Welcome to MalwareRemoval.com,
What if we told you that you could get malware removal help from experts, and that it was 100% free? MalwareRemoval.com provides free support for people with infected computers. Our help, and the tools we use are always 100% free. No hidden catch. We simply enjoy helping others. You enjoy a clean, safe computer.

Malware Removal Instructions

Hijacked at certain web sites!

MalwareRemoval.com provides free support for people with infected computers. Using plain language that anyone can understand, our community of volunteer experts will walk you through each step.

Hijacked at certain web sites!

Unread postby Redbellie » April 7th, 2008, 4:08 pm

Good Members,

This is a first for me so maybe I can get this right..When I go to certain sites I am hijacked by the " Ownbox.com" box for some online casino...I can access this same site from my laptop so it would appear that it is not just the site...but NIS has removed the "Trojan.ByteVerify and a downloader but I still have the problem..Hope someone can help me out with this.

Hijackthis log:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 2:36:10 PM, on 4/7/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16608)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Google\Gmail Notifier\gnotify.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe
C:\Program Files\Webroot\Spy Sweeper\SpySweeperUI.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Zinio\ZinioReader.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\WTablet\TabUserW.exe
C:\Program Files\Adobe\Photoshop Elements 4.0\PhotoshopElementsFileAgent.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\CTsvcCDA.exe
C:\WINDOWS\system32\E_S00RP1.EXE
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe
C:\WINDOWS\system32\SAgent4.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\system32\Tablet.exe
C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
C:\WINDOWS\system32\MsPMSPSv.exe
C:\Program Files\Canon\CAL\CALMAIN.exe
C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\CPSHelpRunner.exe
C:\Program Files\Real\RealPlayer\RealPlay.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Webroot\Spy Sweeper\SSU.EXE
C:\PROGRA~1\MOZILL~2\FIREFOX.EXE
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by Verizon Online
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1;*.local
O2 - BHO: eBay Toolbar Helper - {22D8E815-4A5E-4dfb-845E-AAB64207F5BD} - C:\Program Files\eBay\eBay Toolbar2\eBayTB.dll
O2 - BHO: NCO 2.0 IE BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\2.5\coIEPlg.dll
O2 - BHO: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\PROGRA~1\COMMON~1\SYMANT~1\IDS\IPSBHO.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar4.dll
O3 - Toolbar: eBay Toolbar - {92085AD4-F48A-450D-BD93-B28CC7DF67CE} - C:\Program Files\eBay\eBay Toolbar2\eBayTB.dll
O3 - Toolbar: Show Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\2.5\CoIEPlg.dll
O4 - HKLM\..\Run: [Auto Auto Auto Auto EPSON Stylus R200 Photo on DCPCYBER on DCPT23 on DCPCYBER on DCPT23] "C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I2H1.EXE" /P87 "Auto Auto Auto Auto EPSON Stylus R200 Photo on DCPCYBER on DCPT23 on DCPCYBER on DCPT23" /O17 "\\DCPT23\AutoAuto" /M "Stylus Photo R200"
O4 - HKLM\..\Run: [Auto Auto EPSON Stylus R200 Photo on DCPCYBER on DCPT23 (Copy 1)] "C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I2H1.EXE" /P64 "Auto Auto EPSON Stylus R200 Photo on DCPCYBER on DCPT23 (Copy 1)" /O13 "\\DCPT23\R200" /M "Stylus Photo R200"
O4 - HKLM\..\Run: [{0228e555-4f9c-4e35-a3ec-b109a192b4c2}] "C:\Program Files\Google\Gmail Notifier\gnotify.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Auto Auto Auto Auto EPSON Stylus R200 Photo on DCPCYBER on DCPT23 (Copy 1) on DCPCYBER on DCPT23] "C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I2H1.EXE" /P96 "Auto Auto Auto Auto EPSON Stylus R200 Photo on DCPCYBER on DCPT23 (Copy 1) on DCPCYBER on DCPT23" /O19 "\\DCPT23\AutoAuto.2" /M "Stylus Photo R200"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
O4 - HKLM\..\Run: [RoxWatchTray] "C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe"
O4 - HKLM\..\Run: [EPSON Stylus Photo R200 Series] "C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I2H1.EXE" /P30 "EPSON Stylus Photo R200 Series" /O6 "USB002" /M "Stylus Photo R200"
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [SpySweeper] C:\Program Files\Webroot\Spy Sweeper\SpySweeperUI.exe /startintray
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [Zinio DLM] "C:\Program Files\Zinio\ZinioReader.exe" /autostart
O4 - HKCU\..\Run: [Uniblue RegistryBooster 2] C:\Program Files\Uniblue\RegistryBooster 2\RegistryBooster.exe /S
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-18\..\Run: [DWQueuedReporting] "C:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" -t (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [DWQueuedReporting] "C:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" -t (User 'Default user')
O4 - S-1-5-18 Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (User 'SYSTEM')
O4 - .DEFAULT Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (User 'Default user')
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Adobe Gamma Loader.exe.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: TabUserW.exe.lnk = C:\WINDOWS\system32\WTablet\TabUserW.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: eBay Search - res://C:\Program Files\eBay\eBay Toolbar2\eBayTb.dll/RCSearch.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} (PCPitstop Utility) - http://www.pcpitstop.com/pcpitstop/PCPitStop.CAB
O16 - DPF: {74C861A1-D548-4916-BC8A-FDE92EDFF62C} - http://mediaplayer.walmart.com/installer/install.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Adobe Active File Monitor V4 (AdobeActiveFileMonitor4.0) - Unknown owner - C:\Program Files\Adobe\Photoshop Elements 4.0\PhotoshopElementsFileAgent.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Canon Camera Access Library 8 (CCALib8) - Canon Inc. - C:\Program Files\Canon\CAL\CALMAIN.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: COM Host (comHost) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.exe
O23 - Service: EPSON V3 Service2(03) (EPSON_PM_RPCV2_01) - SEIKO EPSON CORPORATION - C:\WINDOWS\system32\E_S00RP1.EXE
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\LuComServer_3_4.EXE
O23 - Service: LiveUpdate Notice - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Roxio UPnP Renderer 9 - Sonic Solutions - C:\Program Files\Common Files\Sonic Shared\RoxioUPnPRenderer9.exe
O23 - Service: Roxio Upnp Server 9 - Sonic Solutions - C:\Program Files\Common Files\Sonic Shared\RoxioUpnpService9.exe
O23 - Service: LiveShare P2P Server 9 (RoxLiveShare9) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxLiveShare9.exe
O23 - Service: RoxMediaDB9 - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
O23 - Service: Roxio Hard Drive Watcher 9 (RoxWatch9) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe
O23 - Service: Epson Printer Status Agent4 (StatusAgent4) - SEIKO EPSON CORPORATION - C:\WINDOWS\system32\SAgent4.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe
O23 - Service: Symantec Core LC - Unknown owner - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: TabletService - Wacom Technology, Corp. - C:\WINDOWS\system32\Tablet.exe
O23 - Service: Webroot Spy Sweeper Engine (WebrootSpySweeperService) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
O24 - Desktop Component 0: (no name) - http://www.live365.com/images/dot.gif

Thanks for any help and have a great day!
Redbellie
Redbellie
Active Member
 
Posts: 5
Joined: April 7th, 2008, 3:21 pm
Advertisement
Register to Remove

Re: Hijacked at certain web sites!

Unread postby Bio-Hazard » April 11th, 2008, 1:11 am

Welcome to the MWR forums. My name is Bio-Hazard. I would be glad to take a look at your log and help you with solving any malware problems. HijackThis logs can take a while to research. Please be patient and I'd be grateful if you would note the following:

  • I will be working on your Malware issues this may or may not solve other issues you have with your machine.
  • The fixes are specific to your problem and should only be used for this issue on this machine.
  • Please continue to review my answers until I tell you your machine appears to be clear. Absence of symptoms does not mean that everything is clear.
  • If you don't know or understand something please don't hesitate to say or ask!! It's better to be sure and safe than sorry.
  • It is important that you reply to this thread. Do not start a new topic.

Note: I am still in training here at Malware Removal, however I will be working under the direct supervision of one of our Malware Experts. Any recommendations will first be approved before being given to you. Because of this, there may be a short delay in getting our responses to you, however be assured that we will be working diligently on your problem.



Uninstall list

Make an uninstall list using HijackThis. To access the Uninstall Manager you would do the following:

  • Start HijackThis
  • Click on the Config button
  • Click on the Misc Tools button
  • Click on the Open Uninstall Manager button.
  • Click on the Save list... button and specify where you would like to save this file. When you press Save button a notepad will open with the contents of that file. Simply copy and paste the contents of that notepad here on your next reply.
User avatar
Bio-Hazard
MRU Master Emeritus
 
Posts: 4078
Joined: May 10th, 2007, 8:28 am
Location: Cornwall, UK

Re: Hijacked at certain web sites!

Unread postby Redbellie » April 11th, 2008, 12:05 pm

Thank you so very much Bio-Hazard for your prompt reply.
Here is the Unstall list as requested. I will post and watch for a reply. Thanks again and have a great day!

Adobe Acrobat 4.0, 5.0
Adobe Anchor Service CS3
Adobe Asset Services CS3
Adobe Bridge 1.0
Adobe Bridge CS3
Adobe Bridge Start Meeting
Adobe Camera Raw 4.0
Adobe CMaps
Adobe Color - Photoshop Specific
Adobe Color Common Settings
Adobe Color Common Settings
Adobe Color EU Extra Settings
Adobe Color JA Extra Settings
Adobe Color NA Recommended Settings
Adobe Common File Installer
Adobe Default Language CS3
Adobe Device Central CS3
Adobe ExtendScript Toolkit 2
Adobe ExtendScript Toolkit 2
Adobe Flash Player ActiveX
Adobe Flash Player Plugin
Adobe Fonts All
Adobe Help Center 2.0
Adobe Help Viewer CS3
Adobe Linguistics CS3
Adobe PDF Library Files
Adobe Photoshop 6.0
Adobe Photoshop CS2
Adobe Photoshop CS3
Adobe Photoshop CS3
Adobe Photoshop Elements 4.0
Adobe Reader 8.1.2
Adobe Setup
Adobe Setup
Adobe Setup
Adobe Shockwave Player
Adobe Stock Photos 1.0
Adobe Stock Photos CS3
Adobe Type Support
Adobe Update Manager CS3
Adobe Version Cue CS3 Client
Adobe WinSoft Linguistics Plugin
Adobe XMP Panels CS3
Adobe® Photoshop® Album Starter Edition 3.0
Adobe® Photoshop® Album Starter Edition 3.0.1
AppCore
Apple Mobile Device Support
Apple Software Update
AusLogics Disk Defrag
AXIS Media Control Embedded
Bejeweled 2 Deluxe 1.1
Canon Camera Access Library
Canon Camera Support Core Library
Canon Camera Window DC_DV 5 for ZoomBrowser EX
Canon Camera Window DC_DV 6 for ZoomBrowser EX
Canon Camera Window DSLR 5 for ZoomBrowser EX
Canon Camera Window MC 6 for ZoomBrowser EX
Canon EOS 10D WIA Driver
Canon MovieEdit Task for ZoomBrowser EX
Canon PhotoRecord
Canon RAW Image Task for ZoomBrowser EX
Canon Utilities File Viewer Utility 1.3
Canon Utilities PhotoStitch 3.1
Canon ZoomBrowser EX (E)
CardRecovery
ccCommon
Compatibility Pack for the 2007 Office system
Component Framework
Corel Painter Essentials 3
Creative MediaSource
Cypress USB Mass Storage Driver Installation
DivX
Easy Digital
eBay Toolbar
ebgcInfra
ebgcRes
ebgcSDK
EPSON Print CD
EPSON Printer Software
ESSPDock
EZLive Monitor 2.0
EZMedia Box 2.0
Ezonics VGA camera
EZPhoto Browser
EZPhoto Panorama
EZVideo Mail
FIRST WARN ON-LINE
FlipAlbum 5.5 Pro
FlipAlbum Design Library CD1
FlipAlbum Design Library CD2
FlipAlbum Design Library CD3
Google Earth
Google Gmail Notifier
Google Toolbar for Internet Explorer
HijackThis 2.0.2
Hotfix for Windows Internet Explorer 7 (KB947864)
Hotfix for Windows Media Format 11 SDK (KB929399)
Hotfix for Windows Media Player 11 (KB939683)
Hotfix for Windows XP (KB914440)
Hotfix for Windows XP (KB915865)
Hotfix for Windows XP (KB926239)
HP Imaging Device Functions 7.0
HP PhotoSmart Photo Printing Software
HP Photosmart Premier Software 6.5
HP Scanjet G4000 series 8.0
HP Software Update
HP Solution Center 7.0
iTunes
J2SE Runtime Environment 5.0 Update 1
J2SE Runtime Environment 5.0 Update 10
J2SE Runtime Environment 5.0 Update 11
J2SE Runtime Environment 5.0 Update 6
J2SE Runtime Environment 5.0 Update 9
Java 2 Runtime Environment, SE v1.4.2_10
Java(TM) 6 Update 2
Java(TM) 6 Update 3
Java(TM) 6 Update 5
Java(TM) SE Runtime Environment 6 Update 1
Kodak EasyShare software
KODAK PROFESSIONAL 1400 Printer Software
KODAK PROFESSIONAL 1400 Printer Software
LiveUpdate (Symantec Corporation)
LiveUpdate (Symantec Corporation)
LiveUpdate Notice (Symantec Corporation)
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1 Hotfix (KB928366)
Microsoft Compression Client Pack 1.0 for Windows XP
Microsoft Internationalized Domain Names Mitigation APIs
Microsoft National Language Support Downlevel APIs
Microsoft Office Converter Pack
Microsoft Office Excel Viewer 2003
Microsoft Office Word Viewer 2003
Microsoft Office XP Media Content
Microsoft Office XP Small Business
Microsoft Silverlight
Microsoft User-Mode Driver Framework Feature Pack 1.0
Microsoft Visual C++ 2005 Redistributable
Microsoft Windows Media Video 9 VCM
Microsoft Windows XP Video Decoder Checkup Utility
Microsoft Works 7.0
Mozilla Firefox (2.0.0.13)
Mozilla Thunderbird (2.0.0.12)
MSN Music Assistant
MSXML 4.0 SP2 (KB925672)
MSXML 4.0 SP2 (KB927978)
MSXML 4.0 SP2 (KB936181)
Napster
Nero 7 Essentials
Netflix Movie Viewer
nik Color Efex Pro 2.0 IE
Norton AntiVirus
Norton AntiVirus Help
Norton Confidential Core
Norton Internet Security
Norton Internet Security (Symantec Corporation)
Norton Protection Center
Norton Security Scan
NVIDIA Drivers
OCR Software by I.R.I.S 8.0
OrderPicture
P.I.M. II Plug-In
PassportPhoto (remove)
PC Pitstop Exterminate 1.0
PC Pitstop Optimize 1.0v
PCPitstop Panda AntiVirus Scan (remove only)
PDF Settings
PopCap Browser Plugin
QuickTime
RealPlayer
Roxio Content 9
Roxio Drag-to-Disc
Roxio Easy Media Creator 9 Suite
Roxio UDF Reader
Security Update for CAPICOM (KB931906)
Security Update for CAPICOM (KB931906)
Security Update for Windows Internet Explorer 7 (KB938127)
Security Update for Windows Internet Explorer 7 (KB942615)
Security Update for Windows Internet Explorer 7 (KB944533)
Security Update for Windows Media Player (KB911564)
Security Update for Windows Media Player 10 (KB911565)
Security Update for Windows Media Player 10 (KB917734)
Security Update for Windows Media Player 11 (KB936782)
Security Update for Windows Media Player 6.4 (KB925398)
Security Update for Windows XP (KB890046)
Security Update for Windows XP (KB893066)
Security Update for Windows XP (KB893756)
Security Update for Windows XP (KB896358)
Security Update for Windows XP (KB896422)
Security Update for Windows XP (KB896423)
Security Update for Windows XP (KB896424)
Security Update for Windows XP (KB896428)
Security Update for Windows XP (KB896688)
Security Update for Windows XP (KB899587)
Security Update for Windows XP (KB899591)
Security Update for Windows XP (KB900725)
Security Update for Windows XP (KB901017)
Security Update for Windows XP (KB901214)
Security Update for Windows XP (KB902400)
Security Update for Windows XP (KB904706)
Security Update for Windows XP (KB905414)
Security Update for Windows XP (KB905749)
Security Update for Windows XP (KB905915)
Security Update for Windows XP (KB908519)
Security Update for Windows XP (KB908531)
Security Update for Windows XP (KB911280)
Security Update for Windows XP (KB911562)
Security Update for Windows XP (KB911567)
Security Update for Windows XP (KB911927)
Security Update for Windows XP (KB912812)
Security Update for Windows XP (KB912919)
Security Update for Windows XP (KB913446)
Security Update for Windows XP (KB913580)
Security Update for Windows XP (KB914388)
Security Update for Windows XP (KB914389)
Security Update for Windows XP (KB916281)
Security Update for Windows XP (KB917159)
Security Update for Windows XP (KB917344)
Security Update for Windows XP (KB917422)
Security Update for Windows XP (KB917953)
Security Update for Windows XP (KB918118)
Security Update for Windows XP (KB918439)
Security Update for Windows XP (KB918899)
Security Update for Windows XP (KB919007)
Security Update for Windows XP (KB920213)
Security Update for Windows XP (KB920214)
Security Update for Windows XP (KB920670)
Security Update for Windows XP (KB920683)
Security Update for Windows XP (KB920685)
Security Update for Windows XP (KB921398)
Security Update for Windows XP (KB921503)
Security Update for Windows XP (KB921883)
Security Update for Windows XP (KB922616)
Security Update for Windows XP (KB922760)
Security Update for Windows XP (KB922819)
Security Update for Windows XP (KB923191)
Security Update for Windows XP (KB923414)
Security Update for Windows XP (KB923694)
Security Update for Windows XP (KB923980)
Security Update for Windows XP (KB924191)
Security Update for Windows XP (KB924270)
Security Update for Windows XP (KB924496)
Security Update for Windows XP (KB924667)
Security Update for Windows XP (KB925486)
Security Update for Windows XP (KB925902)
Security Update for Windows XP (KB926255)
Security Update for Windows XP (KB926436)
Security Update for Windows XP (KB927779)
Security Update for Windows XP (KB927802)
Security Update for Windows XP (KB928255)
Security Update for Windows XP (KB928843)
Security Update for Windows XP (KB929123)
Security Update for Windows XP (KB929969)
Security Update for Windows XP (KB930178)
Security Update for Windows XP (KB931261)
Security Update for Windows XP (KB931784)
Security Update for Windows XP (KB932168)
Security Update for Windows XP (KB933729)
Security Update for Windows XP (KB935839)
Security Update for Windows XP (KB935840)
Security Update for Windows XP (KB936021)
Security Update for Windows XP (KB938829)
Security Update for Windows XP (KB941202)
Security Update for Windows XP (KB941568)
Security Update for Windows XP (KB941569)
Security Update for Windows XP (KB941644)
Security Update for Windows XP (KB941693)
Security Update for Windows XP (KB943055)
Security Update for Windows XP (KB943460)
Security Update for Windows XP (KB943485)
Security Update for Windows XP (KB944653)
Security Update for Windows XP (KB945553)
Security Update for Windows XP (KB946026)
Security Update for Windows XP (KB948590)
Security Update for Windows XP (KB948881)
SFR
SightSpeed (remove only)
Skype™ 3.5
Sound Blaster Live! 24-bit
SPBBC 32bit
Spelling Dictionaries Support For Adobe Reader 8
Sports Pictures Setup
Spy Sweeper
Symantec KB-DocID:2003093015493306
Symantec Real Time Storage Protection Component
Symantec Technical Support Web Controls
SymNet
Tablet
Update for Windows XP (KB894391)
Update for Windows XP (KB898461)
Update for Windows XP (KB900485)
Update for Windows XP (KB904942)
Update for Windows XP (KB910437)
Update for Windows XP (KB916595)
Update for Windows XP (KB920872)
Update for Windows XP (KB922582)
Update for Windows XP (KB927891)
Update for Windows XP (KB929338)
Update for Windows XP (KB930916)
Update for Windows XP (KB931836)
Update for Windows XP (KB933360)
Update for Windows XP (KB938828)
Update for Windows XP (KB942763)
URGE
USB Storage Adapter FX (SM1)
Verizon Online
Verizon Online Help & Support
ViewSonic Monitor Drivers
Wal-Mart Music Downloads Store
WebCam Suite 2.0
Windows Defender
Windows Defender Signatures
Windows Genuine Advantage v1.3.0254.0
Windows Imaging Component
Windows Installer 3.1 (KB893803)
Windows Internet Explorer 7
Windows Live installer
Windows Live Messenger
Windows Live Sign-in Assistant
Windows Media Encoder 9 Series
Windows Media Encoder 9 Series
Windows Media Format 11 runtime
Windows Media Format 11 runtime
Windows Media Player 11
Windows Media Player 11
Windows XP Hotfix - KB873339
Windows XP Hotfix - KB885250
Windows XP Hotfix - KB885835
Windows XP Hotfix - KB885836
Windows XP Hotfix - KB885884
Windows XP Hotfix - KB886185
Windows XP Hotfix - KB887472
Windows XP Hotfix - KB887742
Windows XP Hotfix - KB888113
Windows XP Hotfix - KB888302
Windows XP Hotfix - KB890859
Windows XP Hotfix - KB891781
WinZip
Xingtone Ringtone Maker
YASA AVI to MPEG Converter v3.6 (build 0054)
Zinio Reader
Zuma Deluxe 1.0
Redbellie
Active Member
 
