Søg
Avatar billede Slettet bruger
30. december 2005 - 14:41 Der er 18 kommentarer og
1 løsning

Problemer med Malware

Hej!

Ved en fejltagelse er jeg kommet til at klikke på en banner, hvilket har resulteret at min computer er inficeret med den farlige virustype Malware.

Jeg har derfor nogle spørgsmål:

1)
Nogen som kender et rigtigt godt antimalware program, som kan hjælpe med at fjerne malwaren?

2)
Når jeg starter internettet, åbner en side, www.systemwarning.com; kan jeg stole på den? Dvs. er den officiel?

3)
Nede i processlinjen står der et "windows firewall" ikon og blinker, med en engelsk advarsel. Når jeg åbner den skal jeg betale for et antimalware program, og det virker derfor ikke autoiseret. Hvordan fjerner jeg det?

4)
I det hele taget hvordan kan jeg rense min computer for malwaren? Jeg har kørt:
McAfee-, Ad-Aware- og malwaresweeper scanning - men jeg tror ikke der virker, advarslerne kommer stadigvæk.

5)
Hvad kan malware gøre ved min computer?

På forhånd mange tak!
Sicma!!

P.S.: flere spøgsmål bliver måske tilføjet!
Avatar billede fromsej Praktikant
30. december 2005 - 14:43 #1
Følg vejledningen i denne artikel:
http://eksperten.dk/artikler/755
Avatar billede Slettet bruger
30. december 2005 - 15:02 #2
Jeg har fulgt guiden indtil videre, men jeg kan ikke logge på i fejlsikret tilstand?

Kan malwaren ændre mit password?
Er jeg nød til at være administartor?

Eller noget tredje?
Avatar billede fromsej Praktikant
30. december 2005 - 15:17 #3
Præcis hvilken fejl får du?
Det burde ikke være nødvendigt at logge på som Administrator, men hvis du kan det så kør scannere fra den konto, det ændrer ikke noget.

Er det et USB tastatur du bruger?

Ellers bare kør scannerne i normal tilstand, så ser vi på logfilerne når de kommer.
Avatar billede Slettet bruger
30. december 2005 - 16:16 #4
Skal jeg kopiere alt fra logfilen ind her? Den er jo uendelig lang?
Avatar billede fromsej Praktikant
30. december 2005 - 16:18 #5
Dr.Web skal vi kun se det allernederste, startende med Scan Statistics.
Ewidologgen springer du bare over i første omgang.
Hijackthisloggen, der skal vi se det hele.
Avatar billede Slettet bruger
30. december 2005 - 16:24 #6
Dr. Web:

-----------------------------------------------------------------------------
Scan statistics
-----------------------------------------------------------------------------
Objects scanned: 121517
Infected objects found: 6
Objects with modifications found: 0
Suspicious objects found: 0
Adware programs found: 0
Dialer programs found: 0
Joke programs found: 0
Riskware programs found: 1
Hacktool programs found: 0
Objects cured: 0
Objects deleted: 2
Objects renamed: 1
Objects moved: 0
Objects ignored: 0
Scan speed: 108 Kb/s
Scan time: 00:42:48
-----------------------------------------------------------------------------

Hijackthis - kommer senere...
Avatar billede Slettet bruger
30. december 2005 - 16:27 #7
Hijackthis logfile:

