hola buenas.. despues de arreglar el PC de la oficina.. ayer pase el Kaspersky Online en el de casa y me salio ese virus... tengo Windows XP Profesional, Nod32 actualizado, ZoneAlarma Pro residente y Spybot S&D

a ver si podeis ayudarme a desinfectarlo

adjunto el archivo del reporte del Kaspersky Online pq es tan largo q no me cabria ni en 5 post

MEGAUPLOAD - The leading online storage and file delivery service

gracias

he pasado el Nod32 y no me detecta nada....

no es por incordiar pero... llevo casi un dia esperando respuesta...

Hola SeRGiuKo antes que nada te resomiendo que verifiques que tu equipo tiene los ultimos parches de seguridad enWindows Update si tu equipo lo permite

Comprueba que no tengas en tu PC instalado ninguno de los programa que figuran en la LISTA 1 o en la LISTA 2 Si tienes alguno de ellos desinstalalos de inmediato.
Descarga y/o actualiza los siguientes programas:
avg antispyware
SuperAntispyware
Apaga el Restaurar Sistema
Instala CCleaner y Disk Cleaner para eliminar temporales, si lo crees mas comveniente lee los manuales de los mismos.
Inicia el sistema en Modo a Prueba de Fallos
Ejecuta todos los programas del paso 2 y 4, elimina todo lo que encuentren.
Reinicia el sistema en modo normal
Haz un escaneo online con Karpersky Y pegas aquí el reporte que te genere

Cuando termines los pasos Activa restaurar sistema...

Imprime los pasos para que no te pierdas si lo vez mas conveniente

Por cierto no vi tu reporte de kaspersky por que no confio en instalar esas barras de herramientas pero estos pasos son para eliminar el malware que mensionas. Y ten paciencia se atienden muchos casos al dia por lo que es dificil atender a todos en un solo dia

gracias Barend.. perdon por impacientarme....

te pego lo mas representativo del reporte q hice con Kaspersky Online

jueves, 13 de marzo de 2008 7:28:46
Sistema operativo: Microsoft Windows XP Professional, Service Pack 2 (Build 2600)
Kaspersky Online Scanner versión: 5.0.84.1
Ultima actualización: 12/03/2008
Registros en la base antivirus: 626238

Número de objeros analizados 79434
Virus encontrados 1
Objetos infectados 303 / 0
Objetos sospechosos 0
Duración del análisis 03:16:03


C:\Documents and Settings\ana\Configuración local\Datos de programa\IM\Identities\{53562F46-605E-4612-A3AF-CE87626B786B}\Message Store\Deleted Items.imm/[From "Rosanna Foote" ][Date Tue, 11 Jul 2006 07:40:34 +0300]/UNNAMED/[From ][Date Mon, 10 Jul 2006 05:45:26 +0200]/UNNAMED/[From "Alonzo Walsh" ][Date Sat, 15 Jul 2006 06:27:42 +0200 (added by postmaster@terra.es)]/UNNAMED/[From "Orville Duarte" ] . ... /[From "Branch Banking and Trust" ][Date Tue, 27 Feb 2007 04:42:08 +0100 (added by postmaster@terra ... /UNNAMED Infectados: Trojan-Spy.HTML.Bankfraud.ri saltado

por lo q veo en el reporte los 303 objetos infectados son iguales.... salvo por alguna fecha...

actualizare el windows...

lo de los programas instalados de esas listas.. ¿tienen q estar en agregar/elimnar programas de windows?

hare todo eso en cuanto llegue a casa...

muchas gracias

no ha servido de nada lo q me dijiste q hiciera

el reporte del Kaspersky Online es el mismo q el anterior.. aparece el virus

AYUDA!!!

Hola SeRGiuKo


Realiza lo siguiente

Apaga "Restaurar Sistema"

Reinicia en "Modo a prueba de fallos" (modo seguro)

Ejecuta MalwareBytes Anti-Malware(no olvides actualizarla antes de ejecutarla) y regresas con el reporte que te genere.Te diriges a la pestaña de Logs o Registros (según el idioma que estes trabajando), abres el reporte y copias el contenido para pegarlo en tu proxima respuesta.

Ejecuta drweb cure (manual), regresas con el reporte que te genere.

Reinicias en modo normal y realizas un escaneo con los siguientes antivirus online:

• Ewido (no olvides darle en la opción REMOVE INFECTIONS) dudas sobre este te lees el manual de ewido regresas con su reporte pero no olvides darle en remove infections.
  
• Kaspersky Online Scanner cualquier duda sobre este último lees su manual y pegas el reporte que te da de resultado.

Regresas y nos comentas.



Andresmix

estos son los reportes de malwarebyte y drweb

Malwarebytes' Anti-Malware 1.08
Versión de la Base de Datos: 495

Tipo de examen : Examen Completo (C:\|D:\|)
Objetos examinados: 92365
Tiempo transcurrido: 1 hour(s), 29 minute(s), 33 second(s)

Procesos en Memoria Infectados: 0
Módulos en Memoria Infectados: 0
Claves del Registro Infectadas: 21
Valores del Registro Infectados: 0
Elementos de Datos del Registro Infectados: 0
Carpetas Infectadas: 0
Ficheros Infectados: 1

Procesos en Memoria Infectados:
(No se han detectado elementos maliciosos)

Módulos en Memoria Infectados:
(No se han detectado elementos maliciosos)

Claves del Registro Infectadas:
HKEY_CLASSES_ROOT\asapcom.asapenvelope (Adware.Hotbar) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{286e500c-ef0a-4aa3-a94d-e495f653ef4b} (Adware.Hotbar) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{319260ab-be0c-4025-8569-7a27ed2faab9} (Adware.Hotbar) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{8ac5bc54-b13b-4642-99f9-0baa2d116184} (Adware.Hotbar) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{9809a6b4-70b1-4bb2-b3b5-b415763a534e} (Adware.Hotbar) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{d5178f77-c5e6-4e8f-9787-48b5d7eccce8} (Adware.Hotbar) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\asapcom.asapenvelope.1 (Adware.Hotbar) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\asapcom.asapmessage (Adware.Hotbar) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\asapcom.asapmessage.1 (Adware.Hotbar) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\asapcom.asapclass (Adware.Hotbar) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\asapcom.asapclass.1 (Adware.Hotbar) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\asapcom.asapmain (Adware.Hotbar) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\asapcom.asapmain.1 (Adware.Hotbar) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\asapcom.asaprecipients (Adware.Hotbar) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\asapcom.asaprecipients.1 (Adware.Hotbar) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{21447c90-6ec1-4fc1-9379-bd515008aedb} (Adware.Hotbar) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{32c97a37-e2b8-4097-9330-5f3e1125e181} (Adware.Hotbar) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{b0c3de1b-e3ff-4dd0-9229-f452cf9c678e} (Adware.Hotbar) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{d2d94732-a74d-433c-98f7-9ed740e82ae9} (Adware.Hotbar) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{dfd5d79b-ef2f-4a51-9821-5b469f05262e} (Adware.Hotbar) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Typelib\{bce2e826-d0f5-41c8-97be-28a6f540ceeb} (Adware.Hotbar) -> Quarantined and deleted successfully.

Valores del Registro Infectados:
(No se han detectado elementos maliciosos)

Elementos de Datos del Registro Infectados:
(No se han detectado elementos maliciosos)

Carpetas Infectadas:
(No se han detectado elementos maliciosos)

Ficheros Infectados:
C:\Archivos de programa\IncrediMail\bin\asapsdk.dll (Adware.Hotbar) -> Quarantined and deleted successfully.

Dr.Web Cure It

P4PLUGIN.DLL C:\Archivos de programa\PandoBar\bar\1.bin Adware.Msearch.origin Eliminado.


mañana pego los reportes con Kaspersky Online y Ewido

bueno... me sigue saliendo el mismo reporte....

