Foro de InfoSpyware - Foro de Hijackthis - Foro de Virus

Hola,

He intentado solucionar mi problema solito, pero llega un momento en que necesito ayuda.

Tengo un portatil con Win XP SP3, y F-Secure 5 que se actualiza automáticamente.
Seguramente se ha infectado el ordenador con virus a través de una memoria flash.

Siguiendo pasos leidos en post de "solucionados" he hecho lo siguiente:

1. Apagué el restaurar sistema.
2. Usé flash-disinfector. Con el ordenador sólo y con el disco USB.
3. Reinicié a modo a prueba de fallos. Y volví a usar Flash-Disinfector.
4. Usé CCleaner, limpiador y registro.
5. Luego Malwarebytes, instalar, actualizar, y que no detectó nada. (más abajo el log)
6. Volví a modo normal de windows, ya que F-Secure no parece arrancar en modo a prueba de fallos.
7. Usé por si acaso de nuevo flash-disinfector.
8. F-Secure siguió detectando virus. (log más abajo).
Comentario: el archivo gasretyw0.dll que detecta, no lo veo, aunque todavía
parece funcionar el modo "ver archivos ocultos".
9. He vuelto a entrar en modo a prueba de fallos. He vuelto a repetir
CCleaner y he pasado el Kasperspy Online, que ha encontrado un montón de
virus. (log más abajo).

Si alguien sabe como seguir, se lo agradecería mucho. De momento ya me he
bajado el OTMoveit3, que veo que es popular en el foro.
Gracias de antemano.


---- Malwarebytes
Malwarebytes' Anti-Malware 1.30
Versión de la Base de Datos: 1306
Windows 5.1.2600 Service Pack 3

01/12/2008 21:54:13
mbam-log-2008-12-01 (21-54-13).txt

Tipo de examen : Examen Completo (C:\|D:\|)
Objetos examinados: 143874
Tiempo transcurrido: 1 hour(s), 53 minute(s), 39 second(s)

Procesos en Memoria Infectados: 0
Módulos en Memoria Infectados: 0
Claves del Registro Infectadas: 0
Valores del Registro Infectados: 0
Elementos de Datos del Registro Infectados: 0
Carpetas Infectadas: 0
Ficheros Infectados: 0

Procesos en Memoria Infectados:
(No se han detectado elementos maliciosos)

Módulos en Memoria Infectados:
(No se han detectado elementos maliciosos)

Claves del Registro Infectadas:
(No se han detectado elementos maliciosos)

Valores del Registro Infectados:
(No se han detectado elementos maliciosos)

Elementos de Datos del Registro Infectados:
(No se han detectado elementos maliciosos)

Carpetas Infectadas:
(No se han detectado elementos maliciosos)

Ficheros Infectados:
(No se han detectado elementos maliciosos)



---- Log F-Secure
1 2008-12-01 22:25:52+02:00 cecilia CECILIA\cecilia-ramon F-Secure

Automatic Update Agent 1.3.6.1.4.1.2213.42
F-Secure Anti-Virus update 2008-12-01_07 delivered to C:\Archivos de

programa\F-Secure\Anti-Virus\dbupdate
2 2008-12-01 22:26:48+02:00 cecilia CECILIA\cecilia-ramon F-Secure Anti

-Virus 1.3.6.1.4.1.2213.12
Virus definition database(s) dailyc.avc fa001.avc orion.dat updated

successfully.
1 2008-12-02 07:44:08+02:00 cecilia CECILIA\cecilia-ramon F-Secure Anti

-Virus 1.3.6.1.4.1.2213.11.1.12
Malicious code found in file F:\AUTORUN.INF. Infection:

Worm.Win32.AutoRun.tgf
2 2008-12-02 07:44:09+02:00 cecilia CECILIA\cecilia-ramon F-Secure Anti

-Virus 1.3.6.1.4.1.2213.11.1.12
Malicious code found in file F:\AUTORUN.INF. Infection:

Worm.Win32.AutoRun.tgf
3 2008-12-02 07:50:12+02:00 cecilia CECILIA\cecilia-ramon F-Secure Anti

-Virus 1.3.6.1.4.1.2213.11.1.12
Malicious code found in file C:\WINDOWS\SYSTEM32\GASRETYW0.DLL. Infection:

Packed.Win32.Krap.b
4 2008-12-02 08:09:46+02:00 cecilia CECILIA\cecilia-ramon F-Secure Anti

-Virus 1.3.6.1.4.1.2213.11.1.12
Scanning of C:\ARCHIVOS DE PROGRAMA\F-SECURE\BACKWEB\7681197\6.3.2.62-

7681197L\PROGRAM\BACKWEB.TLB was aborted due to exceeded scanning time limit.