-----------------------------------------------------
Logfile of HijackThis v1.99.1
Scan saved at 16:26:20, on 30-12-2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\ibmpmsvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\S24EvMon.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\drivers\CDAC11BA.EXE
C:\Programmer\ewido anti-malware\ewidoctrl.exe
C:\Programmer\ewido anti-malware\ewidoguard.exe
C:\Programmer\IBM\IBM Rapid Restore Ultra\rrpcsb.exe
C:\Programmer\Network Associates\Common Framework\FrameworkService.exe
C:\Programmer\Network Associates\VirusScan\Mcshield.exe
C:\Programmer\Network Associates\VirusScan\VsTskMgr.exe
C:\WINDOWS\System32\RegSrvc.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\nvctrl.exe
C:\Programmer\Synaptics\SynTP\SynTPLpr.exe
C:\Programmer\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\System32\LVCOMSX.EXE
C:\WINDOWS\system32\RunDll32.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\system32\TpShocks.exe
C:\Programmer\Network Associates\VirusScan\SHSTAT.EXE
C:\Programmer\Fælles filer\Network Associates\TalkBack\TBMon.exe
C:\PROGRA~1\ThinkPad\PkgMgr\HOTKEY\TPHKMGR.exe
C:\IBMTOOLS\UTILS\ibmprc.exe
C:\Programmer\Browser MOUSE\mouse32a.exe
C:\Programmer\ThinkPad\PkgMgr\HOTKEY\TPONSCR.exe
C:\Programmer\HP\hpcoretech\hpcmpmgr.exe
C:\Programmer\ThinkPad\PkgMgr\HOTKEY_1\TpScrex.exe
C:\Programmer\Java\jre1.5.0_05\bin\jusched.exe
C:\Programmer\MSN Messenger\msnmsgr.exe
C:\Programmer\Active Desktop Calendar\ADC.exe
C:\Programmer\MalwareSweeper.com\Malware Sweeper\MalSwep.exe
C:\Programmer\HP\Digital Imaging\bin\hpqtra08.exe
C:\Programmer\HP\Digital Imaging\bin\hpqgalry.exe
C:\Drweb\drweb-cureit.exe
C:\DOCUME~1\mihor\LOKALE~1\Temp\RarSFX0\drw_start.exe
C:\DOCUME~1\mihor\LOKALE~1\Temp\RarSFX0\drweb32w.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Programmer\Internet Explorer\iexplore.exe
C:\Documents and Settings\mihor\Lokale indstillinger\Temporary Internet Files\Content.IE5\MJOJROP8\hijackthis[1].exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.dk/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Mozilla Firefox
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Hyperlinks
O2 - BHO: HomepageBHO - {e0103cd4-d1ce-411a-b75b-4fec072867f4} - C:\WINDOWS\system32\hpCA0C.tmp
O3 - Toolbar: Solid Converter PDF - {259F616C-A300-44F5-B04A-ED001A26C85C} - C:\Programmer\SolidDocuments\SolidConverterPDF\SCPDF\ExploreExtPDF.dll
O4 - HKLM\..\Run: [SynTPLpr] C:\Programmer\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Programmer\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\System32\LVCOMSX.EXE
O4 - HKLM\..\Run: [BMMGAG] RunDll32 C:\PROGRA~1\ThinkPad\UTILIT~1\pwrmonit.dll,StartPwrMonitor
O4 - HKLM\..\Run: [BMMMONWND] rundll32.exe C:\PROGRA~1\ThinkPad\UTILIT~1\BatInfEx.dll,BMMAutonomicMonitor
O4 - HKLM\..\Run: [TpShocks] TpShocks.exe
O4 - HKLM\..\Run: [ShStatEXE] "C:\Programmer\Network Associates\VirusScan\SHSTAT.EXE" /STANDALONE
O4 - HKLM\..\Run: [Network Associates Error Reporting Service] "C:\Programmer\Fælles filer\Network Associates\TalkBack\TBMon.exe"
O4 - HKLM\..\Run: [TPHOTKEY] C:\PROGRA~1\ThinkPad\PkgMgr\HOTKEY\TPHKMGR.exe
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [McAfeeUpdaterUI] "C:\Programmer\Network Associates\Common Framework\UpdaterUI.exe" /StartedFromRunKey
O4 - HKLM\..\Run: [IBMPRC] C:\IBMTOOLS\UTILS\ibmprc.exe
O4 - HKLM\..\Run: [FLMOFFICE4DMOUSE] C:\Programmer\Browser MOUSE\mouse32a.exe
O4 - HKLM\..\Run: [HP Component Manager] "C:\Programmer\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Programmer\Java\jre1.5.0_05\bin\jusched.exe
O4 - HKLM\..\Run: [winsupdater] C:\Programmer\winsupdater\winsupdater.exe /auto
O4 - HKLM\..\Run: [BearShare] "C:\Programmer\BearShare\BearShare.exe" /pause
O4 - HKCU\..\Run: [msnmsgr] "C:\Programmer\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [Active Desktop Calendar] C:\Programmer\Active Desktop Calendar\ADC.exe
O4 - HKCU\..\Run: [Malware Sweeper] C:\Programmer\MalwareSweeper.com\Malware Sweeper\MalSwep.exe /STARTUP
O4 - Global Startup: Adobe Reader Hurtigstart.lnk = C:\Programmer\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Programmer\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: HP Image Zone Fast Start.lnk = C:\Programmer\HP\Digital Imaging\bin\hpqthb08.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Programmer\Microsoft Office\Office\OSA9.EXE
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programmer\Java\jre1.5.0_05\bin\npjpi150_05.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programmer\Java\jre1.5.0_05\bin\npjpi150_05.dll
O9 - Extra button: Poker.com - {6FDD5236-C9F0-49ef-935D-385F5E21991A} - C:\Programmer\Poker.com\poker.exe
O9 - Extra button: @C:\Programmer\Messenger\Msgslang.dll,-61144 - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmer\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: @C:\Programmer\Messenger\Msgslang.dll,-61144 - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmer\Messenger\msmsgs.exe
O9 - Extra button: (no name) - SolidConverterPDF - (no file) (HKCU)
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {62475759-9E84-458E-A1AB-5D2C442ADFDE} - http://a1540.g.akamai.net/7/1540/52/20040428/qtinstall.info.apple.com/saba/dk/win/QuickTimeFullInstaller.exe
O16 - DPF: {917623D1-D8E5-11D2-BE8B-00104B06BDE3} (CamImage Class) - http://webcam01.fmts.dk/activex/AxisCamControl.cab
O16 - DPF: {AB86CE53-AC9F-449F-9399-D8ABCA09EC09} (Get_ActiveX Control) - https://h17000.www1.hp.com/ewfrf-JAVA/Secure/HPGetDownloadManager.ocx
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab32846.cab
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = fmts.lan
O17 - HKLM\Software\..\Telephony: DomainName = fmts.lan
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: Domain = fmts.lan
O17 - HKLM\System\CS3\Services\Tcpip\Parameters: Domain = fmts.lan
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O20 - Winlogon Notify: tphotkey - C:\WINDOWS\SYSTEM32\tphklock.dll
O23 - Service: ACU Configuration Service (ACS) - Unknown owner - C:\WINDOWS\system32\acs.exe
O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\system32\drivers\CDAC11BA.EXE
O23 - Service: ewido security suite control - ewido networks - C:\Programmer\ewido anti-malware\ewidoctrl.exe
O23 - Service: ewido security suite guard - ewido networks - C:\Programmer\ewido anti-malware\ewidoguard.exe
O23 - Service: IBM Rapid Restore Ultra Service - Unknown owner - C:\Programmer\IBM\IBM Rapid Restore Ultra\rrpcsb.exe
O23 - Service: IBM PM Service (IBMPMSVC) - Unknown owner - C:\WINDOWS\system32\ibmpmsvc.exe
O23 - Service: McAfee Framework Service (McAfeeFramework) - Unknown owner - C:\Programmer\Network Associates\Common Framework\FrameworkService.exe" /ServiceStart (file missing)
O23 - Service: Network Associates McShield (McShield) - Network Associates, Inc. - C:\Programmer\Network Associates\VirusScan\Mcshield.exe
O23 - Service: Network Associates Task Manager (McTaskManager) - Network Associates, Inc. - C:\Programmer\Network Associates\VirusScan\VsTskMgr.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: IBM PSA Access Driver Control (PsaSrv) - Unknown owner - C:\WINDOWS\system32\PsaSrv.exe (file missing)
O23 - Service: RegSrvc - Intel Corporation - C:\WINDOWS\System32\RegSrvc.exe
O23 - Service: Spectrum24 Event Monitor (S24EventMonitor) - Intel Corporation  - C:\WINDOWS\System32\S24EvMon.exe
----------------------------------------------------------
Avatar billede fromsej Praktikant
30. december 2005 - 17:05 #8
Fjern Bearshare i Tilføj/fjern programmer, det er derfra du får al skidtet ind.

1. Hent og dobbeltklik på smitRem.exe

http://noahdfear.geekstogo.com/click%20counter/click.php?id=1

Programmet pakker sig ud til mappen smitRem.

2. Hent Ad-aware

http://spywarefri.dk/vaerktoj.htm#ad-aware

Installer programmet, start det og opdater online, du skal IKKE scanne endnu.
Indstil Ad-Aware efter denne vejledning:
http://www.spywarefri.dk/manualer/adaware-manual.htm
Luk Ad-Aware igen.

3. Hent Ewido:

http://www.spywarefri.dk/downloads1/ewido-setup.exe

Installer og kør Ewido - Opdater straks efter installationen programmet (men lad være med at scanne endnu).

4. Genstart i fejlsikret, hvis du ikke ved hvordan så kig her:

http://fromsej.dk/html/xpfejl.html

5. Kør Hijackthis, scan, sæt flueben ved linierne listet her, luk alle vinduer undtaget Hijackthis, klik på "Fix checked":

O2 - BHO: HomepageBHO - {e0103cd4-d1ce-411a-b75b-4fec072867f4} - C:\WINDOWS\system32\hpCA0C.tmp
O4 - HKLM\..\Run: [winsupdater] C:\Programmer\winsupdater\winsupdater.exe /auto
O4 - HKLM\..\Run: [BearShare] "C:\Programmer\BearShare\BearShare.exe" /pause

5a. Åbn en mappe, klik på Funktioner=>Mappeindstillinger=>Vis.
Fjern flueben ved "Skjul beskyttede operativsystemfiler".
Fjern flueben ved "Skjul filtypenavne for kendte filtyper".
Sæt prik i "Vis skjulte filer og mapper".
Brug af Start->Søg.
Slet disse mapper:
C:\Programmer\winsupdater\
C:\Programmer\BearShare\

6. Åbn mappen smitRem, og dobbeltklik på RunThis.bat (Følg vejledningen i vinduet.)