Posts: 5
Joined: April 7th, 2008, 3:21 pm

Re: Hijacked at certain web sites!

Unread postby Bio-Hazard » April 12th, 2008, 9:19 am

Delete programs

Sun's Java is sometimes updated in order to eliminate the exploitation of vulnerabilities in an existing version. For this reason it's extremely important that you keep the program up to date and also remove the older more vulnerable versions from your system. Please remove these older versions.

  • Click Start
  • Go to Control Panel
  • Go to Add/Remove Programs
  • Find and click Remove for the following (if present):

    J2SE Runtime Environment 5.0 Update 1
    J2SE Runtime Environment 5.0 Update 10
    J2SE Runtime Environment 5.0 Update 11
    J2SE Runtime Environment 5.0 Update 6
    J2SE Runtime Environment 5.0 Update 9
    Java 2 Runtime Environment, SE v1.4.2_10
    Java(TM) 6 Update 2
    Java(TM) 6 Update 3
    Java(TM) SE Runtime Environment 6 Update 1

NOTE: Take care when answering any questions posed by an uninstaller. Some questions may be worded to deceive you into keeping the program.



CCleaner

Download CCleaner Slim from >here< and save it to your Desktop. When the file has been saved, go to your Desktop and double-click on ccsetupxxx_slim.exe
Follow the prompts to install the program.

Complete the installation then
  • Make sure that ALL browser windows are closed
  • Double-click the CCleaner shortcut on the desktop to start the program.
  • Click on the Options block on the left, then choose Cookies.
    • Under Cookies to Delete, highlight any cookies you would like to retain permanently
    • Click the right arrow > to move them to the Cookies to Keep window.
  • Go into Options > Advanced deselect/uncheck 'Only delete files in Windows Temp folders older than 48 hours'
  • Click Run Cleaner to run the program.
  • Caution: It is not recommended that you use the 'Registry' feature unless you are very familiar with the registry.
  • After CCleaner has completed its process, click Exit.


Malwarebytes' Anti-Malware

  • Please download Malwarebytes' Anti-Malware and save it to a convenient location.
  • Double click on mbam-setup.exe to install it.
  • Before clicking the Finish button, make sure that these 2 boxes are checked (ticked):
      Update Malwarebytes' Anti-Malware
      Launch Malwarebytes' Anti-Malware
  • Malwarebytes' Anti-Malware will now check for updates. If your firewall prompts, please allow it. If you can't update it, select the Update tab. Under Update Mirror, select one of the websites and click on Check for Updates.
  • Select the Scanner tab. Click on Perform full scan, then click on Scan.
  • Leave the default options as it is and click on Start Scan.
  • When done, you will be prompted. Click OK, then click on Show Results.
  • Checked (ticked) all items and click on Remove Selected.
  • After it has removed the items, Notepad will open. Please post this log in your next reply. You can also find the log in the Logs tab. The bottom most log is the latest.



Kaspersky Online Scan

With the exception of Internet Explorer, which must be used for this scan, keep ALL programs closed
Please do an online scan with Kaspersky Online Scanner. You will be prompted to install an ActiveX component from Kaspersky, Click Yes.
Note for Internet Explorer 7 users: If at any time you have trouble with the accept button of the licence, click on the Zoom tool located at the right bottom of the IE window and set the zoom to 75%. Once the licence accepted, reset to 100%.
  • The program will launch and then start to download the latest definition files.
  • Once the scanner is installed and the definitions downloaded, click Next.
  • Now click on Scan Settings
  • In the scan settings make sure that the following are selected:
    o Scan using the following Anti-Virus database:
    + Extended (If available otherwise Standard)
    o Scan Options:
    + Scan Archives
    + Scan Mail Bases
  • Click OK
  • Now under select a target to scan select My Computer
  • The scan will take a while so be patient and let it run.
  • Please do not use your computer while the scan is running. Once the scan is complete it will display if your system has been infected.
  • Click the Save Report As... button (see red arrow below)

    Image
  • In the Save as... prompt, select Desktop
  • In the File name box, name the file KasScan-ddmmyy (or similar)
  • In the Save as type prompt, select Text file (see below)

    Image
  • Copy and paste the report in your next post.

Note: It is recommended to disable onboard antivirus program and antispyware programs while performing scans so there are no conflicts and to speed up scan time.Please don't go surfing while your resident protection is disabled!Once scan is finished remember to re-enable resident antivirus protection along with whatever antispyware application you use.


Logs/Information to Post in Reply

Please post the following logs/Information in your reply

  • Kaspersky Log
  • Malwarebytes' Anti-Malware Log
  • A fresh HijackThis Log ( after all the above has been done)
User avatar
Bio-Hazard
MRU Master Emeritus
 
Posts: 4078
Joined: May 10th, 2007, 8:28 am
Location: Cornwall, UK

Re: Hijacked at certain web sites!

Unread postby Redbellie » April 13th, 2008, 9:31 pm

Thanks again Bio-Hazard for your response and help.
Here is the requested logs as per the last post instructions.

-------------------------------------------------------------------------------
KASPERSKY ONLINE SCANNER REPORT
Sunday, April 13, 2008 8:17:03 PM
Operating System: Microsoft Windows XP Home Edition, Service Pack 2 (Build 2600)
Kaspersky Online Scanner version: 5.0.98.0
Kaspersky Anti-Virus database last update: 13/04/2008
Kaspersky Anti-Virus database records: 702432
-------------------------------------------------------------------------------

Scan Settings:
Scan using the following antivirus database: extended
Scan Archives: true
Scan Mail Bases: true

Scan Target - My Computer:
C:\
D:\
E:\
F:\
G:\
H:\
I:\
J:\

Scan Statistics:
Total number of scanned objects: 148550
Number of viruses found: 7
Number of infected objects: 86
Number of suspicious objects: 264
Duration of the scan process: 02:02:16