The file may be in use or reading it was too slow (e.g. network connection

was under stress).
5 2008-12-02 08:44:43+02:00 cecilia CECILIA\cecilia-ramon F-Secure Anti

-Virus 1.3.6.1.4.1.2213.11.1.12
Scanning of C:\ARCHIVOS DE PROGRAMA\WINAMP\WINAMP.INI was aborted due to

exceeded scanning time limit. The file may be in use or reading it was too

slow (e.g. network connection was under stress).
6 2008-12-02 08:47:56+02:00 cecilia CECILIA\cecilia-ramon F-Secure Anti

-Virus 1.3.6.1.4.1.2213.11.1.12
Malicious code found in file F:\0O.COM. Infection: Trojan-

GameThief.Win32.Magania.alss
7 2008-12-02 08:47:56+02:00 cecilia CECILIA\cecilia-ramon F-Secure Anti

-Virus 1.3.6.1.4.1.2213.11.1.12
Malicious code found in file F:\IJ.BAT. Infection: Trojan-

GameThief.Win32.Magania.altw
8 2008-12-02 08:47:57+02:00 cecilia CECILIA\cecilia-ramon F-Secure Anti

-Virus 1.3.6.1.4.1.2213.11.1.12
Malicious code found in file F:\6QE.COM. Infection: Trojan-

GameThief.Win32.OnLineGames.sda
9 2008-12-02 08:47:59+02:00 cecilia CECILIA\cecilia-ramon F-Secure Anti

-Virus 1.3.6.1.4.1.2213.11.1.12
Malicious code found in file F:\SYSTEM VOLUME INFORMATION\_RESTORE{65021036

-07EB-4C15-9FF4-5EF28BA537B0}\RP395\A0178850.BAT. Infection: Trojan-

GameThief.Win32.Magania.altw
10 2008-12-02 08:48:00+02:00 cecilia CECILIA\cecilia-ramon F-Secure

Anti-Virus 1.3.6.1.4.1.2213.11.1.12
Malicious code found in file F:\SYSTEM VOLUME INFORMATION\_RESTORE{65021036

-07EB-4C15-9FF4-5EF28BA537B0}\RP395\A0178851.INF. Infection:

Worm.Win32.AutoRun.tgf
11 2008-12-02 08:48:00+02:00 cecilia CECILIA\cecilia-ramon F-Secure

Anti-Virus 1.3.6.1.4.1.2213.11.1.12
Malicious code found in file F:\SYSTEM VOLUME INFORMATION\_RESTORE{58DEBF9E

-8D38-41FB-BF88-3C8E6BEAA4D3}\RP33\A0005754.INF. Infection:

Worm.Win32.AutoRun.tgf
12 2008-12-02 08:48:01+02:00 cecilia CECILIA\cecilia-ramon F-Secure

Anti-Virus 1.3.6.1.4.1.2213.11.1.12
Malicious code found in file F:\SYSTEM VOLUME INFORMATION\_RESTORE{58DEBF9E

-8D38-41FB-BF88-3C8E6BEAA4D3}\RP54\A0016528.BAT. Infection: Trojan-

GameThief.Win32.Magania.altw
13 2008-12-02 08:48:01+02:00 cecilia CECILIA\cecilia-ramon F-Secure

Anti-Virus 1.3.6.1.4.1.2213.11.1.12
Malicious code found in file F:\SYSTEM VOLUME INFORMATION\_RESTORE{58DEBF9E

-8D38-41FB-BF88-3C8E6BEAA4D3}\RP54\A0016529.INF. Infection: Trojan-

GameThief.Win32.OnLineGames.snk
14 2008-12-02 08:48:01+02:00 cecilia CECILIA\cecilia-ramon F-Secure

Anti-Virus 1.3.6.1.4.1.2213.11.1.12
Malicious code found in file F:\SYSTEM VOLUME INFORMATION\_RESTORE{58DEBF9E

-8D38-41FB-BF88-3C8E6BEAA4D3}\RP55\A0016558.COM. Infection: Trojan-

GameThief.Win32.Magania.alss
15 2008-12-02 08:48:01+02:00 cecilia CECILIA\cecilia-ramon F-Secure

Anti-Virus 1.3.6.1.4.1.2213.11.1.12
Malicious code found in file F:\SYSTEM VOLUME INFORMATION\_RESTORE{58DEBF9E

-8D38-41FB-BF88-3C8E6BEAA4D3}\RP55\A0016559.BAT. Infection: Trojan-

GameThief.Win32.Magania.altw
16 2008-12-02 08:48:01+02:00 cecilia CECILIA\cecilia-ramon F-Secure

Anti-Virus 1.3.6.1.4.1.2213.11.1.12
Malicious code found in file F:\SYSTEM VOLUME INFORMATION\_RESTORE{58DEBF9E