7. Kør en fuld scanning med Ad-Aware, fjern alt det finder.

8. Kør en fuld scanning med Ewido. Programmet laver en lille log, som du skal kopiere herind.

9. Klik på Start->Kontrolpanel->Skærm->Skrivebord->Tilpas Skrivebordet->Web fjern flueben i Security Info og View my Active desktop as a web page (Fortæl lige hvis de hedder noget andet).

10. Genstart almindeligt, kør denne onlinescanner:

http://www.pandasoftware.com/activescan/activescan.asp?Language=2&Country=63&Partner=1&Ref=EN-PR-AS-107 , (sæt den til Automatic removal).

11. Genstart og kom med en frisk Hijackthislog, samt loggen fra Ewido. Find smitfiles.txt via Start/Søg. Kopier også denne log ind.

Malwaresweeper kan jeg ikke finde noget på, men jeg kender det overhovedet ikke.
Avatar billede Slettet bruger
30. december 2005 - 17:11 #9
Jeg har ad-aware 1.06 i forvejen... jeg går ud fra at jeg godt kan bruge det?
Avatar billede fromsej Praktikant
30. december 2005 - 17:13 #10
Ja, husk at opdatere det.
Avatar billede Slettet bruger
30. december 2005 - 17:36 #11
Nu er jeg igang med at køre Ewido scan, og skal nok lige skrive dens log, når den er færdig.

Iøvrigt har jeg et problem:

Mit virus program siger at jeg har 1863 vira (.exe filer) i en mappe som ikke eksisterer. Jeg har taget højde for at mappen måske er skjult.

Problemet ligger i at virusprogrammet ikke kan fjerne viraene, og jeg ikke selv kan finde mappen. Kan jeg få fjernet disse?
Avatar billede Slettet bruger
30. december 2005 - 18:08 #12
Her er logfilen fra Ewido:

(Jeg vil lige pointere at jeg ikke har downloaded nogen af nedenstående filer!)

----------------------------
---------------------------------------------------------
ewido anti-malware - Scanningsrapport
---------------------------------------------------------

+ Oprettet den:            18:06:02, 30-12-2005
+ Rapport-Checksum:        89BF7371