Infected Object Name / Virus Name / Last Action
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\3a446bba52518b294747cdb9a90a9fdb_7d5de0ed-427a-4d9f-a7a6-a80084f61528 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\f71c4ab8a4bc796eecdbb1988ed74260_7d5de0ed-427a-4d9f-a7a6-a80084f61528 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Dr Watson\drwtsn32.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Windows Defender\Support\MPLog-12112006-101420.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Common Client\ccSubSDK\submissions.idx Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Common Client\settings.DAT Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Common Client\volatile.DAT Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Common Client\{32CBF1BF-D329-42F2-BBB3-16711385E96F}.DAT Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Common Client\{49D8967C-D255-4382-A0A6-EFC36FD60C8E}.DAT Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Common Client\{CFCE28D2-EC2B-4C15-9F85-C46556424ED8}.DAT Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Common Client\{EA9D0B84-F040-4B2B-A841-ED5EFD2227B3}.DAT Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate\2008-04-13_Log.ALUSchedulerSvc.LiveUpdate Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\27184ADA.exe Infected: not-a-virus:RiskTool.Win32.HideWindows skipped
C:\Documents and Settings\All Users\Application Data\Symantec\SPBBC\BBConfig.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\SPBBC\BBDebug.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\SPBBC\BBDetect.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\SPBBC\BBNotify.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\SPBBC\BBRefr.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\SPBBC\BBSetCfg.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\SPBBC\BBSetCfg2.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\SPBBC\BBSetDev.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\SPBBC\BBSetLoc.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\SPBBC\BBSetUsr.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\SPBBC\BBStHash.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\SPBBC\BBValid.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\SPBBC\Shl_{A84EC524-3A45-4829-A656-EB2A26189C94}.ldb Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\SPBBC\Shl_{A84EC524-3A45-4829-A656-EB2A26189C94}.sds Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\SPBBC\SPPolicy.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\SPBBC\SPStart.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\SPBBC\SPStop.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\SRTSP\SrtErEvt.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\SRTSP\SrtETmp\0868C078.TMP Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\SRTSP\SrtETmp\AB9E8D51.TMP Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\SRTSP\SrtMoEvt.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\SRTSP\SrtNvEvt.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\SRTSP\SrtScEvt.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\SRTSP\SrtTxFEvt.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\SRTSP\SrtViEvt.log Object is locked skipped
C:\Documents and Settings\Danny\Application Data\Roxio\MediaManager9\Album.ldb Object is locked skipped
C:\Documents and Settings\Danny\Application Data\Roxio\MediaManager9\Album.psod Object is locked skipped
C:\Documents and Settings\Danny\Application Data\Symantec\NPMDataStore\CIMStore.xml Object is locked skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, ... /[From h=received:message-id:disposition-notification-to:date:from:user-agent:x-accept-language:mime-version:to:subject:content-type:content-transfer-encoding;][Date h=re ... /[From PayPal<paypal@email.paypal.com>][Date Fri, 18 Nov 2005 11:19:44 -0600]/html Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, ... /[From h=received:message-id:disposition-notification-to:date:from:user-agent:x-accept-language:mime-version:to:subject:content-type:content-transfer-encoding;][Date h=received:message-id:disposition-notification-to:date:from:user-agent:x-accept-language:mi Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From "Jerad's Mom" <JSPIVEY@panhandle.rr.com>][Date Fri, 18 Nov 2005 11:07:34 -0600]/UNNAMED Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From PayPal<paypal@email.paypal.com>][Date Fri, 18 Nov 2005 13:03:16 -0600]/html Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From Sh ... /[From "MyDishD ... /[From davidcapaldo@cox.net][Date Tue, 22 Nov 2005 18:34:37 +0200]/document.scr Infected: Email-Worm.Win32.NetSky.q skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From Sh ... /[From "MyDishDirect" <info@alabastertown.com>][Date Tue, 22 Nov 2005 10:09:25 -0500 (EST)]/UNNAMED Infected: Email-Worm.Win32.NetSky.q skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From Shawn C.<joret@apolloforthcoming.com>][Date Tue, 22 Nov 2005 10:18:31 -0500 (EST)]/text Infected: Email-Worm.Win32.NetSky.q skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNA ... /[From Dell Direct Deals ... /[From danmar7@sbcglobal.net][Date Thu, 24 Nov 2005 15:29:00 +0200]/my_details.exe Infected: Email-Worm.Win32.NetSky.q skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNA ... /[From Dell Direct Deals <dell@homeandhomeoffice.dell.com>][Date Tue, 22 Nov 2005 12:06:09 -0800 (PST)]/UNNAMED Infected: Email-Worm.Win32.NetSky.q skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From "Extra Cash in Your Pocket " <newsletter@theonlinemall.net>][Date Tue, 22 Nov 2005 14:00:26 -0500]/html Infected: Email-Worm.Win32.NetSky.q skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From daybyday3567@cs.com][Date Sat, 26 Nov 2005 13:02:29 +0200]/UNNAMED/document.txt Infected: Email-Worm.Win32.NetSky.q skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From daybyday3567@cs.com][Date Sat, 26 Nov 2005 13:02:29 +0200]/UNNAMED Infected: Email-Worm.Win32.NetSky.q skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From "Julie S."<julie@t ... /[From dannyscustomphoto@verizon.net][Date Sat, 26 Nov 2005 16:49:51 + .. ... /html Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From "Julie S."<julie@t ... /[From dannyscustomphoto@verizon.net][Date Sat, 26 Nov 2005 16:49:51 + ... /UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From "Julie S."<julie@t ... /[From dannyscustomphoto@verizon.net][Date Sat, 26 Nov 2005 16:49: ... /message.scr Infected: Email-Worm.Win32.NetSky.q skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From "Julie S."<julie@t ... /[From dannyscustomphoto@verizon.net][Date Sat, 26 Nov 2005 16:49:51 +0200]/UNNAMED Infected: Email-Worm.Win32.NetSky.q skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From "Julie S."<julie@trisponsible.com>][Date Sat, 26 Nov 2005 06:45:15 -0500]/UNNAMED Infected: Email-Worm.Win32.NetSky.q skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From dbether@bellsouth.net][Date Sat, 26 Nov 2005 17:56:06 +0200]/UNNAMED/UNNAMED/html Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From dbether@bellsouth.net][Date Sat, 26 Nov 2005 17:56:06 +0200]/UNNAMED/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From dbether@bellsouth.net][Date Sat, 26 Nov 2005 17:56:06 +0200]/UNNAMED/message.scr Infected: Email-Worm.Win32.NetSky.q skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From dbether@bellsouth.net][Date Sat, 26 Nov 2005 17:56:06 +0200]/UNNAMED Infected: Email-Worm.Win32.NetSky.q skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[ ... /[From All Jackpots <tuhek ... /[From service@paypal.com][Date Sun, 27 Nov 2005 23:50:32 +0100 (CET)]/html Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[ ... /[From All Jackpots <tuhekxejhbchcel@leasureidea.com>][Date Sun, 27 Nov 2005 15:31:24 -0500 (EST)]/UNNAMED Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From "Bertie W. Salinas" <Frederick6Bower@matra-def.fr>][Date Sun, 27 Nov 2005 14:03:07 -0600]/UNNAMED Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From NICOLA ELIZABETH HOPP <hopp@wisc.edu>][Date Thu, 01 Dec 2005 12:55:24 -0600]/html Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From 123 Inkjets <Rewar ... /[Fr ... /[From dancerbevlbg@aol.com][Date Tue, 06 Dec 2005 18:58:20 +0200]/UNNAMED Infected: Email-Worm.Win32.NetSky.q skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From 123 Inkjets <Rewar ... /[From "eBay" <eBay@reply3.ebay.com>][Date Tue, 06 Dec 2005 07:12:26 -0800]/UNNAMED Infected: Email-Worm.Win32.NetSky.q skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From 123 Inkjets <RewardsMember@rewardsmember-promo.com>][Date Mon, 05 Dec 2005 18:06:34 -0600 (CST)]/html Infected: Email-Worm.Win32.NetSky.q skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From "CPQ Professiona ... / ... /[From "PayPal"<service@paypal.com>][Date Sun, 11 Dec 2005 01:11:13 +0200]/html Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From "CPQ Professiona ... /[From "XP Deals" <xpdeals@totaltune.com>][Date Wed, 07 Dec 2005 10:55:21 -0800]/html Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From "CPQ Professional Imaging" <customerservice@cpq.net>][Date Wed, 07 Dec 2005 00:40:10 -0500]/text Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From "CPQ Prof ... /[From "service@paypal.com" <service@paypal.com>][Date Thu, 29 Dec 2005 05:22:00 +0900]/html Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From "CPQ Professional Imaging" <customerservice@cpq.net>][Date Wed, 28 Dec 2005 00:16:38 -0500]/text Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From ... /[From "U ... /[From service@chase.com <service@chase.com>][Date Fri, 13 Jan 2006 13:26:21 -0500]/html Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From ... /[From "Unlimited Downloads" <info@siganidae.com>][Date Thu, 12 Jan 2006 14:26:04 -0500 (EST)]/UNNAMED Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From "CPQ Profess ... /[From "iWon" <info@balisrodies.com>][Date Thu, 12 Jan 2006 10:02:17 -0800 (PST)]/UNNAMED Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From "CPQ Professional Imaging" <customerservice@cpq.net>][Date Thu, 12 Jan 2006 00:07:08 -0500]/text Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UN ... /[From .. ... /[From "PayPal Security Service" <security@paypal.com>][Date Fri, 27 Jan 2006 20:55:34 +0400]/html Infected: Trojan-Spy.HTML.Paylap.ez skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UN ... /[From ... /[From "Perfect job" <PerfectJob@elevatorsgodown.info>][Date Fri, 27 Jan 2006 06:07:27 -0800]/UNNAMED Infected: Trojan-Spy.HTML.Paylap.ez skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UN ... /[From "S ... /[From "Attention" <Attention@pooramyworksucks.info>][Date Fri, 27 Jan 2006 02:03:25 -0800]/UNNAMED Infected: Trojan-Spy.HTML.Paylap.ez skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UN ... /[From "Sp ... ... /[From "Bill Stone" <bill@slotmachinemastery.com>][Date Thu, 26 Jan 2006 07:06:50 -0500]/text Infected: Trojan-Spy.HTML.Paylap.ez skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UN ... /[From "Sp ... /[From MktMkrs <RewardsMember@rewardsmember.com>][Date Thu, 26 Jan 2006 19:59:27 -0600 (CST)]/html Infected: Trojan-Spy.HTML.Paylap.ez skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UN ... /[From "Special Rewards Center" <return@gulfmessagingservice.info>][Date Thu, 26 Jan 2006 20:22:16 -0500]/UNNAMED Infected: Trojan-Spy.HTML.Paylap.ez skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From "CouldBU" <CouldBU@officeprettyquit.info>][Date Thu, 26 Jan 2006 17:05:03 -0800]/UNNAMED Infected: Trojan-Spy.HTML.Paylap.ez skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From "C .. ... /[From "PayPal Security Center" <service@paypal.com>][Date Sat, 18 Feb 2006 22:42:11 +0400]/html Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From "C ... /[From "Christ ... /[From "PayPal" <account@paypal.com>][Date Sun, 19 Feb 2006 02:55:00 +0600]/html Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From "C ... /[From "Christi ... /[From <user@veggietomb.com>][Date Sat, 18 Feb 2006 17:21:25 -0500 (EST)]/html Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAME ... ... /[Fro ... /[From "PayPal Email ID PP321" <center@paypal.com>][Date Sun, 19 Feb 2006 06:11:22 -0400]/html Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAME ... . ... /[From "PayPal Security Center" <administrator@paypal.com>][Date Sun, 19 Feb 2006 16:19:53 +0500]/html Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAME ... ... /[Fro ... /[From "Tax ... /[From <user@vocalspear.com>][Date Sat, 18 Feb 2006 23:05:09 -0800 (PST)]/html Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAME ... ... /[Fro ... /[From "Tax Act" <return@sedicigreatproducts7.com>][Date Sun, 19 Feb 2006 01:08:00 -0800]/html Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAME ... ... /[From Health Insurance <health@tormaxelectronics.com>][Date Sat, 18 Feb 2006 15:52:16 -0800 (PST)]/html Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAME ... /[From Christian Forclosure Prevention<user@vocalspear.com>][Date Sat, 18 Feb 2006 16:10:58 -0800 (PST)]/html Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From "C ... /[From "Christi ... /[From <user@vacatespray.com>][Date Sat, 18 Feb 2006 11:03:35 -0800 (PST)]/text Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From "C ... /[From "ChristianMortgageUSA" <return@dgetfhgy.info>][Date Fri, 17 Feb 2006 21:22:43 -0500]/UNNAMED Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From "CPQ Professional Imaging" <customerservice@cpq.net>][Date Wed, 15 Feb 2006 23:50:33 -0500]/text Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50 ... /[From Aquarium ... /[From "M Collingbou ... /[From "eBay Inc." <account@ebay.com>][Date Thu, 02 Mar 2006 07:25:10 -0700]/html Infected: Trojan-Spy.HTML.Bayfraud.ln skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50 ... /[From Aquarium ... /[From "M Collingbourn-Beevers" <darblays@blueyonder.co.uk>][Date Tue, 28 Feb 2006 12:01:52 +0000]/UNNAMED Infected: Trojan-Spy.HTML.Bayfraud.ln skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50 ... /[From Aquariumpros.com@atopus.hostasaurus.com, Support@atopus.hostasaurus.com,][Date Mon, 27 Feb 2006 21:13:04 +000 ... /text Infected: Trojan-Spy.HTML.Bayfraud.ln skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50 ... /[From Aquariumpros.com@atopus.hostasaurus.com, Support@atopus.hostasaurus.com,][Date Mon, 27 Feb 2006 21:13:04 +0000]/UNNAMED Infected: Trojan-Spy.HTML.Bayfraud.ln skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From NICOLA ELIZABETH HOPP <hopp@wisc.edu>][Date Sun, 26 Feb 2006 12:47:12 -0600]/UNNAMED Infected: Trojan-Spy.HTML.Bayfraud.ln skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/ .. ... /[From "Get TV on Your PC" <return@dodicigoldproducts15.com>][Date Sun, 12 Mar 2006 00:45:01 -0500]/html Infected: Trojan-Spy.HTML.Bayfraud.ln skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/ ... /[From "Pont ... /[Fro ... /[From "PayPal"<accounts@paypal.com>][Date Sun, 12 Mar 2006 18:17:50 +0200]/html Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/ ... /[From "Pont ... /[From Quiznos Lunches <quiz@ampusa.net>][Date Sat, 11 Mar 2006 23:46:48 -0800 (PST)]/html Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/ ... /[From "Ponti ... /[From "Three Deals" <return@dfuy103.info>][Date Sat, 11 Mar 2006 19:31:56 -0500]/UNNAMED Infected: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/ ... /[From "Pontiac Roadaster" <PontiacRoadster@ballairbus.info>][Date Sat, 11 Mar 2006 15:14:51 -0800]/UNNAMED Infected: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From N .. ... /[From "Frances Hankins" <russo@basoncomputer.com>][Date Sat, 11 Mar 2006 16:52:38 -0600]/UNNAMED Infected: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From N ... /[F ... /[From "D ... /[From PG <Elky@therealyep.com>][Date Sat, 11 Mar 2006 14:51:28 -0800]/UNNAMED Infected: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From N ... /[F ... /[From "Dionne Kimball" <tcarte04@harris.com>][Date Sat, 11 Mar 2006 16:50:34 -0600]/UNNAMED Infected: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From N ... /[Fr ... /[From ben ani <benani2006@adinet.com.uy>][Date Wed, 08 Mar 2006 15:01:32 -0300 (UYT)]/html Infected: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From N ... /[From "Green Light Auto" <Wagner@give-a-waybest.com>][Date Tue, 07 Mar 2006 10:46:35 -0800]/UNNAMED Infected: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From NICOLA ELIZABETH HOPP <hopp@wisc.edu>][Date Mon, 06 Mar 2006 18:37:57 -0600]/UNNAMED Infected: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From "Traci ... /[From "LowRateAdvisors" <lowrate@innercraving.com>][Date Sun, 