z skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[From "Phil Burns ... /[From "Rachel" <[email protected]>][Date Fri, 29 Oct 2004 13:55:42 -0500]/UNNAMED Infected: Email-Worm.Win32.Bagle.au skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[From "Phil Burns ... /[From "Rachel" <[email protected]>][Date Fri, 29 Oct 2004 13:55:34 -0500]/UNNAMED Infected: Email-Worm.Win32.Bagle.au skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNN ... /[F ... /[From "Pearl Meade" <[email protected]>][Date Wed, 11 May 2005 15:10:19 +0500]/html Infected: Trojan-Spy.HTML.Bayfraud.ev skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNN ... /[F . . ... ... /[From "Tom Plummer" <[email protected]>][Date Tue, 10 May 2005 13:36:10 -0500]/text Infected: Trojan-Spy.HTML.Bayfraud.ev skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNN ... /[F . . ... /[From "Bianca Francis" <[email protected]>][Date Fri, 06 May 2005 17:14:25 -0500]/html Infected: Trojan-Spy.HTML.Bayfraud.ev skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNN ... /[F . ... /[Fr ... /[From Tim Toomay <[email protected]com>][Date Thu, 05 May 2005 11:14:56 -0700]/text Infected: Trojan-Spy.HTML.Bayfraud.ev skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNN ... /[F . ... /[From ... /[From "Douglas Webb" <[email protected]>][Date Thu, 5 May 2005 12:26:22 -0500]/UNNAMED Infected: Trojan-Spy.HTML.Bayfraud.ev skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNN ... /[F . ... /[From ... /[From Dora Camacho <[email protected]>][Date Wed, 04 May 2005 21:38:42 +0200]/text Infected: Trojan-Spy.HTML.Bayfraud.ev skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNN ... /[F . ... /[From "Wilmer Bergeron" <[email protected]>][Date Wed, 04 May 2005 07:45:47 -0700]/UNNAMED Infected: Trojan-Spy.HTML.Bayfraud.ev skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNN ... /[F ... /[From "claribel isene" <[email protected]>][Date Tue, 3 May 2005 04:44:10 -0700]/UNNAMED Infected: Trojan-Spy.HTML.Bayfraud.ev skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNN ... /[Fro ... /[From "Anahi Santiago" <[email protected]>][Date Tue, 03 May 2005 16:49:35 -0400]/UNNAMED Infected: Trojan-Spy.HTML.Bayfraud.ev skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNN ... /[From "Gregorio Olsen" <[email protected]>][Date Mon, 02 May 2005 19:52:42 -0800]/UNNAMED Infected: Trojan-Spy.HTML.Bayfraud.ev skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:1 ... /[From "SunTrust Bank, Inc." <[email protected]>][Date Wed, 06 Sep 2006 11:58:38 -0600]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.qb skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAME ... /[From "Gas Station Critics" <[email protected]>][Date Wed, 6 Sep 2006 12:56:23 -0400 (EDT)]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.qb skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[ ... / ... /[From "zeidemik.com" <[email protected]>][Date Wed, 6 Sep 2006 12:43:40 -0400 (EDT)]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.qb skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[ ... /[From Wine Connoisseurs<[email protected]>][Date 06 Sep 2006 12:37:47 -0400]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.qb skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[ . ... /[ ... /[From Vang Rosalie <[email protected]>][Date Sat, 20 Jan 2007 07:57:59 +0900]/UNNAMED Infected: Email-Worm.Win32.Zhelatin.a skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500] ... ... /[From "Ho ... /[From "Roland" <[email protected]>][Date Sun, 14 May 2000 01:30:02 +053 ... /UNNAMED Infected: Email-Worm.Win32.Zhelatin.a skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500] ... ... /[From .. ... /[From "Dolores Varner" <[email protected]>][Date Sat, 20 Jan 2007 05:01:39 -0800]/UNNAMED Infected: Email-Worm.Win32.Zhelatin.a skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]gellanhealth.com>][Date Tue, 20 May 2003 08:50: ... /[From OnlineT ... /[From "Trisha Shultz" <[email protected]>][Date Sat, 20 Jan 2007 19:41:04 -0000]/UNNAMED Infected: Email-Worm.Win32.Zhelatin.a skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 0 ... /[From "Val ... /[From executive <[email protected]>][Date Sun, 21 Jan 2007 13:46:48 +0900]/UNNAMED Infected: Email-Worm.Win32.Zhelatin.a skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 0 ... /[From "Valent ... /[From "i ... /[From "Darin Sprague" <[email protected]>][Date Sun, 21 Jan 2007 19:12:54 -0800]/UNNAMED Infected: Email-Worm.Win32.Zhelatin.a skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 0 ... /[From "Valent ... /[From "iPhone Marketing" <[email protected]>][Date Sun, 21 Jan 2007 04:02:53 -0700]/text Infected: Email-Worm.Win32.Zhelatin.a skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 0 ... /[From "Valent ... /[From "(270) 818-7244 Dewey " <[email protected]>][Date Sun, 21 Jan 2007 10:20:20 +0200]/text Infected: Email-Worm.Win32.Zhelatin.a skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 0 ... /[From "ValentinesD ... /[From "DoggySteps" <[email protected]>][Date Sat, 20 Jan 2007 23:56:08 -0500 (EST)]/UNNAMED Infected: Email-Worm.Win32.Zhelatin.a skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 0 ... /[From "ValentinesDa ... /[From WheelOfChance <[email protected]>][Date Sat, 20 Jan 2007 15:27:50 PST]/UNNAMED Infected: Email-Worm.Win32.Zhelatin.a skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 0 ... /[From "ValentinesDayPro ... /[From "News Alert" <[email protected]>][Date Sun, 21 Jan 2007 01:23:14 -0-100]/UNNAMED Infected: Email-Worm.Win32.Zhelatin.a skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 0 ... /[From "ValentinesDayPromotion" ... /[From "Kelly" <[email protected]>][Date Sat, 20 Jan 2007 17:59:54 -0500]/text Infected: Email-Worm.Win32.Zhelatin.a skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 0 ... /[From "ValentinesDayPromotion" <[email protected]>][Date Sat, 20 Jan 2007 14:50:50 -0500 (EST)]/UNNAMED Infected: Email-Worm.Win32.Zhelatin.a skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50: ... /[From OnlineTicketReceipt <[email protected]>][Date Sat, 20 Jan 2007 13:13:19 EST]/text Infected: Email-Worm.Win32.Zhelatin.a skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500] ... . ... ... /[From "DoggySteps" <[email protected]>][Date Sat, 20 Jan 2007 12:07:13 -0500 (EST)]/UNNAMED Infected: Email-Worm.Win32.Zhelatin.a skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500] ... . ... /[From Weldon P. Dempsey <[email protected]>][Date Sat, 20 Jan 2007 17:08:15 +0000]/UNNAMED Infected: Email-Worm.Win32.Zhelatin.a skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500] ... ... /[From .. ... /[Fr ... /[From genius <[email protected]>][Date Fri, 12 Jan 2007 10:00:07 +0200]/UNNAMED Infected: Email-Worm.Win32.Zhelatin.a skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500] ... ... /[From .. ... /[From theatre <[email protected]>][Date Sat, 20 Jan 2007 18:01:10 +0100]/UNNAMED Infected: Email-Worm.Win32.Zhelatin.a skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500] ... ... /[From ... / ... /[From "Dolores Varner" <[email protected]>][Date Sat, 20 Jan 2007 05:01:39 -0800]/text Infected: Email-Worm.Win32.Zhelatin.a skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500] ... ... /[From ... /[From "Lakisha Willard" <[email protected]>][Date Sat, 20 Jan 2007 05:01:01 -0800]/text Infected: Email-Worm.Win32.Zhelatin.a skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500] ... ... /[From "H ... /[From "James Drake" <[email protected]>][Date Sat, 20 Jan 2007 07:40:18 -0500]/UNNAMED Infected: Email-Worm.Win32.Zhelatin.a skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500] ... ... /[From "Ho ... /[From "Roland" <[email protected]>][Date Sun, 14 May 2000 01:30:02 +053 ... /UNNAMED Infected: Email-Worm.Win32.Zhelatin.a skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500] ... ... /[From "Ho ... /[From "Roland" <[email protected]>][Date Sun, 14 May 2000 01:30:02 +0530 ( ... /text Infected: Email-Worm.Win32.Zhelatin.a skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500] ... ... /[From "Ho ... /[From "Roland" <[email protected]>][Date Sun, 14 May 2000 01:30:02 +0530 (EET)]/html Infected: Email-Worm.Win32.Zhelatin.a skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500] ... ... /[From "Hoodi ... /[From Lorna <[email protected]>][Date Sat, 20 Jan 2007 03:44:58 -0800 (PST)]/UNNAMED Infected: Email-Worm.Win32.Zhelatin.a skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500] ... ... /[From "Hoodi ... /[From Lorna <[email protected]>][Date Sat, 20 Jan 2007 03:27:25 -0800 (PST)]/UNNAMED Infected: Email-Worm.Win32.Zhelatin.a skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500] ... ... /[From "HoodiaReport" <[email protected]>][Date Sat, 20 Jan 2007 03:07:36 -0500 (EST)]/UNNAMED Infected: Email-Worm.Win32.Zhelatin.a skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500] ... /[From College Scholarships <[email protected]>][Date Sat, 20 Jan 2007 02:20:52 EST]/html Infected: Email-Worm.Win32.Zhelatin.a skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[ . . ... / . ... /[From damages <[email protected]>][Date Sat, 20 Jan 2007 07:52:10 +0200]/UNNAMED Infected: Email-Worm.Win32.Zhelatin.a skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[ . . ... / ... /[From disclose on <[email protected]>][Date Sat, 20 Jan 2007 07:48:16 +0200]/UNNAMED Infected: Email-Worm.Win32.Zhelatin.a skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[ . . ... /[From "Jeffrey Gonzales" <[email protected]>][Date Sat, 20 Jan 2007 15:37:15 +1000]/UNNAMED Infected: Email-Worm.Win32.Zhelatin.a skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[ . ... /[Fro ... /[From Vang Rosalie <[email protected]>][Date Sat, 20 Jan 2007 07:57:59 +0900]/text Infected: Email-Worm.Win32.Zhelatin.a skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[ . ... /[From "DoggySteps" <[email protected]>][Date Fri, 19 Jan 2007 17:26:09 -0500 (EST)]/UNNAMED Infected: Email-Worm.Win32.Zhelatin.a skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[ ... /[From "SleepyTime" <[email protected]>][Date Fri, 19 Jan 2007 15:03:52 -0500 (EST)]/UNNAMED Infected: Email-Worm.Win32.Zhelatin.a skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/ ... /[ ... /[From "Elidia Akins." <[email protected]>][Date Sat, 27 Jan 2007 11:39:34 -0800]/UNNAMED Infected: Email-Worm.Win32.Banwarum.l skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/ ... /[From "123Inkj ... /[From Dating <[email protected]>][Date Sat, 27 Jan 2007 15:21:18 EST]/html Infected: Email-Worm.Win32.Banwarum.l skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/ ... /[From "123Inkjets" <[email protected]>][Date Sat, 27 Jan 2007 11:25:20 -0500 (EST)]/UNNAMED Infected: Email-Worm.Win32.Banwarum.l skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[Fro ... /[From "OApril YHayes" <[email protected]>][Date Sat, 27 Jan 2007 19:06:00 +0300]/UNNAMED Infected: Email-Worm.Win32.Banwarum.l skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[Fro ... ... /[From "DishTV" <[email protected]>][Date Sat, 27 Jan 2007 09:57:05 -0500 (EST)]/UNNAMED Infected: Email-Worm.Win32.Banwarum.l skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[Fro ... /[From "muldaya.com" <[email protected]>][Date Sat, 27 Jan 2007 08:57:52 -0500 (EST)]/UNNAMED Infected: Email-Worm.Win32.Banwarum.l skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[Fro ... /[ ... /[From Wolfe" <[email protected]>][Date 27 Jan 2007 13:09:41 -0060]/html Infected: Email-Worm.Win32.Banwarum.l skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[Fro ... /[From "Mortgage News" <[email protected]>][Date Sat, 27 Jan 2007 18:07:53 -0800]/html Infected: Email-Worm.Win32.Banwarum.l skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[Fro ... /[From Wise Shoppers<Campbel[email protected]>][Date 27 Jan 2007 01:40:37 -0500]/UNNAMED Infected: Email-Worm.Win32.Banwarum.l skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[Fro ... /[From Lotto - Zo werkt Lotto <[email protected]>][Date Tue, 30 Jan 2007 03:24:09 +0100]/UNNAMED Infected: Email-Worm.Win32.Zhelatin.h skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[From "Phi ... /[From Rangel Humphry <[email protected]>][Date Wed, 31 Jan 2007 01:00:08 -0500]/UNNAMED Infected: Email-Worm.Win32.Zhelatin.k skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[From ... /[From Archibald Shafer <[email protected]>][Date Fri, 2 Feb 2007 21:14:31 -0800]/UNNAMED Infected: Email-Worm.Win32.Zhelatin.m skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[From " .. ... /[From Vance Annie <[email protected]>][Date Sat, 3 Feb 2007 02:21:17 - ... /UNNAMED Infected: Email-Worm.Win32.Zhelatin.m skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[From " .. ... /[From Vance Annie <[email protected]>][Date Sat, 3 Feb 2007 02:21:17 -0600]/UNNAMED Infected: Email-Worm.Win32.Zhelatin.m skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[From " .. ... /[From "RUSSELL HOUGH" <[email protected]>][Date Sat, 03 Feb 2007 00:20:34 -0800]/UNNAMED Infected: Email-Worm.Win32.Zhelatin.m skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[From " ... /[From "message" <[email protected]>][Date Sat, 3 Feb 2007 00:50:35 -0500 (EST)]/UNNAMED Infected: Email-Worm.Win32.Zhelatin.m skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[From "Ph ... /[From Everett Ninon <[email protected]>][Date Sun, 4 Feb 2007 03:07:42 +0200]/UNNAMED Infected: Email-Worm.Win32.Zhelatin.o skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[From "Phil Bu ... /[From "Bidz" <[email protected]>][Date Sat, 3 Feb 2007 17:55:52 -0500 (EST)]/UNNAMED Infected: Email-Worm.Win32.Zhelatin.o skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[F .. .. ... /[From Jane Mata <[email protected]>][Date Sun, 4 Feb 2007 16:28:47 -0500]/UNNAMED Infected: Trojan-Downloader.Win32.Tibs.jr skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[F .. ... /[From "Robert William" <[email protected]>][Date Sun, 4 Feb 2007 20:21:31 +0480]/UNNAMED Infected: Trojan-Downloader.Win32.Tibs.jr skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[F ... /[From "CarWarranty" ... /[From Orr" <[email protected]>][Date 4 Feb 2007 19:41:02 -0060]/text Infected: Trojan-Downloader.Win32.Tibs.jr skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[F ... /[From "CarWarranty" <[email protected]>][Date Sun, 4 Feb 2007 13:20:58 -0500 (EST)]/UNNAMED Infected: Trojan-Downloader.Win32.Tibs.jr skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[F ... /[From . .. ... /[From slightly <[email protected]>][Date Sun, 4 Feb 2007 18:58:48 +0100]/UNNAMED Infected: Trojan-Downloader.Win32.Tibs.jr skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[F ... /[From . ... /[From Lorna <[email protected]>][Date Sun, 4 Feb 2007 01:54:49 -0800 (PST)]/UNNAMED Infected: Trojan-Downloader.Win32.Tibs.jr skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[F ... /[From ... /[From "Erma Yazzie" <[email protected]>][Date Sun, 04 Feb 2007 00:16:56 -0800]/text Infected: Trojan-Downloader.Win32.Tibs.jr skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[F ... /[From "Andy" <[email protected]>][Date Sun, 04 Feb 2007 03:24:46 -0400]/UNNAMED Infected: Trojan-Downloader.Win32.Tibs.jr skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UN ... ... /[From Contreras L. Morgan <[email protected]>][Date Thu, 8 Feb 2007 15:01:32 -0500]/UNNAMED Infected: Email-Worm.Win32.Zhelatin.t skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UN ... /[From "Home Business Solutions" <[email protected]>][Date Thu, 8 Feb 2007 14:44:08 -0500 (EST)]/UNNAMED Infected: Email-Worm.Win32.Zhelatin.t skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAM ... /[From "GrantsForAll" <[email protected]>][Date Thu, 8 