+ Scanningsresultat:
    [860] C:\WINDOWS\system32\ldC8B7.tmp -> Downloader.Zlob.bv : Renset med backup
    :mozilla.7:C:\Documents and Settings\mihor\Application Data\Mozilla\Firefox\Profiles\0qwironk.default\cookies.txt -> Spyware.Cookie.Advertising : Renset med backup
    :mozilla.8:C:\Documents and Settings\mihor\Application Data\Mozilla\Firefox\Profiles\0qwironk.default\cookies.txt -> Spyware.Cookie.Advertising : Renset med backup
    C:\Documents and Settings\mihor\Complete\  XXL (HTTP).zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\ Advanced Office Password Breaker V1.40..zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\ Appleseed.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\ CWNA - Certified Wireless Network Admin.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\ Day of the  Dead 2.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\ Equilibrium.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\ Exploring IBM eServer iSeries.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\ File Scavenger V2.1v.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\ Mastering UNIX Shell Scripting.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\ Media Security Plus Exam Guide-TestTake.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\ Star Wars Jedi Knight 2 Jediacademy iSO.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\ Xoftspy V4.1.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\(Hentai) Nurse Me!.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\-I-Sound WMA Mp3 Recorder Pro v6.57.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\007 Spy Software Pro 3.0.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\0Spam.com Express 1.0.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\12 comic books pack.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\123 FLASH MENU 1.3.2.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\18 Wheels of Steel Convoy.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\18yr old Teen Fucked Hard.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\2 Blonde Teens Fuck a Huge Cock.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\209 Brush Sets For Photoshop.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\3D Box Maker Pro.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\3D Box Maker Professional.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\3D MP3 Sound Recorder 3.8.12.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\3D Sex Villa v11.00 Repacked.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\3D Sexvilla Full Cracked Version.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\3d Ultra Pinball Creep Night.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\3GP Video Converter v2.1.54.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\4U AVI MPEG Converter v3.2.0.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\5 XXX HARD MOVIES ( 18).zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\7 Sins - 2005.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\7 Sins.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\7-Zip v. 4.27 Beta.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\A Walk To Remember - MP4.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Abbyy FineReader v. 8.0.0.677 Professional.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\ABBYY Lingvo 10.0.0.213 Multiligual.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\ABBYY ScanTo Office 1.0 Multilingual.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Absolute Video Converter v2.5.5.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\AC DC - Full Discography.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\ACD Systems Canvas X.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\ACDSee Software 8.0.39.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Ace Video Workshop v1.4.36.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Acon Digital Media Acoustica 3.3.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Acoo Browser 1.25 Build 870.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Acronis Privacy Expert Suite 8.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Acronis SnapDeploy v1.0.0.1155.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Active Desktop Calendar 5.7 Build 050830.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Active Desktop Calendar 5.7.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Acubix PicoZip 4.0.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Adlib Envision OCR v2.0.0.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Adobe Designer 6.0.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Adobe Encore Dvd 1.5.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Adobe Photoshop CS 2 9.0.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Adobe Photoshop CS2 9.0 Final.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Adobe Photoshop CS2 Total Training Vid.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Adobe Premiere Pro 7 0 (With Key) FULL.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Adobe Premiere Pro v1.5.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Advanced Access Password Recovery 2.5.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Advanced Directory Printer 1.12.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Advanced Uninstaller Pro 2004 6.7.4.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Advanced Uninstaller Pro 2005 v7.1.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\AdwareX Eliminator 2.0.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\AeroTags TagsLock Pro 2.50.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Aestesis Elektronika Live V2.0.rc2.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Aestesis eleKtroniKa Live v2.12.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Age of Empires 2 Gold.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Agnitum Outpost Firewall Pro 3.0.530.5.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Agnitum Outpost Pro 3.0.538.5720 (430).zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Ahead DVD Ripper v1.15.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Ahead.nero.v7.0.premium.edition.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\AIO O.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Airfix Dogfighter.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Albert West Amarillo.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Alcohol 120 v1.9.5.3105 Corporate Edition.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Alcohol 120% 1.9.5.3105 Release.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Alcohol 120% 1.9.5.3105.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Alexsandra (part 2).zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Alexsandra's porn gallery.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Alien Skin Image Doctor 1.0.1.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Alien Skin Image Doctor v1.0.1 Release.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Aliens vs Predator 2 iSO.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\All In One PC Repair.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\All In One TV Player.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\All-In-One RapidShare Hacks.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\All-In-One Registry Care Utilities.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\All-in-One SECRETMAKER v4.2.1.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Amateur home porn.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Amazing lesbians.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Amor SWF to VCD SVCD DVD Creator and Burner v1.7.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Anti Tracks 3.1.2.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Anti Tracks v5.4.2.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Anti Trojan Elite 3.1.0.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Antibalas - Government Magic.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Apocalyptica - Apocalyptica.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Arabiannights.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Arles Image Web Page Creator v5.8.5.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Armor2netTM Personal Firewall 3.12.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Artificial Girl 2 (Not for children).zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Ashampoo Burning Studio 5.0.2.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Ashampoo Burning Studio v5.01.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Ashampoo CD 2 iPod 1.62.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Ashampoo Internet Accelerator v1.31.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Ashampoo Magic Defrag 1.01.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Ashampoo WinOptimizer Platinum Suite 2 1.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Atani 3.1.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Atani V3.1.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Audio Companion v1.48.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Audio Edit Magic v7.3.615.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Audio Editor Gold 7.5.5.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\AutoCAD 2006.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\AutoPlay Media Studio v.6.0.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\AV Voice Changer Software Diamond 4.0.50.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\AV Voice Changer Software Diamond v4.0.50.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Avast Professional Edition 4..zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Avast Professional Edition 4.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Avast Professional Edition v4.6.691.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Avast! Antivirus 4.6 Pro.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Avast! Professional Edition v4.6.691.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\AVG Free Edition 7.0.298.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\AVI MPEG WMV Video Joiner v1.9.82.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Avid Xpress Pro HD 5.1.7.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Avril Lavigne - My World.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Baby got boobs.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Babylon Pro 5.05.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Band of Brothers.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Bat! 3.60.02.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Batman Begins (2005).zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Batman Begins DVDrip.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Batman Begins.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Battle of Britain II Wings of Victory.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Battlefield 2 Reloaded iSO.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Battlefield 2.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Battlefield Vietnam.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Beautiful Roses Screensaver 1.0.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Bee Icons v4.0.2.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Below DVD Rip Xvid.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Best CD To MP3 Ripper v1.00.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Bewitched Xvid.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Bewitehed.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\BitDefender Professional Plus 8.0.201.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Black Hawk Down 2001.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Black Hawk Down Xvid.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Black Hawk Down.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Blaze Media Pro 6.1.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\BlazeDVD 3.5 Pro.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\BlazeDVD 4.0 Professional.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\BlazeDVD Player Pro 4.0.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\BlazeDVD Player Pro v4.0.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\BlazeDVD v7.0 Professional.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Blender 2.37.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Blindwrite 5.2.10.142.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Blond Teen Beauty Sucks & Titty Cumshot.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Blondes cock suckers.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\BloodRayne 2.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Bob Dylan Discography.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Bookmark Notes 2.01.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Bookmark Notes v2.01.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Boyz n The Hood DVD RIP Xvid.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Browser Hijack Retaliator 4.0.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\BSplayer Pro 1.36 bulid 825.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\BurnerSoft Smart DVD CD Burner 3.0.35.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Burnout Legends.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Burnout Revenge PAL PS2 DVD iSO.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Business2Go v2.3.1.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Busty Schoolgirl Get Fucked By Big Cock.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\CA eTrust Personal Firewall 5.5.114.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Cabela's Big Game Hunter 2006.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Cakewalk SONAR 4.0.2 Producer Edition.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Caligula DVD Rip Xvid (1978).zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Camtasia Studio 2.0.4.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Camtasia Studio 2.1.1.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Camtasia Studio 3.0.1.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Camtasia Studio v2.0.4.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Captain Claw (FULL).zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Cartoon Television Program Pro 1.8.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Casting couch TEENS.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\CD BANK CATALOGUER 2.6.0.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\CD DVD Analyse v3.02.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Cellular [2004].zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Chaos Legion iSO.