19 Mar 2006 18:16:40 -0800]/html Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From "Traci ... /[From Th ... /[From "Chase" <aw-confirm@chase.com>][Date Mon, 20 Mar 2006 10:24:22 -0200]/html Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From "Traci ... /[From The Bib ... /[From "Chase" <admin@chase.com>][Date Mon, 20 Mar 2006 18:15:46 +0500]/html Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From "Traci ... ... /[From "Mr James Roland" <mrjamesebn@libero.it>][Date Mon, 20 Mar 2006 08:56:16 -0500]/html Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +010 ... /[Fr ... /[From Recipe4Living <recipe4living@Recipe4Living-mail.com>][Date Tue, 21 Mar 2006 15:43:13 -0600 (CST)]/html Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +010 ... /[From Maccxi ... /[From "Chase Online Banking" <administrator@chase.com>][Date Wed, 22 Mar 2006 02:55:16 +0400]/html Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +01 .. ... /[From "Chase Manhattan Bank Online Department" <chaseonline@chase.com >][Date Thu, 23 Mar 2006 02:02:00 +0200]/html Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50: ... /[From "CustomerService@ ... / ... /[From "Chase Manhattan"<respect@ampahers.com>][Date Thu, 23 Mar 2006 17:59:37 +0200]/html Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50: ... /[From "CustomerService@ ... /[From Pa ... /[From "Chase" <security@chase.com>][Date Thu, 23 Mar 2006 17:11:31 -010 ... /html Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50: ... /[From "CustomerService@ ... ... /[From "Chase Online Banking" <chase@chase.com>][Date Thu, 23 Mar 2006 18:55:36 -0100]/html Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50: ... /[From "CustomerService@ ... ... /[Fr ... /[From "Chase Bank" <confirm@chase.com>][Date Thu, 23 Mar 2006 19:13:43 -0100]/html Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50: ... /[From "CustomerService@ ... ... /[From TakeOut Critic <takeout@ampusa.net>][Date Thu, 23 Mar 2006 10:52:17 -0800 (PST)]/html Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50: ... /[From "CustomerService@ ... /[From Pa ... /[From "Chase" <security@chase.com>][Date Thu, 23 Mar 2006 17:11:31 -0100]/UNNAMED Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50: ... /[From "CustomerService@ ... /[From Pays2Shop <Pays2Shop@kakemonoslanders.com>][Date Thu, 23 Mar 2006 10:57:58 -0500]/UNNAMED Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50: ... /[From "CustomerService@vistaprint.co ... /[From Netflix <info@netflix.com>][Date Wed, 22 Mar 2006 19:48:47 -0800 (PST)]/text Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50: ... /[From "CustomerService@vistaprint.com" <CustomerService@vistaprint.com>][Date Wed, 22 Mar 2006 19:52:27 -0500 (EST)]/UNNAMED Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +01 ... /[Fr ... /[From "iTunes Music Store" <itunes@new-music.itunes.com>][Date Wed, 22 Mar 2006 18:22:59 +0000 (GMT)]/UNNAMED Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +01 ... /[From 22 Ma ... /[From WorkMadeEasy <WorkMadeEasy@pythonsred.com>][Date Wed, 22 Mar 2006 10:44:22 -0800 (PST)]/UNNAMED Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +01 ... /[From 22 Mar 2006 09:11:16 -0800(not processed: message from trusted or][Date Wed, 22 Mar 2006 09:11:16 -0800]/UNNAMED Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +010 ... /[From Maccxi Ba ... /[From "Gift Card Promotion" <return@dfuy103.info>][Date Mon, 20 Mar 2006 17:01:20 -0500]/UNNAMED Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +010 ... /[From Maccxi Bargai ... /[From "Adam Wilker" <allenmeadus@hyper-line.com>][Date Mon, 20 Mar 2006 10:20:20 -1100]/html Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +010 ... /[From Maccxi Bargain at Maccxi.com <newsletter@newstrackerinfo.com>][Date Mon, 20 Mar 2006 11:37:24 -0500 (EST)]/html Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From "Traci ... /[Fr ... /[From Webpromoz <return@webpromoz.com>][Date Sun, 19 Mar 2006 21:17:34 -0500]/UNNAMED Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From "Traci ... /[From The Bible Center<bible@207yes.info>][Date Sun, 19 Mar 2006 18:17:16 -0800 (PST)]/UNNAMED Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From "Traci B. ... /[From Razr Giveaways<pink@201yes.info>][Date Sun, 19 Mar 2006 15:18:40 -0800 (PST)]/UNNAMED Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From "Traci B. Murray" <patrick_k_phelps@mortgage-refi-post.com>][Date Mon, 20 Mar 2006 08:41:20 +0300]/html Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST) ... /[From h=Content-Type:From:MIME-Version:To:Date:Message-ID:Subject:X-Complaints-To:Content-Transfer-Encoding;][Date h=Content-Type:From:MIME-Version:To:Date:Message-ID:Subject:X-Complaints-To:Content-Transfer-Encoding;]/html Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From "CPQ Professi ... /[F ... /[From "Bidz" <return@no2mte40.info>][Date Wed, 29 Mar 2006 11:46:23 -0500]/text Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From "CPQ Professi ... /[From "Reginald" <stephen@quasarman.biz>][Date Wed, 29 Mar 2006 09:24:03 +0100]/UNNAMED Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From "CPQ Professional Imaging" <customerservice@cpq.net>][Date Wed, 29 Mar 2006 00:10:29 -0500]/text Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/U ... /[ ... /[From "The job is o ... ... /[From HomeBusiness@selfgrowth.com][Date Tue, 04 Apr 2006 13:04:10 -0400]/html Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/U ... /[ ... /[From "The job is o ... /[From 12:00:00 AM from 207.170.31.130][Date Tue, 04 Apr 2006 09:30:08 -0700]/html Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/U ... /[ ... /[From "The job is open" <TheJobIsOpen@elevatorsgodown.info>][Date Tue, 04 Apr 2006 08:02:48 -0700]/UNNAMED Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/U ... /[From "Poker Signup Bonus" <PokerSignupBonus@merryflowcharts.info>][Date Tue, 04 Apr 2006 11:01:11 -0500]/UNNAMED Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From "C ... /[From "Frances McBride" <fmcbride@panhandle.rr.com>][Date Tue, 04 Apr 2006 02:26:48 -0500]/UNNAMED Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From "C ... /[From "Frances McBride" <fmcbride@panhandle.rr.com>][Date Tue, 04 Apr 2006 02:07:46 -0500]/UNNAMED Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From "CPQ Professional Imaging" <customerservice@cpq.net>][Date Tue, 04 Apr 2006 00:45:25 -0400]/text Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[Fro ... /[From PayPal Alert <mail18272@alert182.security.com>][Date Wed, 12 Apr 2006 11:28:55 -0700 (PDT)]/html Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From Online Shopper <s ... /[From "Military Benefits Assistance"][Date Wed, 12 Apr 2006 11:31:31 -0700]/UNNAMED Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From Online Shopper <shopping@ampusa.net>][Date Tue, 11 Apr 2006 15:45:44 -0700 (PDT)]/UNNAMED/html Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From Online Shopper <shopping@ampusa.net>][Date Tue, 11 Apr 2006 15:45:44 -0700 (PDT)]/UNNAMED Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAME ... /[From "Are ... /[From Wellsfargo Online <Billing@wellsfargo.com>][Date Thu, 20 Apr 2006 11:50:53 -0800]/html Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAME ... /[From "Are you so ready" <AreYouSoReady@investinairmatress.info>][Date Thu, 20 Apr 2006 08:51:54 -0700]/text Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From "CPQ Professional Imaging" <customerservice@cpq.net>][Date Wed, 19 Apr 2006 17:31:28 -0400]/text Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50: ... /[Fr ... /[From PcTv <com ... ... /[From <accounts@bancorpsouthonline.com>][Date Fri, 12 May 2006 17:40:58 -0400 (EDT)]/html Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50: ... /[Fr ... /[From PcTv <com ... /[From "GreatHomeMovies" <dvd@triplelooker.info>][Date Fri, 12 May 2006 20:29:47 -0500]/UNNAMED Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50: ... /[Fr ... /[From PcTv <comp ... /[From "mwave.com Promotions" <sales@mwave.com>][Date Fri, 12 May 2006 17:07:22 -0700]/UNNAMED Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50: ... /[Fr ... /[From PcTv <computertv@stagedgarage.com>][Date Invalid date header replaced by vms049.mailsrvcs.net; original]/html Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50: ... /[From "Adobe Systems Incorpo ... /[From NICOLA ELIZABETH HOPP <hopp@wisc.edu>][Date Fri, 12 May 2006 15:36:11 -0500]/UNNAMED Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50: ... /[From ... /[From "Mortgage Lende ... /[From "PayPal® Inc." <service@paypal.com>][Date Mon, 15 May 2006 12:04:53 -0700]/html Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50: ... /[From ... /[From "Mortgage Lender Plus" <Mortgage_Lender_Plus@mkg2delivery.com>][Date Mon, 15 May 2006 07:02:51 -0400]/html Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50: ... /[From "Adobe Syste ... /[From Whitest Teeth<Chamberlayne.mltr@lbtsupport.com>][Date Mon, 15 May 2006 13:50:34 -0400]/UNNAMED Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50: ... /[From "Adobe Systems Incorporated"<adobe_seminar@information.adobe.com>][Date Fri, 12 May 2006 16:25:17 -0400 (EDT)]/UNNAMED Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[F ... /[ ... /[From "Rodger Reid" <LnotoriousKyle@affinitypath.com>][Date Fri, 12 May 2006 13:58:40 -0600]/text Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[F ... /[From "Beatrix Woodward" <rykvmepmzww@propertyshowrooms.com>][Date Fri, 12 May 2006 20:18:12 +0200]/text Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From "iTun ... /[ ... /[From "amber paul" <amber34@localnet.com>][Date Thu, 11 May 2006 21:50:53 -0500]/UNNAMED Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From "iTun ... /[ ... /[From "Reed Gifford" <Ecsifi@bmjmold.com>][Date Thu, 11 May 2006 22:16:00 +0200]/UNNAMED Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From "iTun ... /[From "Mahinder Amick" <mahindy@doctorkorea.com>][Date Thu, 11 May 2006 11:35:02 -0700]/UNNAMED Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From "iTunes Music Store" <itunes@new-music.itunes.com>][Date Wed, 10 May 2006 07:56:46 +0000 (GMT)]/UNNAMED Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, ... /[From h=Message-Id:Date:From:To:Subject:MIME-Version:Conte ... /[From "PayPal"<Support@paypal.com>][Date Thu, 18 May 2006 11:51:31 -0500]/text Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, ... /[From h=Message-Id:Date:From:To:Subject:MIME-Version:Conte ... /[From "PayPal"<Support@paypal.com>][Date Thu, 18 May 2006 11:51:31 -0500]/html Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, ... /[From h=Message-Id:Date:From:To:Subject:MIME-Version:Content-Type;][Date h=Message-Id:Date:From:To:Subject:MIME-Version:Content-Type;]/UNNAMED Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +01 ... /[From "Survival Insurance Brokerage" <mail ... /[From <service@paypal.com>][Date Fri, 19 May 2006 22:50:17 +0400]/html Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +01 ... /[From "Survival Insurance Brokerage" <mailer2@mail3.offersinsuresuite.com>][Date Fri, 12 May 2006 17:56:23 -0400]/html Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From "CPQ Professional Imaging" <customerservice@cpq.net>][Date Thu, 18 May 2006 00:35:49 -0400]/text Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[F . ... /[From "CPQ Professional Imaging" <customerservice@cpq.net>][Date Tue, 06 Jun 2006 17:12:54 -0400]/html Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[F ... /[From "Ul ... /[From "security@VISA.com" <security@VISA.com>][Date Mon, 08 May 2006 06:03:20 -0400]/html Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[F ... /[From "Ultimate Dati ... /[From "sean" <lola@netzero.com>][Date Wed, 07 Jun 2006 17:19:03 +0800]/UNNAMED Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[F ... /[From "Ultimate Dating" <UltimateDating@mindsbraked.info>][Date Tue, 06 Jun 2006 15:25:23 -0800]/UNNAMED Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From Wired Magazine <cnp@email.condenast.com>][Date Tue, 06 Jun 2006 14:01:59 -0400 (EDT)]/UNNAMED Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:5 ... /[From "Small Bi ... /[F ... /[From "Pet ... /[From Paypal.com <account@paypal.com>][Date Wed, 19 Jul 2006 14:37:5 ... /UNNAMED Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:5 ... /[From "Small Bi ... /[F ... /[From "Pet ... /[From Paypal.com <account@paypal.com>][Date Wed, 19 Jul 2006 14:37:56 + ... /html Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:5 ... /[From "Small Bi ... /[F ... /[From "Pet ... /[From Paypal.com <account@paypal.com>][Date Wed, 19 Jul 2006 14:37:56 +0000]/text Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:5 ... /[From "Small Bi ... /[F ... / ... /[Fro ... /[From Paypal.com <account@paypal.com>][Date Wed, 19 Jul 2006 17:03:1 ... /UNNAMED Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:5 ... /[From "Small Bi ... /[F ... / ... /[Fro ... /[From Paypal.com <account@paypal.com>][Date Wed, 19 Jul 2006 17:03:17 + ... /html Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:5 ... /[From "Small Bi ... /[F ... / ... /[Fro ... /[From Paypal.com <account@paypal.com>][Date Wed, 19 Jul 2006 17:03:17 +0000]/text Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:5 ... /[From "Small Bi ... /[F ... / ... /[From "service@paypal.com" <service@paypal.com>][Date Wed, 19 Jul 2006 13:07:12 -0400]/html Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:5 ... /[From "Small Bi ... /[F ... /[From "Pet Promotions" <noreply@uj-serv.com>][Date Wed, 19 Jul 2006 09:17:54 -0400 (EDT)]/UNNAMED Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:5 ... /[From "Small Bi ... /[From "Vioxx Lawsuit Update" <return@bookshelfstripes.com>][Date Wed, 19 Jul 2006 06:03:58 -0500]/UNNAMED Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:5 ... /[From "Small Biz Grant Approv ... /[From "Orange Glo" <petioles@5necked.net>][Date Wed, 19 Jul 2006 12:43:45 +0000 (GMT)]/html Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:5 ... /[From "Small Biz Grant Approved" <SmallBizGrantApproved@efficiencypercent.info>][Date Wed, 19 Jul 2006 01:14:32 -0600]/UNNAMED Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:5 ... /[From " .. ... /[From Kiwi <x-2123-95052-n@k-0211-629-f.visionupnews.com>][Date Tue, 18 Jul 2006 22:24:02 -0800 (PST)]/UNNAMED Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:5 ... /[From " ... /[From "Americas Lending Alliance" <americaslendingalliance@tokuh.com>][Date Wed, 19 Jul 2006 00:01:12 -0500]/html Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:5 ... /[From "Cuties Waiting For Dates" <CutiesWaitingForDates@associateclitoris.info>][Date Tue, 18 Jul 2006 16:44:36 -0800]/UNNAMED Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From "Get It All Now" <return@fourcornershill.com>][Date Tue, 18 Jul 2006 15:21:09 -0500]/UNNAMED Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +01 ... /[Fro ... /[From "Xpfinal notice" ... /[From "PayPal" <accounts@paypal.com>][Date Sun, 30 Jul 2006 00:54:03 -0500]/html Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +01 ... /[Fro ... /[From "Xpfinal notice" <Hoo ... /[From "PayPal" <acc@paypal.com>][Date Sun, 30 Jul 2006 16:56:05 -0300]/html Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +01 ... /[Fro ... /[From "Xpfinal notice" <Hoodiaxpf@imaginablysurmounting.info>][Date Sat, 29 Jul 2006 10:19:26 -0800]/UNNAMED Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +01 ... /[From "F .. ... /[From "Terry So ... /[From "AMLO" <soed@bwdeudytaoyz.com>][Date Sat, 29 Jul 2006 22:21:39 -0800]/text Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +01 ... /[From "F .. ... /[From "Terry Sousa" <EmilioJones8@bisexualplayground.com>][Date Sat, 29 Jul 2006 01:19:20 -0900]/text Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +01 ... /[From "F ... /[Fro ... /[From "BuildaBiz" <support@masspayouts.com>][Date Sat, 29 Jul 2006 00:10:00 +0000 (UT)]/text Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +01 ... /[From "F ... /[Fro ... /[From mwave.com Promotions<promotion@mwave.com>][Date Fri, 28 Jul 2006 16:30:09 -0700]/UNNAMED Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +01 ... /[From "F ... /[From "Marzena Sokolowski" <marzenasokolows@la.hodes.com>][Date Fri, 28 Jul 2006 13:19:28 -0700]/UNNAMED Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +01 ... /[From "Fast Auto Loan Approval" <FastAutoLoanApproval@plugnephews.info>][Date Fri, 28 Jul 2006 12:27:21 -0800]/UNNAMED Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/ ... /[From "Phone Services" <RingtoneWizard@derivationssynchronous.info>][Date Tue, 25 Jul 2006 08:47:57 -0800]/UNNAMED Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[Fro ... /[From "CPQ Professional