-8D38-41FB-BF88-3C8E6BEAA4D3}\RP55\A0016560.INF. Infection:

Worm.Win32.AutoRun.tgf
17 2008-12-02 08:48:01+02:00 cecilia CECILIA\cecilia-ramon F-Secure

Anti-Virus 1.3.6.1.4.1.2213.11.1.12
Malicious code found in file F:\SYSTEM VOLUME INFORMATION\_RESTORE{58DEBF9E

-8D38-41FB-BF88-3C8E6BEAA4D3}\RP55\A0016563.COM. Infection: Trojan-

GameThief.Win32.Magania.alss
18 2008-12-02 08:48:01+02:00 cecilia CECILIA\cecilia-ramon F-Secure

Anti-Virus 1.3.6.1.4.1.2213.11.1.12
Malicious code found in file F:\SYSTEM VOLUME INFORMATION\_RESTORE{58DEBF9E

-8D38-41FB-BF88-3C8E6BEAA4D3}\RP55\A0016564.BAT. Infection: Trojan-

GameThief.Win32.Magania.altw
19 2008-12-02 08:48:01+02:00 cecilia CECILIA\cecilia-ramon F-Secure

Anti-Virus 1.3.6.1.4.1.2213.11.1.12
Malicious code found in file F:\SYSTEM VOLUME INFORMATION\_RESTORE{58DEBF9E

-8D38-41FB-BF88-3C8E6BEAA4D3}\RP55\A0016571.COM. Infection: Trojan-

GameThief.Win32.Magania.alss
20 2008-12-02 08:48:01+02:00 cecilia CECILIA\cecilia-ramon F-Secure

Anti-Virus 1.3.6.1.4.1.2213.11.1.12
Malicious code found in file F:\SYSTEM VOLUME INFORMATION\_RESTORE{58DEBF9E

-8D38-41FB-BF88-3C8E6BEAA4D3}\RP55\A0016572.BAT. Infection: Trojan-

GameThief.Win32.Magania.altw
21 2008-12-02 08:48:01+02:00 cecilia CECILIA\cecilia-ramon F-Secure

Anti-Virus 1.3.6.1.4.1.2213.11.1.12
Malicious code found in file F:\SYSTEM VOLUME INFORMATION\_RESTORE{58DEBF9E

-8D38-41FB-BF88-3C8E6BEAA4D3}\RP55\A0016573.INF. Infection:

Worm.Win32.AutoRun.tgf


--- Kasperspy

----------------------------------------------------------------------------

---
KASPERSKY ONLINE SCANNER INFORME
miércoles, 03 de diciembre de 2008 22:16:58
Sistema operativo: Microsoft Windows XP Home Edition, Service Pack 3 (Build

2600)
Kaspersky Online Scanner versión: 5.0.84.1
Ultima actualización: 3/12/2008
Registros en la base antivirus: 1434985
----------------------------------------------------------------------------

---

Configuración del análisis:
Analizar usando las siguientes bases: estendidas
Analizar archivos: verdadero
Analizar bases de correo: verdadero

Objetivo a analizar - Mi PC:
C:\
D:\
E:\

Estadísticas:
Número de objeros analizados: 105379
Virus encontrados: 4
Objetos infectados: 89 / 0
Objetos sospechosos: 0
Duración del análisis: 01:42:33

Bombre del objeto infectado / Nombre del virus / Última acción
C:\AUTORUN.0NF Infectados: Worm.Win32.AutoRun.tgf saltado
C:\WINDOWS\system32\config\system.LOG Object is locked saltado
C:\WINDOWS\system32\config\software.LOG Object is locked saltado
C:\WINDOWS\system32\config\default.LOG Object is locked saltado
C:\WINDOWS\system32\config\SECURITY Object is locked saltado
C:\WINDOWS\system32\config\SAM Object is locked saltado
C:\WINDOWS\system32\config\SAM.LOG Object is locked saltado
C:\WINDOWS\system32\config\SECURITY.LOG Object is locked saltado
C:\WINDOWS\system32\config\SYSTEM Object is locked saltado
C:\WINDOWS\system32\config\SOFTWARE Object is locked saltado
C:\WINDOWS\system32\config\DEFAULT Object is locked saltado
C:\WINDOWS\system32\config\SysEvent.Evt Object is locked saltado
C:\WINDOWS\system32\config\AppEvent.Evt Object is locked saltado
C:\WINDOWS\system32\config\SecEvent.Evt Object is locked saltado
C:\WINDOWS\system32\config\Internet.evt Object is locked saltado
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DAT A Object is locked

saltado
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked

saltado
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MA P Object is locked

saltado
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MA P Object is locked