Feb 2007 13:34:24 -0500 (EST)]/UNNAMED Infected: Email-Worm.Win32.Zhelatin.t skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <LMSchmidt[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAM ... /[From "Local Home Listings" <[email protected]>][Date Thu, 8 Feb 2007 13:22:21 -0500 (EST ... /html Infected: Email-Worm.Win32.Zhelatin.t skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAM ... /[From "Local Home Listings" <[email protected]>][Date Thu, 8 Feb 2007 13:22:21 -0500 (EST ... /text Infected: Email-Worm.Win32.Zhelatin.t skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAM ... /[From "Local Home Listings" <[email protected]>][Date Thu, 8 Feb 2007 13:22:21 -0500 (EST)]/UNNAMED Infected: Email-Worm.Win32.Zhelatin.t skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[From "Ph ... /[From "TVonPC" <[email protected]>][Date Thu, 8 Feb 2007 08:25:51 -0500 (EST)]/UNNAMED Infected: Email-Worm.Win32.Zhelatin.t skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[From "Phil Burn ... /[From Carey <[email protected]>][Date Fri, 9 Feb 2007 03:22:06 + ... /UNNAMED Infected: Email-Worm.Win32.Zhelatin.u skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[From "Phil Burn ... /[From Carey <[email protected]>][Date Fri, 9 Feb 2007 03:22:06 +0100]/UNNAMED Infected: Email-Worm.Win32.Zhelatin.u skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 ... /[Fr ... / .. ... /[From "BoyWiza ... /[From Ortiz <[email protected]>][Date Tue, 13 Feb 2007 09:11:54 -0800]/UNNAMED Infected: Email-Worm.Win32.Zhelatin.ab skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 ... /[Fr ... / .. ... /[From "BoyWizard" <[email protected]>][Date Tue, 13 Feb 2007 20:51:29 -0500 (EST)]/UNNAMED Infected: Email-Worm.Win32.Zhelatin.ab skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 ... /[Fr ... / .. ... /[From "BestHoodia" <[email protected]>][Date Tue, 13 Feb 2007 18:49:21 -0500 (EST)]/UNNAMED Infected: Email-Worm.Win32.Zhelatin.ab skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 ... /[Fr ... / ... /[From "HolidayDiet" <[email protected]>][Date Tue, 13 Feb 2007 18:09:02 -0500 (EST)]/UNNAMED Infected: Email-Worm.Win32.Zhelatin.ab skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 ... /[Fr ... /[Fr ... ... /[From Reed Blackman <[email protected]>][Date Tue, 13 Feb 2007 23:45:09 +0100]/UNNAMED Infected: Email-Worm.Win32.Zhelatin.ab skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 ... /[Fr ... /[Fr ... /[From "123Inkjets" <[email protected]>][Date Tue, 13 Feb 2007 16:08:34 -0500 (EST)]/UNNAMED Infected: Email-Worm.Win32.Zhelatin.ab skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 ... /[Fr ... /[From ... /[From Navarro A. Matthias <[email protected]>][Date Tue, 13 Feb 2007 14:47:48 -0500]/text Infected: Email-Worm.Win32.Zhelatin.ab skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 ... /[Fr ... /[From True.com - Christian Singles <[email protected]>][Date Tue, 13 Feb 2007 14:27:00 EST]/UNNAMED Infected: Email-Worm.Win32.Zhelatin.ab skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 ... /[From ... /[F ... /[From Beard Rachel <[email protected]>][Date Fri, 9 Feb 2007 18:35:51 -0600]/text Infected: Email-Worm.Win32.Zhelatin.ab skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 ... /[From ... /[From "%CUSTOM_FROMS" <ReginaldKaufmann @barniescoffee.com>][Date Fri, 09 Feb 2007 10:59:55 -0800]/text Infected: Email-Worm.Win32.Zhelatin.ab skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 ... /[From Home Improvements <[email protected]>][Date Fri, 9 Feb 2007 08:32:19 PST]/text Infected: Email-Worm.Win32.Zhelatin.ab skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[From "Phil Bu ... /[From "Hurry" <[email protected]>][Date Fri, 9 Feb 2007 08:21:28 -0500 (EST)]/UNNAMED Infected: Email-Worm.Win32.Zhelatin.ab skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08 ... /[From "Branch Banking and Trust" <[email protected]>][Date Mon, 19 Mar 2007 22:35:25 -0400 ( ... /UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08 ... /[From "Branch Banking and Trust" <[email protected]>][Date Mon, 19 Mar 2007 22:35:25 -0400 (EDT)]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50: ... /[Fro .. ... ... /[F ... /[From "Zpmill tutelage" <[email protected]>][Date Mon, 19 Mar 2007 22:12:25 -0400]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]rdon-barnett.com>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50: ... /[Fro .. ... ... /[F ... /[ . ... /[From Thomas S. Nolan <[email protected]>][Date Tue, 20 Mar 2007 10:11:34 +0800]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50: ... /[Fro .. ... ... /[F ... /[ ... /[From artyku" <[email protected]>][Date 20 Mar 2007 03:13:01 +0100]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50: ... /[Fro .. ... ... /[F ... /[From "Lila Milligan" <[email protected]>][Date Mon, 19 Mar 2007 21:55:08 -0500]/text Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50: ... /[Fro .. ... ... /[From "123 ... /[From "Ryan" <[email protected]>][Date Mon, 19 Mar 2007 20:22:22 -0400 (EDT)]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50: ... /[Fro .. ... ... /[From "123Inkjets" <[email protected]>][Date Mon, 19 Mar 2007 17:31:54 -0400 (EDT)]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50: ... /[Fro .. ... /[F ... /[From "Rqeccles field" <[email protected]>][Date Wed, 14 Feb 2007 05:25:05 +0800]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50: ... /[Fro .. ... /[From "Lncommandeer corrode" <[email protected]>][Date Mon, 19 Mar 2007 15:24:44 +0100]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50: ... /[Fro ... /[From ... /[Fro ... /[From "Bidz" <[email protected]>][Date Mon, 19 Mar 2007 17:06:25 -0400 (EDT)]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50: ... /[Fro ... /[From ... /[From Anita Holley <[email protected]>][Date Mon, 19 Mar 2007 21:13:32 +0100]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50: ... /[Fro ... /[From "Warran ... /[From "Buddy" <[email protected]>][Date Tue, 20 Mar 2007 06:53:11 + ... /UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50: ... /[Fro ... /[From "Warran ... /[From "Buddy" <[email protected]>][Date Tue, 20 Mar 2007 06:53:11 +1100]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50: ... /[Fro ... /[From "WarrantyOptio ... /[From trim <[email protected]>][Date Mon, 19 Mar 2007 20:51:46 +0100]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50: ... /[Fro ... /[From "WarrantyOptions" <[email protected]>][Date Mon, 19 Mar 2007 10:11:50 -0400 (EDT)]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50: ... /[From ... /[From "WarrantyOptions" <[email protected]>][Date Mon, 19 Mar 2007 08:31:38 -0400 (EDT)]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50: ... /[From "One Tou ... ... /[From "Foreman" <[email protected]>][Date Mon, 19 Mar 2007 08:07:33 -0500]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50: ... /[From "One Tou ... /[F ... ... /[From "Stephen" <[email protected]>][Date Mon, 19 Mar 2007 11:30:02 +0100]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50: ... /[From "One Tou ... /[F ... /[From Barber P. Susan <[email protected]>][Date Mon, 19 Mar 2007 10:51:59 +0100]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50: ... /[From "One Tou ... /[From "Fredrick ... /[From Media" <[email protected]>][Date 19 Mar 2007 10:45:38 +0100]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50: ... /[From "One Tou ... /[From "Fredrick Gipson" <[email protected]>][Date Mon, 19 Mar 2007 08:10:39 - ... /UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50: ... /[From "One Tou ... /[From "Fredrick Gipson" <[email protected]>][Date Mon, 19 Mar 2007 08:10:39 -0800]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50: ... /[From "One Tou . ... /[From Carol Harrington <[email protected]>][Date Mon, 19 Mar 2007 15:43:45 +0800]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50: ... /[From "One Tou . ... /[From "Eloise Wilder" <[email protected]>][Date Sun, 18 Mar 2007 23:11:24 -050 ... /html Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50: ... /[From "One Tou . ... /[From "Eloise Wilder" <[email protected]>][Date Sun, 18 Mar 2007 23:11:24 -0500]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50: ... /[From "One Tou ... /[From Baby Offers<[email protected]>][Date 18 Mar 2007 21:59:47 -0500]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50: ... /[From "One Tou ... / ... /[From Page I. Jean <[email protected]>][Date Mon, 19 Mar 2007 11:23:06 +0900]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50: ... /[From "One Tou ... /[From "123Inkjets" <[email protected]>][Date Sun, 18 Mar 2007 17:34:05 -0400 (EDT)]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50: ... /[From "One Tou ... ... ... /[From Reynold D. Hollis <[email protected]>][Date Sun, 18 Mar 2007 16:29:39 -0500]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]alth.com>][Date Tue, 20 May 2003 08:50: ... /[From "One Tou ... ... /[From Deon S. Justice <[email protected]>][Date Sun, 18 Mar 2007 14:15:10 -0700]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50: ... /[From "One Tou ... /[Fr ... /[From "Darell" <[email protected]>][Date Mon, 19 Mar 2007 06:22:25 +1100]/text Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50: ... /[From "One Tou ... /[From "123Inkjets" <[email protected]>][Date Sun, 18 Mar 2007 15:21:18 -0400 (EDT)]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50: ... /[From "One Touch Can O ... /[From "Wayne Haney" <[email protected]>][Date Sun, 18 Mar 2007 13:51:58 -0500]/text Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50: ... /[From "One Touch Can Opener" <[email protected]>][Date Sun, 18 Mar 2007 11:31:21 -0600]/text Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50: ... /[From ... ... /[From "CleverClasp" <[email protected]>][Date Sun, 18 Mar 2007 09:21:25 -0400 (EDT)]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50: ... /[From ... ... /[Fro ... /[From Robert A.<[email protected]>][Date 18 Mar 2007 07:13:37 -0400]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50: ... /[From ... ... /[From "DebttoWeal ... /[From [email protected]][Date 9 Mar 2007 23:44:46 +0100]/text Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50: ... /[From ... ... /[From "DebttoWealth" <Debt ... /[From Talk" <[email protected]>][Date 17 Mar 2007 21:08:46 -0500]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50: ... /[From ... ... /[From "DebttoWealth" <[email protected]>][Date Sat, 17 Mar 2007 19:58:11 -0400 (EDT)]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50: ... /[From ... .. ... /[From "123Inkjets" <[email protected]>][Date Sat, 17 Mar 2007 17:28:56 -0400 (EDT)]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50: ... /[From ... .. ... /[From "CECILIA MCBRIDE" <[email protected]>][Date Sat, 17 Mar 2007 14:03:07 -0800]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50: ... /[From ... ... /[F ... /[From Funk Unlimited <[email protected]>][Date 17 Mar 2007 15:03:49 -0400]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50: ... /[From ... ... /[From "Radius Group" <[email protected]>][Date Sat, 17 Mar 2007 14:54:30 -0400 (EDT)]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50: ... /[From ... /[Fro ... /[From "DoggySteps" <[email protected]>][Date Sat, 17 Mar 2007 13:28:44 -0400 (EDT)]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50: ... /[From ... /[From "Extreme Make ... /[From payable <[email protected]>][Date Sat, 17 Mar 2007 18:27:48 +0100]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50: ... /[From ... /[From "Extreme Makeover" ... /[From walk" <[email protected]>][Date 17 Mar 2007 17:25:34 +0100]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50: ... /[From ... /[From "Extreme Makeover" <[email protected]>][Date Sat, 17 Mar 2007 07:45:32 -0500 (GMT-05:00)]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50: ... /[From ... ... /[Fr ... / ... /[From "eBay" <[email protected]>][Date Sat, 17 Mar 2007 04:33:34 -0700]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50: ... /[From ... ... /[Fr ... / ... /[From Gary <[email protected]>][Date Sat, 17 Mar 2007 14:56:36 +0530]/text Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50: ... /[From ... ... /[Fr ... /[From "4Seasons" <[email protected]>][Date Sat, 17 Mar 2007 02:56:27 -0400 (EDT)]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50: ... /[From ... ... /[From [email protected] <[email protected]>][Date 16 Mar 2007 21:16:32 -0500]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50: ... /[From ... / ... /[From "Jewel Hart" <[email protected]>][Date Sat, 17 Mar 2007 02:43:58 + ... /UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50: ... /[From ... / ... /[From "Jewel Hart" <[email protected]>][Date Sat, 17 Mar 2007 02:43:58 +0100]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50: ... /[From ... /[From "ink ... /[From "Bidz" <[email protected]>][Date Fri, 16 Mar 2007 19:36:52 -0400 (EDT)]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50: ... /[From ... /[From "ink liquidation sale" <[email protected]>][Date Fri, 16 Mar 2007 15:27:17 -0400 (EDT)]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50: ... /[From ... /[From "AppetiteKil ... /[From suicide of <[email protected]>][Date Sat, 17 Mar 2007 21:12:19 +0300]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50: ... /[From ... /[From "AppetiteKiller" <[email protected]>][Date Fri, 16 Mar 2007 13:53:22 -0400 (EDT)]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50: ... /[From ... /[From "Warranty ... /[From Tim Toomay <[email protected]>][Date Tue, 02 Jan 2007 16:19:41 -0800]/text Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50: ... /[From ... /[From "WarrantyOptions" <[email protected]>][Date Fri, 16 Mar 2007 13:21:21 -0400 (EDT)]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50: ... /[From ... /[From "NHIC, Corp." <[email protected]>][Date Fri, 16 Mar 2007 12:48:25 -0400 (EDT)]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50: ... /[From "One Touch Can Opener" <OneTouch ... /[From Colette <[email protected]>][Date Fri, 16 Mar 2007 09:32:45 -0500]/text Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50: ... /[From "One Touch Can Opener" <[email protected]>][Date Fri, 16 Mar 2007 06:56:31 -0500]/text Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[From ... /[From "Jama Little" <[email protected]>][Date Fri, 16 Mar 2007 17:22:06 +0700]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[From "Phil Burns ... /[From marina <[email protected]>][Date Fri, 16 Mar 2007 10:56:58 +0100]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 ... /[Fro ... /[From ... /[From "BB&T" <[email protected]>][Date Wed, 21 Mar 2007 06:47:54 -0400 (EDT)]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 ... /[Fro ... /[From "Ambrose Henry" <f .. ... /[From <[email protected]>][Date Wed, 21 Mar 2007 05:17:08 -0600]/html Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 ... /[Fro ... /[From "Ambrose Henry" <f ... /[From JohnEmmy" <[email protected]>][Date 21 Mar 2007 09:49:53 -0000]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 ... /[Fro ... /[From "Ambrose Henry" <[email protected]>][Date Wed, 21 Mar 2007 10:28:05 +0100]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 ... /[Fro ... /[From "Ktypewritten wealthy" <[email protected]>][Date Wed, 21 Mar 2007 13:38:42 +0530]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 ... /[From . ... ... /[From "Elda Thompson" <[email protected]>][Date Tue, 20 Mar 2007 23:44:57 -0800]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 ... /[From . ... /[From iTunes Store <[email protected]>][Date Tue, 20 Mar 2007 23:40:31 -0400 (EDT)]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 ... /[From ... /[Fro ... /[From "Ewast riverbank" <[email protected]>][Date