-------------------------------------------------------------------------------
KASPERSKY ONLINE SCANNER REPORT
Sunday, March 16, 2008 10:42:44 AM
Operating System: Microsoft Windows XP Professional, Service Pack 2 (Build 2600)
Kaspersky Online Scanner version: 5.0.98.0
Kaspersky Anti-Virus database last update: 16/03/2008
Kaspersky Anti-Virus database records: 632273
-------------------------------------------------------------------------------

Scan Settings:
Scan using the following antivirus database: extended
Scan Archives: true
Scan Mail Bases: true

Scan Target - My Computer:
A:\
C:\
D:\
E:\
F:\

Scan Statistics:
Total number of scanned objects: 69893
Number of viruses found: 1
Number of infected objects: 303
Number of suspicious objects: 0
Duration of the scan process: 02:26:19

Infected Object Name / Virus Name / Last Action
C:\Archivos de programa\Alcohol Soft\Alcohol 120\StarWind\logs\starwind.2008-03-16.02-50-00.log Object is locked skipped
C:\Archivos de programa\ESET\cache\CACHE.NDB Object is locked skipped
C:\Archivos de programa\ESET\logs\virlog.dat Object is locked skipped
C:\Archivos de programa\ESET\logs\warnlog.dat Object is locked skipped
C:\Documents and Settings\ana\Configuración local\Archivos temporales de Internet\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\ana\Configuración local\Datos de programa\IM\Identities\{53562F46-605E-4612-A3AF-CE87626B786B}\Message Store\Deleted Items.imm/[From "Rosanna Foote" <tl.wang@testritegroup.com>][Date Tue, 11 Jul 2006 07:40:34 +0300]/UNNAMED/[From <info@laboris.net>][Date Mon, 10 Jul 2006 05:45:26 +0200]/UNNAMED/[From "Alonzo Walsh" <hfhmvfcotmuht@verizon.com>][Date Sat, 15 Jul 2006 06:27:42 +0200 (added by postmaster@terra.es)]/UNNAMED/[From "Orville Duarte" <zxvkde@amqa.com>] . ... /[From "Branch Banking and Trust" <support_id953595007276074ib@bbt.com>][Date Tue, 27 Feb 2007 04:42:08 +0100 (added by postmaster@terra ... /UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped
C:\Documents and Settings\ana\Configuración local\Datos de programa\IM\Identities\{53562F46-605E-4612-A3AF-CE87626B786B}\Message Store\Deleted Items.imm/[From "Rosanna Foote" <tl.wang@testritegroup.com>][Date Tue, 11 Jul 2006 07:40:34 +0300]/UNNAMED/[From <info@laboris.net>][Date Mon, 10 Jul 2006 05:45:26 +0200]/UNNAMED/[From "Alonzo Walsh" <hfhmvfcotmuht@verizon.com>][Date Sat, 15 Jul 2006 06:27:42 +0200 (added by postmaster@terra.es)]/UNNAMED/[From "Orville Duarte" <zxvkde@amqa.com>] . ... /[From "Branch Banking and Trust" <support_id953595007276074ib@bbt.com>][Date Tue, 27 Feb 2007 04:42:08 +0100 (added by postmaster@terra.es)]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped
C:\Documents and Settings\ana\Configuración local\Datos de programa\IM\Identities\{53562F46-605E-4612-A3AF-CE87626B786B}\Message Store\Deleted Items.imm/[From "Rosanna Foote" <tl.wang@testritegroup.com>][Date Tue, 11 Jul 2006 07:40:34 +0300]/UNNAMED/[From <info@laboris.net>][Date Mon, 10 Jul 2006 05:45:26 +0200]/UNNAMED/[From "Alonzo Walsh" <hfhmvfcotmuht@verizon.com>][Date Sat, 15 Jul 2006 06:27:42 +0200 (added by postmaster@terra.es)]/UNNAMED/[From "Orville Duarte" <zxvkde@amqa.com>] ... /[From "E*TRADE F ... /[From Fausti . ... . ... /[ .. ... ... /[From "Ab ... /[From <DeCesare@partnerusa.com>][Date 27 Feb 2007 06:56:41 +0100]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped
C:\Documents and Settings\ana\Configuración local\Datos de programa\IM\Identities\{53562F46-605E-4612-A3AF-CE87626B786B}\Message Store\Deleted Items.imm/[From "Rosanna Foote" <tl.wang@testritegroup.com>][Date Tue, 11 Jul 2006 07:40:34 +0300]/UNNAMED/[From <info@laboris.net>][Date Mon, 10 Jul 2006 05:45:26 +0200]/UNNAMED/[From "Alonzo Walsh" <hfhmvfcotmuht@verizon.com>][Date Sat, 15 Jul 2006 06:27:42 +0200 (added by postmaster@terra.es)]/UNNAMED/[From "Orville Duarte" <zxvkde@amqa.com>] ... /[From "E*TRADE F ... /[From Fausti . ... . ... /[ .. ... ... /[From "Abe Grov ... /[From <ellhnwn@oussp.com>][Date 26 Feb 2007 23:03:16 +0100]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped
C:\Documents and Settings\ana\Configuración local\Datos de programa\IM\Identities\{53562F46-605E-4612-A3AF-CE87626B786B}\Message Store\Deleted Items.imm/[From "Rosanna Foote" <tl.wang@testritegroup.com>][Date Tue, 11 Jul 2006 07:40:34 +0300]/UNNAMED/[From <info@laboris.net>][Date Mon, 10 Jul 2006 05:45:26 +0200]/UNNAMED/[From "Alonzo Walsh" <hfhmvfcotmuht@verizon.com>][Date Sat, 15 Jul 2006 06:27:42 +0200 (added by postmaster@terra.es)]/UNNAMED/[From "Orville Duarte" <zxvkde@amqa.com>] ... /[From "E*TRADE F ... /[From Fausti . ... . ... /[ .. ... ... /[From "Abe Grove" <czprotrusive@mdvl.net>][Date Tue, 27 Feb 2007 08:37:09 +0900]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped
C:\Documents and Settings\ana\Configuración local\Datos de programa\IM\Identities\{53562F46-605E-4612-A3AF-CE87626B786B}\Message Store\Deleted Items.imm/[From "Rosanna Foote" <tl.wang@testritegroup.com>][Date Tue, 11 Jul 2006 07:40:34 +0300]/UNNAMED/[From <info@laboris.net>][Date Mon, 10 Jul 2006 05:45:26 +0200]/UNNAMED/[From "Alonzo Walsh" <hfhmvfcotmuht@verizon.com>][Date Sat, 15 Jul 2006 06:27:42 +0200 (added by postmaster@terra.es)]/UNNAMED/[From "Orville Duarte" <zxvkde@amqa.com>] ... /[From "E*TRADE F ... /[From Fausti . ... . ... /[ .. ... /[From "Imogene Holloway" <siuroom@arpsse.net>][Date Fri, 16 Mar 2007 07:31:39 +0800]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped
C:\Documents and Settings\ana\Configuración local\Datos de programa\IM\Identities\{53562F46-605E-4612-A3AF-CE87626B786B}\Message Store\Deleted Items.imm/[From "Rosanna Foote" <tl.wang@testritegroup.com>][Date Tue, 11 Jul 2006 07:40:34 +0300]/UNNAMED/[From <info@laboris.net>][Date Mon, 10 Jul 2006 05:45:26 +0200]/UNNAMED/[From "Alonzo Walsh" <hfhmvfcotmuht@verizon.com>][Date Sat, 15 Jul 2006 06:27:42 +0200 (added by postmaster@terra.es)]/UNNAMED/[From "Orville Duarte" <zxvkde@amqa.com>] ... /[From "E*TRADE F ... /[From Fausti . ... . ... /[ ... /[ ... /[From genova" <mehgangenova@amgcommercial.com>][Date 26 Feb 2007 18:11:27 -0600]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped