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Charlie and the Chocolate Factory (Xbox).zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Chat Encrypter Pro v2.5.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Chem Office 2005 Ultra.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\CherryOS 1.0.1.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Chessmaster Challenge 1.0.0.123.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Chungoon.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\CircuitMaker 2000.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Civilization 3.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\CleanCenter 1.34.89.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Cleanerzoomer v3.0b.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\CleverCache Professional Edition 6.0.2214.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\CleverCache Professional v6.0.2214.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Clientem Purchasemanager V2.1.0.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Coffeecup Flash Blogger V3.0.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\CoffeeCup Flash Website Search v3.5 Re.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\CoffeeCup HTML Editor 2005.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Cold Fear DVD ISO.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Cold Fear.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Colin McRae Rally 2005.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Collateral.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\ColorImpact 2.8.7 Build 403.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\ColorImpact 2.8.7.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Commercial Fonts.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Commodores - Best Of.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\ConceptDraw Project v2.0.0.1.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Confessions of a Dangerous Mind DVD Rip Xvid.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Constantine(supernatural thriller game.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Constantine.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Cool Talking Tools AIO.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\CopyCat v4.1.8.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\COREL Paint Shop Pro X.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Corel Painter IX.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Corel Paintshop Pro Premium Retail.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Cricket 2005 iSO.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Cross Racing Championship 2005.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Crystal Internet Meter 2.0.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Cyberlink PowerDVD.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\DameWare Exporter v4.9.2.5.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\DameWare Mini Remote Control v4.9.2.5.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Dameware NT Utilities v4.9.2.5.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Daniel Powter - Daniel Powter.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Data Entry and Validation with C# and VB.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Data Recovery from Bad CDDVD, (AIO).zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Database Convert 2005.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Day of the Dead 2.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Dead of the bird.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Dead to Rights.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Deep Dish - Penetrate Deeper.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Deep Purple - Rapture Of The Deep (2005).zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Deep Purple - Rapture Of The Deep.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\DeepBurner Free 1.3.6.167.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Demolition Man (1993)(Eng).zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Demolition Man 1993.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Deuce Bigalow European Gigalow Xvid.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Diablo 2 Expansionlord Of Destruction.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Digital ObjectRescue Professional 2.6.82.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\DigiWiz miniPE2-XT v2k.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Disk Space Inspector 2.9.10.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\DiskIndex 1.3.1.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\DiskMonitor 2.1.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\DivX Create Bundle v6.02.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\DJ Tiesto - LIVE In Academy Glasgow 2005.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\do-Organizer 2.1.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Donkey Kong Rumble.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Dragon Naturally Speaking 8 Professional.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Driv3r ISO.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Driver Genius Professional Edition 2005 4.0.845.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\DSL Speed 2.09.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\DSL Speed v2.08.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Dual DVD Copy Gold 3.3.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Dukes of Hazzard Xvid.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Duma 2005.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Dungeon Siege 2.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Duplicate Files Finder 2.5.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\DVD Cloner Pro v3.0.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\DVD Copy Tools 3.0.2.5.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\DVD PixPlay 2.60.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\DVD PixPlay v2.60.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\DVD-Cloner 2.40.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\DVDFab Express V2.62.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\DVDFab Platinum 2.52.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\DVDFAB Platinum 2.90.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\DVDIdle Pro 5.65.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\DVDIdle Pro 5.81.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\DVDPean Pro v3.6.1.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\DXBall 2 Full.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\e-PDF To Text Converter v2.1.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Earth 2160.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Easy Autorun Creator 1.5.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Easy DVD Shrink v3.0.16.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Easy DVD to DivX VCD SVCD Converter Pro.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Easy DVD To VCD Burner v2.0.53.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Easy Photo Mark 2.2.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Easy Real Converter v1.51.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Easy recovery professional 6.04.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Easy Video To Audio Converter 1.3.2.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Easy WaterMark v3.0.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Easy Web Save v1.0.0.1039.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\ECBackup 2.0.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Elecard MPEG Player v4.0.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\ELECTRONIC YOUTH 1.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Elements Of Desire [xxx movie].zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Enter The Matrix.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Enterprise Java Programming with IBM Web.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Eudora Pro 6.2.1.2.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\EurekaLog v5.03 Pro.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\EVEREST Home Edition 2.00.226.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\ExplorerXP 1.07.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Extra Drive Creator Pro v5.3.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Extra Drive Creator Professional 5.3.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Extreme Password Generator Pr.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Extreme Password Generator Pro 1.3.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Extreme Password Generator Pro v1.3.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\F1 Grand Prix UMDRIP.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Fable The Lost Chapters.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Fahrenheit (Xbox).zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Fahrenheit.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\FairStars Audio Converter 1.51.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\FantasyDVD Player Professional 8.22.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Fast File Splitter 3.0.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Fast File Splitter v3.0.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Fever Pitch.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\FIFA 2005 iSO.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Fifa 2005 Reloaded iSO.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Fifa 2005 reloaded.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\FIFA 2005.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Fifa 2006.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\File ArchiveRescue Pro 2.6.63.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Final Cut - MP4.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\final fantasy Vlll pc version.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\FinePrint Enterprise Edition 5.35.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\FireGraphic 7.0.705.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Firegraphic v8.0.805.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\FL Studio 5 FULL.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\FL Studio 5.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\FlashFxp 3.3.2.1094.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\FlashFXP v3.2.0 Build 1080.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\FlashFxp v3.3.2.1094 FULL.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\FlatOut.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\FlipAlbum 6.0 Pro.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Focus Photoeditor 4.3.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Folder Lock 5.2.6.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\FolderSizes 3.2.0.0.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\ForceVision 3.0.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Ford Racing 3.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Freelancer.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Fresh Download 7.20.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\G.O.R.A 2Cd Dvd Rip Divx.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\GameJack 4.590.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Gearhead Garage.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Genie Backup Manager Professional v5.0.23.1286.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Genie Backup Manager v6.0.2.1626.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Genie Soft Backup Manager Pro 5.0.25.1288.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Genie Soft Backup Manager Professional 5.0.24.1287.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\GetAnonymous Professional 2.1.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Ghost Recon Island Thunder.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Girls Gone Wild - Dorm Room 3.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Girls Gone Wild 5.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Golden Eye 4.03.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\GoldLimit PrettyCase Personal Edition 4.1.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Google Earth Plus.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Gorillaz - Demon Days.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Gothic II.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Graphic Workshop Pro 2.0.104a.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Green Day - 9 Albums.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\GridinSoft Backup 2.2.0.5.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\GridinSoft Notepad v3.0.1.5.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Half Life 2 Full.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Half Life 2.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Half-Life 2.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Half-Life2 Antlion Troopers Deuce.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Halo - Combat Evolved.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Halo 2 Custom Edition.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Hed Kandi - The Mix 50.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Hellforces.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Hide Ip Platinum 1.7.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Hide IP Platinum v1.7.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\HiDownload 6.84.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Hiren's BootCD 7.3 (ISO).zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Hitch DVD Rip XViD.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Hitman 3 Contracts.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Hitzone 33.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Horoscope Interpreter.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Hot Blonde Sandy in HOT Action.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Hotel Giant.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Hottest LESBIAN action on the net.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Hottest schoolgirl fucking.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\How High.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Hoyle Casino 2006 iSO.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\HyperSnap-DX 5.63.01.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Ice Princess Xvid.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\IGI 2 - Covert Strike.