Wed, 21 Mar 2007 12:11:09 +0900]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 ... /[From ... /[From "anstice ... /[From "Xqrock trot" <[email protected]>][Date Wed, 21 Mar 2007 12:11:21 -0700]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 ... /[From ... /[From "anstice tobin" <[email protected]>][Date Wed, 21 Mar 2007 10:24:41 +0900]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 ... /[From "SatelliteTelevision" <[email protected]>][Date Tue, 20 Mar 2007 18:06:27 -0400 (EDT)]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[Fr ... /[From "123Inkjets" <[email protected]>][Date Tue, 20 Mar 2007 17:28:30 -0400 (EDT)]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[Fro ... /[From "Ydiscrete barbell" <[email protected]>][Date Thu, 18 Jun 1987 04:49:33 +0800]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[From "Phil Bu ... /[From Patrick Meadows <[email protected]>][Date Tue, 20 Mar 2007 20:33:53 +0000]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 ... /[From "YSO-8859-1?B?T ... /[From "BB&T" <[email protected]>][Date Wed, 21 Mar 2007 22:45:27 -0400 (EDT)]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 ... /[From "YSO-8859-1?B?TW9udGFsdm8gQXJ0cyBDZW50ZXI-" <[email protected]>][Date Wed, 21 Mar 2007 18:15:14 -0700]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -05 ... /[From "WinterBlowoutSale" <[email protected]>][Date Wed, 21 Mar 2007 18:02:23 -0400 (EDT)]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08: ... /[From "Branch Banking and Trust" <[email protected]>][Date Fri, 23 Mar 2007 19:57:11 -0400 (EDT)]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAM ... /[From "123Inkjets" <[email protected]>][Date Fri, 23 Mar 2007 18:22:57 -0400 (EDT)]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAME ... /[From "SearchSecrets" <[email protected]>][Date Fri, 23 Mar 2007 17:20:20 -0400 (EDT)]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 ... /[From "Branch Banking and Trust" <[email protected]>][Date Tue, 27 Mar 2007 16:44:45 -0400 (EDT)]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 ... /[From "Branch Banking and Trust" <[email protected]>][Date Tue, 27 Mar 2007 16:43:42 -0400 (EDT)]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[Fr ... / ... /[From "Chris Lehman" <[email protected]>][Date Tue, 27 Mar 2007 20:19:28 -0060]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[Fr ... /[From "Lotto Secrets" <[email protected]>][Date Tue, 27 Mar 2007 15:44:59 -0400 (EDT)]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -050 ... /[From ... ... /[From Support Center <[email protected]>][Date Wed, 4 Apr 2007 00:04:54 PST]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -050 ... /[From ... /[Fr ... /[From "Hilary Winslow" <[email protected]>][Date Wed, 4 Apr 2007 03:12:45 +0300]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -050 ... /[From ... /[From "JMDSurveys" <[email protected]>][Date Tue, 3 Apr 2007 1 ... /[Date 6:32:12 PM]/html Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -050 ... /[From ... /[From "JMDSurveys" <[email protected]>][Date Tue, 3 Apr 2007 16:25:11 -0400 (EDT)]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -050 ... /[From "Home Improvement Depot" <[email protected]>][Date Tue, 3 Apr 2007 15:10:41 -0400 (EDT)]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 - ... /[From "Branch Banking and Trust" <[email protected]>][Date Fri, 06 Apr 2007 14:47:12 -0500]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 20 ... /[From "Branch Banking and Trust" <[email protected]>][Date Fri, 6 Apr 2007 18:08:41 -0400 (EDT)]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]t.com>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 - ... /[From "WarrantyExtensio ... /[From "PCTV" <[email protected]>][Date Fri, 6 Apr 2007 17:59:35 -0400 (EDT)]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 - ... /[From "WarrantyExtension" <[email protected]>][Date Fri, 6 Apr 2007 15:32:15 -0400 (EDT)]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 - ... /[ . ... /[From "NHIC, Corp." <[email protected]>][Date Fri, 6 Apr 2007 14:25:50 -0400 (EDT)]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 - ... /[ ... /[From "Local Home Listings" <no ... /[From [email protected]][Date Fri, 6 Apr 2007 12:51:55 CDT]/text Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 - ... /[ ... /[From "Local Home Listings" <[email protected]>][Date Fri, 6 Apr 2007 13:43:37 -0400 (EDT)]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 - ... /[From ... /[From ... /[From "Hurry" <[email protected]>][Date Fri, 6 Apr 2007 12:42:53 -0400 (EDT)]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 - ... /[From ... /[From "gearedon.com" <[email protected]>][Date Fri, 6 Apr 2007 11:36:42 -0500 (GMT-05:00)]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 - ... /[From "Com ... /[Fr ... /[From Delbert Platt <[email protected]>][Date Wed, 6 Jun 2007 12:36:44 -0400]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 - ... /[From "Com ... /[From [email protected] (WWW-asiakas)][Date Fri, 6 Apr 2007 17:37:12 +0300 (EEST)]/text Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 - ... /[From "Compliance Training" <[email protected]>][Date Fri, 6 Apr 2007 16:53:39 +0200 (SAST)]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAM ... / ... /[From "Harding Stephanie" <[email protected]>][Date Fri, 6 Apr 2007 14:59:58 +0200]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAM ... /[From "Local Home Listings" <[email protected]>][Date Fri, 6 Apr 2007 07:08:19 -0400 (EDT)]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAM ... /[From "HeartGuardian" <[email protected]>][Date Fri, 6 Apr 2007 01:58:14 -0400 (EDT)]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[From " ... ... /[From "marriage" <[email protected]>][Date Fri, 6 Apr ... /[Date 1:45:09 AM]/html Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[From " ... ... /[From "marriage" <[email protected]>][Date Fri, 6 Apr 2007 03:39:03 -0700]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[From " ... /[From "bestlepus" <[email protected]>][Date Fri, 6 Apr 2007 ... /[Date 12:22:09 AM]/html Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[From " ... /[From "bestlepus" <[email protected]>][Date Fri, 6 Apr 2007 01:44:26 -0400 (EDT)]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[From "Phil Bu .. . ... /[From playerThis" <[email protected]>][Date 6 Apr 2007 09:27:52 +0400]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[From "Phil Bu .. ... /[From "PCTV" <[email protected]>][Date Thu, 5 Apr 2007 21:08:46 -0400 (EDT)]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[From "Phil Bu ... /[From "Bryan" <[email protected]>][Date Thu, 5 Apr 2007 20:20:26 -0400 (EDT)]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[Fr . ... /[ ... /[ ... /[From Em Childress <[email protected]>][Date Sun, 8 Apr 2007 20:27:36 +0100]/UNNAMED Infected: Email-Worm.Win32.Zhelatin.cq skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[Fr . .. ... /[From "TVonPC" <[email protected]>][Date Sun, 8 Apr 200 ... /[Date 7:26:31 PM]/UNNAMED Infected: Email-Worm.Win32.Zhelatin.cq skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[Fr ... /[From " ... /[From f ... /[From [email protected]][Date 7 Apr 2007 08:31:35 -0000]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[Fr ... /[From " ... /[From fifth no <[email protected]>][Date Mon, 9 Apr ... /[Date 8:34:44 PM]/html Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[Fr ... /[From " ... /[From fifth no <[email protected]>][Date Mon, 9 Apr 2007 11:30:46 +0800]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[Fr ... /[From "bd-group.biz" <[email protected]>][Date Sun, 8 Apr 2007 23:03:55 -0400 (EDT)]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[Fr . .. ... /[From "TVonPC" <[email protected]>][Date Sun, 8 Apr 2007 15:41:51 -0400 (EDT)]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[Fr . ... /[ ... /[From "Gevalia" <[email protected]>][Date Sun, 8 Apr 2007 14:32:00 -0400 (EDT)]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[Fr . ... /[From "seewell" <[email protected]>][Date Sun, 8 Apr 2007 13:59:09 -0400 (EDT)]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[Fr ... /[From "GovtGrants" <[email protected]>][Date Sun, 8 Apr 2007 13:10:29 -0400 (EDT)]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[Fr .. ... /[From "berinte.com" <[email protected]>][Date Sun, 8 Apr 2007 11:55:07 -0400 (EDT)]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[Fr ... ... /[From "Finance America" <ErrolGrisham @adnc.com>][Date Sun, 08 Apr 2007 08:04:24 -0800]/text Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[Fr ... /[From "BestHoodia" <[email protected]>][Date Sun, 8 Apr 2007 10:37:38 -0400 (EDT)]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[From ... /[From "Doggy Steps" <[email protected]>][Date Sun, 8 Apr 2007 09:49:13 -0400 (EDT)]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[From "Ph ... /[From "Blanca Bass" <[email protected]>][Date Wed, 8 Apr 1970 19:15:16 +0800]/text Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[From "Ph ... /[From "Pete Dawkins" <[email protected]>][Date Sun, 08 Apr 2007 18:40:08 -0800]/text Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[From "Phil Burns" <[email protected]>][Date Tue, 20 May 2003 09:52:29 ... /[Date 2:24:25 AM]/html Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[From "Phil Burns" <[email protected]>][Date Tue, 20 May 2003 09:52:29 ... /[Date 1:07:40 AM]/html Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[From "Phil Burns ... /[From elusive <[email protected]>][Date Mon, 9 Apr 2007 09:44:47 + ... /UNNAMED Infected: Email-Worm.Win32.Zhelatin.cq skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[From "Phil Burns ... /[From elusive <[email protected]>][Date Mon, 9 Apr 2007 09:44:47 +0200]/UNNAMED Infected: Email-Worm.Win32.Zhelatin.cq skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 - ... ... /[From "Do ... /[From "BB&T" <[email protected]>][Date Mon, 9 Apr 2007 18:33:51 -0400 (EDT)]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]agellanhealth.com>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 ... /[From "Branch Banking and Trust" <[email protected]>][Date Tue, 10 Apr 2007 08:37:23 -0400 (EDT)]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 - ... /[Fr ... ... /[From "DustBunnies" <[email protected]>][Date Tue, 10 Apr 2007 07:37:19 -0400 (EDT)]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 - ... /[Fr ... /[From "F ... /[From "Connie P. Burris" <[email protected]>][Date Tue, 10 Apr 2007 13:32:35 +0200]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 - ... /[Fr ... /[From "Frankie IRebecca" <[email protected]>][Date Tue, 10 Apr 2007 12:21:07 + .. ... /html Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 - ... /[Fr ... /[From "Frankie IRebecca" <[email protected]>][Date Tue, 10 Apr 2007 12:21:07 + ... /UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 - ... /[Fr ... /[From "Frankie IRebecca" <[email protected]>][Date Tue, 10 Apr 2007 12:21:07 +0100]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 - ... /[Fr ... /[From "CleverClasp" <[email protected]>][Date Tue, 10 Apr 2007 05:43:37 -0400 (EDT)]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 - ... /[From "gd . ... /[From " ... /[From MaupinTour <[email protected]>][Date 10 Apr 2007 04:49:23 -0400]/html Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 - ... /[From "gd . ... /[From "Dina Hughes" <[email protected]>][Date Tue, 10 Apr 2007 15:01:10 +0800]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 - ... /[From "gd ... /[From "Home Loan Center" <JodiKinsella @aginfort.com>][Date Mon, 09 Apr 2007 23:06:17 -0800]/text Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 - ... /[From "[email protected]" <[email protected]>][Date Tue, 10 Apr 2007 00:35:22 -0500]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 - .. ... /[From ... ... ... /[From "Bidz" <[email protected]>][Date Tue, 10 Apr 2007 00:54:01 -0400 (EDT)]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 - .. ... /[From ... ... /[From "Dartnell Corp." <[email protected]>][Date Mon, 9 Apr 2007 23:26:32 -0500]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 - .. ... /[From ... / ... /[From Lula prospect <[email protected]>][Date Mon, 9 Apr 2007 21:03:34 -0700]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 - .. ... /[From ... /[From "SleepyTim ... /[From [email protected]][Date Mon, 9 Apr 2007 20:44:17 -0400 (EDT)]/text Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 - .. ... /[From ... /[From "SleepyTime" <[email protected]>][Date Mon, 9 Apr 2007 19:49:33 -0400 (EDT)]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 - .. ... /[From " ... /[From "Personal Care" <[email protected]>][Date Mon, 9 Apr 2007 19:08:10 -0400 (EDT)]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 - .. ... /[From "FreeDollarStore" <[email protected]>][Date Mon, 9 Apr 2007 19:03:15 -0400 (EDT)]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 - ... ... /[From "Doub ... /[From "Punch it" <[email protected]>][Date Mon, 9 Apr 2007 18:26:57 -0400 (EDT)]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 - ... ... /[From "DoubledayBookClub" <[email protected]>][Date Mon, 9 Apr 2007 16:03:55 -0400 (EDT)]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 - ... /[From "WarrantyExtension" <[email protected]>][Date Mon, 9 Apr 2007 13:59:02 -0400 (EDT)]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]on-barnett.com>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500] ... /[From "Printer ink Blowout Sale" <[email protected]>][Date Mon, 9 Apr 2007 13:41:50 -0400 (EDT)]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UN ... /[From "WarrantyOptions" <[email protected]>][Date Mon, 9 Apr 2007 12:01:40 -0400 (EDT)]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[From ... /[From "USGrants" <[email protected]>][Date Mon, 9 Apr 2007 10:28:10 -0400 (EDT)]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAM ... /[From "BB&T" <[email protected]>][Date Tue, 10 Apr 2007 21:35:04 -0400 (EDT)]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[F ... /[From "USGrants" <[email protected]>][Date Tue, 10 Apr 2007 14:51:39 -0400 (EDT)]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[Fro ... /[From "USGrants" <[email protected]>][Date Tue, 10 Apr 2007 12:32:13 -0400 (EDT)]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[From "Ph ... /[From "Levy County EMS" <[email protected]>][Date Tue, 10 Apr 2007 12:10:28 -0400]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[From "Phil Burn ... /[From "Rudolph Estes" <[email protected]>][Date Wed, 11 Apr 2007 01:07:17 -0800]/text Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNA ... /[From "Si ... /[From Abuse Team Robot <[email protected]>][Date Fri, 13 Apr 2007 15:19:34 +0800]/UNNAMED Infected: Email-Worm.Win32.Zhelatin.ct skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNA ... /[From "Simple Home Buying" <[email protected]>][Date Fri, 13 Apr 2007 02:59:38 -0400 (EDT)]/UNNAMED Infected: Email-Worm.Win32.Zhelatin.ct skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED/[From "Phil Burns" <[email protected]>][Date Tue, 20 May 2003 09:52:29 -0400]/text Infected: Email-Worm.Win32.Zhelatin.ct skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:50:15 -0500]/UNNAMED Infected: Email-Worm.Win32.Zhelatin.ct skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED/[From "Schmidt, Lee M" <[email protected]>][Date Tue, 20 May 2003 08:39:37 -0500]/UNNAMED Infected: Email-Worm.Win32.Zhelatin.ct skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text/[From "Reddick, Ryan M" <[email protected]>][Date Thu, 15 May 2003 13:46:04 -0500]/UNNAMED Infected: Email-Worm.Win32.Zhelatin.ct skipped