Imaging" <customerservice@cpq.net>][Date Tue, 25 Jul 2006 00:18:00 -0400]/text Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From "Zack's Com ... ... /[From "Brock Diaz" <wxx911@zstone.com>][Date Mon, 24 Jul 2006 21:16:32 -0600]/UNNAMED Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From "Zack's Com ... /[From "Get Skinny" <getskinny@clambis.net>][Date Mon, 24 Jul 2006 16:01:56 +0000]/UNNAMED Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From "Zack's Computers" <zacks.computers@verizon.net>][Date Wed, 19 Jul 2006 13:04:31 -0500]/UNNAMED Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From "PayPal Security Service" <service@paypal.com>][Date Sun, 30 Jul 2006 19:46:09 -0700]/UNNAMED/html Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From "PayPal Security Service" <service@paypal.com>][Date Sun, 30 Jul 2006 19:46:09 -0700]/UNNAMED Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +010 ... /[From "Woma ... /[From "PayPal Security Center" <acc-overview@paypal.com>][Date Tue, 01 Aug 2006 07:30:08 +0400]/html Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +010 ... /[From "WomansFitnessGuide@" <WomansFitnessGuide@collarsquenching.info>][Date Mon, 31 Jul 2006 16:42:52 -0800]/UNNAMED Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From "PayPal Inc." <account@paypal.com>][Date Tue, 01 Aug 2006 16:38:01 -0700]/UNNAMED/html Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From "PayPal Inc." <account@paypal.com>][Date Tue, 01 Aug 2006 16:38:01 -0700]/UNNAMED Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From eye ... /[F ... /[From "Charity Koch" <xkpkdei@ljqbkvwliy.com>][Date Tue, 08 Aug 2006 08:36:25 +0800]/html Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +010 ... /[From ... /[From Ni ... /[From "Leninism C. ... /[From service@paypal.com][Date Sun, 06 Aug 2006 11:33:45 -0400]/html Infected: Trojan-Spy.HTML.Paylap.je skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +010 ... /[From ... /[From Ni ... /[From "Leninism C. Perseid" <jal@giza-group.com>][Date Sun, 06 Aug 2006 11:27:08 -0400]/text Infected: Trojan-Spy.HTML.Paylap.je skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +010 ... /[From ... /[From Nike Ipod Giveaway <NikeIpodGiveaway@gnep4019.com>][Date Sun, 06 Aug 2006 07:16:56 -0800 (PST)]/html Infected: Trojan-Spy.HTML.Paylap.je skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +010 ... /[From "School Scholorship@" <SchoolScholorship@jaundiceadherents.info>][Date Sat, 05 Aug 2006 18:50:48 -0800]/UNNAMED Infected: Trojan-Spy.HTML.Paylap.je skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From eye ... /[From "In high demand" <inhighdemand@greether.com>][Date Sat, 05 Aug 2006 16:45:47 +0000]/UNNAMED Infected: Trojan-Spy.HTML.Paylap.je skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From eyeQ<eyeQ100827207@uget4life.com>][Date Sat, 05 Aug 2006 15:09:25 -0400]/UNNAMED Infected: Trojan-Spy.HTML.Paylap.je skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From "Delia Charle ... /[From "PayPal Service" <service@paypal.com>][Date Fri, 18 Aug 2006 04:25:34 -0200]/html Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100 ... /[From Entertain ... /[ ... /[From "PayPal Service" <service@paypal.com>][Date Tue, 22 Aug 2006 23:36:45 +0400]/html Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100 ... /[From Entertain ... /[From "The Bell" <no-reply@imagelore.com>][Date Tue, 22 Aug 2006 12:31:11 -0400 (EDT)]/UNNAMED Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100 ... /[From Entertain ... /[From "Your new ride" <yournewride@pelumqum.com>][Date Mon, 21 Aug 2006 21:19:12 +0000]/UNNAMED Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100 ... /[From Entertainment Ti ... /[From Stock Line <StockLine@networkincs.net>][Date Mon, 21 Aug 2006 21:34:20 -0500]/html Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100 ... /[From Entertainment Time ... /[From "MyCC" <info@haborges.com>][Date Mon, 21 Aug 2006 15:39:22 -0400 (EDT)]/UNNAMED Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100 ... /[From Entertainment Time <ent ... /[From "NEBS" <nebs@nebs.chtah.com>][Date Mon, 21 Aug 2006 16:32:25 +0000]/UNNAMED Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100 ... /[From Entertainment Time <entertainment@bot.tormaxelectronics.com>][Date Mon, 21 Aug 2006 09:28:37 -0700 (PDT)]/html Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNN ... ... /[From "Get TV on Your PC" <GetTVonYourPC@haborges.com>][Date Mon, 21 Aug 2006 10:57:51 -0400 (EDT)]/UNNAMED Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNN ... ... /[From "Football Prize" <Footb ... /[From <NIOCC@valuesend.com>][Date Mon, 21 Aug 2006 08:14:32 -0400]/html Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNN ... ... /[From "Football Prize" <FootballPrize@purgatorypundit.info>][Date Mon, 21 Aug 2006 06:28:03 -0800]/UNNAMED Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNN ... /[Fr ... /[From "Fo ... /[From "Wilmer Wayne" <comebak@usermail.com>][Date Mon, 21 Aug 2006 09:56:52 -0100]/text Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNN ... /[Fr ... /[From "Football Prize" <FootballPrize@hereimprove.info>][Date Tue, 22 Aug 2006 01:11:12 -0800]/UNNAMED Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNN ... /[From SlimDow . ... /[From "Beth Badura" <schmucke@golddust.org>][Date Mon, 21 Aug 2006 00:06:39 -0700]/UNNAMED Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNN ... /[From SlimDow ... /[From "Brett" <auctionaccessible@roter-adler.de>][Date Mon, 21 Aug 2006 12:45:29 +0800]/text Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNN ... /[From SlimDown Now <slimdown@byherhaggeredapperiance.info>][Date Mon, 21 Aug 2006 00:12:01 -0500 (EST)]/UNNAMED Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAM ... /[From "Airline G ... /[From "Seaworld And Busch Garden Passes"][Date Sun, 20 Aug 2006 13:46:22 -0800]/UNNAMED Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAM ... /[From "Airline Gift Card" <AirlineGiftCard@accusingsilks.info>][Date Sun, 20 Aug 2006 12:58:22 -0800]/UNNAMED Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAM ... ... /[From Dell Direct <dell@homeandhomeoffice.dell.com>][Date Fri, 18 Aug 2006 10:43:53 -0700 (PDT)]/UNNAMED Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAM ... ... /[From "Pizza 4 Life" <Pizza4Life@fadedmultinational.info>][Date Fri, 18 Aug 2006 05:41:53 -0800]/UNNAMED Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAM ... /[From "Ringtones 4 U" <Ringtones4U@popularizessymposiums.info>][Date Fri, 18 Aug 2006 23:13:53 -0800]/UNNAMED Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From "Delia Charles" <pee@fstihlyytbnyfw.com>][Date Sun, 20 Aug 2006 11:02:58 +0800]/text Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:5 . ... /[ ... /[From PayPal <support728451@paypal.com>][Date Invalid date header replaced by vms047.mailsrvcs.net; original]/html Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:5 . ... /[From ... ... ... /[Fro ... /[From "Marisa Cochran" <wdqb@ecetjiifgmlvwx.com>][Date Sat, 26 Aug 2006 13:42:34 +0800]/text Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:5 . ... /[From ... ... ... /[From "CPQ Professional Imaging" <customerservice@cpq.net>][Date Sat, 26 Aug 2006 00:16:48 -0400]/text Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:5 . ... /[From ... ... /[From "Media Matters for America" <action@mediamatters.org>][Date Fri, 25 Aug 2006 20:13:56 -0400]/UNNAMED Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:5 . ... /[From ... /[From "Designer Diets" <LivingHealthier@abominableenliven.info>][Date Fri, 25 Aug 2006 16:48:09 -0600]/UNNAMED Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:5 . ... /[From ... /[From "Designer Diets" <HealthyLifestyle@channelledspokes.info>][Date Fri, 25 Aug 2006 16:42:17 -0600]/UNNAMED Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:5 . ... /[From "Graffiti ... /[From "Customized Search" <noreply@kindays.biz>][Date Fri, 25 Aug 2006 12:30:48 -0400 (EDT)]/UNNAMED Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:5 . ... /[From "Graffiti Entertainment" <GraffitiEntertainment@infrequentsales.com>][Date Fri, 25 Aug 2006 09:30:13 -0400]/UNNAMED Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:5 ... /[From "YourCool ... /[From "Rickie L. Robinosn" <qmtcnah@finance.vatech.at>][Date Thu, 24 Aug 2006 21:06:41 +0400]/UNNAMED Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:5 ... /[From "YourCool FreeStuff" <YourC ... /[From "MyCC" <info@derwelt.net>][Date Thu, 24 Aug 2006 15:04:46 -0400 (EDT)]/UNNAMED Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:5 ... /[From "YourCool FreeStuff" <YourCoolFreeStuff@conferencecongratulatory.info>][Date Thu, 24 Aug 2006 03:17:43 -0800]/UNNAMED Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From ... /[From Inks 101 <noreply@arbyz-e.net>][Date Date header was inserted by vms050.mailsrvcs.net]/UNNAMED Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From "amber paul" <amber34@localnet.com>][Date Wed, 23 Aug 2006 19:07:18 -0500]/UNNAMED Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100 ... /[From " ... ... /[From "Gift Card ... /[From "eBay"<aw-confirm@ebay.com>][Date Tue, 29 Aug 2006 19:17:32 +0200]/html Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100 ... /[From " ... ... /[From "Gift Card Bonus" <no-reply@dendoor.com>][Date Tue, 29 Aug 2006 10:32:37 -0400 (EDT)]/UNNAMED Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100 ... /[From " ... /[From "azurefusion.com" <no-reply@azurefusion.com>][Date Tue, 29 Aug 2006 09:01:51 -0400 (EDT)]/UNNAMED Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100 ... /[From "D ... /[From "CPQ P ... /[From "Mia Trevino" <mtrevino_kg@vlt.se>][Date Tue, 29 Aug 2006 08:50:01 -0400]/text Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100 ... /[From "D ... /[From "CPQ Professional Imaging" <customerservice@cpq.net>][Date Tue, 29 Aug 2006 00:18:19 -0400]/text Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100 ... /[From "Designer . ... /[From "Ann Marcy " <Doreen-Valenciaa@efes.net.tr>][Date Mon, 28 Aug 2006 23:17:25 -0800]/text Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50: ... /[From "ConsumerExpressions ... /[From "aw-confirm@ebay.com"<aw-confirm@ebay.com>][Date Tue, 29 Aug 2006 21:09:15 -0400]/html Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50: ... /[From "ConsumerExpressions.com" <R.3098170R6ddf.10@en34.com>][Date Date header was inserted by vms050.mailsrvcs.net]/UNNAMED Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100 ... /[From "Designer .. ... /[From "SizeLossNow" <spa_dreams@jarwolf.info>][Date Tue, 29 Aug 2006 19:01:15 -0500]/UNNAMED Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100 ... /[From "Designer ... /[From "HeartGuardian" <noreply@raoned.com>][Date Mon, 28 Aug 2006 09:40:21 -0400 (EDT)]/UNNAMED Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100 ... /[From "Designer Handbag 4 U" <DesignerHandbag4U@altairmonstrous.info>][Date Sun, 27 Aug 2006 23:30:54 -0800]/UNNAMED Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED ... /[From "Blue Moto Razr" <BlueMotoRazr@delegatestomacher.info>][Date Sun, 27 Aug 2006 17:57:41 -0800]/UNNAMED Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From "Authorship F. Jee ... /[From "Brenda" <markgraf@dwave.net>][Date Sun, 27 Aug 2006 19:34:06 -0500]/UNNAMED Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From "Authorship F. Jeeps" <griffith@gloriousk.com>][Date Sun, 27 Aug 2006 18:34:55 -0700]/text Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED Infected: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED Infected: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Special Update<Penfield.twkt@gnbconnect.com>][Date Sat, 05 Nov 2005 02:54:40 -0500]/UNNAMED Infected: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED Infected: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox Mail Berkeley mbox: infected - 47, suspicious - 190 skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Junk/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From PayPal<paypal@email.paypal.com>][Date Fri, 18 Nov 2005 11:19:44 -0600]/html Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Junk/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From "Belisi Clothiers" <info@bischofitela.com>][Date Fri, 18 Nov 2005 14:20:18 -0500 (EST)]/UNNAMED/[From PayPal<paypal@email.paypal.com>][Date Fri, 18 Nov 2005 13:03:16 -0600]/html Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Junk/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From "Belisi Clothiers" <info@bischofitela.com>][Date Fri, 18 Nov 2005 14:20:18 -0500 (EST)]/UNNAMED Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Junk/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From "Extra Cash in Your Pocket " <newsletter@theonlinemall.net>][Date Tue, 22 Nov 2005 14:00:2 ... /[From "BeSummerFine" <resizeyourbody@changemaintain.com>][Date Tue, 22 Nov 2005 05:07:00 -0500]/document.scr Infected: Email-Worm.Win32.NetSky.q skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Junk/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From "Extra Cash in Your Pocket " <newsletter@theonlinemall.net>][Date Tue, 22 Nov 2005 14:00:26 -0500]/html/[From "Notebookforums" <admin@pctorque.net>][Date Tue, 22 Nov 2005 00:01:04 -0600]/my_details.exe Infected: Email-Worm.Win32.NetSky.q skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Junk/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From "Extra Cash in Your Pocket " <newsletter@theonlinemall.net>][Date Tue, 22 Nov 2005 14:00:26 -0500]/html Infected: Email-Worm.Win32.NetSky.q skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Junk/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From ""][Date Fri, 25 Nov 2005 17:55:37 -0500]/text/[From daybyday3567@cs.com][Date Sat, 26 Nov 2005 13:02:29 +0200]/document.txt Infected: Email-Worm.Win32.NetSky.q skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Junk/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From ""][Date Fri, 25 Nov 2005 17:55:37 -0500]/text Infected: Email-Worm.Win32.NetSky.q skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Junk/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From All Jackpots <tuhekxejhbchcel@leasureidea.com>][Date Sun, 27 Nov 2005 15:31:24 -0500 (EST)]/UNNAMED/[From info@winterhurtful ... /[From service@paypal.com][Date Sun, 27 Nov 2005 23:50:32 +0100 (CET)]/html Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Junk/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From All Jackpots <tuhekxejhbchcel@leasureidea.com>][Date Sun, 27 Nov 2005 15:31:24 -0500 (EST)]/UNNAMED/[From info@winterhurtfull.com][Date Sun, 27 Nov 2005 15:37:43 -0500]/UNNAMED Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Junk/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From All Jackpots <tuhekxejhbchcel@leasureidea.com>][Date Sun, 27 Nov 2005 15:31:24 -0500 (EST)]/UNNAMED Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Junk/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From Vegas Towers <rlearmanevwaerg@leasureidea.com>][Date Wed, 07 Dec 2005 16:04:25 -0500 (EST)]/UNNAMED/[From "PayPal"<service@paypal.com>][Date Sun, 11 Dec 2005 01:11:13 +0200]/html Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Junk/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From Vegas Towers <rlearmanevwaerg@leasureidea.com>][Date Wed, 07 Dec 2005 16:04:25 -0500 (EST)]/UNNAMED Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Junk/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From SlotMachineMastery <SlotMachineMastery@distemperputridity.com>][Date Sat, 17 Dec 2005 09:06:50 -0 ... / ... /[ ... ... /[From "Intercasino" <return@mitive.info>][Date Sat, 17 Dec 2005 15:45:02 -0500]/html Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Junk/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From SlotMachineMastery <SlotMachineMastery@distemperputridity.com>][Date Sat, 17 Dec 2005 09:06:50 -0 ... / ... /[ ... /[From Loan Manager <return@webpromoz.com>][Date Sat, 17 Dec 2005 14:30:57 -0500]/UNNAMED Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Junk/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From SlotMachineMastery <SlotMachineMastery@distemperputridity.com>][Date Sat, 17 Dec 2005 09:06:50 -0 ... / ... /[From Ink Specialist<Scotland.wtms@cgwcorps.com>][Date Sat, 17 Dec 2005 16:00:17 -0500]/UNNAMED Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Junk/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From SlotMachineMastery <SlotMachineMastery@distemperputridity.com>][Date Sat, 17 Dec 2005 09:06:50 -0 ... / ... /[From Gold Status <debt@bluereticule.com>][Date Sat, 17 Dec 2005 15:40:06 -0500 (EST)]/UNNAMED Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Junk/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From