C:\Documents and Settings\ana\Configuración local\Datos de programa\IM\Identities\{53562F46-605E-4612-A3AF-CE87626B786B}\Message Store\Deleted Items.imm/[From "Rosanna Foote" <tl.wang@testritegroup.com>][Date Tue, 11 Jul 2006 07:40:34 +0300]/UNNAMED/[From <info@laboris.net>][Date Mon, 10 Jul 2006 05:45:26 +0200]/UNNAMED/[From "Alonzo Walsh" <hfhmvfcotmuht@verizon.com>][Date Sat, 15 Jul 2006 06:27:42 +0200 (added by postmaster@terra.es)]/UNNAMED/[From "Orville Duarte" <zxvkde@amqa.com>] ... /[From "E*TRADE F ... /[From Fausti . ... . ... /[ ... /[From "Latonya Brock" <pqnotorious@katzmail.net>][Date Tue, 27 Feb 2007 08:19:35 +0800]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped
C:\Documents and Settings\ana\Configuración local\Datos de programa\IM\Identities\{53562F46-605E-4612-A3AF-CE87626B786B}\Message Store\Deleted Items.imm/[From "Rosanna Foote" <tl.wang@testritegroup.com>][Date Tue, 11 Jul 2006 07:40:34 +0300]/UNNAMED/[From <info@laboris.net>][Date Mon, 10 Jul 2006 05:45:26 +0200]/UNNAMED/[From "Alonzo Walsh" <hfhmvfcotmuht@verizon.com>][Date Sat, 15 Jul 2006 06:27:42 +0200 (added by postmaster@terra.es)]/UNNAMED/[From "Orville Duarte" <zxvkde@amqa.com>] ... /[From "E*TRADE F ... /[From Fausti . ... . ... /[From "Kelley ... /[From "Nicholas" <walter@libero.it>][Date Tue, 27 Feb 2007 08:33:54 +0100]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped
C:\Documents and Settings\ana\Configuración local\Datos de programa\IM\Identities\{53562F46-605E-4612-A3AF-CE87626B786B}\Message Store\Deleted Items.imm/[From "Rosanna Foote" <tl.wang@testritegroup.com>][Date Tue, 11 Jul 2006 07:40:34 +0300]/UNNAMED/[From <info@laboris.net>][Date Mon, 10 Jul 2006 05:45:26 +0200]/UNNAMED/[From "Alonzo Walsh" <hfhmvfcotmuht@verizon.com>][Date Sat, 15 Jul 2006 06:27:42 +0200 (added by postmaster@terra.es)]/UNNAMED/[From "Orville Duarte" <zxvkde@amqa.com>] ... /[From "E*TRADE F ... /[From Fausti . ... . ... /[From "Kelley Banks" <cducyanamid@arabiannightsptr.com>][Date Tue, 27 Feb 2007 01:32:59 +0100]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped
C:\Documents and Settings\ana\Configuración local\Datos de programa\IM\Identities\{53562F46-605E-4612-A3AF-CE87626B786B}\Message Store\Deleted Items.imm/[From "Rosanna Foote" <tl.wang@testritegroup.com>][Date Tue, 11 Jul 2006 07:40:34 +0300]/UNNAMED/[From <info@laboris.net>][Date Mon, 10 Jul 2006 05:45:26 +0200]/UNNAMED/[From "Alonzo Walsh" <hfhmvfcotmuht@verizon.com>][Date Sat, 15 Jul 2006 06:27:42 +0200 (added by postmaster@terra.es)]/UNNAMED/[From "Orville Duarte" <zxvkde@amqa.com>] ... /[From "E*TRADE F ... /[From Fausti . ... ... /[From "Jerrold Jacobson" <eleinopportune@janminneboo.com>][Date Mon, 26 Feb 2007 17:30:32 -0800]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped
C:\Documents and Settings\ana\Configuración local\Datos de programa\IM\Identities\{53562F46-605E-4612-A3AF-CE87626B786B}\Message Store\Deleted Items.imm/[From "Rosanna Foote" <tl.wang@testritegroup.com>][Date Tue, 11 Jul 2006 07:40:34 +0300]/UNNAMED/[From <info@laboris.net>][Date Mon, 10 Jul 2006 05:45:26 +0200]/UNNAMED/[From "Alonzo Walsh" <hfhmvfcotmuht@verizon.com>][Date Sat, 15 Jul 2006 06:27:42 +0200 (added by postmaster@terra.es)]/UNNAMED/[From "Orville Duarte" <zxvkde@amqa.com>] ... /[From "E*TRADE F ... /[From Fausti . ... / ... /[From "E ... /[From "Gene" <cbaduravo@british-pigs.com>][Date Tue, 27 Feb 2007 02:49:13 +0800]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped
C:\Documents and Settings\ana\Configuración local\Datos de programa\IM\Identities\{53562F46-605E-4612-A3AF-CE87626B786B}\Message Store\Deleted Items.imm/[From "Rosanna Foote" <tl.wang@testritegroup.com>][Date Tue, 11 Jul 2006 07:40:34 +0300]/UNNAMED/[From <info@laboris.net>][Date Mon, 10 Jul 2006 05:45:26 +0200]/UNNAMED/[From "Alonzo Walsh" <hfhmvfcotmuht@verizon.com>][Date Sat, 15 Jul 2006 06:27:42 +0200 (added by postmaster@terra.es)]/UNNAMED/[From "Orville Duarte" <zxvkde@amqa.com>] ... /[From "E*TRADE F ... /[From Fausti . ... / ... /[From "Emilia Wilkinson" <yhoprovisional@econophone.ch>][Date Tue, 27 Feb 2007 00:53:21 +0800]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped
C:\Documents and Settings\ana\Configuración local\Datos de programa\IM\Identities\{53562F46-605E-4612-A3AF-CE87626B786B}\Message Store\Deleted Items.imm/[From "Rosanna Foote" <tl.wang@testritegroup.com>][Date Tue, 11 Jul 2006 07:40:34 +0300]/UNNAMED/[From <info@laboris.net>][Date Mon, 10 Jul 2006 05:45:26 +0200]/UNNAMED/[From "Alonzo Walsh" <hfhmvfcotmuht@verizon.com>][Date Sat, 15 Jul 2006 06:27:42 +0200 (added by postmaster@terra.es)]/UNNAMED/[From "Orville Duarte" <zxvkde@amqa.com>] ... /[From "E*TRADE F ... /[From Fausti . ... /[ ... /[From "Caroline Black" <mcarbohydrate@janminneboo.com>][Date Tue, 27 Feb 2007 00:55:09 +0800]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped
C:\Documents and Settings\ana\Configuración local\Datos de programa\IM\Identities\{53562F46-605E-4612-A3AF-CE87626B786B}\Message Store\Deleted Items.imm/[From "Rosanna Foote" <tl.wang@testritegroup.com>][Date Tue, 11 Jul 2006 07:40:34 +0300]/UNNAMED/[From <info@laboris.net>][Date Mon, 10 Jul 2006 05:45:26 +0200]/UNNAMED/[From "Alonzo Walsh" <hfhmvfcotmuht@verizon.com>][Date Sat, 15 Jul 2006 06:27:42 +0200 (added by postmaster@terra.es)]/UNNAMED/[From "Orville Duarte" <zxvkde@amqa.com>] ... /[From "E*TRADE F ... /[From Fausti . ... /[From Tecn ... /[From "Lolita Ayala" <kplburn@findingweb.com>][Date Mon, 26 Feb 2007 18:00:16 +0100]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped
C:\Documents and Settings\ana\Configuración local\Datos de programa\IM\Identities\{53562F46-605E-4612-A3AF-CE87626B786B}\Message Store\Deleted Items.imm/[From "Rosanna Foote" <tl.wang@testritegroup.com>][Date Tue, 11 Jul 2006 07:40:34 +0300]/UNNAMED/[From <info@laboris.net>][Date Mon, 10 Jul 2006 05:45:26 +0200]/UNNAMED/[From "Alonzo Walsh" <hfhmvfcotmuht@verizon.com>][Date Sat, 15 Jul 2006 06:27:42 +0200 (added by postmaster@terra.es)]/UNNAMED/[From "Orville Duarte" <zxvkde@amqa.com>] ... /[From "E*TRADE F ... /[From Fausti . ... /[From Tecnico del Banco Santander <support@gruposantander.es>][Date Mon, 26 Feb 2007 23:40:02 +0900]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped
C:\Documents and Settings\ana\Configuración local\Datos de programa\IM\Identities\{53562F46-605E-4612-A3AF-CE87626B786B}\Message Store\Deleted Items.imm/[From "Rosanna Foote" <tl.wang@testritegroup.com>][Date Tue, 11 Jul 2006 07:40:34 +0300]/UNNAMED/[From <info@laboris.net>][Date Mon, 10 Jul 2006 05:45:26 +0200]/UNNAMED/[From "Alonzo Walsh" <hfhmvfcotmuht@verizon.com>][Date Sat, 15 Jul 2006 06:27:42 +0200 (added by postmaster@terra.es)]/UNNAMED/[From "Orville Duarte" <zxvkde@amqa.com>] ... /[From "E*TRADE F ... /[From Fausti .. ... / . . . ... /[From " ... /[From Fabien Banks <zekex@aye.net>][Date Mon, 26 Feb 2007 09:22:02 +0300]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped
C:\Documents and Settings\ana\Configuración local\Datos de programa\IM\Identities\{53562F46-605E-4612-A3AF-CE87626B786B}\Message Store\Deleted Items.imm/[From "Rosanna Foote" <tl.wang@testritegroup.com>][Date Tue, 11 Jul 2006 07:40:34 +0300]/UNNAMED/[From <info@laboris.net>][Date Mon, 10 Jul 2006 05:45:26 +0200]/UNNAMED/[From "Alonzo Walsh" <hfhmvfcotmuht@verizon.com>][Date Sat, 15 Jul 2006 06:27:42 +0200 (added by postmaster@terra.es)]/UNNAMED/[From "Orville Duarte" <zxvkde@amqa.com>] ... /[From "E*TRADE F ... /[From Fausti .. ... / . . . ... /[From "Tyl ... /[From World" <ljkszxbibxn@samtel.ru>][Date 26 Feb 2007 13:02:03 -0400]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped
C:\Documents and Settings\ana\Configuración local\Datos de programa\IM\Identities\{53562F46-605E-4612-A3AF-CE87626B786B}\Message Store\Deleted Items.imm/[From "Rosanna Foote" <tl.wang@testritegroup.com>][Date Tue, 11 Jul 2006 07:40:34 +0300]/UNNAMED/[From <info@laboris.net>][Date Mon, 10 Jul 2006 05:45:26 +0200]/UNNAMED/[From "Alonzo Walsh" <hfhmvfcotmuht@verizon.com>][Date Sat, 15 Jul 2006 06:27:42 +0200 (added by postmaster@terra.es)]/UNNAMED/[From "Orville Duarte" <zxvkde@amqa.com>] ... /[From "E*TRADE F ... /[From Fausti .. ... / . . . ... /[From "Tyler Wallace" <kcgcbs@iwami-dental.com>][Date Mon, 26 Feb 2007 11:25:56 +0100]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped
C:\Documents and Settings\ana\Configuración local\Datos de programa\IM\Identities\{53562F46-605E-4612-A3AF-CE87626B786B}\Message Store\Deleted Items.imm/[From "Rosanna Foote" <tl.wang@testritegroup.com>][Date Tue, 11 Jul 2006 07:40:34 +0300]/UNNAMED/[From <info@laboris.net>][Date Mon, 10 Jul 2006 05:45:26 +0200]/UNNAMED/[From "Alonzo Walsh" <hfhmvfcotmuht@verizon.com>][Date Sat, 15 Jul 2006 06:27:42 +0200 (added by postmaster@terra.es)]/UNNAMED/[From "Orville Duarte" <zxvkde@amqa.com>] ... /[From "E*TRADE F ... /[From Fausti .. ... / . . ... /[From "Catina Castillo" <getaheadkr@cnsongyu.com>][Date Mon, 26 Feb 2007 02:40:13 -0800]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped
C:\Documents and Settings\ana\Configuración local\Datos de programa\IM\Identities\{53562F46-605E-4612-A3AF-CE87626B786B}\Message Store\Deleted Items.imm/[From "Rosanna Foote" <tl.wang@testritegroup.com>][Date Tue, 11 Jul 2006 07:40:34 +0300]/UNNAMED/[From <info@laboris.net>][Date Mon, 10 Jul 2006 05:45:26 +0200]/UNNAMED/[From "Alonzo Walsh" <hfhmvfcotmuht@verizon.com>][Date Sat, 15 Jul 2006 06:27:42 +0200 (added by postmaster@terra.es)]/UNNAMED/[From "Orville Duarte" <zxvkde@amqa.com>] ... /[From "E*TRADE F ... /[From Fausti .. ... / . ... ... /[From "Cristina Parsons" <kzqburch@e-told.org>][Date Mon, 26 Feb 2007 08:00:13 +0800]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped
C:\Documents and Settings\ana\Configuración local\Datos de programa\IM\Identities\{53562F46-605E-4612-A3AF-CE87626B786B}\Message Store\Deleted Items.imm/[From "Rosanna Foote" <tl.wang@testritegroup.com>][Date Tue, 11 Jul 2006 07:40:34 +0300]/UNNAMED/[From <info@laboris.net>][Date Mon, 10 Jul 2006 05:45:26 +0200]/UNNAMED/[From "Alonzo Walsh" <hfhmvfcotmuht@verizon.com>][Date Sat, 15 Jul 2006 06:27:42 +0200 (added by postmaster@terra.es)]/UNNAMED/[From "Orville Duarte" <zxvkde@amqa.com>] ... /[From "E*TRADE F ... /[From Fausti .. ... / . ... ... /[From "Maura Gonzalez" <drprecedent@galnet.dk>][Date Mon, 26 Feb 2007 10:05:22 +0900]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped
C:\Documents and Settings\ana\Configuración local\Datos de programa\IM\Identities\{53562F46-605E-4612-A3AF-CE87626B786B}\Message Store\Deleted Items.imm/[From "Rosanna Foote" <tl.wang@testritegroup.com>][Date Tue, 11 Jul 2006 07:40:34 +0300]/UNNAMED/[From <info@laboris.net>][Date Mon, 10 Jul 2006 05:45:26 +0200]/UNNAMED/[From "Alonzo Walsh" <hfhmvfcotmuht@verizon.com>][Date Sat, 15 Jul 2006 06:27:42 +0200 (added by postmaster@terra.es)]/UNNAMED/[From "Orville Duarte" <zxvkde@amqa.com>] ... /[From "E*TRADE F ... /[From Fausti .. ... / . ... /[From "Dallas Ferris" <tselenium@athomeforhire.com>][Date Sun, 25 Feb 2007 23:44:29 -0600]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped
C:\Documents and Settings\ana\Configuración local\Datos de programa\IM\Identities\{53562F46-605E-4612-A3AF-CE87626B786B}\Message Store\Deleted Items.imm/[From "Rosanna Foote" <tl.wang@testritegroup.com>][Date Tue, 11 Jul 2006 07:40:34 +0300]/UNNAMED/[From <info@laboris.net>][Date Mon, 10 Jul 2006 05:45:26 +0200]/UNNAMED/[From "Alonzo Walsh" <hfhmvfcotmuht@verizon.com>][Date Sat, 15 Jul 2006 06:27:42 +0200 (added by postmaster@terra.es)]/UNNAMED/[From "Orville Duarte" <zxvkde@amqa.com>] ... /[From "E*TRADE F ... /[From Fausti .. ... / ... /[From "Zachery Pritchard" <bruffle@excitingbiz.co.uk>][Date Mon, 26 Feb 2007 13:48:43 +0800]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped
C:\Documents and Settings\ana\Configuración local\Datos de programa\IM\Identities\{53562F46-605E-4612-A3AF-CE87626B786B}\Message Store\Deleted Items.imm/[From "Rosanna Foote" <tl.wang@testritegroup.com>][Date Tue, 11 Jul 2006 07:40:34 +0300]/UNNAMED/[From <info@laboris.net>][Date Mon, 10 Jul 2006 05:45:26 +0200]/UNNAMED/[From "Alonzo Walsh" <hfhmvfcotmuht@verizon.com>][Date Sat, 15 Jul 2006 06:27:42 +0200 (added by postmaster@terra.es)]/UNNAMED/[From "Orville Duarte" <zxvkde@amqa.com>] ... /[From "E*TRADE F ... /[From Fausti .. ... / ... /[From "Roger Freeman" <ackgiffordlcw@ideagalleria.net>][Date Mon, 26 Feb 2007 07:57:59 +0200]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped
C:\Documents and Settings\ana\Configuración local\Datos de programa\IM\Identities\{53562F46-605E-4612-A3AF-CE87626B786B}\Message Store\Deleted Items.imm/[From "Rosanna Foote" <tl.wang@testritegroup.com>][Date Tue, 11 Jul 2006 07:40:34 +0300]/UNNAMED/[From <info@laboris.net>][Date Mon, 10 Jul 2006 05:45:26 +0200]/UNNAMED/[From "Alonzo Walsh" <hfhmvfcotmuht@verizon.com>][Date Sat, 15 Jul 2006 06:27:42 +0200 (added by postmaster@terra.es)]/UNNAMED/[From "Orville Duarte" <zxvkde@amqa.com>] ... /[From "E*TRADE F ... /[From Fausti .. ... /[From "Dominique Olson" <bfdraftsperson@cjsdistributors.com>][Date Mon, 26 Feb 2007 23:46:13 +0200]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped
C:\Documents and Settings\ana\Configuración local\Datos de programa\IM\Identities\{53562F46-605E-4612-A3AF-CE87626B786B}\Message Store\Deleted Items.imm/[From "Rosanna Foote" <tl.wang@testritegroup.com>][Date Tue, 11 Jul 2006 07:40:34 +0300]/UNNAMED/[From <info@laboris.net>][Date Mon, 10 Jul 2006 05:45:26 +0200]/UNNAMED/[From "Alonzo Walsh" <hfhmvfcotmuht@verizon.com>][Date Sat, 15 Jul 2006 06:27:42 +0200 (added by postmaster@terra.es)]/UNNAMED/[From "Orville Duarte" <zxvkde@amqa.com>] ... /[From "E*TRADE F ... /[From Fausti ... /[F . . ... / ... /[From "Dallas Herndon" <qby@brturbo.com.br>][Date Sun, 25 Feb 2007 22:57:11 +0100]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped
C:\Documents and Settings\ana\Configuración local\Datos de programa\IM\Identities\{53562F46-605E-4612-A3AF-CE87626B786B}\Message Store\Deleted Items.imm/[From "Rosanna Foote" <tl.wang@testritegroup.com>][Date Tue, 11 Jul 2006 07:40:34 +0300]/UNNAMED/[From <info@laboris.net>][Date Mon, 10 Jul 2006 05:45:26 +0200]/UNNAMED/[From "Alonzo Walsh" <hfhmvfcotmuht@verizon.com>][Date Sat, 15 Jul 2006 06:27:42 +0200 (added by postmaster@terra.es)]/UNNAMED/[From "Orville Duarte" <zxvkde@amqa.com>] ... /[From "E*TRADE F ... /[From Fausti ... /[F . . ... /[F ... /[From Mabel ... /[From <jzygzwj@brsmith.com>][Date 25 Feb 2007 19:09:12 +0300]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped
C:\Documents and Settings\ana\Configuración local\Datos de programa\IM\Identities\{53562F46-605E-4612-A3AF-CE87626B786B}\Message Store\Deleted Items.imm/[From "Rosanna Foote" <tl.wang@testritegroup.com>][Date Tue, 11 Jul 2006 07:40:34 +0300]/UNNAMED/[From <info@laboris.net>][Date Mon, 10 Jul 2006 05:45:26 +0200]/UNNAMED/[From "Alonzo Walsh" <hfhmvfcotmuht@verizon.com>][Date Sat, 15 Jul 2006 06:27:42 +0200 (added by postmaster@terra.es)]/UNNAMED/[From "Orville Duarte" <zxvkde@amqa.com>] ... /[From "E*TRADE F ... /[From Fausti ... /[F . . ... /[F ... /[From Mabel Dean <kbphone@changhong.com>][Date Sun, 25 Feb 2007 22:51:06 +0200]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped
C:\Documents and Settings\ana\Configuración local\Datos de programa\IM\Identities\{53562F46-605E-4612-A3AF-CE87626B786B}\Message Store\Deleted Items.imm/[From "Rosanna Foote" <tl.wang@testritegroup.com>][Date Tue, 11 Jul 2006 07:40:34 +0300]/UNNAMED/[From <info@laboris.net>][Date Mon, 10 Jul 2006 05:45:26 +0200]/UNNAMED/[From "Alonzo Walsh" <hfhmvfcotmuht@verizon.com>][Date Sat, 15 Jul 2006 06:27:42 +0200 (added by postmaster@terra.es)]/UNNAMED/[From "Orville Duarte" <zxvkde@amqa.com>] ... /[From "E*TRADE F ... /[From Fausti ... /[F . . ... /[F ... /[Fro ... /[From rate <tjgformat@adis.com>][Date Sun, 25 Feb 2007 20:56:44 +0000]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped
C:\Documents and Settings\ana\Configuración local\Datos de programa\IM\Identities\{53562F46-605E-4612-A3AF-CE87626B786B}\Message Store\Deleted Items.imm/[From "Rosanna Foote" <tl.wang@testritegroup.com>][Date Tue, 11 Jul 2006 07:40:34 +0300]/UNNAMED/[From <info@laboris.net>][Date Mon, 10 Jul 2006 05:45:26 +0200]/UNNAMED/[From "Alonzo Walsh" <hfhmvfcotmuht@verizon.com>][Date Sat, 15 Jul 2006 06:27:42 +0200 (added by postmaster@terra.es)]/UNNAMED/[From "Orville Duarte" <zxvkde@amqa.com>] ... /[From "E*TRADE F ... /[From Fausti ... /[F . . ... /[F ... /[From striking an <sjqfacing@hiwheel.com>][Date Sun, 25 Feb 2007 21:58:14 +0100]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped
C:\Documents and Settings\ana\Configuración local\Datos de programa\IM\Identities\{53562F46-605E-4612-A3AF-CE87626B786B}\Message Store\Deleted Items.imm/[From "Rosanna Foote" <tl.wang@testritegroup.com>][Date Tue, 11 Jul 2006 07:40:34 +0300]/UNNAMED/[From <info@laboris.net>][Date Mon, 10 Jul 2006 05:45:26 +0200]/UNNAMED/[From "Alonzo Walsh" <hfhmvfcotmuht@verizon.com>][Date Sat, 15 Jul 2006 06:27:42 +0200 (added by postmaster@terra.es)]/UNNAMED/[From "Orville Duarte" <zxvkde@amqa.com>] ... /[From "E*TRADE F ... /[From Fausti ... /[F . . ... /[From . ... /[From exotic <kcruise@polyspace.com>][Date Sun, 25 Feb 2007 22:01:59 +0100]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped
C:\Documents and Settings\ana\Configuración local\Datos de programa\IM\Identities\{53562F46-605E-4612-A3AF-CE87626B786B}\Message Store\Deleted Items.imm/[From "Rosanna Foote" <tl.wang@testritegroup.com>][Date Tue, 11 Jul 2006 07:40:34 +0300]/UNNAMED/[From <info@laboris.net>][Date Mon, 10 Jul 2006 05:45:26 +0200]/UNNAMED/[From "Alonzo Walsh" <hfhmvfcotmuht@verizon.com>][Date Sat, 15 Jul 2006 06:27:42 +0200 (added by postmaster@terra.es)]/UNNAMED/[From "Orville Duarte" <zxvkde@amqa.com>] ... /[From "E*TRADE F ... /[From Fausti ... /[F . . ... /[From ... /[From "Daryl" <mmickeyzts@jantris.com>][Date Sun, 25 Feb 2007 22:09:11 +0100]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped
C:\Documents and Settings\ana\Configuración local\Datos de programa\IM\Identities\{53562F46-605E-4612-A3AF-CE87626B786B}\Message Store\Deleted Items.imm/[From "Rosanna Foote" <tl.wang@testritegroup.com>][Date Tue, 11 Jul 2006 07:40:34 +0300]/UNNAMED/[From <info@laboris.net>][Date Mon, 10 Jul 2006 05:45:26 +0200]/UNNAMED/[From "Alonzo Walsh" <hfhmvfcotmuht@verizon.com>][Date Sat, 15 Jul 2006 06:27:42 +0200 (added by postmaster@terra.es)]/UNNAMED/[From "Orville Duarte" <zxvkde@amqa.com>] ... /[From "E*TRADE F ... /[From Fausti ... /[F . . ... /[From "nevins erda" <carinemalinda@wotmobile.com>][Date Sun, 25 Feb 2007 18:41:01 -0000]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped
C:\Documents and Settings\ana\Configuración local\Datos de programa\IM\Identities\{53562F46-605E-4612-A3AF-CE87626B786B}\Message Store\Deleted Items.imm/[From "Rosanna Foote" <tl.wang@testritegroup.com>][Date Tue, 11 Jul 2006 07:40:34 +0300]/UNNAMED/[From <info@laboris.net>][Date Mon, 10 Jul 2006 05:45:26 +0200]/UNNAMED/[From "Alonzo Walsh" <hfhmvfcotmuht@verizon.com>][Date Sat, 15 Jul 2006 06:27:42 +0200 (added by postmaster@terra.es)]/UNNAMED/[From "Orville Duarte" <zxvkde@amqa.com>] ... /[From "E*TRADE F ... /[From Fausti ... /[F . ... /[From "GERSHOM Brauer" <interlinkrival@air2lan.net>][Date Sun, 25 Feb 2007 18:30:26 -0180]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped
C:\Documents and Settings\ana\Configuración local\Datos de programa\IM\Identities\{53562F46-605E-4612-A3AF-CE87626B786B}\Message Store\Deleted Items.imm/[From "Rosanna Foote" <tl.wang@testritegroup.com>][Date Tue, 11 Jul 2006 07:40:34 +0300]/UNNAMED/[From <info@laboris.net>][Date Mon, 10 Jul 2006 05:45:26 +0200]/UNNAMED/[From "Alonzo Walsh" <hfhmvfcotmuht@verizon.com>][Date Sat, 15 Jul 2006 06:27:42 +0200 (added by postmaster@terra.es)]/UNNAMED/[From "Orville Duarte" <zxvkde@amqa.com>] ... /[From "E*TRADE F ... /[From Fausti ... /[F ... /[F ... ... /[F ... /[From Kalignment <rnull@koho.net>][Date Sun, 25 Feb 2007 19:24:10 +0100]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped
C:\Documents and Settings\ana\Configuración local\Datos de programa\IM\Identities\{53562F46-605E-4612-A3AF-CE87626B786B}\Message Store\Deleted Items.imm/[From "Rosanna Foote" <tl.wang@testritegroup.com>][Date Tue, 11 Jul 2006 07:40:34 +0300]/UNNAMED/[From <info@laboris.net>][Date Mon, 10 Jul 2006 05:45:26 +0200]/UNNAMED/[From "Alonzo Walsh" <hfhmvfcotmuht@verizon.com>][Date Sat, 15 Jul 2006 06:27:42 +0200 (added by postmaster@terra.es)]/UNNAMED/[From "Orville Duarte" <zxvkde@amqa.com>] ... /[From "E*TRADE F ... /[From Fausti ... /[F ... /[F ... ... /[From "Glenna Meadows" <gejenkins@mpz.ch>][Date Mon, 26 Feb 2007 00:44:29 +0800]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped
C:\Documents and Settings\ana\Configuración local\Datos de programa\IM\Identities\{53562F46-605E-4612-A3AF-CE87626B786B}\Message Store\Deleted Items.imm/[From "Rosanna Foote" <tl.wang@testritegroup.com>][Date Tue, 11 Jul 2006 07:40:34 +0300]/UNNAMED/[From <info@laboris.net>][Date Mon, 10 Jul 2006 05:45:26 +0200]/UNNAMED/[From "Alonzo Walsh" <hfhmvfcotmuht@verizon.com>][Date Sat, 15 Jul 2006 06:27:42 +0200 (added by postmaster@terra.es)]/UNNAMED/[From "Orville Duarte" <zxvkde@amqa.com>] ... /[From "E*TRADE F ... /[From Fausti ... /[F ... /[F ... /[From "Billy Raines" <tmprintout@amylynn.org>][Date Sun, 25 Feb 2007 13:52:31 -0300]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped
C:\Documents and Settings\ana\Configuración local\Datos de programa\IM\Identities\{53562F46-605E-4612-A3AF-CE87626B786B}\Message Store\Deleted Items.imm/[From "Rosanna Foote" <tl.wang@testritegroup.com>][Date Tue, 11 Jul 2006 07:40:34 +0300]/UNNAMED/[From <info@laboris.net>][Date Mon, 10 Jul 2006 05:45:26 +0200]/UNNAMED/[From "Alonzo Walsh" <hfhmvfcotmuht@verizon.com>][Date Sat, 15 Jul 2006 06:27:42 +0200 (added by postmaster@terra.es)]/UNNAMED/[From "Orville Duarte" <zxvkde@amqa.com>] ... /[From "E*TRADE F ... /[From Fausti ... /[F ... /[Fr ... /[ ... /[ ... /[From enhanced" <getaytt@caiway.nl>][Date 25 Feb 2007 15:59:29 -0100]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped
C:\Documents and Settings\ana\Configuración local\Datos de programa\IM\Identities\{53562F46-605E-4612-A3AF-CE87626B786B}\Message Store\Deleted Items.imm/[From "Rosanna Foote" <tl.wang@testritegroup.com>][Date Tue, 11 Jul 2006 07:40:34 +0300]/UNNAMED/[From <info@laboris.net>][Date Mon, 10 Jul 2006 05:45:26 +0200]/UNNAMED/[From "Alonzo Walsh" <hfhmvfcotmuht@verizon.com>][Date Sat, 15 Jul 2006 06:27:42 +0200 (added by postmaster@terra.es)]/UNNAMED/[From "Orville Duarte" <zxvkde@amqa.com>] ... /[From "E*TRADE F ... /[From Fausti ... /[F ... /[Fr ... /[ ... /[From "Kiel Squire" <Squire@KOMER.PL>][Date Sun, 25 Feb 2007 14:23:10 +0100]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped
C:\Documents and Settings\ana\Configuración local\Datos de programa\IM\Identities\{53562F46-605E-4612-A3AF-CE87626B786B}\Message Store\Deleted Items.imm/[From "Rosanna Foote" <tl.wang@testritegroup.com>][Date Tue, 11 Jul 2006 07:40:34 +0300]/UNNAMED/[From <info@laboris.net>][Date Mon, 10 Jul 2006 05:45:26 +0200]/UNNAMED/[From "Alonzo Walsh" <hfhmvfcotmuht@verizon.com>][Date Sat, 15 Jul 2006 06:27:42 +0200 (added by postmaster@terra.es)]/UNNAMED/[From "Orville Duarte" <zxvkde@amqa.com>] ... /[From "E*TRADE F ... /[From Fausti ... /[F ... /[Fr ... /[From "Candace Hodges" <bkbateau@ardops.com>][Date Sat, 24 Feb 2007 08:49:20 -0500]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped
C:\Documents and Settings\ana\Configuración local\Datos de programa\IM\Identities\{53562F46-605E-4612-A3AF-CE87626B786B}\Message Store\Deleted Items.imm/[From "Rosanna Foote" <tl.wang@testritegroup.com>][Date Tue, 11 Jul 2006 07:40:34 +0300]/UNNAMED/[From <info@laboris.net>][Date Mon, 10 Jul 2006 05:45:26 +0200]/UNNAMED/[From "Alonzo Walsh" <hfhmvfcotmuht@verizon.com>][Date Sat, 15 Jul 2006 06:27:42 +0200 (added by postmaster@terra.es)]/UNNAMED/[From "Orville Duarte" <zxvkde@amqa.com>] ... /[From "E*TRADE F ... /[From Fausti ... /[F ... /[From "Gregorio Dominguez" <gqtpugnacious@cwp.net.pa>][Date Sat, 24 Feb 2007 22:52:14 +0900]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped
C:\Documents and Settings\ana\Configuración local\Datos de programa\IM\Identities\{53562F46-605E-4612-A3AF-CE87626B786B}\Message Store\Deleted Items.imm/[From "Rosanna Foote" <tl.wang@testritegroup.com>][Date Tue, 11 Jul 2006 07:40:34 +0300]/UNNAMED/[From <info@laboris.net>][Date Mon, 10 Jul 2006 05:45:26 +0200]/UNNAMED/[From "Alonzo Walsh" <hfhmvfcotmuht@verizon.com>][Date Sat, 15 Jul 2006 06:27:42 +0200 (added by postmaster@terra.es)]/UNNAMED/[From "Orville Duarte" <zxvkde@amqa.com>] ... /[From "E*TRADE F ... /[From Fausti ... /[F .. ... ... /[From "Dewey Chase" <lthousandfold@esobar.com>][Date Sat, 24 Feb 2007 14:55:35 +0100]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped
C:\Documents and Settings\ana\Configuración local\Datos de programa\IM\Identities\{53562F46-605E-4612-A3AF-CE87626B786B}\Message Store\Deleted Items.imm/[From "Rosanna Foote" <tl.wang@testritegroup.com>][Date Tue, 11 Jul 2006 07:40:34 +0300]/UNNAMED/[From <info@laboris.net>][Date Mon, 10 Jul 2006 05:45:26 +0200]/UNNAMED/[From "Alonzo Walsh" <hfhmvfcotmuht@verizon.com>][Date Sat, 15 Jul 2006 06:27:42 +0200 (added by postmaster@terra.es)]/UNNAMED/[From "Orville Duarte" <zxvkde@amqa.com>] ... /[From "E*TRADE F ... /[From Fausti ... /[F .. ... ... /[From "Caroll Ramos" <monnyw@telecomitalia.it>][Date Sat, 24 Feb 2007 10:06:35 -0400]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped
C:\Documents and Settings\ana\Configuración local\Datos de programa\IM\Identities\{53562F46-605E-4612-A3AF-CE87626B786B}\Message Store\Deleted Items.imm/[From "Rosanna Foote" <tl.wang@testritegroup.com>][Date Tue, 11 Jul 2006 07:40:34 +0300]/UNNAMED/[From <info@laboris.net>][Date Mon, 10 Jul 2006 05:45:26 +0200]/UNNAMED/[From "Alonzo Walsh" <hfhmvfcotmuht@verizon.com>][Date Sat, 15 Jul 2006 06:27:42 +0200 (added by postmaster@terra.es)]/UNNAMED/[From "Orville Duarte" <zxvkde@amqa.com>] ... /[From "E*TRADE F ... /[From Fausti ... /[F .. ... /[From "Jefferey jarocki" <jarocki@ablaze.biz>][Date Sat, 24 Feb 2007 16:50:09 -0000 (GMT)]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped
C:\Documents and Settings\ana\Configuración local\Datos de programa\IM\Identities\{53562F46-605E-4612-A3AF-CE87626B786B}\Message Store\Deleted Items.imm/[From "Rosanna Foote" <tl.wang@testritegroup.com>][Date Tue, 11 Jul 2006 07:40:34 +0300]/UNNAMED/[From <info@laboris.net>][Date Mon, 10 Jul 2006 05:45:26 +0200]/UNNAMED/[From "Alonzo Walsh" <hfhmvfcotmuht@verizon.com>][Date Sat, 15 Jul 2006 06:27:42 +0200 (added by postmaster@terra.es)]/UNNAMED/[From "Orville Duarte" <zxvkde@amqa.com>] ... /[From "E*TRADE F ... /[From Fausti ... /[F ... /[From "Adrienne Obrien" <mqzportage@ceinternet.com.au>][Date Sat, 24 Feb 2007 18:19:35 +0100]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped
C:\Documents and Settings\ana\Configuración local\Datos de programa\IM\Identities\{53562F46-605E-4612-A3AF-CE87626B786B}\Message Store\Deleted Items.imm/[From "Rosanna Foote" <tl.wang@testritegroup.com>][Date Tue, 11 Jul 2006 07:40:34 +0300]/UNNAMED/[From <info@laboris.net>][Date Mon, 10 Jul 2006 05:45:26 +0200]/UNNAMED/[From "Alonzo Walsh" <hfhmvfcotmuht@verizon.com>][Date Sat, 15 Jul 2006 06:27:42 +0200 (added by postmaster@terra.es)]/UNNAMED/[From "Orville Duarte" <zxvkde@amqa.com>] ... /[From "E*TRADE F ... /[From Fausti ... /[F ... /[From "Deanne Alvarado" <fwextracellular@alarmists.com>][Date Sat, 24 Feb 2007 18:26:59 +0100]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped
C:\Documents and Settings\ana\Configuración local\Datos de programa\IM\Identities\{53562F46-605E-4612-A3AF-CE87626B786B}\Message Store\Deleted Items.imm/[From "Rosanna Foote" <tl.wang@testritegroup.com>][Date Tue, 11 Jul 2006 07:40:34 +0300]/UNNAMED/[From <info@laboris.net>][Date Mon, 10 Jul 2006 05:45:26 +0200]/UNNAMED/[From "Alonzo Walsh" <hfhmvfcotmuht@verizon.com>][Date Sat, 15 Jul 2006 06:27:42 +0200 (added by postmaster@terra.es)]/UNNAMED/[From "Orville Duarte" <zxvkde@amqa.com>] ... /[From "E*TRADE F ... /[From Fausti ... /[From ... /[ ... /[From "Ada Vincent" <qfmimeograph@e-told.org>][Date Thu, 2 Jan 2003 18:36:15 +0100]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped
C:\Documents and Settings\ana\Configuración local\Datos de programa\IM\Identities\{53562F46-605E-4612-A3AF-CE87626B786B}\Message Store\Deleted Items.imm/[From "Rosanna Foote" <tl.wang@testritegroup.com>][Date Tue, 11 Jul 2006 07:40:34 +0300]/UNNAMED/[From <info@laboris.net>][Date Mon, 10 Jul 2006 05:45:26 +0200]/UNNAMED/[From "Alonzo Walsh" <hfhmvfcotmuht@verizon.com>][Date Sat, 15 Jul 2006 06:27:42 +0200 (added by postmaster@terra.es)]/UNNAMED/[From "Orville Duarte" <zxvkde@amqa.com>] ... /[From "E*TRADE F ... /[From Fausti ... /[From ... /[From "Angila" <apache-elvisvxhx@lacostesearch.com>][Date Sat, 24 Feb 2007 19:22:22 +0100]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped
C:\Documents and Settings\ana\Configuración local\Datos de programa\IM\Identities\{53562F46-605E-4612-A3AF-CE87626B786B}\Message Store\Deleted Items.imm/[From "Rosanna Foote" <tl.wang@testritegroup.com>][Date Tue, 11 Jul 2006 07:40:34 +0300]/UNNAMED/[From <info@laboris.net>][Date Mon, 10 Jul 2006 05:45:26 +0200]/UNNAMED/[From "Alonzo Walsh" <hfhmvfcotmuht@verizon.com>][Date Sat, 15 Jul 2006 06:27:42 +0200 (added by postmaster@terra.es)]/UNNAMED/[From "Orville Duarte" <zxvkde@amqa.com>] ... /[From "E*TRADE F ... /[From Fausti ... /[From "Detlef matts" <mattssofb@arianrhodrottweilers.com>][Date Sat, 24 Feb 2007 19:34:10 -0000 (GMT)]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped
C:\Documents and Settings\ana\Configuración local\Datos de programa\IM\Identities\{53562F46-605E-4612-A3AF-CE87626B786B}\Message Store\Deleted Items.imm/[From "Rosanna Foote" <tl.wang@testritegroup.com>][Date Tue, 11 Jul 2006 07:40:34 +0300]/UNNAMED/[From <info@laboris.net>][Date Mon, 10 Jul 2006 05:45:26 +0200]/UNNAMED/[From "Alonzo Walsh" <hfhmvfcotmuht@verizon.com>][Date Sat, 15 Jul 2006 06:27:42 +0200 (added by postmaster@terra.es)]/UNNAMED/[From "Orville Duarte" <zxvkde@amqa.com>] ... /[From "E*TRADE F ... /[From Faustino Hanna . ... /[ ... /[From Margery Yazzie <fysfeed@wauconda.com>][Date Sat, 24 Feb 2007 14:01:45 -0600]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped
C:\Documents and Settings\ana\Configuración local\Datos de programa\IM\Identities\{53562F46-605E-4612-A3AF-CE87626B786B}\Message Store\Deleted Items.imm/[From "Rosanna Foote" <tl.wang@testritegroup.com>][Date Tue, 11 Jul 2006 07:40:34 +0300]/UNNAMED/[From <info@laboris.net>][Date Mon, 10 Jul 2006 05:45:26 +0200]/UNNAMED/[From "Alonzo Walsh" <hfhmvfcotmuht@verizon.com>][Date Sat, 15 Jul 2006 06:27:42 +0200 (added by postmaster@terra.es)]/UNNAMED/[From "Orville Duarte" <zxvkde@amqa.com>] ... /[From "E*TRADE F ... /[From Faustino Hanna . ... /[ ... /[From " ... /[From zoom <ktnloaded@fbhr.com>][Date Sat, 24 Feb 2007 21:09:04 +0100]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped
C:\Documents and Settings\ana\Configuración local\Datos de programa\IM\Identities\{53562F46-605E-4612-A3AF-CE87626B786B}\Message Store\Deleted Items.imm/[From "Rosanna Foote" <tl.wang@testritegroup.com>][Date Tue, 11 Jul 2006 07:40:34 +0300]/UNNAMED/[From <info@laboris.net>][Date Mon, 10 Jul 2006 05:45:26 +0200]/UNNAMED/[From "Alonzo Walsh" <hfhmvfcotmuht@verizon.com>][Date Sat, 15 Jul 2006 06:27:42 +0200 (added by postmaster@terra.es)]/UNNAMED/[From "Orville Duarte" <zxvkde@amqa.com>] ... /[From "E*TRADE F ... /[From Faustino Hanna . ... /[ ... /[From "Phil Flanagan" <wccuttlebone@econ.bg>][Date Sun, 25 Feb 2007 05:16:21 +0900]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped
C:\Documents and Settings\ana\Configuración local\Datos de programa\IM\Identities\{53562F46-605E-4612-A3AF-CE87626B786B}\Message Store\Deleted Items.imm/[From "Rosanna Foote" <tl.wang@testritegroup.com>][Date Tue, 11 Jul 2006 07:40:34 +0300]/UNNAMED/[From <info@laboris.net>][Date Mon, 10 Jul 2006 05:45:26 +0200]/UNNAMED/[From "Alonzo Walsh" <hfhmvfcotmuht@verizon.com>][Date Sat, 15 Jul 2006 06:27:42 +0200 (added by postmaster@terra.es)]/UNNAMED/[From "Orville Duarte" <zxvkde@amqa.com>] ... /[From "E*TRADE F ... /[From Faustino Hanna . ... /[ ... /[F ... /[From Wmono <wmlphysiology@tuxia.com>][Date Sat, 24 Feb 2007 22:24:14 +0100]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped
C:\Documents and Settings\ana\Configuración local\Datos de programa\IM\Identities\{53562F46-605E-4612-A3AF-CE87626B786B}\Message Store\Deleted Items.imm/[From "Rosanna Foote" <tl.wang@testritegroup.com>][Date Tue, 11 Jul 2006 07:40:34 +0300]/UNNAMED/[From <info@laboris.net>][Date Mon, 10 Jul 2006 05:45:26 +0200]/UNNAMED/[From "Alonzo Walsh" <hfhmvfcotmuht@verizon.com>][Date Sat, 15 Jul 2006 06:27:42 +0200 (added by postmaster@terra.es)]/UNNAMED/[From "Orville Duarte" <zxvkde@amqa.com>] ... /[From "E*TRADE F ... /[From Faustino Hanna . ... /[ ... /[From "Clifton Brennan" <ffusurer@fastem.com>][Date Sat, 24 Feb 2007 16:24:55 -0600]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped
C:\Documents and Settings\ana\Configuración local\Datos de programa\IM\Identities\{53562F46-605E-4612-A3AF-CE87626B786B}\Message Store\Deleted Items.imm/[From "Rosanna Foote" <tl.wang@testritegroup.com>][Date Tue, 11 Jul 2006 07:40:34 +0300]/UNNAMED/[From <info@laboris.net>][Date Mon, 10 Jul 2006 05:45:26 +0200]/UNNAMED/[From "Alonzo Walsh" <hfhmvfcotmuht@verizon.com>][Date Sat, 15 Jul 2006 06:27:42 +0200 (added by postmaster@terra.es)]/UNNAMED/[From "Orville Duarte" <zxvkde@amqa.com>] ... /[From "E*TRADE F ... /[From Faustino Hanna . ... /[From "willa cullie" <mallorymelosa@dh-shanghai.com>][Date Sun, 25 Feb 2007 09:23:53 +0900]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped
C:\Documents and Settings\ana\Configuración local\Datos de programa\IM\Identities\{53562F46-605E-4612-A3AF-CE87626B786B}\Message Store\Deleted Items.imm/[From "Rosanna Foote" <tl.wang@testritegroup.com>][Date Tue, 11 Jul 2006 07:40:34 +0300]/UNNAMED/[From <info@laboris.net>][Date Mon, 10 Jul 2006 05:45:26 +0200]/UNNAMED/[From "Alonzo Walsh" <hfhmvfcotmuht@verizon.com>][Date Sat, 15 Jul 2006 06:27:42 +0200 (added by postmaster@terra.es)]/UNNAMED/[From "Orville Duarte" <zxvkde@amqa.com>] ... /[From "E*TRADE F ... /[From Faustino Hanna ... /[From "mseve Pier" <Piernxbd@LINCOLNDIESELS.COM>][Date Sun, 25 Feb 2007 09:38:36 +0800 (GMT)]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped
C:\Documents and Settings\ana\Configuración local\Datos de programa\IM\Identities\{53562F46-605E-4612-A3AF-CE87626B786B}\Message Store\Deleted Items.imm/[From "Rosanna Foote" <tl.wang@testritegroup.com>][Date Tue, 11 Jul 2006 07:40:34 +0300]/UNNAMED/[From <info@laboris.net>][Date Mon, 10 Jul 2006 05:45:26 +0200]/UNNAMED/[From "Alonzo Walsh" <hfhmvfcotmuht@verizon.com>][Date Sat, 15 Jul 2006 06:27:42 +0200 (added by postmaster@terra.es)]/UNNAMED/[From "Orville Duarte" <zxvkde@amqa.com>] ... /[From "E*TRADE F ... /[From Faustino Hanna ... /[ ... /[From "Stefani" <winkprogramooihn@eichenhof.net>][Date Sun, 25 Feb 2007 00:26:44 -0200]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped
C:\Documents and Settings\ana\Configuración local\Datos de programa\IM\Identities\{53562F46-605E-4612-A3AF-CE87626B786B}\Message Store\Deleted Items.imm/[From "Rosanna Foote" <tl.wang@testritegroup.com>][Date Tue, 11 Jul 2006 07:40:34 +0300]/UNNAMED/[From <info@laboris.net>][Date Mon, 10 Jul 2006 05:45:26 +0200]/UNNAMED/[From "Alonzo Walsh" <hfhmvfcotmuht@verizon.com>][Date Sat, 15 Jul 2006 06:27:42 +0200 (added by postmaster@terra.es)]/UNNAMED/[From "Orville Duarte" <zxvkde@amqa.com>] ... /[From "E*TRADE F ... /[From Faustino Hanna ... /[Fr ... ... /[From "Karyn Melton" <zbutton@cstyle.org>][Date Sun, 25 Feb 2007 11:08:34 +0800]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped
C:\Documents and Settings\ana\Configuración local\Datos de programa\IM\Identities\{53562F46-605E-4612-A3AF-CE87626B786B}\Message Store\Deleted Items.imm/[From "Rosanna Foote" <tl.wang@testritegroup.com>][Date Tue, 11 Jul 2006 07:40:34 +0300]/UNNAMED/[From <info@laboris.net>][Date Mon, 10 Jul 2006 05:45:26 +0200]/UNNAMED/[From "Alonzo Walsh" <hfhmvfcotmuht@verizon.com>][Date Sat, 15 Jul 2006 06:27:42 +0200 (added by postmaster@terra.es)]/UNNAMED/[From "Orville Duarte" <zxvkde@amqa.com>] ... /[From "E*TRADE F ... /[From Faustino Hanna ... /[Fr ... /[From "Tracey Dunlap" <bbkprevention@email.ee>][Date Sun, 25 Feb 2007 17:26:53 +0800]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped
C:\Documents and Settings\ana\Configuración local\Datos de programa\IM\Identities\{53562F46-605E-4612-A3AF-CE87626B786B}\Message Store\Deleted Items.imm/[From "Rosanna Foote" <tl.wang@testritegroup.com>][Date Tue, 11 Jul 2006 07:40:34 +0300]/UNNAMED/[From <info@laboris.net>][Date Mon, 10 Jul 2006 05:45:26 +0200]/UNNAMED/[From "Alonzo Walsh" <hfhmvfcotmuht@verizon.com>][Date Sat, 15 Jul 2006 06:27:42 +0200 (added by postmaster@terra.es)]/UNNAMED/[From "Orville Duarte" <zxvkde@amqa.com>] ... /[From "E*TRADE F ... /[From Faustino Hanna ... /[From "milan Speelman" <milan-Speelman@PARKERLEPLA.COM>][Date Sun, 25 Feb 2007 08:55:37 -0300]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped
C:\Documents and Settings\ana\Configuración local\Datos de programa\IM\Identities\{53562F46-605E-4612-A3AF-CE87626B786B}\Message Store\Deleted Items.imm/[From "Rosanna Foote" <tl.wang@testritegroup.com>][Date Tue, 11 Jul 2006 07:40:34 +0300]/UNNAMED/[From <info@laboris.net>][Date Mon, 10 Jul 2006 05:45:26 +0200]/UNNAMED/[From "Alonzo Walsh" <hfhmvfcotmuht@verizon.com>][Date Sat, 15 Jul 2006 06:27:42 +0200 (added by postmaster@terra.es)]/UNNAMED/[From "Orville Duarte" <zxvkde@amqa.com>] ... /[From "E*TRADE F ... /[From Faustino Hanna ... . ... /[From Jolene Dale <muncertain@mailpersonal.com>][Date Sun, 25 Feb 2007 12:23:08 +0100]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.ri skipped

bueno.. he eliminado manualmente el archivo C:\Documents and Settings\ana\Configuración local\Datos de programa\IM\Identities\{53562F46-605E-4612-A3AF-CE87626B786B}\Message Store\Deleted Items.imm y ahora parece q ya no sale el virus..........

Hola SeRGiuKo, me parece que el problema puede estar tambien en un programa o barra infectada que instalaste, si te aparece una barra que se llama hotbar trata de desinstlalarla y si tienes un programa llamado alcohol tambien desinstalalo, utiliza un scaneo para eliminar toda infeccion en modo apureba de fallos con un antivirus y un antispyware actualizado, saludos