D:\AWK\Mail\Inbox/[From "David Ermer" <[email protected]>][Date Thu, 15 May 2003 10:31:33 -0400]/text Infected: Email-Worm.Win32.Zhelatin.ct skipped

D:\AWK\Mail\Inbox Mail Berkeley mbox: infected - 431 skipped

D:\AWK\Mail\Local Folders\Communicator 4.x Mail.sbd\inbox/[From "In-box Direct" <[email protected]>][Date Mon, 02 Jun 1997 13:00:00 -0800]/UNNAMED/[From "Lori LaPerle" <[email protected]>][Date Thu, 30 Dec 1999 15:19:06 -0800]/text/[From "Lori LaPerle" <[email protected]>][Date Fri, 14 Jan 2000 09:54:09 -0800]/UNNAMED/[From "Lori LaPerle" <[email protected]>][Date Wed, 19 Jan 2000 12:55:16 -0800]/UNNAMED/[From Tim Toomay <[email protected] ... / ... /[From "geoffrey.billington" <[email protected]>][Date Tue, 29 Jan 2002 23:14:36 + ... /UNNAMED Infected: Email-Worm.Win32.BadtransII skipped

D:\AWK\Mail\Local Folders\Communicator 4.x Mail.sbd\inbox/[From "In-box Direct" <[email protected]>][Date Mon, 02 Jun 1997 13:00:00 -0800]/UNNAMED/[From "Lori LaPerle" <[email protected]>][Date Thu, 30 Dec 1999 15:19:06 -0800]/text/[From "Lori LaPerle" <[email protected]>][Date Fri, 14 Jan 2000 09:54:09 -0800]/UNNAMED/[From "Lori LaPerle" <[email protected]>][Date Wed, 19 Jan 2000 12:55:16 -0800]/UNNAMED/[From Tim Toomay <[email protected] ... / ... /[From "geoffrey.billington" <[email protected]>][Date Tue, 29 Jan 2002 23:14:36 +0000]/UNNAMED Infected: Email-Worm.Win32.BadtransII skipped

D:\AWK\Mail\Local Folders\Communicator 4.x Mail.sbd\inbox/[From "In-box Direct" <[email protected]>][Date Mon, 02 Jun 1997 13:00:00 -0800]/UNNAMED/[From "Lori LaPerle" <[email protected]>][Date Thu, 30 Dec 1999 15:19:06 -0800]/text/[From "Lori LaPerle" <[email protected]>][Date Fri, 14 Jan 2000 09:54:09 -0800]/UNNAMED/[From "Lori LaPerle" <[email protected]>][Date Wed, 19 Jan 2000 12:55:16 -0800]/UNNAMED/[From Tim Toomay <[email protected] ... /[From " .. .. ... /[F ... /[From Lorna Immel <[email protected]>][Date Wed, 26 Dec 2001 19:53:52 -0800 (PST)]/text Infected: Email-Worm.Win32.BadtransII skipped

D:\AWK\Mail\Local Folders\Communicator 4.x Mail.sbd\inbox/[From "In-box Direct" <[email protected]>][Date Mon, 02 Jun 1997 13:00:00 -0800]/UNNAMED/[From "Lori LaPerle" <[email protected]>][Date Thu, 30 Dec 1999 15:19:06 -0800]/text/[From "Lori LaPerle" <[email protected]>][Date Fri, 14 Jan 2000 09:54:09 -0800]/UNNAMED/[From "Lori LaPerle" <[email protected]>][Date Wed, 19 Jan 2000 12:55:16 -0800]/UNNAMED/[From Tim Toomay <[email protected] ... /[From " .. .. ... /[F ... /[From Lorna Immel <[email protected]>][Date Wed, 26 Dec 2001 19:48:11 -0800 (PST)]/text Infected: Email-Worm.Win32.BadtransII skipped

D:\AWK\Mail\Local Folders\Communicator 4.x Mail.sbd\inbox/[From "In-box Direct" <[email protected]>][Date Mon, 02 Jun 1997 13:00:00 -0800]/UNNAMED/[From "Lori LaPerle" <[email protected]>][Date Thu, 30 Dec 1999 15:19:06 -0800]/text/[From "Lori LaPerle" <[email protected]>][Date Fri, 14 Jan 2000 09:54:09 -0800]/UNNAMED/[From "Lori LaPerle" <[email protected]>][Date Wed, 19 Jan 2000 12:55:16 -0800]/UNNAMED/[From Tim Toomay <[email protected] ... /[From " ... /[Fr ... /[From sstiward <[email protected]>][Date Tue, 29 Oct 2002 12:01:25 -0500 (EST)]/UNNAMED Infected: Email-Worm.Win32.Klez.h skipped

D:\AWK\Mail\Local Folders\Communicator 4.x Mail.sbd\inbox/[From "In-box Direct" <[email protected]>][Date Mon, 02 Jun 1997 13:00:00 -0800]/UNNAMED/[From "Lori LaPerle" <[email protected]>][Date Thu, 30 Dec 1999 15:19:06 -0800]/text/[From "Lori LaPerle" <[email protected]>][Date Fri, 14 Jan 2000 09:54:09 -0800]/UNNAMED/[From "Lori LaPerle" <[email protected]>][Date Wed, 19 Jan 2000 12:55:16 -0800]/UNNAMED/[From Tim Toomay <[email protected] ... /[From " ... /[From "carol ... /[From Ann Geyer <[email protected]>][Date Tue, 29 Oct 2002 08:35:38 -0800]/UNNAMED Infected: Email-Worm.Win32.Klez.h skipped

D:\AWK\Mail\Local Folders\Communicator 4.x Mail.sbd\inbox/[From "In-box Direct" <[email protected]>][Date Mon, 02 Jun 1997 13:00:00 -0800]/UNNAMED/[From "Lori LaPerle" <[email protected]>][Date Thu, 30 Dec 1999 15:19:06 -0800]/text/[From "Lori LaPerle" <[email protected]>][Date Fri, 14 Jan 2000 09:54:09 -0800]/UNNAMED/[From "Lori LaPerle" <[email protected]>][Date Wed, 19 Jan 2000 12:55:16 -0800]/UNNAMED/[From Tim Toomay <[email protected] ... /[From " ... /[From "carol ... /[From Nancy Jones <[email protected]>][Date Mon, 28 Oct 2002 10:12:09 -0600]/UNNAMED Infected: Email-Worm.Win32.Klez.h skipped

D:\AWK\Mail\Local Folders\Communicator 4.x Mail.sbd\inbox/[From "In-box Direct" <[email protected]>][Date Mon, 02 Jun 1997 13:00:00 -0800]/UNNAMED/[From "Lori LaPerle" <[email protected]>][Date Thu, 30 Dec 1999 15:19:06 -0800]/text/[From "Lori LaPerle" <[email protected]>][Date Fri, 14 Jan 2000 09:54:09 -0800]/UNNAMED/[From "Lori LaPerle" <[email protected]>][Date Wed, 19 Jan 2000 12:55:16 -0800]/UNNAMED/[From Tim Toomay <[email protected] ... /[From " ... /[From "[email protected]" <[email protected]>][Date Mon, 28 Oct 2002 04:42:21 -0800 (PST)]/UNNAMED Infected: Email-Worm.Win32.Klez.h skipped

D:\AWK\Mail\Local Folders\Communicator 4.x Mail.sbd\inbox/[From "In-box Direct" <[email protected]>][Date Mon, 02 Jun 1997 13:00:00 -0800]/UNNAMED/[From "Lori LaPerle" <[email protected]>][Date Thu, 30 Dec 1999 15:19:06 -0800]/text/[From "Lori LaPerle" <[email protected]>][Date Fri, 14 Jan 2000 09:54:09 -0800]/UNNAMED/[From "Lori LaPerle" <[email protected]>][Date Wed, 19 Jan 2000 12:55:16 -0800]/UNNAMED/[From Tim Toomay <[email protected] ... /[From " .. . ... ... /[From sstiward <[email protected]>][Date Mon, 4 Nov 2002 15:41:35 -0500 (EST)]/UNNAMED Infected: Email-Worm.Win32.Klez.h skipped

D:\AWK\Mail\Local Folders\Communicator 4.x Mail.sbd\inbox/[From "In-box Direct" <[email protected]>][Date Mon, 02 Jun 1997 13:00:00 -0800]/UNNAMED/[From "Lori LaPerle" <[email protected]>][Date Thu, 30 Dec 1999 15:19:06 -0800]/text/[From "Lori LaPerle" <[email protected]>][Date Fri, 14 Jan 2000 09:54:09 -0800]/UNNAMED/[From "Lori LaPerle" <[email protected]>][Date Wed, 19 Jan 2000 12:55:16 -0800]/UNNAMED/[From Tim Toomay <[email protected] ... /[From " .. . ... /[From logs-wb.proxy.aol.com [205.188.192.135]][Date Mon, 4 Nov 2002 15:46:25 -0500 (EST)]/UNNAMED Infected: Email-Worm.Win32.Klez.h skipped

D:\AWK\Mail\Local Folders\Communicator 4.x Mail.sbd\inbox/[From "In-box Direct" <[email protected]>][Date Mon, 02 Jun 1997 13:00:00 -0800]/UNNAMED/[From "Lori LaPerle" <[email protected]>][Date Thu, 30 Dec 1999 15:19:06 -0800]/text/[From "Lori LaPerle" <[email protected]>][Date Fri, 14 Jan 2000 09:54:09 -0800]/UNNAMED/[From "Lori LaPerle" <[email protected]>][Date Wed, 19 Jan 2000 12:55:16 -0800]/UNNAMED/[From Tim Toomay <[email protected] ... /[From " .. ... /[From Deborah Campbell <[email protected]>][Date Mon, 4 Nov 2002 10:23:15 -0500]/UNNAMED Infected: Email-Worm.Win32.Klez.h skipped

D:\AWK\Mail\Local Folders\Communicator 4.x Mail.sbd\inbox/[From "In-box Direct" <[email protected]>][Date Mon, 02 Jun 1997 13:00:00 -0800]/UNNAMED/[From "Lori LaPerle" <[email protected]>][Date Thu, 30 Dec 1999 15:19:06 -0800]/text/[From "Lori LaPerle" <[email protected]>][Date Fri, 14 Jan 2000 09:54:09 -0800]/UNNAMED/[From "Lori LaPerle" <[email protected]>][Date Wed, 19 Jan 2000 12:55:16 -0800]/UNNAMED/[From Tim Toomay <[email protected] ... /[From " .. .. . ... /[From sstiward <[email protected]>][Date Wed, 20 Nov 2002 17:25:15 -0500 (EST)]/UNNAMED Infected: Email-Worm.Win32.Klez.h skipped

D:\AWK\Mail\Local Folders\Communicator 4.x Mail.sbd\inbox/[From "In-box Direct" <[email protected]>][Date Mon, 02 Jun 1997 13:00:00 -0800]/UNNAMED/[From "Lori LaPerle" <[email protected]>][Date Thu, 30 Dec 1999 15:19:06 -0800]/text/[From "Lori LaPerle" <[email protected]>][Date Fri, 14 Jan 2000 09:54:09 -0800]/UNNAMED/[From "Lori LaPerle" <[email protected]>][Date Wed, 19 Jan 2000 12:55:16 -0800]/UNNAMED/[From Tim Toomay <[email protected] ... /[Fro ... /[From M ... /[From sstiward <[email protected]>][Date Wed, 20 Nov 2002 17:36:23 -0500 (EST)]/UNNAMED Infected: Email-Worm.Win32.Klez.h skipped

D:\AWK\Mail\Local Folders\Communicator 4.x Mail.sbd\inbox/[From "In-box Direct" <[email protected]>][Date Mon, 02 Jun 1997 13:00:00 -0800]/UNNAMED/[From "Lori LaPerle" <[email protected]>][Date Thu, 30 Dec 1999 15:19:06 -0800]/text/[From "Lori LaPerle" <[email protected]>][Date Fri, 14 Jan 2000 09:54:09 -0800]/UNNAMED/[From "Lori LaPerle" <[email protected]>][Date Wed, 19 Jan 2000 12:55:16 -0800]/UNNAMED/[From Tim Toomay <[email protected] ... /[Fro ... /[From Mail Delivery Subsystem <[email protected] ... /[From logs-wn.proxy.aol.com [205.188.197.135]]/UNNAMED Infected: Email-Worm.Win32.Klez.h skipped

D:\AWK\Mail\Local Folders\Communicator 4.x Mail.sbd\inbox/[From "In-box Direct" <[email protected]>][Date Mon, 02 Jun 1997 13:00:00 -0800]/UNNAMED/[From "Lori LaPerle" <[email protected]>][Date Thu, 30 Dec 1999 15:19:06 -0800]/text/[From "Lori LaPerle" <[email protected]>][Date Fri, 14 Jan 2000 09:54:09 -0800]/UNNAMED/[From "Lori LaPerle" <[email protected]>][Date Wed, 19 Jan 2000 12:55:16 -0800]/UNNAMED/[From Tim Toomay <[email protected] ... /[Fro ... /[From Mail Delivery Subsystem <[email protected]>][Date Wed, 20 Nov 2002 17:56:52 -0500 (EST)]/UNNAMED Infected: Email-Worm.Win32.Klez.h skipped

D:\AWK\Mail\Local Folders\Communicator 4.x Mail.sbd\inbox/[From "In-box Direct" <[email protected]>][Date Mon, 02 Jun 1997 13:00:00 -0800]/UNNAMED/[From "Lori LaPerle" <[email protected]>][Date Thu, 30 Dec 1999 15:19:06 -0800]/text/[From "Lori LaPerle" <[email protected]>][Date Fri, 14 Jan 2000 09:54:09 -0800]/UNNAMED/[From "Lori LaPerle" <[email protected]>][Date Wed, 19 Jan 2000 12:55:16 -0800]/UNNAMED/[From Tim Toomay <[email protected] ... /[From " .. .. ... ... /[From " ... /[From [email protected]][Date Sun, 01 Dec 2002 12:55:1 ... /UNNAMED Infected: Email-Worm.Win32.Klez.h skipped

D:\AWK\Mail\Local Folders\Communicator 4.x Mail.sbd\inbox/[From "In-box Direct" <[email protected]>][Date Mon, 02 Jun 1997 13:00:00 -0800]/UNNAMED/[From "Lori LaPerle" <[email protected]>][Date Thu, 30 Dec 1999 15:19:06 -0800]/text/[From "Lori LaPerle" <[email protected]>][Date Fri, 14 Jan 2000 09:54:09 -0800]/UNNAMED/[From "Lori LaPerle" <[email protected]>][Date Wed, 19 Jan 2000 12:55:16 -0800]/UNNAMED/[From Tim Toomay <[email protected] ... /[From " .. .. ... ... /[From " ... /[From [email protected]][Date Sun, 01 Dec 2002 12:55:13 -0300]/html Infected: Email-Worm.Win32.Klez.h skipped

D:\AWK\Mail\Local Folders\Communicator 4.x Mail.sbd\inbox/[From "In-box Direct" <[email protected]>][Date Mon, 02 Jun 1997 13:00:00 -0800]/UNNAMED/[From "Lori LaPerle" <[email protected]>][Date Thu, 30 Dec 1999 15:19:06 -0800]/text/[From "Lori LaPerle" <[email protected]>][Date Fri, 14 Jan 2000 09:54:09 -0800]/UNNAMED/[From "Lori LaPerle" <[email protected]>][Date Wed, 19 Jan 2000 12:55:16 -0800]/UNNAMED/[From Tim Toomay <[email protected] ... /[From " .. .. ... ... /[From "Rachel Foerster" <[email protected]>][Date Fri, 29 Nov 2002 19:28:05 -0600]/text Infected: Email-Worm.Win32.Klez.h skipped