SlotMachineMastery <SlotMachineMastery@distemperputridity.com>][Date Sat, 17 Dec 2005 09:06:50 -0 ... /[From "Coke vs Pepsi" <CokevsPepsi@consumer1-sources.net>][Date Fri, 16 Dec 2005 23:22:54 -0600]/html Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Junk/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From SlotMachineMastery <SlotMachineMastery@distemperputridity.com>][Date Sat, 17 Dec 2005 09:06:50 -0500]/UNNAMED Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Junk/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From Political Survey <ps@stonetrainwhite.com>][Date Tue, 20 Dec 2005 13:12:56 -0 ... /[From MassiveDiscounts ... /[From db51@lighthouse.net][Date Tue, 20 Dec 2005 14:21:01 +0200]/details_dannyscustomphoto.scr Infected: Email-Worm.Win32.NetSky.q skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Junk/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From Political Survey <ps@stonetrainwhite.com>][Date Tue, 20 Dec 2005 13:12:56 -0 ... ... /[From "SuccessUniversity" ... /[From "InfoTask" <InfoPim@Mix.contask.com>][Date Tue, 20 Dec 2005 09:57:37 -0500]/html Infected: Trojan-Spy.HTML.Paylap.ez skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Junk/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From Political Survey <ps@stonetrainwhite.com>][Date Tue, 20 Dec 2005 13:12:56 -0 ... ... /[From "SuccessUniversity" <SuccessUniversity@haravcookandyou.com>][Date Tue, 20 Dec 2005 06:55:34 -0800 (PST)]/UNNAMED Infected: Trojan-Spy.HTML.Paylap.ez skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Junk/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From Political Survey <ps@stonetrainwhite.com>][Date Tue, 20 Dec 2005 13:12:56 -0 ... /[From "SuccessUniversity" <Su ... /data.rtf .scr Infected: Email-Worm.Win32.NetSky.q skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Junk/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From Political Survey <ps@stonetrainwhite.com>][Date Tue, 20 Dec 2005 13:12:56 -0 ... /[From "SuccessUniversity" <SuccessUniversity@haravcookandyou.com>][Date Tue, 20 Dec 2005 06:55:34 -0800 (PST)]/archive.zip Infected: Email-Worm.Win32.NetSky.q skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Junk/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From Political Survey <ps@stonetrainwhite.com>][Date Tue, 20 Dec 2005 13:12:56 -0 ... /[From MassiveDiscounts84 ... /[From AdobePhotoshop1346@larryollison.com][Date Mon, 19 Dec 2005 20:31:04 -0800 (PST)]/text Infected: Email-Worm.Win32.NetSky.q skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Junk/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From Political Survey <ps@stonetrainwhite.com>][Date Tue, 20 Dec 2005 13:12:56 -0 ... /[From MassiveDiscounts84 ... /[From SaveHundredsOEM1234@planetspacestorage.com][Date Tue, 20 Dec 2005 02:23:19 +0000]/text Infected: Email-Worm.Win32.NetSky.q skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Junk/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From Political Survey <ps@stonetrainwhite.com>][Date Tue, 20 Dec 2005 13:12:56 -0 ... /[From MassiveDiscounts8419@hotel-le-grillon.com][Date Invalid date header replaced by vms043.mailsrvcs.net; original]/html Infected: Email-Worm.Win32.NetSky.q skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Junk/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From Political Survey <ps@stonetrainwhite.com>][Date Tue, 20 Dec 2005 13:12:56 -0500 (EST)]/text/[From Wired <wired@wired.amgcirc.com>][Date Tue, 20 Dec 2005 20:16:48 +0000 (UT)]/UNNAMED Infected: Email-Worm.Win32.NetSky.q skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Junk/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From Political Survey <ps@stonetrainwhite.com>][Date Tue, 20 Dec 2005 13:12:56 -0500 (EST)]/text Infected: Email-Worm.Win32.NetSky.q skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Junk/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From Money <6@groups4flowers.com>][Date Tue, 20 Dec 2005 18:01:35 -0500 (EST)]/html/[From "info@cashadvance24-7.com " <qCu8uJX@flatstat.com>][Date Wed, 21 Dec 2005 03:37:51 +0000]/html Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Junk/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From Money <6@groups4flowers.com>][Date Tue, 20 Dec 2005 18:01:35 -0500 (EST)]/html Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Junk/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From "Search Antigo" <news-Madeline-dannyscustomphoto@ferbetros.com>][Date Thu, 22 Dec 2005 00:48:47 +0 ... /[From "Oralbrigh ... /[From daniel.kong@sbcglobal.net][Date Thu, 22 Dec 2005 00:21:25 +020 ... /html Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Junk/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From "Search Antigo" <news-Madeline-dannyscustomphoto@ferbetros.com>][Date Thu, 22 Dec 2005 00:48:47 +0 ... /[From "Oralbrigh ... /[From daniel.kong@sbcglobal.net][Date Thu, 22 Dec 2005 00:21:25 +0200]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Junk/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From "Search Antigo" <news-Madeline-dannyscustomphoto@ferbetros.com>][Date Thu, 22 Dec 2005 00:48:47 +0 ... /[From "Oralb ... /[From daniel.kong@sbcglobal.net][Date Thu, 22 Dec 2005 00:21:25 +0200]/message.scr Infected: Email-Worm.Win32.NetSky.q skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Junk/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From "Search Antigo" <news-Madeline-dannyscustomphoto@ferbetros.com>][Date Thu, 22 Dec 2005 00:48:47 +0 ... /[From "Oralbright" <Oralbright@engulfadome.com>][Date Wed, 21 Dec 2005 19:46:30 -0500 (EST)]/UNNAMED Infected: Email-Worm.Win32.NetSky.q skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Junk/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From "Search Antigo" <news-Madeline-dannyscustomphoto@ferbetros.com>][Date Thu, 22 Dec 2005 00:48:47 +0000]/UNNAMED Infected: Email-Worm.Win32.NetSky.q skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Junk/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From "That special something "][Date Thu, 12 Jan 2006 10:39:52 -0800]/UNNAMED/[From "Unlimited Downloads" <info@siga ... /[From service@chase.com <service@chase.com>][Date Fri, 13 Jan 2006 13:26:21 -0500]/html Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Junk/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From "That special something "][Date Thu, 12 Jan 2006 10:39:52 -0800]/UNNAMED/[From "Unlimited Down ... / ... /[From "PayPal Security Service" <security@paypal.com>][Date Fri, 27 Jan 2006 20:55:34 +0400]/html Infected: Trojan-Spy.HTML.Paylap.ez skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Junk/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From "That special something "][Date Thu, 12 Jan 2006 10:39:52 -0800]/UNNAMED/[From "Unlimited Down ... / ... /[From "Attention" <Attention@pooramyworksucks.info>][Date Fri, 27 Jan 2006 02:03:25 -0800]/UNNAMED Infected: Trojan-Spy.HTML.Paylap.ez skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Junk/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From "That special something "][Date Thu, 12 Jan 2006 10:39:52 -0800]/UNNAMED/[From "Unlimited Down ... /[From "F ... /[From asmartoffer <asbounces@asmartoffer.com>][Date Mon, 23 Jan 2006 12:47:30 -0500]/html Infected: Trojan-Spy.HTML.Paylap.ez skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Junk/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From "That special something "][Date Thu, 12 Jan 2006 10:39:52 -0800]/UNNAMED/[From "Unlimited Down ... /[ ... /[From "PayPal Security Service" <security@paypal.com>][Date Sat, 28 Jan 2006 19:38:57 -0100]/html Infected: Trojan-Spy.HTML.Paylap.ez skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Junk/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From "That special something "][Date Thu, 12 Jan 2006 10:39:52 -0800]/UNNAMED/[From "Unlimited Do ... /[F ... /[From ... ... /[From "PayPal" <account@paypal.com>][Date Sun, 29 Jan 2006 15:13:40 +030 ... /html Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Junk/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From "That special something "][Date Thu, 12 Jan 2006 10:39:52 -0800]/UNNAMED/[From "Unlimited Do ... /[F ... /[From ... ... /[From "PayPal" <account@paypal.com>][Date Sun, 29 Jan 2006 15:13:40 +0300]/UNNAMED Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Junk/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From "That special something "][Date Thu, 12 Jan 2006 10:39:52 -0800]/UNNAMED/[From "Unlimited Do ... /[F ... /[From ... /[From "Philippe Mull" <philip@kvpl.com>][Date Sat, 28 Jan 2006 23:38:29 -0500]/UNNAMED Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Junk/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From "That special something "][Date Thu, 12 Jan 2006 10:39:52 -0800]/UNNAMED/[From "Unlimited Do ... /[F ... /[From "Cameron" <Cameron@ModernSavings.CTRNova.com>][Date Sat, 28 Jan 2006 16:04:08 -0800]/UNNAMED Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Junk/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From "That special something "][Date Thu, 12 Jan 2006 10:39:52 -0800]/UNNAMED/[From "Unlimited Do ... /[Fro ... /[From "Super Bowl" <return@sedicigreatproducts2.com>][Date Sat, 28 Jan 2006 22:07:22 -0800]/html Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Junk/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From "That special something "][Date Thu, 12 Jan 2006 10:39:52 -0800]/UNNAMED/[From "Unlimited Do ... /[From "Dodie Chartier" <VpRobinetta-Pancholy@highfiber.com>][Date Sun, 29 Jan 2006 09:06:59 +0600]/UNNAMED Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Junk/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From "That special something "][Date Thu, 12 Jan 2006 10:39:52 -0800]/UNNAMED/[From "Unlimited Down . ... /[From SuperPrizePatrol <opportunities@cloudybag.com>][Date Sat, 28 Jan 2006 16:09:46 -0600 (CST)]/html Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Junk/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From "That special something "][Date Thu, 12 Jan 2006 10:39:52 -0800]/UNNAMED/[From "Unlimited Down ... /[From "F ... /[From asmartoffer <asbounces@asmartoffer.com>][Date Mon, 23 Jan 2006 12:47:30 -0500]/html Infected: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Junk/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From "That special something "][Date Thu, 12 Jan 2006 10:39:52 -0800]/UNNAMED/[From "Unlimited Down ... /[From "F ... ... /[From "Geoffrey" <rogert@pellicano.biz>][Date Fri, 20 Jan 2006 18:29:16 +0100]/UNNAMED Infected: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Junk/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From "That special something "][Date Thu, 12 Jan 2006 10:39:52 -0800]/UNNAMED/[From "Unlimited Down ... /[From "F ... /[F ... /[From "collectiblestoday.com"][Date Sat, 21 Jan 2006 04:32:24 +0000 (GMT)]/UNNAMED Infected: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Junk/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From "That special something "][Date Thu, 12 Jan 2006 10:39:52 -0800]/UNNAMED/[From "Unlimited Down ... /[From "F ... /[From Get Thin Now<Nolan.bvyz@intrareg.com>][Date Fri, 13 Jan 2006 21:55:02 +0000]/UNNAMED Infected: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Junk/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From "That special something "][Date Thu, 12 Jan 2006 10:39:52 -0800]/UNNAMED/[From "Unlimited Down ... /[From "FreeLuxuryWatches " <newsletter@theonlinemall.net>][Date Fri, 13 Jan 2006 16:50:51 -0500]/UNNAMED Infected: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Junk/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From "That special something "][Date Thu, 12 Jan 2006 10:39:52 -0800]/UNNAMED/[From "Unlimited Downloads" <info@siganidae.com>][Date Thu, 12 Jan 2006 14:26:04 -0500 (EST)]/UNNAMED Infected: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Junk/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From "That special something "][Date Thu, 12 Jan 2006 10:39:52 -0800]/UNNAMED/[From "ChristianMortgageUSA" < ... /[From "PayPal Security Center" <service@paypal.com>][Date Sat, 18 Feb 2006 22:42:11 +0400]/html Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Junk/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From "That special something "][Date Thu, 12 Jan 2006 10:39:52 -0800]/UNNAMED/[From "ChristianMortgageUSA" <return@dgetfhgy. ... /[From "PayPal" <account@paypal.com>][Date Sun, 19 Feb 2006 02:55:00 +0600]/html Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Junk/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From "That special something "][Date Thu, 12 Jan 2006 10:39:52 -0800]/UNNAMED/[From "ChristianMortgageUSA" <return@dgetfh ... /[From "PayPal Inc." <admin@paypal.com>][Date Sat, 18 Feb 2006 22:33:00 -0100]/html Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Junk/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From "That special something "][Date Thu, 12 Jan 2006 10:39:52 -0800]/UNNAMED/[From "ChristianMortga ... /[Fro ... /[From "PayPal Email ID PP321" <center@paypal.com>][Date Sun, 19 Feb 2006 06:11:22 -0400]/html Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Junk/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From "That special something "][Date Thu, 12 Jan 2006 10:39:52 -0800]/UNNAMED/[From "ChristianMortga . ... /[From "PayPal Security Center" <administrator@paypal.com>][Date Sun, 19 Feb 2006 16:19:53 +0500]/html Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Junk/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From "That special something "][Date Thu, 12 Jan 2006 10:39:52 -0800]/UNNAMED/[From "ChristianMortga ... /[From Health Insuran ... /[From <user@vocalspear.com>][Date Sat, 18 Feb 2006 23:05:09 -0800 (PST)]/html Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Junk/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From "That special something "][Date Thu, 12 Jan 2006 10:39:52 -0800]/UNNAMED/[From "ChristianMortga ... /[From Health Insurance <health@tormaxelectronics.com>][Date Sat, 18 Feb 2006 15:52:16 -0800 (PST)]/html Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Junk/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From "That special something "][Date Thu, 12 Jan 2006 10:39:52 -0800]/UNNAMED/[From "ChristianMortgageUSA" <return@dgetfhgy.i ... /[From <user@vacatespray.com>][Date Sat, 18 Feb 2006 11:03:35 -0800 (PST)]/text Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Junk/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From "That special something "][Date Thu, 12 Jan 2006 10:39:52 -0800]/UNNAMED/[From "ChristianMortgageUSA" <return@dgetfhgy.info>][Date Fri, 17 Feb 2006 21:22:43 -0500]/UNNAMED Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Junk/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From "That special something "][Date Thu, 12 Jan 2006 10:39:52 -0800]/UNNAMED/[Fro ... /[From GiveAwayAperture <GiveAwayAperture@GiveAwayAperture.apertureoffers.com>][Date Wed, 01 Mar 2006 17:55:32 -0400]/html Infected: Trojan-Spy.HTML.Bayfraud.ln skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Junk/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From "That special something "][Date Thu, 12 Jan 2006 10:39:52 -0800]/UNNAMED/[From pete@supergifts17.info][Date Sun, 26 Feb 2006 05:43:48 -0800]/html Infected: Trojan-Spy.HTML.Bayfraud.ln skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Junk/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From "That special something "][Date Thu, 12 Jan 2006 10:39:52 -0800]/UNNAMED/[From "Pontiac Roadast ... /[From "Get TV on Your PC" <return@dodicigoldproducts15.com>][Date Sun, 12 Mar 2006 00:45:01 -0500]/html Infected: Trojan-Spy.HTML.Bayfraud.ln skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Junk/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From "That special something "][Date Thu, 12 Jan 2006 10:39:52 -0800]/UNNAMED/[From "Pontiac Roadaster" <Po ... /[From "Fuze ... /[From "PayPal"<accounts@paypal.com>][Date Sun, 12 Mar 2006 18:17:50 +0200]/html Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Junk/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From "That special something "][Date Thu, 12 Jan 2006 10:39:52 -0800]/UNNAMED/[From "Pontiac Roadaster" <Po ... /[From "Fuzed Q. Hittite" <middelink@gilliannash.com>][Date Sat, 11 Mar 2006 19:33:39 -0500]/text Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Junk/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From "That special something "][Date Thu, 12 Jan 2006 10:39:52 -0800]/UNNAMED/[From "Pontiac Roadaster" <Po ... /[From "Frances Hankins" <russo@basoncomputer.com>][Date Sat, 11 Mar 2006 16:52:38 -0600]/UNNAMED Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Junk/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From "That special something "][Date Thu, 12 Jan 2006 10:39:52 -0800]/UNNAMED/[From "Pontiac Roadaster" <Pontiac ... /[From "Dionne Kimball" <tcarte04@harris.com>][Date Sat, 11 Mar 2006 16:50:34 -0600]/UNNAMED Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Junk/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From "That special something "][Date Thu, 12 Jan 2006 10:39:52 -0800]/UNNAMED/[From "Pontiac Roadaster" <PontiacRo ... /[From Quiznos Lunches <quiz@ampusa.net>][Date Sat, 11 Mar 2006 23:46:48 -0800 (PST)]/html Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Junk/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From "That special something "][Date Thu, 12 Jan 2006 10:39:52 -0800]/UNNAMED/[From "Pontiac Roadaster" <PontiacRoadster@ballairbus.info>][Date Sat, 11 Mar 2006 15:14:51 -0800]/UNNAMED Infected: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Junk/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50 ... /[From h=Content-Type:From:MIME-Version:To:Date:Message-ID:Subject:X-Complaints-To:Content-Transfer-Encoding;][Date h=Content-Type:From:M ... /[From "Chase" <security@chase.com>][Date Thu, 23 Mar 2006 17:11:31 -0100]/UNNAMED Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Junk/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50 ... /[From h=Content-Type:From:MIME-Version:To:Date:Message-ID:Subject:X-Complaints-To:Content-Transfer-Encoding;][Date h=Content-Type:From:MIME-Version:To:Date:Message-ID:Subject:X-Complaints-To:Content-Transfer-Encoding;]/html Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Junk/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From "That special something "][Date Thu, 12 Jan 2006 10:39:52 -0800]/UNNAMED/[From "Cant stand it" <CantSt ... /[From "Back Belt" <BackBelt@gilnorrequesting.com>][Date Fri, 17 Mar 2006 18:31:44 -0800]/UNNAMED Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Junk/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From "That special something "][Date Thu, 12 Jan 2006 10:39:52 -0800]/UNNAMED/[From "Cant stand it" <CantStandIt@fixed ... /[From "ryan" <ryan@mightygreenmarket.com>][Date Fri, 17 Mar 2006 16:34:38 -0600]/html Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Junk/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From "That special something "][Date Thu, 12 Jan 2006 10:39:52 -0800]/UNNAMED/[From "Cant stand it" <CantStandIt@fixedrateforever.info>][Date Sat, 18 Mar 2006 08:34:09 -0800]/UNNAMED Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Junk/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From "That special something "][Date Thu, 12 Jan 2006 10:39:52 -0800]/UNNAMED/[From Bidz ... /[From Check Adva ... /[From Chase Security Service<account@chase.com>][Date Sat, 25 Mar 2006 15:10:34 -0600]/html Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Junk/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From "That special something "][Date Thu, 12 Jan 2006 10:39:52 -0800]/UNNAMED/[From Bidz ... /[From Check Adva ... /[From "Bill Stone" <bill@slotmachinemastery.com>][Date Sat, 25 Mar 2006 13:00:37 -0500]/text Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Junk/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From "That special something "][Date Thu, 12 Jan 2006 10:39:52 -0800]/UNNAMED/[From Bidz ... /[From Check Advances <CheckAdvances@MoneyAperture.networkaperture.com>][Date Sat, 25 Mar 2006 15:03:16 -0400]/html Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Junk/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From "That special something "][Date Thu, 12 Jan 2006 10:39:52 -0800]/UNNAMED/[Fro ... /[From College Gra ... /[From "Ri ... /[From "Account Handler"<admin@maza.com>][Date Fri, 24 Mar 2006 11:02:23 -0800]/html Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Junk/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From "That special something "][Date Thu, 12 Jan 2006 10:39:52 -0800]/UNNAMED/[Fro ... /[From College Gra ... /[From "Ring ring" <RingRing@getyourdailyquota.info>][Date Sun, 26 Mar 2006 04:21:06 -0800]/UNNAMED Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Junk/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50 ... /[From h=Content-Type:From:MIME-Version:To:Date:Message-ID:Subject:X-Complaints-To:Content-Transfer-Encoding;][Date h=Content-Type:From:MIME-Version:To:Date:Message-ID:Subject:X-Complaints-To:Content-Transfer-Encoding;]/html Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Junk/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From "That special something "][Date Thu, 12 Jan 2006 10:39:52 -0800]/UNNAMED/[Fro ... /[From College Grad Sweeps <CollegeGradSweeps@EducationPeaks.peaksportals.com>][Date Sat, 25 Mar 2006 18:11:31 -0400]/html Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Junk/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From "That special something "][Date Thu, 12 Jan 2006 10:39:52 -0800]/UNNAMED/[Fro ... /[From College Grad Sweeps ... /[From "Chase Online Banking" <chase@chase.com>][Date Thu, 30 Mar 2006 19:25:04 +0100]/html Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Junk/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From "That special something "][Date Thu, 12 Jan 2006 10:39:52 -0800]/UNNAMED/[Fro ... /[From College Grad Sweep ... /[From ... /[From "Chase Bank" <admin@chase.com>][Date Thu, 30 Mar 2006 16:39:12 -0400]/html Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Junk/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From "That special something "][Date Thu, 12 Jan 2006 10:39:52 -0800]/UNNAMED/[Fro ... /[From College Grad Sweep ... /[From "Mike G" <return@seigrandeproducts2.com>][Date Thu, 30 Mar 2006 16:40:11 -0500]/html Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Junk/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From "That special something "][Date Thu, 12 Jan 2006 10:39:52 -0800]/UNNAMED/[Fro ... /[From College Grad Sweep ... ... ... /[From "Chase" <administrator@chase.com>][Date Thu, 30 Mar 2006 20:09:24 -0300]/html Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Junk/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From "That special something "][Date Thu, 12 Jan 2006 10:39:52 -0800]/UNNAMED/[Fro ... /[From College Grad Sw ... /[From "PayPal Email ID PP321" <service@paypal.com>][Date Fri, 31 Mar 2006 02:57:28 +0300]/html Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Junk/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From "That special something "][Date Thu, 12 Jan 2006 10:39:52 -0800]/UNNAMED/[Fro ... /[From College Grad Sweep ... ... /[Fro ... /[From "Chase" <service@chase.com>][Date Fri, 31 Mar 2006 05:47:46 +0400]/html Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Junk/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From "That special something "][Date Thu, 12 Jan 2006 10:39:52 -0800]/UNNAMED/[Fro ... /[From College Grad Sw ... /[From "Okey Chukwu" <probate050@maktoob.com>][Date Fri, 31 Mar 2006 06:18:27 +0100 (WAT)]/html Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Junk/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From "That special something "][Date Thu, 12 Jan 2006 10:39:52 -0800]/UNNAMED/[Fro ... /[From College Gra ... /[From "Chase Online Banking" <administrator@chase.com>][Date Fri, 31 Mar 2006 10:07:55 +0400]/html Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Junk/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From "That special something "][Date Thu, 12 Jan 2006 10:39:52 -0800]/UNNAMED/[Fro ... /[From College Grad Sweep ... ... /[ ... /[From "Chase Bank" <chase@chase.com>][Date Fri, 31 Mar 2006 00:11:04 -0600]/html Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Junk/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02 ... /[From h=Content-Type:From:MIME-Version:To:Date:Message-ID:Subject:X-Complaints-To:Content-Transfer-Encoding;][Date h=Content-Type:From:MIME-Version:To:Date:Message-ID:Subject:X-Complaints-To:Content-Transfer-Encoding;]/UNNAMED Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Junk/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From "That special something "][Date Thu, 12 Jan 2006 10:39:52 -0800]/UNNAMED/[Fro ... /[From College Grad Sweep ... ... /[From Replicant 2 <return@webpromoz.com>][Date Thu, 30 Mar 2006 15:49:30 -0500]/UNNAMED Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Junk/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From "That special something "][Date Thu, 12 Jan 2006 10:39:52 -0800]/UNNAMED/[Fro ... /[From College Grad Sweep ... /[From "Baffin L. Introversion" <fab@gracom.com>][Date Thu, 30 Mar 2006 20:25:11 -0500]/text Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Junk/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From "That special something "][Date Thu, 12 Jan 2006 10:39:52 -0800]/UNNAMED/[Fro ... /[From College Grad Sweeps <CollegeGradSweeps@EducationPeaks.peaksportals.com>][Date Sat, 25 Mar 2006 18:11:31 -0400]/html Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Junk/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From "That special something "][Date Thu, 12 Jan 2006 10:39:52 -0800]/UNNAMED/[Fro ... /[From College Grad Sweeps <CollegeGrad ... /[From "Chase" <service@chase.com>][Date Fri, 31 Mar 2006 22:46:26 -0100]/html Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Junk/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From "That special something "][Date Thu, 12 Jan 2006 10:39:52 -0800]/UNNAMED/[Fro ... /[From College Grad Sweeps <CollegeGradSweeps@EducationPeaks.peaksportals.com>][Date Sat, 25 Mar 2006 18:11:31 -0400]/html Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Junk/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From "That special something "][Date Thu, 12 Jan 2006 10:39:52 -0800]/UNNAMED/[From Bidz <return@webpromoz.com>][Date Sat, 25 Mar 2006 09:06:51 -0500]/UNNAMED Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Junk/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED/[From "That special something "][Date Thu, 12 Jan 2006 10:39:52 -0800]/UNNAMED Infected: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Junk/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED/[From "Dr.louis Martin Luther luther" <mt_luther7@atlas.cz>][Date Sun, 06 Nov 2005 02:50:59 +0100]/UNNAMED Infected: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Junk/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED/[From Approvals Dept<suri@heatisoff.com>][Date Sat, 05 Nov 2005 10:59:12 -0800 (PST)]/UNNAMED Infected: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Junk/[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]/UNNAMED Infected: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Junk Mail Berkeley mbox: infected - 36, suspicious - 68 skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Trash/[From "MyFamily.com" <Reminder@Reply.MyFamilyInc.com>][Date Thu, 20 Mar 2008 02:57:48 +0000]/UNNAMED/[From "support@carepages.com" <support@carepages.com>][Date Thu, 20 Mar 2008 08:07:33 -0500 (CDT)]/UNNAMED/[From h=Date:Message-ID:List-Unsubscribe:From:To:Subject:MIME-Version:Reply-To:Content-type;][Date Thu, 20 Mar 2008 10:32:50 +0000]/UNNAMED/[From PayPal <onlineservice@paypal.com>][Date Date header was inserted by vms169123.mailsrvcs.net]/html/UNNAMED Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Trash/[From "MyFamily.com" <Reminder@Reply.MyFamilyInc.com>][Date Thu, 20 Mar 2008 02:57:48 +0000]/UNNAMED/[From "support@carepages.com" <support@carepages.com>][Date Thu, 20 Mar 2008 08:07:33 -0500 (CDT)]/UNNAMED/[From h=Date:Message-ID:List-Unsubscribe:From:To:Subject:MIME-Version:Reply-To:Content-type;][Date Thu, 20 Mar 2008 10:32:50 +0000]/UNNAMED/[From PayPal <onlineservice@paypal.com>][Date Date header was inserted by vms169123.mailsrvcs.net]/html Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Trash/[From "MyFamily.com" <Reminder@Reply.MyFamilyInc.com>][Date Thu, 20 Mar 2008 02:57:48 +0000]/UNNAMED/[From "support@carepages.com" <support@carepages.com>][Date Thu, 20 Mar 2008 08:07:33 -0500 (CDT)]/UNNAMED/[From h=Date:Message-ID:List-Unsubscribe:From:To:Subject:MIME-Version:Reply-To:Content-type;][Date Thu, 20 Mar 2008 10:32:50 +0000]/UNNAMED Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Trash/[From "MyFamily.com" <Reminder@Reply.MyFamilyInc.com>][Date Thu, 20 Mar 2008 02:57:48 +0000]/UNNAMED/[From "support@carepages.com" <support@carepages.com>][Date Thu, 20 Mar 2008 08:07:33 -0500 (CDT)]/UNNAMED Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Trash/[From "MyFamily.com" <Reminder@Reply.MyFamilyInc.com>][Date Thu, 20 Mar 2008 02:57:48 +0000]/UNNAMED Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Trash Mail Berkeley mbox: suspicious - 5 skipped
C:\Documents and Settings\Danny\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\Danny\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\Danny\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\Danny\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\Danny\Local Settings\Temp\~ROMFN_0000038C Object is locked skipped
C:\Documents and Settings\Danny\Local Settings\Temporary Internet Files\AntiPhishing\B3BB5BBA-E7D5-40AB-A041-A5B1C0B26C8F.dat Object is locked skipped
C:\Documents and Settings\Danny\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\Danny\ntuser.dat Object is locked skipped
C:\Documents and Settings\Danny\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Data\settings.dat Object is locked skipped
C:\Documents and Settings\LocalService\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\ntuser.dat Object is locked skipped
C:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcrst.dll Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\EENGINE\EPERSIST.DAT Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\NFWEVT.LOG Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\SNDALRT.log Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\SNDCON.log Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\SNDDBG.log Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\SNDFW.log Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\SNDIDS.log Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\SNDSYS.log Object is locked skipped
C:\Program Files\Norton Internet Security\Norton AntiVirus\AVApp.log Object is locked skipped
C:\Program Files\Norton Internet Security\Norton AntiVirus\AVError.log Object is locked skipped
C:\Program Files\Norton Internet Security\Norton AntiVirus\AVVirus.log Object is locked skipped
C:\Program Files\Webroot\Spy Sweeper\Masters\masters.bak Object is locked skipped
C:\Program Files\Webroot\Spy Sweeper\Masters\Masters.const Object is locked skipped
C:\Program Files\Webroot\Spy Sweeper\Masters\masters.mst Object is locked skipped
C:\Program Files\Webroot\Spy Sweeper\Masters.base Object is locked skipped
C:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped
C:\System Volume Information\_restore{734DFBAD-8A38-4BFB-914F-CD4CDFF51E90}\RP15\change.log Object is locked skipped
C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped
C:\WINDOWS\SchedLgU.Txt Object is locked skipped
C:\WINDOWS\SoftwareDistribution\ReportingEvents.log Object is locked skipped
C:\WINDOWS\Sti_Trace.log Object is locked skipped
C:\WINDOWS\system32\CatRoot2\edb.log Object is locked skipped
C:\WINDOWS\system32\CatRoot2\tmp.edb Object is locked skipped
C:\WINDOWS\system32\config\AppEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\default Object is locked skipped
C:\WINDOWS\system32\config\default.LOG Object is locked skipped
C:\WINDOWS\system32\config\Internet.evt Object is locked skipped
C:\WINDOWS\system32\config\SAM Object is locked skipped
C:\WINDOWS\system32\config\SAM.LOG Object is locked skipped
C:\WINDOWS\system32\config\SecEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\SECURITY Object is locked skipped
C:\WINDOWS\system32\config\SECURITY.LOG Object is locked skipped
C:\WINDOWS\system32\config\software Object is locked skipped
C:\WINDOWS\system32\config\software.LOG Object is locked skipped
C:\WINDOWS\system32\config\SysEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\system Object is locked skipped
C:\WINDOWS\system32\config\system.LOG Object is locked skipped
C:\WINDOWS\system32\h323log.txt Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP Object is locked skipped
C:\WINDOWS\Temp\JET94B4.tmp Object is locked skipped
C:\WINDOWS\Temp\JETFE65.tmp Object is locked skipped
C:\WINDOWS\wiadebug.log Object is locked skipped
C:\WINDOWS\wiaservc.log Object is locked skipped
C:\WINDOWS\WindowsUpdate.log Object is locked skipped
D:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped
D:\System Volume Information\_restore{734DFBAD-8A38-4BFB-914F-CD4CDFF51E90}\RP15\change.log Object is locked skipped