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Image Optimizer Pro 5.00.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Image Optimizer Pro v5.00.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Image Wrangler v1.0.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\ImageLine FL Studio v5.0.2c.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Imperial Glory Full HTTP.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\ImTOO CD Ripper v1.0.33.922.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\ImTOO DVD Audio Ripper v2.0.55.922.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\ImTOO DVD Ripper v3.0.5.922.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\ImTOO WMA MP3 Converter v2.1.41.92.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\IncrediMail Xe Premium 4.xx Build 2089.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Initial D Mountain Vengeance.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Inquiry 1.0.98.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Insane 4x4 Racing.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Instant Source v1.44.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Internet Download Accelerator 4.3.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Internet Download Manager 4.07.2.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Internet Download Manager v4.07.2.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Internet Explorer 7 Beta 1.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Internet Kiosk Pro 2.6.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\InterVideo DVDCopy Platinum v4.0B018.56C00.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Intrusion Detection and Prevention.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Invision Power Board 2.1.1.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\IP-Tools 2.5.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\IPViewer 5.04.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Iron Maiden - Eternal flame.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\IRPTrace 1.00.007.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\IRPTrace v1.00.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\IsoBuster 1.6.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\iTunes 4.7.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\IVM Answering Attendant v3.0.3.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\JavaScript PopUpMenu Builder 1.0.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Jetfighter 2015 - Pc.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Jetfighter 2015 iSO.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Jetfighter 2015.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\John Klemmer - Touch.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Jordan Capri - Fucked in public bathroom.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Joss Stone - Mind, Body & Soul.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Just Before Dawn.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Just Over 18 - Behind The Scenes.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\K-19, The Widowmaker.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\KaraWin Pro 1.0.8.1.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\KaraWin Pro v1.0.8.1 Build 18030 Final.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\KaraWin Pro v1.0.8.1 Build 180308 Final.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\KERIO SERVER FIREWALL 1.0.0.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Kerio WinRoute Firewall 6.1.2.603.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Kerio WinRoute Firewall v.6.1.2.603.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Kingdom of Heaven.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Klara as a porn model.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Knight - Online.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Kodak Eastman Digital Gem Pro 2.0.0.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Lacey Barnes Fucks A Huge Dick.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Ladies Night - Caroline und Cage  [18+].zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Last Girl Standing - Lesbian Scene  [18+].zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Latinas in hardcope action!.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Lavasoft Ad-Aware SE Personal (tested).zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\LeapFTP v2.7.6..zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\LeechGet 2005 v1.5 b1600.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Legacy Of Kain Soul Reaver 2.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\LEGO Soccer Mania.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Lesbians casting.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Light Alloy 3.3.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Liliane - Bottoms Up  [18+].zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Limewire Pro 4.9.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\LimeWire Professional 4.9.30.01 FULL.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Link Checker Pro 3.3.11.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\ListTV 3.8.5.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Little Cinderella.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Little Fighter 2.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Little Ink Pot Sketcher v1.2 for Adobe.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Live - Awake (The best of).zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Live for Speed - Online racing Simulator.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Lock Folder XP v3.5.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\LogiGuard Master Mechanic 1.4.1.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\LogiGuard Master Mechanic v1.4.1.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Longhorn Tranformation Pack v10.5.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Love Untamed XXX Video.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\LoveChess 1.3.5.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\LS Mp3 Encoder 0.2.12 Beta.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Macromedia Dreamweaver 8.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Macromedia Dreamweaver MX 2004 FUll CD.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Macromedia Flash MX 2004.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Macromedia Studio MX 2004 with Flash.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Macromedia Studio Mx All-in-one.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Madison.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Mafia iSO.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\MagicISO Maker.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\MagicTweak 3.00.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\MagicTweak v3.00.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\MAGIX Movie Edit Pro 10 e-version.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Manhattan Chase iSO.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Maximizing ASP.NET  Real World, Object-.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Maximum Extreme Sports.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\MaxPayne 2.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Maya Secrets of the Pros.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\McAfee AntiSpyware 2006 Full.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\McAfee VirusScan 9.0 Professional.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Mdaemon 8.1.3.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Mediabee Group Planner and Dashboard 1.0.4.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Meet The Fuckers ( 18).zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Mega Man X8 RELOADED iSO.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Mega Man X8.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Melanie - Jizzbomb  [18+].zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Melisa Midwest on Cam.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\MemoriesOnTV 2.2.1.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\MemoriesOnTV v2.2.1.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Mercurius 1.53.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Metal Gear Acid.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Metal Gear Solid 2 Substance.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Metal Slug 1, 2, 3, 4, & 5.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Michelle Wild  [18+].zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Micr0soft Office XP.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Microsoft Digital Image Pro Suite 2006.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Microsoft Encarta 2006 Premium DVD.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Microsoft Max 1.0.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Microsoft Office 2000 Visual Basic for.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Microsoft Office 2003 Enterprise 10in1.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Microsoft Office Pro 2003 [5 In 1].zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Microsoft Student 2006 with Encarta.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Microsoft Toolkit.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Microsoft Virtual PC 2004.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Microsoft Windows 2000 Server SP4.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Microsoft Windows Vista.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\MightyFax for Windows 3.20.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Mike in Brazil - Nice Blonde  [18+].zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Milf Lessons XXX.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Mindjet MindManager Pro 6.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\MindMapper v4.5.5036 Pro.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\MindSoft Utilitites XP 8..zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Mobile Location Services The Definitive.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Moon Tycoon.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Mortal Kombat Shaolin Monks (PS2).zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Moto GP 2.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Moto Racer 3.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\MotoGP 3 Ultimate Racing Technology.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Motor City Online.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Movie DVD Maker v1.2.2.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\MP3 Doctor 5.11.020.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Mp3tag 2.27.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\MPEG Encoder v2.1.54.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\MPEG4 Direct Maker 4.9.2.120.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\MPEG4 Direct Maker v4.9.2.120.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\MSG Animator 2.1.2.125.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\MSN Chat Monitor and Sniffer v3.3.6.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\MSN Chat Monitor and Sniffer v3.3.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\MVP baseball.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Namo WebEditor 2006 Suite.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\NBA Street Showdown.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Need for Speed 5, Porsche Unleashed.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Need For Speed Underground.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Neo Sonic Universe.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Nero 6.6.0.15a.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Nero 7 Premium.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Nero Burning ROM 6.6.0.15 New.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Nero Mix 1.4.0.34a.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Net Meter 3.0.0.221.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\NetObjects Fusion v8.00.0000.5030.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\NetPeeker v2.83.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Network File Monitor Pro.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\New Java Games for Mobile Phones.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\NHL 2006.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Ninja Gaiden Black (Xbox).zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\nnBackup.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\NOD32 Anti Virus 2.51.8.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\NOD32 AntiVirus 2.51.8.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\NOD32 AntiVirus v2.51.8 FULL.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Norton AntiVirus 2005 Pro.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Norton Utilities 2005.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Nude Busty Teen Fucks Sybian Till Orgasm.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Nude Cock Sucking Shaved Blond Teen Fucked.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Nude Tiny Blond Teen Get Muffdived On Bed.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Nyomi Arman Fucks Monster Cock.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Nórton Internet Security 2005.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\O&O Defrag V8.0 Professional Edition.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Oceantiger jDeveloper 3.1.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Office Intercom v4.0.1.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Office Space.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Omega ATI Radeon Driver 2.6.71 Win 2KXP.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\On the Border.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\One click backup for WinRar 2.12.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Opera 8.01.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Outpost Firewall Pro 2.5.375.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\PAL Spyware Remover.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Panda Platinum 2006 Internet Security.zip/Setup.exe -> Worm.VB.an : Renset med backup
    C:\Documents and Settings\mihor\Complete\Panda Platinum Internet Security 2006.zip/Setup.exe -> Worm.VB.an : Renset med b
Avatar billede Slettet bruger
30. december 2005 - 18:10 #13
Ved denne sti: Start->Kontrolpanel->Skærm->Skrivebord->Tilpas Skrivebordet->Web