D:\AWK\Mail\Local Folders\Communicator 4.x Mail.sbd\inbox/[From "In-box Direct" <[email protected]>][Date Mon, 02 Jun 1997 13:00:00 -0800]/UNNAMED/[From "Lori LaPerle" <[email protected]>][Date Thu, 30 Dec 1999 15:19:06 -0800]/text/[From "Lori LaPerle" <[email protected]>][Date Fri, 14 Jan 2000 09:54:09 -0800]/UNNAMED/[From "Lori LaPerle" <[email protected]>][Date Wed, 19 Jan 2000 12:55:16 -0800]/UNNAMED/[From Tim Toomay <[email protected] ... /[From " .. ... ... /[From sstiward <[email protected]>][Date Thu, 5 Dec 2002 19:09:44 -0500 (EST)]/UNNAMED Infected: Email-Worm.Win32.Klez.h skipped

D:\AWK\Mail\Local Folders\Communicator 4.x Mail.sbd\inbox/[From "In-box Direct" <[email protected]>][Date Mon, 02 Jun 1997 13:00:00 -0800]/UNNAMED/[From "Lori LaPerle" <[email protected]>][Date Thu, 30 Dec 1999 15:19:06 -0800]/text/[From "Lori LaPerle" <[email protected]>][Date Fri, 14 Jan 2000 09:54:09 -0800]/UNNAMED/[From "Lori LaPerle" <[email protected]>][Date Wed, 19 Jan 2000 12:55:16 -0800]/UNNAMED/[From Tim Toomay <[email protected] ... /[From " .. ... /[From logs-wm.proxy.aol.com [205.188.199.132]][Date Thu, 5 Dec 2002 19:18:36 -0500 (EST)]/UNNAMED Infected: Email-Worm.Win32.Klez.h skipped

D:\AWK\Mail\Local Folders\Communicator 4.x Mail.sbd\inbox/[From "In-box Direct" <[email protected]>][Date Mon, 02 Jun 1997 13:00:00 -0800]/UNNAMED/[From "Lori LaPerle" <[email protected]>][Date Thu, 30 Dec 1999 15:19:06 -0800]/text/[From "Lori LaPerle" <[email protected]>][Date Fri, 14 Jan 2000 09:54:09 -0800]/UNNAMED/[From "Lori LaPerle" <[email protected]>][Date Wed, 19 Jan 2000 12:55:16 -0800]/UNNAMED/[From Tim Toomay <[email protected] ... /[From " .. .. ... /[From "William J. Kammerer" <[email protected]>][Date Thu, 5 Dec 2002 11:25:59 -0500]/text Infected: Email-Worm.Win32.Klez.h skipped

D:\AWK\Mail\Local Folders\Communicator 4.x Mail.sbd\inbox/[From "In-box Direct" <[email protected]>][Date Mon, 02 Jun 1997 13:00:00 -0800]/UNNAMED/[From "Lori LaPerle" <[email protected]>][Date Thu, 30 Dec 1999 15:19:06 -0800]/text/[From "Lori LaPerle" <[email protected]>][Date Fri, 14 Jan 2000 09:54:09 -0800]/UNNAMED/[From "Lori LaPerle" <[email protected]>][Date Wed, 19 Jan 2000 12:55:16 -0800]/UNNAMED/[From Tim Toomay <[email protected] ... /[From " .. ... /[From "David McDivitt" <[email protected]>][Date Thu, 05 Dec 2002 10:09:50 -0600]/text Infected: Email-Worm.Win32.Klez.h skipped

D:\AWK\Mail\Local Folders\Communicator 4.x Mail.sbd\inbox/[From "In-box Direct" <[email protected]>][Date Mon, 02 Jun 1997 13:00:00 -0800]/UNNAMED/[From "Lori LaPerle" <[email protected]>][Date Thu, 30 Dec 1999 15:19:06 -0800]/text/[From "Lori LaPerle" <[email protected]>][Date Fri, 14 Jan 2000 09:54:09 -0800]/UNNAMED/[From "Lori LaPerle" <[email protected]>][Date Wed, 19 Jan 2000 12:55:16 -0800]/UNNAMED/[From Tim Toomay <[email protected] ... /[From " .. .. ... ... /[From Kepa Zubeldia <[email protected]>][Date Thu, 5 Dec 2002 06:52:04 -0700]/text Infected: Email-Worm.Win32.Klez.h skipped

D:\AWK\Mail\Local Folders\Communicator 4.x Mail.sbd\inbox/[From "In-box Direct" <[email protected]>][Date Mon, 02 Jun 1997 13:00:00 -0800]/UNNAMED/[From "Lori LaPerle" <[email protected]>][Date Thu, 30 Dec 1999 15:19:06 -0800]/text/[From "Lori LaPerle" <[email protected]>][Date Fri, 14 Jan 2000 09:54:09 -0800]/UNNAMED/[From "Lori LaPerle" <[email protected]>][Date Wed, 19 Jan 2000 12:55:16 -0800]/UNNAMED/[From Tim Toomay <[email protected] ... /[From " .. .. ... /[Fr ... /[From "Rishel,Wes" <[email protected]>][Date Thu, 5 Dec 2002 00:30:42 -0500]/text Infected: Email-Worm.Win32.Klez.h skipped

D:\AWK\Mail\Local Folders\Communicator 4.x Mail.sbd\inbox/[From "In-box Direct" <[email protected]>][Date Mon, 02 Jun 1997 13:00:00 -0800]/UNNAMED/[From "Lori LaPerle" <[email protected]>][Date Thu, 30 Dec 1999 15:19:06 -0800]/text/[From "Lori LaPerle" <[email protected]>][Date Fri, 14 Jan 2000 09:54:09 -0800]/UNNAMED/[From "Lori LaPerle" <[email protected]>][Date Wed, 19 Jan 2000 12:55:16 -0800]/UNNAMED/[From Tim Toomay <[email protected] ... /[From " .. .. ... /[Fro ... /[From Tim ... /[From [email protected]][Date Wed, 4 Dec 2002 14:32:09 -0800]/text Infected: Email-Worm.Win32.Klez.h skipped

D:\AWK\Mail\Local Folders\Communicator 4.x Mail.sbd\inbox/[From "In-box Direct" <[email protected]>][Date Mon, 02 Jun 1997 13:00:00 -0800]/UNNAMED/[From "Lori LaPerle" <[email protected]>][Date Thu, 30 Dec 1999 15:19:06 -0800]/text/[From "Lori LaPerle" <[email protected]>][Date Fri, 14 Jan 2000 09:54:09 -0800]/UNNAMED/[From "Lori LaPerle" <[email protected]>][Date Wed, 19 Jan 2000 12:55:16 -0800]/UNNAMED/[From Tim Toomay <[email protected] ... /[From " .. .. ... /[Fro ... /[From Tim Toomay <[email protected]>][Date Tue, 03 Dec 2002 13:18:14 -0800]/text Infected: Email-Worm.Win32.Klez.h skipped

D:\AWK\Mail\Local Folders\Communicator 4.x Mail.sbd\inbox/[From "In-box Direct" <[email protected]>][Date Mon, 02 Jun 1997 13:00:00 -0800]/UNNAMED/[From "Lori LaPerle" <[email protected]>][Date Thu, 30 Dec 1999 15:19:06 -0800]/text/[From "Lori LaPerle" <[email protected]>][Date Fri, 14 Jan 2000 09:54:09 -0800]/UNNAMED/[From "Lori LaPerle" <[email protected]>][Date Wed, 19 Jan 2000 12:55:16 -0800]/UNNAMED/[From Tim Toomay <[email protected] ... /[From " .. .. . ... /[From sstiward <[email protected]>][Date Sat, 14 Dec 2002 12:53:56 -0500 (EST)]/UNNAMED Infected: Email-Worm.Win32.Klez.h skipped

D:\AWK\Mail\Local Folders\Communicator 4.x Mail.sbd\inbox/[From "In-box Direct" <[email protected]>][Date Mon, 02 Jun 1997 13:00:00 -0800]/UNNAMED/[From "Lori LaPerle" <[email protected]>][Date Thu, 30 Dec 1999 15:19:06 -0800]/text/[From "Lori LaPerle" <[email protected]>][Date Fri, 14 Jan 2000 09:54:09 -0800]/UNNAMED/[From "Lori LaPerle" <[email protected]>][Date Wed, 19 Jan 2000 12:55:16 -0800]/UNNAMED/[From Tim Toomay <[email protected] ... /[Fro ... /[From M ... /[From sstiward <[email protected]>][Date Sat, 14 Dec 2002 13:04:38 -0500 (EST)]/UNNAMED Infected: Email-Worm.Win32.Klez.h skipped

D:\AWK\Mail\Local Folders\Communicator 4.x Mail.sbd\inbox/[From "In-box Direct" <[email protected]>][Date Mon, 02 Jun 1997 13:00:00 -0800]/UNNAMED/[From "Lori LaPerle" <[email protected]>][Date Thu, 30 Dec 1999 15:19:06 -0800]/text/[From "Lori LaPerle" <[email protected]>][Date Fri, 14 Jan 2000 09:54:09 -0800]/UNNAMED/[From "Lori LaPerle" <[email protected]>][Date Wed, 19 Jan 2000 12:55:16 -0800]/UNNAMED/[From Tim Toomay <[email protected] ... /[Fro ... /[From Mail Delivery Subsystem <[email protected] ... /[From logs-wl.proxy.aol.com [205.188.199.5]]/UNNAMED Infected: Email-Worm.Win32.Klez.h skipped

D:\AWK\Mail\Local Folders\Communicator 4.x Mail.sbd\inbox/[From "In-box Direct" <[email protected]>][Date Mon, 02 Jun 1997 13:00:00 -0800]/UNNAMED/[From "Lori LaPerle" <[email protected]>][Date Thu, 30 Dec 1999 15:19:06 -0800]/text/[From "Lori LaPerle" <[email protected]>][Date Fri, 14 Jan 2000 09:54:09 -0800]/UNNAMED/[From "Lori LaPerle" <[email protected]>][Date Wed, 19 Jan 2000 12:55:16 -0800]/UNNAMED/[From Tim Toomay <[email protected] ... /[Fro .. ... / ... ... /[From sstiward <[email protected]>][Date Thu, 19 Dec 2002 00:16:08 -0500 (EST)]/UNNAMED Infected: Email-Worm.Win32.Klez.h skipped

D:\AWK\Mail\Local Folders\Communicator 4.x Mail.sbd\inbox/[From "In-box Direct" <[email protected]>][Date Mon, 02 Jun 1997 13:00:00 -0800]/UNNAMED/[From "Lori LaPerle" <[email protected]>][Date Thu, 30 Dec 1999 15:19:06 -0800]/text/[From "Lori LaPerle" <[email protected]>][Date Fri, 14 Jan 2000 09:54:09 -0800]/UNNAMED/[From "Lori LaPerle" <[email protected]>][Date Wed, 19 Jan 2000 12:55:16 -0800]/UNNAMED/[From Tim Toomay <[email protected] ... /[Fro .. ... / ... /[From logs-wa.proxy.aol.com [205.188.192.14]][Date Thu, 19 Dec 2002 00:21:28 -0500 (EST)]/UNNAMED Infected: Email-Worm.Win32.Klez.h skipped

D:\AWK\Mail\Local Folders\Communicator 4.x Mail.sbd\inbox/[From "In-box Direct" <[email protected]>][Date Mon, 02 Jun 1997 13:00:00 -0800]/UNNAMED/[From "Lori LaPerle" <[email protected]>][Date Thu, 30 Dec 1999 15:19:06 -0800]/text/[From "Lori LaPerle" <[email protected]>][Date Fri, 14 Jan 2000 09:54:09 -0800]/UNNAMED/[From "Lori LaPerle" <[email protected]>][Date Wed, 19 Jan 2000 12:55:16 -0800]/UNNAMED/[From Tim Toomay <[email protected] ... /[Fro .. ... /[From ... /[From STOOMA <[email protected]>][Date Sat, 21 Dec 2002 13:53:00 -0500 (EST)]/UNNAMED Infected: Email-Worm.Win32.Klez.h skipped

D:\AWK\Mail\Local Folders\Communicator 4.x Mail.sbd\inbox/[From "In-box Direct" <[email protected]>][Date Mon, 02 Jun 1997 13:00:00 -0800]/UNNAMED/[From "Lori LaPerle" <[email protected]>][Date Thu, 30 Dec 1999 15:19:06 -0800]/text/[From "Lori LaPerle" <[email protected]>][Date Fri, 14 Jan 2000 09:54:09 -0800]/UNNAMED/[From "Lori LaPerle" <[email protected]>][Date Wed, 19 Jan 2000 12:55:16 -0800]/UNNAMED/[From Tim Toomay <[email protected] ... /[Fro .. .. ... /[From logs-m ... /[From Oghess <[email protected]>][Date Tue, 24 Dec 2002 15:45:12 -0500 (EST)]/UNNAMED Infected: Email-Worm.Win32.Klez.h skipped

D:\AWK\Mail\Local Folders\Communicator 4.x Mail.sbd\inbox/[From "In-box Direct" <[email protected]>][Date Mon, 02 Jun 1997 13:00:00 -0800]/UNNAMED/[From "Lori LaPerle" <[email protected]>][Date Thu, 30 Dec 1999 15:19:06 -0800]/text/[From "Lori LaPerle" <[email protected]>][Date Fri, 14 Jan 2000 09:54:09 -0800]/UNNAMED/[From "Lori LaPerle" <[email protected]>][Date Wed, 19 Jan 2000 12:55:16 -0800]/UNNAMED/[From Tim Toomay <[email protected] ... /[Fro .. .. ... /[From logs-mtc-tg.proxy.aol.com [64.12.102.135]][Date Tue, 24 Dec 2002 16:10:56 -0500 (EST)]/UNNAMED Infected: Email-Worm.Win32.Klez.h skipped

D:\AWK\Mail\Local Folders\Communicator 4.x Mail.sbd\inbox/[From "In-box Direct" <[email protected]>][Date Mon, 02 Jun 1997 13:00:00 -0800]/UNNAMED/[From "Lori LaPerle" <[email protected]>][Date Thu, 30 Dec 1999 15:19:06 -0800]/text/[From "Lori LaPerle" <[email protected]>][Date Fri, 14 Jan 2000 09:54:09 -0800]/UNNAMED/[From "Lori LaPerle" <[email protected]>][Date Wed, 19 Jan 2000 12:55:16 -0800]/UNNAMED/[From Tim Toomay <[email protected] ... /[Fro .. ... /[From "Miriam Paramore" <[email protected]>][Date Sat, 21 Dec 2002 16:10:54 -0500]/text Infected: Email-Worm.Win32.Klez.h skipped

D:\AWK\Mail\Local Folders\Communicator 4.x Mail.sbd\inbox/[From "In-box Direct" <[email protected]>][Date Mon, 02 Jun 1997 13:00:00 -0800]/UNNAMED/[From "Lori LaPerle" <[email protected]>][Date Thu, 30 Dec 1999 15:19:06 -0800]/text/[From "Lori LaPerle" <[email protected]>][Date Fri, 14 Jan 2000 09:54:09 -0800]/UNNAMED/[From "Lori LaPerle" <[email protected]>][Date Wed, 19 Jan 2000 12:55:16 -0800]/UNNAMED/[From Tim Toomay <[email protected] ... /[Fro .. ... /[From "Miriam Paramore" <miriam ... /[From [email protected]][Date Thu, 19 Dec 2002 08:05:45 EST]/UNNAMED Infected: Email-Worm.Win32.Klez.h skipped