Scan process completed.



Malwarebytes' Anti-Malware 1.11
Database version: 622

Scan type: Full Scan (C:\|D:\|)
Objects scanned: 182037
Time elapsed: 1 hour(s), 33 minute(s), 58 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 6
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 2

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
HKEY_CLASSES_ROOT\Interface\{e4e3e0f8-cd30-4380-8ce9-b96904bdefca} (Adware.PopCap) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{fe8a736f-4124-4d9c-b4b1-3b12381efabe} (Adware.PopCap) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Typelib\{c9c5deaf-0a1f-4660-8279-9edfad6fefe1} (Adware.PopCap) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\popcaploader.popcaploaderctrl2 (Adware.PopCap) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{df780f87-ff2b-4df8-92d0-73db16a1543a} (Adware.PopCap) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\popcaploader.popcaploaderctrl2.1 (Adware.PopCap) -> Quarantined and deleted successfully.

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
C:\WINDOWS\Downloaded Program Files\popcaploader.dll (Adware.PopCap) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\winivstr.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 8:22:46 PM, on 4/13/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16640)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Adobe\Photoshop Elements 4.0\PhotoshopElementsFileAgent.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\CTsvcCDA.exe
C:\WINDOWS\system32\E_S00RP1.EXE
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Google\Gmail Notifier\gnotify.exe
C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe
C:\WINDOWS\system32\SAgent4.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\system32\WTablet\TabUserW.exe
C:\WINDOWS\system32\Tablet.exe
C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
C:\WINDOWS\system32\MsPMSPSv.exe
C:\Program Files\Canon\CAL\CALMAIN.exe
C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\CPSHelpRunner.exe
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\WINDOWS\system32\drwtsn32.exe
C:\WINDOWS\system32\drwtsn32.exe
C:\Program Files\Webroot\Spy Sweeper\SpySweeperUI.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by Verizon Online
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1;*.local
O2 - BHO: eBay Toolbar Helper - {22D8E815-4A5E-4dfb-845E-AAB64207F5BD} - C:\Program Files\eBay\eBay Toolbar2\eBayTB.dll
O2 - BHO: NCO 2.0 IE BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\2.5\coIEPlg.dll
O2 - BHO: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\PROGRA~1\COMMON~1\SYMANT~1\IDS\IPSBHO.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\3.0.1225.9868\swg.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar4.dll
O3 - Toolbar: eBay Toolbar - {92085AD4-F48A-450D-BD93-B28CC7DF67CE} - C:\Program Files\eBay\eBay Toolbar2\eBayTB.dll
O3 - Toolbar: Show Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\2.5\CoIEPlg.dll
O4 - HKLM\..\Run: [Auto Auto Auto Auto EPSON Stylus R200 Photo on DCPCYBER on DCPT23 on DCPCYBER on DCPT23] "C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I2H1.EXE" /P87 "Auto Auto Auto Auto EPSON Stylus R200 Photo on DCPCYBER on DCPT23 on DCPCYBER on DCPT23" /O17 "\\DCPT23\AutoAuto" /M "Stylus Photo R200"
O4 - HKLM\..\Run: [Auto Auto EPSON Stylus R200 Photo on DCPCYBER on DCPT23 (Copy 1)] "C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I2H1.EXE" /P64 "Auto Auto EPSON Stylus R200 Photo on DCPCYBER on DCPT23 (Copy 1)" /O13 "\\DCPT23\R200" /M "Stylus Photo R200"
O4 - HKLM\..\Run: [{0228e555-4f9c-4e35-a3ec-b109a192b4c2}] "C:\Program Files\Google\Gmail Notifier\gnotify.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Auto Auto Auto Auto EPSON Stylus R200 Photo on DCPCYBER on DCPT23 (Copy 1) on DCPCYBER on DCPT23] "C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I2H1.EXE" /P96 "Auto Auto Auto Auto EPSON Stylus R200 Photo on DCPCYBER on DCPT23 (Copy 1) on DCPCYBER on DCPT23" /O19 "\\DCPT23\AutoAuto.2" /M "Stylus Photo R200"
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
O4 - HKLM\..\Run: [RoxWatchTray] "C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe"
O4 - HKLM\..\Run: [EPSON Stylus Photo R200 Series] "C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I2H1.EXE" /P30 "EPSON Stylus Photo R200 Series" /O6 "USB002" /M "Stylus Photo R200"
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
O4 - HKLM\..\Run: [SpySweeper] "C:\Program Files\Webroot\Spy Sweeper\SpySweeperUI.exe" /startintray
O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKCU\..\Run: [Zinio DLM] "C:\Program Files\Zinio\ZinioReader.exe" /autostart
O4 - HKCU\..\Run: [Uniblue RegistryBooster 2] C:\Program Files\Uniblue\RegistryBooster 2\RegistryBooster.exe /S
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-18\..\Run: [DWQueuedReporting] "C:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" -t (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [DWQueuedReporting] "C:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" -t (User 'Default user')
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Adobe Gamma Loader.exe.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: TabUserW.exe.lnk = C:\WINDOWS\system32\WTablet\TabUserW.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: eBay Search - res://C:\Program Files\eBay\eBay Toolbar2\eBayTb.dll/RCSearch.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} (PCPitstop Utility) - http://www.pcpitstop.com/pcpitstop/PCPitStop.CAB
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/eng/partne ... nicode.cab
O16 - DPF: {74C861A1-D548-4916-BC8A-FDE92EDFF62C} - http://mediaplayer.walmart.com/installer/install.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Adobe Active File Monitor V4 (AdobeActiveFileMonitor4.0) - Unknown owner - C:\Program Files\Adobe\Photoshop Elements 4.0\PhotoshopElementsFileAgent.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Canon Camera Access Library 8 (CCALib8) - Canon Inc. - C:\Program Files\Canon\CAL\CALMAIN.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: COM Host (comHost) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.exe
O23 - Service: EPSON V3 Service2(03) (EPSON_PM_RPCV2_01) - SEIKO EPSON CORPORATION - C:\WINDOWS\system32\E_S00RP1.EXE
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\LuComServer_3_4.EXE
O23 - Service: LiveUpdate Notice - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Roxio UPnP Renderer 9 - Sonic Solutions - C:\Program Files\Common Files\Sonic Shared\RoxioUPnPRenderer9.exe
O23 - Service: Roxio Upnp Server 9 - Sonic Solutions - C:\Program Files\Common Files\Sonic Shared\RoxioUpnpService9.exe
O23 - Service: LiveShare P2P Server 9 (RoxLiveShare9) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxLiveShare9.exe
O23 - Service: RoxMediaDB9 - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
O23 - Service: Roxio Hard Drive Watcher 9 (RoxWatch9) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe
O23 - Service: Epson Printer Status Agent4 (StatusAgent4) - SEIKO EPSON CORPORATION - C:\WINDOWS\system32\SAgent4.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe
O23 - Service: Symantec Core LC - Unknown owner - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: TabletService - Wacom Technology, Corp. - C:\WINDOWS\system32\Tablet.exe
O23 - Service: Webroot Spy Sweeper Engine (WebrootSpySweeperService) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
O24 - Desktop Component 0: (no name) - http://www.live365.com/images/dot.gif

--
End of file - 12129 bytes

Thanks and I will ck for post and follow directions from there...

Redbellie
Redbellie
Active Member
 
Posts: 5
Joined: April 7th, 2008, 3:21 pm

Re: Hijacked at certain web sites!

Unread postby Bio-Hazard » April 14th, 2008, 5:00 am

Hello

At this stage your machine looks to be clean of malware, so the problems you are experiencing are not likely to be malware related. I think the best and fastest solution for you is to post on a PC troubleshooting forum like the Browsers, Internet & email forum at WhatTheTech. They specialize in handling problems like this so you are certain to get expert assistance and a speedy resolution is very likely.

I'm sorry that I could not be of more help to you, and I wish you the best of luck with solving your computer problems. If you have any questions or require any other assistance please let me know.

Thanks.


Kaspersky found some infected emails. So you should delete them:

    C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Inbox
    /[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]

    C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Junk
    /[From <customercare@proxyconn.com>][Date Fri, 04 Nov 2005 17:07:18 -0600]

    C:\Documents and Settings\Danny\Application Data\Thunderbird\Profiles\3imnjjfv.default\Mail\Local Folders\Trash
    /[From "MyFamily.com" <Reminder@Reply.MyFamilyInc.com>][Date Thu, 20 Mar 2008 02:57:48 +0000]


You should also empty your Thunderbirds trash folder.




You can get rid of the tools we used:
  • CCleaner (I would recommed to keep this program)
  • Malwarebytes Antimalware (I would recommed to keep this program)

    If you dont want to keep CCleaner and Malwarebytes Antimalware this is how you uninstall it:

    • Click Start
    • Go to Control Panel
    • Go to Add/Remove Programs
    • Find and click Remove for the following (if present):

      CCleaner
      Malwarebytes Antimalware

    NOTE: Take care when answering any questions posed by an uninstaller. Some questions may be worded to deceive you into keeping the program.


    General Security and Computer Health
    Below are some steps to follow in order to dramatically lower the chances of reinfection. You may have already implemented some of the steps below, however you should follow any steps that you have not already implemented.
    • Clear Infected System Restore Points
      • Turn System Restore off
      • On the Desktop, right click on the My Computer icon.
      • Click Properties.
      • Click the System Restore tab.
      • Check Turn off System Restore.
      • Click Apply, and then click OK.
      Restart your computer
      • Turn System Restore on
      • On the Desktop, right click on the My Computer icon.
      • Click Properties.
      • Click the System Restore tab.
      • Uncheck *Turn off System Restore*.
      • Click Apply, and then click OK.
      Note: only do this once,and not on a regular basis

      Set correct settings for files
      • Click Start > My Computer > Tools menu (at top of page) > Folder Options > View tab.
      • Under Hidden files and folders if necessary select Do not show hidden files and folders.
      • If unchecked please check Hide protected operating system files (Recommended)
      • If necessary check Display content of system folders
      • If necessary Uncheck Hide file extensions for known file types.
      • Click OK
    • Make sure that you keep your antivirus updated
      New viruses come out every minute, so it is essential that you have the latest signatures for your antivirus program to provide you with the best possible protection from malicious software.
      Note: You should only have one antivirus installed at a time. Having more than one antivirus program installed at once is likely to cause conflicts and may well decrease your overall protection as well as impairing the performance of your PC.
    • Install and use a firewall with outbound protection
      The Windows firewall only monitors incoming traffic, NOT outgoing. Using a software firewall in its default configuration to replace the Windows firewall greatly reduces the risk of your computer being hacked. Make sure your firewall is always enabled while your computer is connected to the internet.
      Note: You should only have one firewall installed at a time. Having more than one firewall installed at once is likely to cause conflicts and may well decrease your overall protection as well as seriously impairing the performance of your PC.
    • Security Updates for Windows, Internet Explorer & Microsoft Office
      Whenever a security problem in its software is found, Microsoft will usually create a patch so that after the patch is installed, attackers can't use the vulnerability to install malicious software on your PC. Keeping up with these patches will help to prevent malicious software being installed on your PC. Ensure you are registered for Windows updates via Start > right-click on My Computer > Properties > Automatic Updates tab or visit the Microsoft Update site on a regular basis.
      Note: The update process uses ActiveX, so you will need to use internet explorer for it and allow the ActiveX control to install.
    • Update Non-Microsoft Programs
      Microsoft isn't the only company whose products can contain security vulnerabilities. To check whether other programs running on your PC are in need of an update, you can use the Secunia Software Inspector - I suggest that you run it at least once a month.
    • Make Internet Explorer More Secure
      • From within Internet Explorer click on the Tools menu and then click on Options.
      • Click once on the Security tab
      • Click once on the Internet icon so it becomes highlighted.
      • Click once on the Custom Level button.
      • Change the Download signed ActiveX controls to Prompt
      • Change the Download unsigned ActiveX controls to Disable
      • Change the Initialize and script ActiveX controls not marked as safe to Disable
      • Change the Installation of desktop items to Prompt
      • Change the Launching programs and files in an IFRAME to Prompt
      • Change the Navigate sub-frames across different domains to Prompt
      • When all these settings have been made, click on the OK button.
      • If it prompts you as to whether or not you want to save the settings, press the Yes button.
      • Next press the Apply button and then the OK to exit the Internet Properties page.

      Next, if they're not already present, I would recommend the download and installation of some or all of the following programs, and the updating of them on a regular basis:
    • WinPatrol
      As a robust security monitor, WinPatrol will alert you to hijackings, malware attacks and critical changes made to your computer without your permission. WinPatrol takes snapshot of your critical system resources and alerts you to any changes that may occur without your knowledge. For more information, please visit HERE.
    • SpywareBlaster
      SpywareBlaster sets killbits in the registry to prevent known malicious ActiveX controls from installing on your computer.
      If you don't know what ActiveX controls are, see HERE. You can download SpywareBlaster from HERE.

    • Spybot Search & Destroy
      Instructions are located HERE. Make sure you update, reimmunize and scan regularly.
    • Hosts File
      For added protection you may also like to add a host file. A simple explanation of what a Hosts file does is HERE and for more information regarding host files read HERE.
    • Finally I am trying to make one point very clear. It is absolutely essential to keep all of your security programs up to date


I'd be grateful if you could reply to this post so that I know you have read it and, if you've no other questions, the thread can be closed.

Happy surfing and stay clean!

Bio-Hazard
User avatar
Bio-Hazard
MRU Master Emeritus
 
Posts: 4078
Joined: May 10th, 2007, 8:28 am
Location: Cornwall, UK

Re: Hijacked at certain web sites!

Unread postby Redbellie » April 14th, 2008, 11:14 am

Thanks again Bio-Hazard for all your help. I will take your advise and use one of the listed web sites...Have a great day!

Redbellie
Redbellie
Active Member
 
Posts: 5
Joined: April 7th, 2008, 3:21 pm

Re: Hijacked at certain web sites!

Unread postby Elrond » April 14th, 2008, 1:40 pm

This topic is now closed. If you wish it reopened, please send us an email to 'admin at malwareremoval.com' with a link to your thread.

You can help support this site from this link :
Donations For Malware Removal

Do not bother contacting us if you are not the topic starter. A valid, working link to the closed topic is required along with the user name used. If the user name does not match the one in the thread linked, the email will be deleted.
User avatar
Elrond
Admin/Teacher Emeritus
 
Posts: 8818
Joined: February 17th, 2005, 9:14 pm
Location: Jerusalem
Advertisement
Register to Remove


  • Similar Topics
    Replies
    Views
    Last post

Return to Infected? Virus, malware, adware, ransomware, oh my!



Who is online

Users browsing this forum: No registered users and 288 guests

Contact us:

Advertisements do not imply our endorsement of that product or service. Register to remove all ads. The forum is run by volunteers who donate their time and expertise. We make every attempt to ensure that the help and advice posted is accurate and will not cause harm to your computer. However, we do not guarantee that they are accurate and they are to be used at your own risk. All trademarks are the property of their respective owners.

Member site: UNITE Against Malware