Har jeg kun:

"Min aktuelle startside"
Avatar billede fromsej Praktikant
30. december 2005 - 19:04 #14
Bare i orden, så skal vi se en frisk Hijackthislog og smitfiles.txt
Avatar billede Slettet bruger
30. december 2005 - 19:09 #15
Logfile of HijackThis v1.99.1
Scan saved at 19:06:58, on 30-12-2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\ibmpmsvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\S24EvMon.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\drivers\CDAC11BA.EXE
C:\Programmer\ewido anti-malware\ewidoctrl.exe
C:\Programmer\ewido anti-malware\ewidoguard.exe
C:\Programmer\IBM\IBM Rapid Restore Ultra\rrpcsb.exe
C:\Programmer\Network Associates\Common Framework\FrameworkService.exe
C:\Programmer\Network Associates\VirusScan\Mcshield.exe
C:\Programmer\Network Associates\VirusScan\VsTskMgr.exe
C:\WINDOWS\System32\RegSrvc.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Programmer\Synaptics\SynTP\SynTPLpr.exe
C:\Programmer\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\System32\LVCOMSX.EXE
C:\WINDOWS\system32\RunDll32.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\system32\TpShocks.exe
C:\Programmer\Network Associates\VirusScan\SHSTAT.EXE
C:\Programmer\Fælles filer\Network Associates\TalkBack\TBMon.exe
C:\PROGRA~1\ThinkPad\PkgMgr\HOTKEY\TPHKMGR.exe
C:\Programmer\ThinkPad\PkgMgr\HOTKEY\TPONSCR.exe
C:\Programmer\ThinkPad\PkgMgr\HOTKEY_1\TpScrex.exe
C:\IBMTOOLS\UTILS\ibmprc.exe
C:\Programmer\Browser MOUSE\mouse32a.exe
C:\Programmer\HP\hpcoretech\hpcmpmgr.exe
C:\Programmer\Java\jre1.5.0_05\bin\jusched.exe
C:\Programmer\MSN Messenger\msnmsgr.exe
C:\Programmer\Active Desktop Calendar\ADC.exe
C:\Programmer\MalwareSweeper.com\Malware Sweeper\MalSwep.exe
C:\Programmer\HP\Digital Imaging\bin\hpqtra08.exe
C:\Programmer\HP\Digital Imaging\bin\hpqgalry.exe
C:\Programmer\ewido anti-malware\SecuritySuite.exe
C:\Programmer\Internet Explorer\iexplore.exe
C:\Documents and Settings\mihor\Lokale indstillinger\Temporary Internet Files\Content.IE5\01M7C1IJ\hijackthis[1].exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.dk/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Mozilla Firefox
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Hyperlinks
O2 - BHO: HomepageBHO - {e0103cd4-d1ce-411a-b75b-4fec072867f4} - C:\WINDOWS\system32\hpDD7D.tmp (file missing)
O3 - Toolbar: Solid Converter PDF - {259F616C-A300-44F5-B04A-ED001A26C85C} - C:\Programmer\SolidDocuments\SolidConverterPDF\SCPDF\ExploreExtPDF.dll
O4 - HKLM\..\Run: [SynTPLpr] C:\Programmer\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Programmer\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\System32\LVCOMSX.EXE
O4 - HKLM\..\Run: [BMMGAG] RunDll32 C:\PROGRA~1\ThinkPad\UTILIT~1\pwrmonit.dll,StartPwrMonitor
O4 - HKLM\..\Run: [BMMMONWND] rundll32.exe C:\PROGRA~1\ThinkPad\UTILIT~1\BatInfEx.dll,BMMAutonomicMonitor
O4 - HKLM\..\Run: [TpShocks] TpShocks.exe
O4 - HKLM\..\Run: [ShStatEXE] "C:\Programmer\Network Associates\VirusScan\SHSTAT.EXE" /STANDALONE
O4 - HKLM\..\Run: [Network Associates Error Reporting Service] "C:\Programmer\Fælles filer\Network Associates\TalkBack\TBMon.exe"
O4 - HKLM\..\Run: [TPHOTKEY] C:\PROGRA~1\ThinkPad\PkgMgr\HOTKEY\TPHKMGR.exe
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [McAfeeUpdaterUI] "C:\Programmer\Network Associates\Common Framework\UpdaterUI.exe" /StartedFromRunKey
O4 - HKLM\..\Run: [IBMPRC] C:\IBMTOOLS\UTILS\ibmprc.exe
O4 - HKLM\..\Run: [FLMOFFICE4DMOUSE] C:\Programmer\Browser MOUSE\mouse32a.exe
O4 - HKLM\..\Run: [HP Component Manager] "C:\Programmer\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Programmer\Java\jre1.5.0_05\bin\jusched.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Programmer\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [Active Desktop Calendar] C:\Programmer\Active Desktop Calendar\ADC.exe
O4 - HKCU\..\Run: [Malware Sweeper] C:\Programmer\MalwareSweeper.com\Malware Sweeper\MalSwep.exe /STARTUP
O4 - Global Startup: Adobe Reader Hurtigstart.lnk = C:\Programmer\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Programmer\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: HP Image Zone Fast Start.lnk = C:\Programmer\HP\Digital Imaging\bin\hpqthb08.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Programmer\Microsoft Office\Office\OSA9.EXE
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programmer\Java\jre1.5.0_05\bin\npjpi150_05.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programmer\Java\jre1.5.0_05\bin\npjpi150_05.dll
O9 - Extra button: Poker.com - {6FDD5236-C9F0-49ef-935D-385F5E21991A} - C:\Programmer\Poker.com\poker.exe
O9 - Extra button: @C:\Programmer\Messenger\Msgslang.dll,-61144 - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmer\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: @C:\Programmer\Messenger\Msgslang.dll,-61144 - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmer\Messenger\msmsgs.exe
O9 - Extra button: (no name) - SolidConverterPDF - (no file) (HKCU)
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {62475759-9E84-458E-A1AB-5D2C442ADFDE} - http://a1540.g.akamai.net/7/1540/52/20040428/qtinstall.info.apple.com/saba/dk/win/QuickTimeFullInstaller.exe
O16 - DPF: {917623D1-D8E5-11D2-BE8B-00104B06BDE3} (CamImage Class) - http://webcam01.fmts.dk/activex/AxisCamControl.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
O16 - DPF: {AB86CE53-AC9F-449F-9399-D8ABCA09EC09} (Get_ActiveX Control) - https://h17000.www1.hp.com/ewfrf-JAVA/Secure/HPGetDownloadManager.ocx
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab32846.cab
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = fmts.lan
O17 - HKLM\Software\..\Telephony: DomainName = fmts.lan
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: Domain = fmts.lan
O17 - HKLM\System\CS3\Services\Tcpip\Parameters: Domain = fmts.lan
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O18 - Filter: text/html - (no CLSID) - (no file)
O18 - Filter: text/plain - (no CLSID) - (no file)
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O20 - Winlogon Notify: tphotkey - C:\WINDOWS\SYSTEM32\tphklock.dll
O23 - Service: ACU Configuration Service (ACS) - Unknown owner - C:\WINDOWS\system32\acs.exe
O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\system32\drivers\CDAC11BA.EXE
O23 - Service: ewido security suite control - ewido networks - C:\Programmer\ewido anti-malware\ewidoctrl.exe
O23 - Service: ewido security suite guard - ewido networks - C:\Programmer\ewido anti-malware\ewidoguard.exe
O23 - Service: IBM Rapid Restore Ultra Service - Unknown owner - C:\Programmer\IBM\IBM Rapid Restore Ultra\rrpcsb.exe
O23 - Service: IBM PM Service (IBMPMSVC) - Unknown owner - C:\WINDOWS\system32\ibmpmsvc.exe
O23 - Service: McAfee Framework Service (McAfeeFramework) - Unknown owner - C:\Programmer\Network Associates\Common Framework\FrameworkService.exe" /ServiceStart (file missing)
O23 - Service: Network Associates McShield (McShield) - Network Associates, Inc. - C:\Programmer\Network Associates\VirusScan\Mcshield.exe
O23 - Service: Network Associates Task Manager (McTaskManager) - Network Associates, Inc. - C:\Programmer\Network Associates\VirusScan\VsTskMgr.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: IBM PSA Access Driver Control (PsaSrv) - Unknown owner - C:\WINDOWS\system32\PsaSrv.exe (file missing)
O23 - Service: RegSrvc - Intel Corporation - C:\WINDOWS\System32\RegSrvc.exe
O23 - Service: Spectrum24 Event Monitor (S24EventMonitor) - Intel Corporation  - C:\WINDOWS\System32\S24EvMon.exe
Avatar billede Slettet bruger
30. december 2005 - 19:11 #16
smitRem © log file
    version 2.8