D:\AWK\Mail\Local Folders\Communicator 4.x Mail.sbd\inbox/[From "In-box Direct" <[email protected]>][Date Mon, 02 Jun 1997 13:00:00 -0800]/UNNAMED/[From "Lori LaPerle" <[email protected]>][Date Thu, 30 Dec 1999 15:19:06 -0800]/text/[From "Lori LaPerle" <[email protected]>][Date Fri, 14 Jan 2000 09:54:09 -0800]/UNNAMED/[From "Lori LaPerle" <[email protected]>][Date Wed, 19 Jan 2000 12:55:16 -0800]/UNNAMED/[From Tim Toomay <[email protected] ... /[Fro .. ... /[From "Miriam Paramore" <[email protected]>][Date Wed, 18 Dec 2002 18:47:51 -0500]/text Infected: Email-Worm.Win32.Klez.h skipped

D:\AWK\Mail\Local Folders\Communicator 4.x Mail.sbd\inbox/[From "In-box Direct" <[email protected]>][Date Mon, 02 Jun 1997 13:00:00 -0800]/UNNAMED/[From "Lori LaPerle" <[email protected]>][Date Thu, 30 Dec 1999 15:19:06 -0800]/text/[From "Lori LaPerle" <[email protected]>][Date Fri, 14 Jan 2000 09:54:09 -0800]/UNNAMED/[From "Lori LaPerle" <[email protected]>][Date Wed, 19 Jan 2000 12:55:16 -0800]/UNNAMED/[From Tim Toomay <[email protected] ... /[Fro ... /[F ... /[From ... /[From "Michael Frenn" <[email protected]>][Date Wed, 18 Dec 2002 14:07:53 -0800]/UNNAMED Infected: Email-Worm.Win32.Klez.h skipped

D:\AWK\Mail\Local Folders\Communicator 4.x Mail.sbd\inbox/[From "In-box Direct" <[email protected]>][Date Mon, 02 Jun 1997 13:00:00 -0800]/UNNAMED/[From "Lori LaPerle" <[email protected]>][Date Thu, 30 Dec 1999 15:19:06 -0800]/text/[From "Lori LaPerle" <[email protected]>][Date Fri, 14 Jan 2000 09:54:09 -0800]/UNNAMED/[From "Lori LaPerle" <[email protected]>][Date Wed, 19 Jan 2000 12:55:16 -0800]/UNNAMED/[From Tim Toomay <[email protected] ... /[Fro ... /[F ... /[From "Christina ARENAS" <[email protected]>][Date Wed, 18 Dec 2002 07:39:42 -0800]/UNNAMED Infected: Email-Worm.Win32.Klez.h skipped

D:\AWK\Mail\Local Folders\Communicator 4.x Mail.sbd\inbox/[From "In-box Direct" <[email protected]>][Date Mon, 02 Jun 1997 13:00:00 -0800]/UNNAMED/[From "Lori LaPerle" <[email protected]>][Date Thu, 30 Dec 1999 15:19:06 -0800]/text/[From "Lori LaPerle" <[email protected]kahane.com>][Date Fri, 14 Jan 2000 09:54:09 -0800]/UNNAMED/[From "Lori LaPerle" <[email protected]>][Date Wed, 19 Jan 2000 12:55:16 -0800]/UNNAMED/[From Tim Toomay <[email protected] ... /[Fro ... /[From Mail Deli ... /[From Tim Toomay <[email protected]>][Date Sat, 14 Dec 2002 19:15:20 -0800]/text Infected: Email-Worm.Win32.Klez.h skipped

D:\AWK\Mail\Local Folders\Communicator 4.x Mail.sbd\inbox/[From "In-box Direct" <[email protected]>][Date Mon, 02 Jun 1997 13:00:00 -0800]/UNNAMED/[From "Lori LaPerle" <[email protected]>][Date Thu, 30 Dec 1999 15:19:06 -0800]/text/[From "Lori LaPerle" <[email protected]>][Date Fri, 14 Jan 2000 09:54:09 -0800]/UNNAMED/[From "Lori LaPerle" <[email protected]>][Date Wed, 19 Jan 2000 12:55:16 -0800]/UNNAMED/[From Tim Toomay <[email protected] ... /[Fro ... /[From Mail Delivery Subsystem <[email protected]>][Date Sat, 14 Dec 2002 13:06:45 -0500 (EST)]/UNNAMED Infected: Email-Worm.Win32.Klez.h skipped

D:\AWK\Mail\Local Folders\Communicator 4.x Mail.sbd\inbox/[From "In-box Direct" <[email protected]>][Date Mon, 02 Jun 1997 13:00:00 -0800]/UNNAMED/[From "Lori LaPerle" <[email protected]>][Date Thu, 30 Dec 1999 15:19:06 -0800]/text/[From "Lori LaPerle" <[email protected]>][Date Fri, 14 Jan 2000 09:54:09 -0800]/UNNAMED/[From "Lori LaPerle" <[email protected]>][Date Wed, 19 Jan 2000 12:55:16 -0800]/UNNAMED/[From Tim Toomay <[email protected] ... /[From " .. .. ... /[From ... /[From "Zon Owen" <[email protected]>][Date Thu, 12 Dec 2002 15:40:43 -1000]/UNNAMED Infected: Email-Worm.Win32.Klez.h skipped

D:\AWK\Mail\Local Folders\Communicator 4.x Mail.sbd\inbox/[From "In-box Direct" <[email protected]>][Date Mon, 02 Jun 1997 13:00:00 -0800]/UNNAMED/[From "Lori LaPerle" <[email protected]>][Date Thu, 30 Dec 1999 15:19:06 -0800]/text/[From "Lori LaPerle" <[email protected]>][Date Fri, 14 Jan 2000 09:54:09 -0800]/UNNAMED/[From "Lori LaPerle" <[email protected]>][Date Wed, 19 Jan 2000 12:55:16 -0800]/UNNAMED/[From Tim Toomay <[email protected] ... /[From " .. .. ... /[F ... /[From sstiward <[email protected]>][Date Fri, 28 Feb 2003 19:10:23 -0600]/UNNAMED Infected: Email-Worm.Win32.Klez.h skipped

D:\AWK\Mail\Local Folders\Communicator 4.x Mail.sbd\inbox/[From "In-box Direct" <[email protected]>][Date Mon, 02 Jun 1997 13:00:00 -0800]/UNNAMED/[From "Lori LaPerle" <[email protected]>][Date Thu, 30 Dec 1999 15:19:06 -0800]/text/[From "Lori LaPerle" <[email protected]>][Date Fri, 14 Jan 2000 09:54:09 -0800]/UNNAMED/[From "Lori LaPerle" <[email protected]>][Date Wed, 19 Jan 2000 12:55:16 -0800]/UNNAMED/[From Tim Toomay <[email protected] ... /[From " .. .. ... /[From ... /[From "meena degala" <[email protected]>][Date 28 Feb 2003 19:23:17 -0000]/text Infected: Email-Worm.Win32.Klez.h skipped

D:\AWK\Mail\Local Folders\Communicator 4.x Mail.sbd\inbox/[From "In-box Direct" <[email protected]>][Date Mon, 02 Jun 1997 13:00:00 -0800]/UNNAMED/[From "Lori LaPerle" <[email protected]>][Date Thu, 30 Dec 1999 15:19:06 -0800]/text/[From "Lori LaPerle" <[email protected]>][Date Fri, 14 Jan 2000 09:54:09 -0800]/UNNAMED/[From "Lori LaPerle" <[email protected]>][Date Wed, 19 Jan 2000 12:55:16 -0800]/UNNAMED/[From Tim Toomay <[email protected] ... /[From KidsSpankingPoll-owner <[email protected]>][Date Mon, 21 Apr 2003 11:43:44 -0500]/UNNAMED Infected: Email-Worm.Win32.Klez.h skipped

D:\AWK\Mail\Local Folders\Communicator 4.x Mail.sbd\inbox/[From "In-box Direct" <[email protected]>][Date Mon, 02 Jun 1997 13:00:00 -0800]/UNNAMED/[From "Lori LaPerle" <[email protected]>][Date Thu, 30 Dec 1999 15:19:06 -0800]/text/[From "Lori LaPerle" <[email protected]>][Date Fri, 14 Jan 2000 09:54:09 -0800]/UNNAMED/[From "Lori LaPerle" <[email protected]>][Date Wed, 19 Jan 2000 12:55:16 -0800]/UNNAMED/[From Tim Toomay <[email protected] ... /[From " .. .. ... / ... /[From "rachelmcass" <[email protected]>][Date Mon, 21 Apr 2003 08:29:08 -0500]/text Infected: Email-Worm.Win32.Klez.h skipped

D:\AWK\Mail\Local Folders\Communicator 4.x Mail.sbd\inbox/[From "In-box Direct" <[email protected]>][Date Mon, 02 Jun 1997 13:00:00 -0800]/UNNAMED/[From "Lori LaPerle" <[email protected]>][Date Thu, 30 Dec 1999 15:19:06 -0800]/text/[From "Lori LaPerle" <[email protected]>][Date Fri, 14 Jan 2000 09:54:09 -0800]/UNNAMED/[From "Lori LaPerle" <[email protected]>][Date Wed, 19 Jan 2000 12:55:16 -0800]/UNNAMED/[From Tim Toomay <[email protected] ... /[From " .. .. ... /[From ... /[From "Mary Emerson" <[email protected]>][Date Tue, 27 Feb 2001 08:42:33 -0500]/text Infected: Email-Worm.Win32.Klez.h skipped

D:\AWK\Mail\Local Folders\Communicator 4.x Mail.sbd\inbox/[From "In-box Direct" <[email protected]>][Date Mon, 02 Jun 1997 13:00:00 -0800]/UNNAMED/[From "Lori LaPerle" <[email protected]>][Date Thu, 30 Dec 1999 15:19:06 -0800]/text/[From "Lori LaPerle" <[email protected]>][Date Fri, 14 Jan 2000 09:54:09 -0800]/UNNAMED/[From "Lori LaPerle" <[email protected]>][Date Wed, 19 Jan 2000 12:55:16 -0800]/UNNAMED/[From Tim Toomay <[email protected] ... /[From " .. .. ... /[From Marcallee Jackson <[email protected]>][Date Thu, 25 Jan 2001 18:12:10 -0800]/text Infected: Email-Worm.Win32.Klez.h skipped

D:\AWK\Mail\Local Folders\Communicator 4.x Mail.sbd\inbox/[From "In-box Direct" <[email protected]>][Date Mon, 02 Jun 1997 13:00:00 -0800]/UNNAMED/[From "Lori LaPerle" <[email protected]>][Date Thu, 30 Dec 1999 15:19:06 -0800]/text/[From "Lori LaPerle" <[email protected]>][Date Fri, 14 Jan 2000 09:54:09 -0800]/UNNAMED/[From "Lori LaPerle" <[email protected]>][Date Wed, 19 Jan 2000 12:55:16 -0800]/UNNAMED/[From Tim Toomay <[email protected] ... /[From " .. .. . ... /[From Kepa Zubeldia <[email protected]>][Date Thu, 14 Dec 2000 18:47:42 -0700]/UNNAMED Infected: Email-Worm.Win32.Klez.h skipped

D:\AWK\Mail\Local Folders\Communicator 4.x Mail.sbd\inbox/[From "In-box Direct" <[email protected]>][Date Mon, 02 Jun 1997 13:00:00 -0800]/UNNAMED/[From "Lori LaPerle" <[email protected]>][Date Thu, 30 Dec 1999 15:19:06 -0800]/text/[From "Lori LaPerle" <[email protected]>][Date Fri, 14 Jan 2000 09:54:09 -0800]/UNNAMED/[From "Lori LaPerle" <[email protected]>][Date Wed, 19 Jan 2000 12:55:16 -0800]/UNNAMED/[From Tim Toomay <[email protected] ... /[From " .. .. ... /[F ... /[From Tim Toomay <[email protected]>][Date Thu, 14 Dec 2000 13:31:29 -0800]/UNNAMED Infected: Email-Worm.Win32.Klez.h skipped

D:\AWK\Mail\Local Folders\Communicator 4.x Mail.sbd\inbox/[From "In-box Direct" <[email protected]>][Date Mon, 02 Jun 1997 13:00:00 -0800]/UNNAMED/[From "Lori LaPerle" <[email protected]>][Date Thu, 30 Dec 1999 15:19:06 -0800]/text/[From "Lori LaPerle" <[email protected]>][Date Fri, 14 Jan 2000 09:54:09 -0800]/UNNAMED/[From "Lori LaPerle" <[email protected]>][Date Wed, 19 Jan 2000 12:55:16 -0800]/UNNAMED/[From Tim Toomay <[email protected] ... /[From " .. .. ... /[From "Fren ... /[From [email protected]verizon.com][Date Thu, 14 Dec 2000 14:06:52 -0500]/UNNAMED Infected: Email-Worm.Win32.Klez.h skipped

D:\AWK\Mail\Local Folders\Communicator 4.x Mail.sbd\inbox/[From "In-box Direct" <[email protected]>][Date Mon, 02 Jun 1997 13:00:00 -0800]/UNNAMED/[From "Lori LaPerle" <[email protected]>][Date Thu, 30 Dec 1999 15:19:06 -0800]/text/[From "Lori LaPerle" <[email protected]>][Date Fri, 14 Jan 2000 09:54:09 -0800]/UNNAMED/[From "Lori LaPerle" <[email protected]>][Date Wed, 19 Jan 2000 12:55:16 -0800]/UNNAMED/[From Tim Toomay <[email protected] ... /[From " .. .. ... /[From "Frenn, Michael." <[email protected]>][Date Mon, 28 Aug 2000 12:02:54 -0700]/UNNAMED Infected: Email-Worm.Win32.Klez.h skipped

D:\AWK\Mail\Local Folders\Communicator 4.x Mail.sbd\inbox/[From "In-box Direct" <[email protected]>][Date Mon, 02 Jun 1997 13:00:00 -0800]/UNNAMED/[From "Lori LaPerle" <[email protected]>][Date Thu, 30 Dec 1999 15:19:06 -0800]/text/[From "Lori LaPerle" <[email protected]>][Date Fri, 14 Jan 2000 09:54:09 -0800]/UNNAMED/[From "Lori LaPerle" <[email protected]>][Date Wed, 19 Jan 2000 12:55:16 -0800]/UNNAMED/[From Tim Toomay <[email protected] ... /[From " .. ... / ... /[From Efren Lucero <Ef . ... /[From [email protected]][Date Mon, 21 Aug 2000 17:20:04 EDT]/text Infected: Email-Worm.Win32.Klez.h skipped

D:\AWK\Mail\Local Folders\Communicator 4.x Mail.sbd\inbox/[From "In-box Direct" <[email protected]>][Date Mon, 02 Jun 1997 13:00:00 -0800]/UNNAMED/[From "Lori LaPerle" <[email protected]>][Date Thu, 30 Dec 1999 15:19:06 -0800]/text/[From "Lori LaPerle" <[email protected]>][Date Fri, 14 Jan 2000 09:54:09 -0800]/UNNAMED/[From "Lori LaPerle" <[email protected]>][Date Wed, 19 Jan 2000 12:55:16 -0800]/UNNAMED/[From Tim Toomay <[email protected] ... /[From " .. ... / ... /[From Efren Lucero <Ef ... /[From [email protected]][Date Mon, 21 Aug 2000 11:41:44 EDT]/UNNAMED Infected: Email-Worm.Win32.Klez.h skipped

D:\AWK\Mail\Local Folders\Communicator 4.x Mail.sbd\inbox/[From "In-box Direct" <[email protected]>][Date Mon, 02 Jun 1997 13:00:00 -0800]/UNNAMED/[From "Lori LaPerle" <[email protected]>][Date Thu, 30 Dec 1999 15:19:06 -0800]/text/[From "Lori LaPerle" <[email protected]>][Date Fri, 14 Jan 2000 09:54:09 -0800]/UNNAMED/[From "Lori LaPerle" <[email protected]>][Date Wed, 19 Jan 2000 12:55:16 -0800]/UNNAMED/[From Tim Toomay <[email protected] ... /[From " .. ... / ... /[From Efren Lucero <[email protected]>][Date Fri, 18 Aug 2000 12:15:34 -0700]/text Infected: Email-Worm.Win32.Klez.h skipped

D:\AWK\Mail\Local Folders\Communicator 4.x Mail.sbd\inbox/[From "In-box Direct" <[email protected]>][Date Mon, 02 Jun 1997 13:00:00 -0800]/UNNAMED/[From "Lori LaPerle" <[email protected]>][Date Thu, 30 Dec 1999 15:19:06 -0800]/text/[From "Lori LaPerle" <[email protected]>][Date Fri, 14 Jan 2000 09:54:09 -0800]/UNNAMED/[From "Lori LaPerle" <[email protected]>][Date Wed, 19 Jan 2000 12:55:16 -0800]/UNNAMED/[From Tim Toomay <[email protected] ... /[From " .. ... /[From " ... /[From [email protected]][Date Fri, 18 Aug 2000 09:12:56 -0700]/UNNAMED Infected: Email-Worm.Win32.Klez.h skipped

D:\AWK\Mail\Local Folders\Communicator 4.x Mail.sbd\inbox/[From "In-box Direct" <[email protected]>][Date Mon, 02 Jun 1997 13:00:00 -0800]/UNNAMED/[From "Lori LaPerle" <[email protected]>][Date Thu, 30 Dec 1999 15:19:06 -0800]/text/[From "Lori LaPerle" <[email protected]>][Date Fri, 14 Jan 2000 09:54:09 -0800]/UNNAMED/[From "Lori LaPerle" <[email protected]>][Date Wed, 19 Jan 2000 12:55:16 -0800]/UNNAMED/[From Tim Toomay <[email protected] ... /[From " .. ... /[From "Kleveno, Alvin, ACFD" < ... /[From [email protected]][Date Mon, 14 Aug 2000 08:59:35 EDT]/text Infected: Email-Worm.Win32.Klez.h skipped

D:\AWK\Mail\Local Folders\Communicator 4.x Mail.sbd\inbox/[From "In-box Direct" <[email protected]>][Date Mon, 02 Jun 1997 13:00:00 -0800]/UNNAMED/[From "Lori LaPerle" <[email protected]>][Date Thu, 30 Dec 1999 15:19:06 -0800]/text/[From "Lori LaPerle" <[email protected]>][Date Fri, 14 Jan 2000 09:54:09 -0800]/UNNAMED/[From "Lori LaPerle" <[email protected]>][Date Wed, 19 Jan 2000 12:55:16 -0800]/UNNAMED/[From Tim Toomay <[email protected] ... /[From " .. ... /[From "Kleveno, Alvin, ACFD" <[email protected]>][Date Mon, 5 Jun 2000 16:51:08 -0700]/text Infected: Email-Worm.Win32.Klez.h skipped

D:\AWK\Mail\Local Folders\Communicator 4.x Mail.sbd\inbox/[From "In-box Direct" <[email protected]>][Date Mon, 02 Jun 1997 13:00:00 -0800]/UNNAMED/[From "Lori LaPerle" <[email protected]>][Date Thu, 30 Dec 1999 15:19:06 -0800]/text/[From "Lori LaPerle" <[email protected]>][Date Fri, 14 Jan 2000 09:54:09 -0800]/UNNAMED/[From "Lori LaPerle" <[email protected]>][Date Wed, 19 Jan 2000 12:55:16 -0800]/UNNAMED/[From Tim Toomay <[email protected] ... /[From " .. ... /[Fr ... /[From "Meier, Debbie" <[email protected]>][Date Wed, 24 May 2000 10:39:55 -0700]/text Infected: Email-Worm.Win32.Klez.h skipped

D:\AWK\Mail\Local Folders\Communicator 4.x Mail.sbd\inbox/[From "In-box Direct" <[email protected]>][Date Mon, 02 Jun 1997 13:00:00 -0800]/UNNAMED/[From "Lori LaPerle" <[email protected]>][Date Thu, 30 Dec 1999 15:19:06 -0800]/text/[From "Lori LaPerle" <[email protected]>][Date Fri, 14 Jan 2000 09:54:09 -0800]/UNNAMED/[From "Lori LaPerle" <[email protected]>][Date Wed, 19 Jan 2000 12:55:16 -0800]/UNNAMED/[From Tim Toomay <[email protected] ... /[From " .. ... /[From "Henius, Kenneth, ACFD" <[email protected]>][Date Tue, 25 Apr 2000 11:09:16 -0700]/text Infected: Email-Worm.Win32.Klez.h skipped

D:\AWK\Mail\Local Folders\Communicator 4.x Mail.sbd\inbox/[From "In-box Direct" <[email protected]>][Date Mon, 02 Jun 1997 13:00:00 -0800]/UNNAMED/[From "Lori LaPerle" <[email protected]>][Date Thu, 30 Dec 1999 15:19:06 -0800]/text/[From "Lori LaPerle" <[email protected]>][Date Fri, 14 Jan 2000 09:54:09 -0800]/UNNAMED/[From "Lori LaPerle" <[email protected]>][Date Wed, 19 Jan 2000 12:55:16 -0800]/UNNAMED/[From Tim Toomay <[email protected] ... /[From " ... /[From "Henius, Kenneth, ACFD" <[email protected]>][Date Tue, 25 Apr 2000 10:39:16 -0700]/UNNAMED Infected: Email-Worm.Win32.Klez.h skipped

D:\AWK\Mail\Local Folders\Communicator 4.x Mail.sbd\inbox/[From "In-box Direct" <[email protected]>][Date Mon, 02 Jun 1997 13:00:00 -0800]/UNNAMED/[From "Lori LaPerle" <[email protected]>][Date Thu, 30 Dec 1999 15:19:06 -0800]/text/[From "Lori LaPerle" <[email protected]>][Date Fri, 14 Jan 2000 09:54:09 -0800]/UNNAMED/[From "Lori LaPerle" <[email protected]>][Date Wed, 19 Jan 2000 12:55:16 -0800]/UNNAMED/[From Tim Toomay <[email protected] ... /[From "the shockwave.com team" <[email protected]>][Date Sun, 20 Feb 2000 20:24:17 -0800 (PST)]/UNNAMED Infected: Email-Worm.Win32.Klez.h skipped

D:\AWK\Mail\Local Folders\Communicator 4.x Mail.sbd\inbox/[From "In-box Direct" <[email protected]>][Date Mon, 02 Jun 1997 13:00:00 -0800]/UNNAMED/[From "Lori LaPerle" <[email protected]>][Date Thu, 30 Dec 1999 15:19:06 -0800]/text/[From "Lori LaPerle" <[email protected]>][Date Fri, 14 Jan 2000 09:54:09 -0800]/UNNAMED/[From "Lori LaPerle" <[email protected]>][Date Wed, 19 Jan 2000 12:55:16 -0800]/UNNAMED/[From Tim Toomay <[email protected]>][Date Thu, 2 ... /[From Tim Toomay <[email protected]>][Date Fri, 11 Feb 2000 14:28:38 -0800]/UNNAMED Infected: Email-Worm.Win32.Klez.h skipped

D:\AWK\Mail\Local Folders\Communicator 4.x Mail.sbd\inbox/[From "In-box Direct" <[email protected]>][Date Mon, 02 Jun 1997 13:00:00 -0800]/UNNAMED/[From "Lori LaPerle" <[email protected]>][Date Thu, 30 Dec 1999 15:19:06 -0800]/text/[From "Lori LaPerle" <[email protected]>][Date Fri, 14 Jan 2000 09:54:09 -0800]/UNNAMED/[From "Lori LaPerle" <[email protected]>][Date Wed, 19 Jan 2000 12:55:16 -0800]/UNNAMED/[From Tim Toomay <[email protected]>][Date Thu, 2 ... /[From "Martin J. Reed" <[email protected]>][Date Wed, 02 Feb 2000 09:05:05 -0800]/text Infected: Email-Worm.Win32.Klez.h skipped

D:\AWK\Mail\Local Folders\Communicator 4.x Mail.sbd\inbox/[From "In-box Direct" <[email protected]>][Date Mon, 02 Jun 1997 13:00:00 -0800]/UNNAMED/[From "Lori LaPerle" <[email protected]>][Date Thu, 30 Dec 1999 15:19:06 -0800]/text/[From "Lori LaPerle" <[email protected]>][Date Fri, 14 Jan 2000 09:54:09 -0800]/UNNAMED/[From "Lori LaPerle" <[email protected]>][Date Wed, 19 Jan 2000 12:55:16 -0800]/UNNAMED/[From Tim Toomay <[email protected]>][Date Thu, 20 Jan 20 ... /[From William <[email protected]>][Date Tue, 01 Feb 2000 10:34:44 -0800]/UNNAMED Infected: Email-Worm.Win32.Klez.h skipped

D:\AWK\Mail\Local Folders\Communicator 4.x Mail.sbd\inbox/[From "In-box Direct" <[email protected]>][Date Mon, 02 Jun 1997 13:00:00 -0800]/UNNAMED/[From "Lori LaPerle" <[email protected]>][Date Thu, 30 Dec 1999 15:19:06 -0800]/text/[From "Lori LaPerle" <[email protected]>][Date Fri, 14 Jan 2000 09:54:09 -0800]/UNNAMED/[From "Lori LaPerle" <[email protected]>][Date Wed, 19 Jan 2000 12:55:16 -0800]/UNNAMED/[From Tim Toomay <[email protected]>][Date Thu, 20 Jan 2000 14:44:08 -0800]/UNNAMED Infected: Email-Worm.Win32.Klez.h skipped

D:\AWK\Mail\Local Folders\Communicator 4.x Mail.sbd\inbox/[From "In-box Direct" <[email protected]>][Date Mon, 02 Jun 1997 13:00:00 -0800]/UNNAMED/[From "Lori LaPerle" <[email protected]>][Date Thu, 30 Dec 1999 15:19:06 -0800]/text/[From "Lori LaPerle" <[email protected]>][Date Fri, 14 Jan 2000 09:54:09 -0800]/UNNAMED/[From "Lori LaPerle" <[email protected]>][Date Wed, 19 Jan 2000 12:55:16 -0800]/UNNAMED Infected: Email-Worm.Win32.Klez.h skipped

D:\AWK\Mail\Local Folders\Communicator 4.x Mail.sbd\inbox/[From "In-box Direct" <[email protected]>][Date Mon, 02 Jun 1997 13:00:00 -0800]/UNNAMED/[From "Lori LaPerle" <[email protected]>][Date Thu, 30 Dec 1999 15:19:06 -0800]/text/[From "Lori LaPerle" <[email protected]>][Date Fri, 14 Jan 2000 09:54:09 -0800]/UNNAMED Infected: Email-Worm.Win32.Klez.h skipped

D:\AWK\Mail\Local Folders\Communicator 4.x Mail.sbd\inbox/[From "In-box Direct" <[email protected]>][Date Mon, 02 Jun 1997 13:00:00 -0800]/UNNAMED/[From "Lori LaPerle" <[email protected]>][Date Thu, 30 Dec 1999 15:19:06 -0800]/text Infected: Email-Worm.Win32.Klez.h skipped

D:\AWK\Mail\Local Folders\Communicator 4.x Mail.sbd\inbox/[From "In-box Direct" <[email protected]>][Date Mon, 02 Jun 1997 13:00:00 -0800]/UNNAMED Infected: Email-Worm.Win32.Klez.h skipped

D:\AWK\Mail\Local Folders\Communicator 4.x Mail.sbd\inbox Mail Berkeley mbox: infected - 70 skipped

D:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped

D:\System Volume Information\_restore{CCA15F78-7193-4CA6-8115-2B570DD6546C}\RP1076\change.log Object is locked skipped

Z:\SusBkUp\Test\clipartfree.exe/WISE0070.BIN Infected: not-a-virus:AdTool.Win32.WhenU.a skipped

Z:\SusBkUp\Test\clipartfree.exe/WISE0071.BIN Infected: not-a-virus:AdWare.Win32.NewDotNet skipped

Z:\SusBkUp\Test\clipartfree.exe/WISE0072.BIN/data.rar/WhAgent.exe Infected: not-a-virus:AdWare.Win32.WebHancer skipped

Z:\SusBkUp\Test\clipartfree.exe/WISE0072.BIN/data.rar/whInstaller.exe Infected: not-a-virus:AdWare.Win32.WebHancer skipped

Z:\SusBkUp\Test\clipartfree.exe/WISE0072.BIN/data.rar/WhSurvey.exe Infected: not-a-virus:AdWare.Win32.WebHancer skipped

Z:\SusBkUp\Test\clipartfree.exe/WISE0072.BIN/data.rar/Webhdll.dll Infected: not-a-virus:AdWare.Win32.WebHancer skipped

Z:\SusBkUp\Test\clipartfree.exe/WISE0072.BIN/data.rar/whiehlpr.dll Infected: not-a-virus:AdWare.Win32.WebHancer skipped

Z:\SusBkUp\Test\clipartfree.exe/WISE0072.BIN/data.rar Infected: not-a-virus:AdWare.Win32.WebHancer skipped

Z:\SusBkUp\Test\clipartfree.exe/WISE0072.BIN Infected: not-a-virus:AdWare.Win32.WebHancer skipped

Z:\SusBkUp\Test\clipartfree.exe/WISE0073.BIN Infected: not-a-virus:Server-Proxy.Win32.MarketScore.h skipped

Z:\SusBkUp\Test\clipartfree.exe/WISE0074.BIN Infected: not-a-virus:Server-Proxy.Win32.MarketScore.k skipped

Z:\SusBkUp\Test\clipartfree.exe WiseSFX: infected - 11 skipped

Z:\SusBkUp\Test\clipartfree.exe WiseSFX Dropper: infected - 11 skipped

Z:\SusBkUp\Test\lmping-clipartfree.exe/WISE0084.BIN/data0001.cab/VVSN.exe Infected: not-a-virus:AdWare.Win32.SaveNow.z skipped

Z:\SusBkUp\Test\lmping-clipartfree.exe/WISE0084.BIN/data0001.cab Infected: not-a-virus:AdWare.Win32.SaveNow.z skipped

Z:\SusBkUp\Test\lmping-clipartfree.exe/WISE0084.BIN Infected: not-a-virus:AdWare.Win32.SaveNow.z skipped

Z:\SusBkUp\Test\lmping-clipartfree.exe/WISE0087.BIN/data0001.cab/VVSN.exe Infected: not-a-virus:AdWare.Win32.SaveNow.z skipped

Z:\SusBkUp\Test\lmping-clipartfree.exe/WISE0087.BIN/data0001.cab Infected: not-a-virus:AdWare.Win32.SaveNow.z skipped

Z:\SusBkUp\Test\lmping-clipartfree.exe/WISE0087.BIN Infected: not-a-virus:AdWare.Win32.SaveNow.z skipped

Z:\SusBkUp\Test\lmping-clipartfree.exe/WISE0088.BIN Infected: not-a-virus:AdWare.Win32.NewDotNet skipped

Z:\SusBkUp\Test\lmping-clipartfree.exe/WISE0089.BIN/data.rar/WhAgent.exe Infected: not-a-virus:AdWare.Win32.WebHancer skipped

Z:\SusBkUp\Test\lmping-clipartfree.exe/WISE0089.BIN/data.rar/whInstaller.exe Infected: not-a-virus:AdWare.Win32.WebHancer skipped

Z:\SusBkUp\Test\lmping-clipartfree.exe/WISE0089.BIN/data.rar/WhSurvey.exe Infected: not-a-virus:AdWare.Win32.WebHancer skipped

Z:\SusBkUp\Test\lmping-clipartfree.exe/WISE0089.BIN/data.rar/Webhdll.dll Infected: not-a-virus:AdWare.Win32.WebHancer skipped

Z:\SusBkUp\Test\lmping-clipartfree.exe/WISE0089.BIN/data.rar/whiehlpr.dll Infected: not-a-virus:AdWare.Win32.WebHancer skipped

Z:\SusBkUp\Test\lmping-clipartfree.exe/WISE0089.BIN/data.rar Infected: not-a-virus:AdWare.Win32.WebHancer skipped

Z:\SusBkUp\Test\lmping-clipartfree.exe/WISE0089.BIN Infected: not-a-virus:AdWare.Win32.WebHancer skipped

Z:\SusBkUp\Test\lmping-clipartfree.exe/WISE0090.BIN Infected: not-a-virus:Server-Proxy.Win32.MarketScore.h skipped

Z:\SusBkUp\Test\lmping-clipartfree.exe/WISE0091.BIN Infected: not-a-virus:Server-Proxy.Win32.MarketScore.i skipped

Z:\SusBkUp\Test\lmping-clipartfree.exe WiseSFX: infected - 16 skipped

Z:\SusBkUp\Test\lmping-clipartfree.exe WiseSFX Dropper: infected - 16 skipped

Scan process completed.