    by noahdfear


Microsoft Windows XP [version 5.1.2600]

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

checking for ShudderLTD key

ShudderLTD key not present!

checking for PSGuard.com key


PSGuard.com key not present!


checking for WinHound.com key


WinHound.com key not present!




~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

SpyAxeFix © by noahdfear

spyaxe directory present

spyaxe uninstaller present

Starting spyaxe uninstaller

REGEDIT4

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler]
"{438755C2-A8BA-11D1-B96B-00A0C90312E1}"="Browseui preloader"
"{8C7461EF-2B13-11d2-BE35-3078302C2030}"="Component Categories cache daemon"

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~


Winhound uninstaller NOT present
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Existing Pre-run Files


~~~ Program Files ~~~



~~~ Shortcuts ~~~



~~~ Favorites ~~~



~~~ system32 folder ~~~

wbeconm.dll
1024 dir
ld****.tmp
ncompat.tlb
nvctrl.exe
mscornet.exe
hp***.tmp


~~~ Icons in System32 ~~~

ts.ico
ot.ico


~~~ Windows directory ~~~



~~~ Drive root ~~~


~~~ Miscellaneous Files/folders ~~~




~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~



Command Line Process Viewer/Killer/Suspender for Windows NT/2000/XP V2.03
Copyright(C) 2002-2003 Craig.Peacock@beyondlogic.org
Killing PID 376 'explorer.exe'
Killing PID 376 'explorer.exe'

Starting registry repairs

Deleting files


  Remaining Post-run Files


~~~ Program Files ~~~



~~~ Shortcuts ~~~



~~~ Favorites ~~~



~~~ system32 folder ~~~

ld****.tmp
ncompat.tlb
nvctrl.exe
mscornet.exe
hp***.tmp


~~~ Icons in System32 ~~~



~~~ Windows directory ~~~



~~~ Drive root ~~~



~~~ Miscellaneous Files/folders ~~~




~~~ Wininet.dll ~~~

CLEAN! :)
Avatar billede fromsej Praktikant
30. december 2005 - 20:02 #17
Kør Hijackthis igen og fix:
O2 - BHO: HomepageBHO - {e0103cd4-d1ce-411a-b75b-4fec072867f4} - C:\WINDOWS\system32\hpDD7D.tmp (file missing)
O18 - Filter: text/html - (no CLSID) - (no file)
O18 - Filter: text/plain - (no CLSID) - (no file)

Så er din log ren, vi behøver ikke at se flere.
Du bør lige deaktivere systemgendannelse, genstarte og genaktivere samt sætte filvisning til normal.
http://spywarefri.dk/virusscannere.htm#alle - Systemgendannelse.
Åbn en mappe, klik på Funktioner >Mappeindstillinger >Vis.
Sæt flueben ved "Skjul beskyttede operativsystemfiler".
Sæt flueben ved "Skjul filtypenavne for kendte filtyper".
Sæt prik i "Vis ikke skjulte filer og mapper".

For at holde den ren kan du kigge på vores pakke til formålet.
http://www.spywarefri.dk/manualer/sikkerhedspakke.htm
Som minimum anbefaler jeg Spywareguard, Spywareblaster, IE-Spyad og IE Privacy Keeper.
Et par artikler om sikker surfing finder du her:
http://www.spywarefri.dk/forum/topic.asp?TOPIC_ID=14414
http://fromsej.dk/html/avoid.html
Mvh:
Fromsej/Team Spywarefri.
Avatar billede Slettet bruger
30. december 2005 - 20:17 #18
Mange tak!!
Avatar billede fromsej Praktikant
30. december 2005 - 20:39 #19
Velbekomme, tak for point. :-)

Godt nytår.*S*
Avatar billede Ny bruger Nybegynder

Din løsning...

Tilladte BB-code-tags: [b]fed[/b] [i]kursiv[/i] [u]understreget[/u] Web- og emailadresser omdannes automatisk til links. Der sættes "nofollow" på alle links.

Loading billede Opret Preview
Kategori
Se alle it-kurser fra Computerworld Kurser
IT-kurser om Microsoft 365, sikkerhed, personlig vækst, udvikling, digital markedsføring, grafisk design, SAP og forretningsanalyse.
Se alle it-kurser

Flere spørgsmål fra Virus kategorien

Titel Indlæg Oprettet Seneste aktivitet
Vil skrifte antivirusprogram. Af ErikHg i Virus 22 26/11/202510:42 23/12/202514:29
Er gratis Bitdefender værd at installere ? Af Ikke-ekspert i Virus 8 31/08/202519:08 01/09/202514:18
Ukendte filer på min Pc Af jonpet i Virus 10 03/02/202514:20 04/02/202511:05
mulig ukendt virus Af jackie18 i Virus 3 18/01/202514:07 18/01/202516:39
virus popper op med jævne mellemrum Af Malm i Virus 13 18/01/202511:40 20/01/202517:53
Se alle spørgsmål i kategorien Opret spørgsmål

Log ind eller opret profil

Hov!

For at kunne deltage på Computerworld Eksperten skal du være logget ind.

Det er heldigvis nemt at oprette en bruger: Det tager to minutter og du kan vælge at bruge enten e-mail, Facebook eller Google som login.

Opret Log ind

Du kan også logge ind via nedenstående tjenester

Alle kategorier på Eksperten
Seneste spørgsmål Seneste aktivitet
I går 17:35 Kan ikke resette PC med Windows 8.1 Af TTA i Office & Kontorpakker
I går 13:33 Lukning af Microsoftkonto Af ErikHg i Windows
23/0416:10 Bat file. Af johnnylassen i Andet programmering
23/0410:28 “Signe” Svindel omtalt i medier Af nu_igen i Mobiltelefoner
22/0420:59 RAID controller virker ikke ved tilslutning af alle 4 harddiske Af Strawberry i Andet hardware
White papers
Flere white papers »