Share this post


Link to post
Share on other sites

Hello,

Do you happen to be sharing FWD emails with any of those people that the last scan picked up?

Please go HERE to run Panda's ActiveScan

  • Once you are on the Panda site click the Scan your PC button
  • A new window will open...click the Check Now button
  • Enter your Country
  • Enter your State/Province
  • Enter your e-mail address and click send
  • Select either Home User or Company
  • Click the big Scan Now button
  • If it wants to install an ActiveX component allow it
  • It will start downloading the files it requires for the scan (Note: It may take a couple of minutes)
  • When download is complete, click on My Computer to start the scan
  • When the scan completes, if anything malicious is detected, click the See Report button, then Save Report and save it to a convenient location. Post the contents of the ActiveScan report

Share this post


Link to post
Share on other sites

No, I'm not sharing FWD emails.

Most of it's from a backup mail folder, a previous version of Netscape Mail and an old email list group. Norton was catching most of it.

Panda ActiveScan is started with IE again. It's currently at about 50%. Results will be posted tomorrow morning.

Share this post


Link to post
Share on other sites

I thought Panda had stopped, because it got stuck on that darn mail folder. It's probably not a good idea to save mail between upgrades. However, it's been very useful to go back and review on some things. I hate to lose all of it.

It's still going at about 50%. So far it has cleaned and disinfected 29 viruses (it was 27 right before this post). It has detected 33 spywares and 5 hacking tools and rootkits. Yikes! That doesn't sound good. I know this version of Panda will only disinfect viruses, so what do I do now? Is it time to reformat the hard drive? I'll let the scan continue until further notice.

Share this post


Link to post
Share on other sites

It has finished. Here are the results.

Activescan.txt

Incident Status Location

Spyware:Cookie/2o7 Not disinfected C:\Documents and Settings\Toomay Technologies\Application Data\Mozilla\Firefox\Profiles\xwwafcgz.default\cookies.txt[.2o7.net/]

Spyware:Cookie/RealMedia Not disinfected C:\Documents and Settings\Toomay Technologies\Application Data\Mozilla\Firefox\Profiles\xwwafcgz.default\cookies.txt[.realmedia.com/]

Spyware:Cookie/YieldManager Not disinfected C:\Documents and Settings\Toomay Technologies\Application Data\Mozilla\Firefox\Profiles\xwwafcgz.default\cookies.txt[ad.yieldmanager.com/]

Spyware:Cookie/Atlas DMT Not disinfected C:\Documents and Settings\Toomay Technologies\Application Data\Mozilla\Firefox\Profiles\xwwafcgz.default\cookies.txt[.atdmt.com/]

Spyware:Cookie/PointRoll Not disinfected C:\Documents and Settings\Toomay Technologies\Application Data\Mozilla\Firefox\Profiles\xwwafcgz.default\cookies.txt[.ads.pointroll.com/]

Spyware:Cookie/Advertising Not disinfected C:\Documents and Settings\Toomay Technologies\Application Data\Mozilla\Firefox\Profiles\xwwafcgz.default\cookies.txt[.advertising.com/]

Spyware:Cookie/Tribalfusion Not disinfected C:\Documents and Settings\Toomay Technologies\Application Data\Mozilla\Firefox\Profiles\xwwafcgz.default\cookies.txt[.tribalfusion.com/]

Spyware:Cookie/Traffic Marketplace Not disinfected C:\Documents and Settings\Toomay Technologies\Application Data\Mozilla\Firefox\Profiles\xwwafcgz.default\cookies.txt[.trafficmp.com/]

Spyware:Cookie/Com.com Not disinfected C:\Documents and Settings\Toomay Technologies\Application Data\Mozilla\Firefox\Profiles\xwwafcgz.default\cookies.txt[.com.com/]

Spyware:Cookie/Doubleclick Not disinfected C:\Documents and Settings\Toomay Technologies\Application Data\Mozilla\Firefox\Profiles\xwwafcgz.default\cookies.txt[.doubleclick.net/]

Spyware:Cookie/Apmebf Not disinfected C:\Documents and Settings\Toomay Technologies\Application Data\Mozilla\Firefox\Profiles\xwwafcgz.default\cookies.txt[.apmebf.com/]

Spyware:Cookie/FastClick Not disinfected C:\Documents and Settings\Toomay Technologies\Application Data\Mozilla\Firefox\Profiles\xwwafcgz.default\cookies.txt[.fastclick.net/]

Spyware:Cookie/Mediaplex Not disinfected C:\Documents and Settings\Toomay Technologies\Application Data\Mozilla\Firefox\Profiles\xwwafcgz.default\cookies.txt[.mediaplex.com/]

Spyware:Cookie/Adrevolver Not disinfected C:\Documents and Settings\Toomay Technologies\Application Data\Mozilla\Firefox\Profiles\xwwafcgz.default\cookies.txt[.adrevolver.com/]

Spyware:Cookie/Casalemedia Not disinfected C:\Documents and Settings\Toomay Technologies\Application Data\Mozilla\Firefox\Profiles\xwwafcgz.default\cookies.txt[.casalemedia.com/]

Spyware:Cookie/Atwola Not disinfected C:\Documents and Settings\Toomay Technologies\Application Data\Mozilla\Firefox\Profiles\xwwafcgz.default\cookies.txt[.atwola.com/]

Spyware:Cookie/Overture Not disinfected C:\Documents and Settings\Toomay Technologies\Application Data\Mozilla\Firefox\Profiles\xwwafcgz.default\cookies.txt[.overture.com/]

Spyware:Cookie/QuestionMarket Not disinfected C:\Documents and Settings\Toomay Technologies\Application Data\Mozilla\Firefox\Profiles\xwwafcgz.default\cookies.txt[.questionmarket.com/]

Spyware:Cookie/BurstBeacon Not disinfected C:\Documents and Settings\Toomay Technologies\Application Data\Mozilla\Firefox\Profiles\xwwafcgz.default\cookies.txt[www.burstbeacon.com/]

Spyware:Cookie/Atwola Not disinfected C:\Documents and Settings\Toomay Technologies\Application Data\Mozilla\Profiles\default\fjdfuyfh.slt\cookies.txt[.atwola.com/]

Spyware:Cookie/2o7 Not disinfected C:\Documents and Settings\Toomay Technologies\Application Data\Mozilla\Profiles\default\fjdfuyfh.slt\cookies.txt[.2o7.net/]

Spyware:Cookie/Advertising Not disinfected C:\Documents and Settings\Toomay Technologies\Application Data\Mozilla\Profiles\default\fjdfuyfh.slt\cookies.txt[.advertising.com/]

Spyware:Cookie/Doubleclick Not disinfected C:\Documents and Settings\Toomay Technologies\Application Data\Mozilla\Profiles\default\fjdfuyfh.slt\cookies.txt[.doubleclick.net/]

Spyware:Cookie/Atlas DMT Not disinfected C:\Documents and Settings\Toomay Technologies\Application Data\Mozilla\Profiles\default\fjdfuyfh.slt\cookies.txt[.atdmt.com/]

Spyware:Cookie/Overture Not disinfected C:\Documents and Settings\Toomay Technologies\Application Data\Mozilla\Profiles\default\fjdfuyfh.slt\cookies.txt[.overture.com/]

Spyware:Cookie/QuestionMarket Not disinfected C:\Documents and Settings\Toomay Technologies\Application Data\Mozilla\Profiles\default\fjdfuyfh.slt\cookies.txt[.questionmarket.com/]

Spyware:Cookie/RealMedia Not disinfected C:\Documents and Settings\Toomay Technologies\Application Data\Mozilla\Profiles\default\fjdfuyfh.slt\cookies.txt[.realmedia.com/]

Spyware:Cookie/Traffic Marketplace Not disinfected C:\Documents and Settings\Toomay Technologies\Application Data\Mozilla\Profiles\default\fjdfuyfh.slt\cookies.txt[.trafficmp.com/]

Spyware:Cookie/Tribalfusion Not disinfected C:\Documents and Settings\Toomay Technologies\Application Data\Mozilla\Profiles\default\fjdfuyfh.slt\cookies.txt[.tribalfusion.com/]

Spyware:Cookie/YieldManager Not disinfected C:\Documents and Settings\Toomay Technologies\Application Data\Mozilla\Profiles\default\fjdfuyfh.slt\cookies.txt[ad.yieldmanager.com/]

Spyware:Cookie/Server.iad.Liveperson Not disinfected C:\Documents and Settings\Toomay Technologies\Application Data\Mozilla\Profiles\default\fjdfuyfh.slt\cookies.txt[server.iad.liveperson.net/]

Spyware:Cookie/Server.iad.Liveperson Not disinfected C:\Documents and Settings\Toomay Technologies\Application Data\Mozilla\Profiles\default\fjdfuyfh.slt\cookies.txt[server.iad.liveperson.net/hc/90594700]

Spyware:Cookie/RealMedia Not disinfected C:\Documents and Settings\Toomay Technologies\Cookies\toomay [email protected][1].txt

Potentially unwanted tool:Application/NirCmd.A Not disinfected C:\Documents and Settings\Toomay Technologies\Desktop\ComboFix.exe[nircmd.exe]

Potentially unwanted tool:Application/NirCmd.A Not disinfected C:\Documents and Settings\Toomay Technologies\Desktop\ComboFix.exe[nircmd.cfexe]

Potentially unwanted tool:Application/NirCmd.A Not disinfected C:\Documents and Settings\Toomay Technologies\Desktop\ComboFix_07118.exe[nircmd.exe]

Potentially unwanted tool:Application/NirCmd.A Not disinfected C:\Documents and Settings\Toomay Technologies\Desktop\ComboFix_07118.exe[nircmd.cfexe]

Potentially unwanted tool:Application/NirCmd.A Not disinfected C:\WINDOWS\NirCmd.exe

Virus:Generic Malware Disinfected D:\AWK\DP550NT\K\TimBakup\Netscape\toomayt2\Mail\Inbox[woohoo.exe]

Virus:W97M/Wazzu.X Disinfected D:\AWK\DP550NT\K\TimBakup\Netscape\toomayt2\Mail\Recvd.sbd\MOA[Conversion_File.doc]

Virus:Generic Malware Disinfected D:\AWK\DP550NT\K\TimBakup\Netscape\toomayt2\Mail\Trash[woohoo.exe]

Virus:Generic Trojan Disinfected D:\AWK\DP550NT\K\TimBakup\SampVirg\NT\SPY\DLL\HOOK.DLL

Virus:Generic Trojan Disinfected D:\AWK\DP550NT\K\TimBakup\SampVirg\SPY\DLL\HOOK.DLL

Virus:W32/Sobig.E Disinfected D:\AWK\Mail\Inbox[your_details.zi][details.pif]

Virus:W32/Mimail.C.worm Disinfected D:\AWK\Mail\Inbox[photos.zip][photos.jpg.exe]

Virus:W32/Mydoom.A.worm Disinfected D:\AWK\Mail\Inbox[document.scr]

Virus:W32/Mydoom.A.worm Disinfected D:\AWK\Mail\Inbox[text.zip][text.scr]

Virus:W32/Mydoom.A.worm Disinfected D:\AWK\Mail\Inbox[test.zip][test.htm .pif]

Virus:W32/Mydoom.A.worm Disinfected D:\AWK\Mail\Inbox[message.exe]

Virus:W32/Mydoom.A.worm Disinfected D:\AWK\Mail\Inbox[file.zip][file.pif]

Virus:W32/Bagle.B.worm Disinfected D:\AWK\Mail\Inbox[aoj.exe]

Virus:W32/Netsky.B.worm Disinfected D:\AWK\Mail\Inbox[party.doc.pif]

Virus:W32/Mydoom.F.worm Disinfected D:\AWK\Mail\Inbox[information.zip][information.txt .pif]

Virus:W32/Bagle.pwdzip Disinfected D:\AWK\Mail\Inbox[info.zip]

Virus:W32/Bagle.J.worm Disinfected D:\AWK\Mail\Inbox[Document.pif]

Virus:W32/Bagle.pwdrar Disinfected D:\AWK\Mail\Inbox[first_part.rar]

Virus:W32/Netsky.P.worm Disinfected D:\AWK\Mail\Inbox[message.txt.pif]

Virus:W32/Netsky.B.worm Disinfected D:\AWK\Mail\Inbox[document.zip][document.htm.exe]

Virus:W32/Netsky.B.worm Disinfected D:\AWK\Mail\Inbox[release.htm.pif]

Virus:W32/Netsky.P.worm Disinfected D:\AWK\Mail\Inbox[application.zip][details.txt .pif]

Virus:W32/Netsky.Y.worm Disinfected D:\AWK\Mail\Inbox[www.lists.wedi.org.wedi-business.session-000021F1.com]

Virus:W32/Netsky.B.worm Disinfected D:\AWK\Mail\Inbox[final.zip][final.com]

Virus:W32/Netsky.P.worm Disinfected D:\AWK\Mail\Inbox[letter_sstiward.doc .exe]

Virus:W32/Bagle.pwdzip Disinfected D:\AWK\Mail\Inbox[Text.zip]

Virus:W32/Netsky.P.worm Disinfected D:\AWK\Mail\Inbox[letter.zip][details.txt .pif]

Virus:W32/Netsky.P.worm Disinfected D:\AWK\Mail\Inbox[data_member_id.txt.pif]

Virus:W32/Netsky.B.worm Disinfected D:\AWK\Mail\Inbox[textfile.zip][textfile.txt.com]

Virus:W32/Netsky.P.worm Disinfected D:\AWK\Mail\Inbox[bill_sstiward.zip][document.txt .exe]

Virus:W32/Bagle.AB.worm Disinfected D:\AWK\Mail\Inbox[Joke.scr]

Virus:W32/Bagle.pwdzip Disinfected D:\AWK\Mail\Inbox[Details.zip]

Virus:W32/Bagle.AB.worm Disinfected D:\AWK\Mail\Inbox[smoke.com]

Virus:W32/Bagle.AB.worm Disinfected D:\AWK\Mail\Inbox[information.scr]

Virus:W32/Bagle.AB.worm Disinfected D:\AWK\Mail\Inbox[Half_Live.com]

Virus:W32/Netsky.B.worm Disinfected D:\AWK\Mail\Inbox[topseller.zip][topseller.exe]

Virus:W32/Bagle.AB.worm Disinfected D:\AWK\Mail\Inbox[Readme.scr]