saltado
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER Object is locked

saltado
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP Object is locked

saltado
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP Object is locked

saltado
C:\WINDOWS\system32\KAMSOFT.0XE Infectados: Trojan-

GameThief.Win32.Magania.altw saltado
C:\WINDOWS\system32\gasretyw0.dll Infectados: Packed.Win32.Krap.b

saltado
C:\WINDOWS\system32\CatRoot2\tmp.edb Object is locked saltado
C:\WINDOWS\system32\CatRoot2\edb.log Object is locked saltado
C:\WINDOWS\Debug\PASSWD.LOG Object is locked saltado
C:\Documents and Settings\NetworkService\NTUSER.DAT Object is locked

saltado
C:\Documents and Settings\NetworkService\Configuración local\Datos de

programa\Microsoft\Windows\UsrClass.dat Object is locked saltado
C:\Documents and Settings\NetworkService\Configuración local\Datos de

programa\Microsoft\Windows\UsrClass.dat.LOG Object is locked

saltado
C:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked

saltado
C:\Documents and Settings\LocalService\NTUSER.DAT Object is locked

saltado
C:\Documents and Settings\LocalService\Configuración local\Datos de

programa\Microsoft\Windows\UsrClass.dat Object is locked saltado
C:\Documents and Settings\LocalService\Configuración local\Datos de

programa\Microsoft\Windows\UsrClass.dat.LOG Object is locked

saltado
C:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked

saltado
C:\Documents and Settings\cecilia-ramon\NTUSER.DAT Object is locked

saltado
C:\Documents and Settings\cecilia-ramon\ntuser.dat.LOG Object is locked

saltado
C:\Documents and Settings\cecilia-ramon\Configuración

local\Historial\History.IE5\index.dat Object is locked saltado
C:\Documents and Settings\cecilia-ramon\Configuración

local\Historial\History.IE5\MSHist0120081203200812 04\index.dat Object is

locked saltado
C:\Documents and Settings\cecilia-ramon\Configuración local\Archivos

temporales de Internet\Content.IE5\index.dat Object is locked

saltado
C:\Documents and Settings\cecilia-ramon\Configuración local\Archivos

temporales de Internet\AntiPhishing\B3BB5BBA-E7D5-40AB-A041-A5B1C0B26C8F.dat

Object is locked saltado
C:\Documents and Settings\cecilia-ramon\Configuración local\Datos de

programa\Microsoft\Windows\UsrClass.dat.LOG Object is locked

saltado
C:\Documents and Settings\cecilia-ramon\Configuración local\Datos de

programa\Microsoft\Windows\UsrClass.dat Object is locked saltado
C:\Documents and Settings\cecilia-ramon\Cookies\index.dat Object is

locked saltado
C:\Documents and Settings\cecilia-ramon\Datos de

programa\Thunderbird\Profiles\hfbs7afi.default\Mai l\Local Folders\Inbox/[From

Cecilia Urquizu <cecilia.urquizu@gmail.com>][Date Mon, 13 Feb 2006 20:12:53

+0100]/UNNAMED/[From "Elena Palomar" <elena.palomar@aeci.org.sv>][Date Mon,

13 Feb 2006 17:01:03 -0600]/UNNAMED/[From Francesc Imbernon

<fimbernon@ub.edu>][Date Tue, 14 Feb 2006 08:54:38 +0100]/text/[From "Royal

Euro Casino" <music@myfunnymail.com>][Date Fri, 02 Feb 2007 07:48:50 -0400]

... /[From ... / ... /[From "BB&T" <accounts-id37528607898ib@bbt.com>][Date

Sat, 24 Mar 2007 05:40:19 +0100 ( ... /UNNAMED Infectados: Trojan-

Spy.HTML.Bankfraud.ri saltado
C:\Documents and Settings\cecilia-ramon\Datos de

programa\Thunderbird\Profiles\hfbs7afi.default\Mai l\Local Folders\Inbox/[From

Cecilia Urquizu <cecilia.urquizu@gmail.com>][Date Mon, 13 Feb 2006 20:12:53

+0100]/UNNAMED/[From "Elena Palomar" <elena.palomar@aeci.org.sv>][Date Mon,

13 Feb 2006 17:01:03 -0600]/UNNAMED/[From Francesc Imbernon

<fimbernon@ub.edu>][Date Tue, 14 Feb 2006 08:54:38 +0100]/text/[From "Royal

Euro Casino" <music@myfunnymail.com>][Date Fri, 02 Feb 2007 07:48:50 -0400]

... /[From "Minerv ... /[From "BB&T" <customers-7123168391ib@bbt.com>][Date

Thu, 29 Mar 2007 18:42:54 +0200 (C ... /UNNAMED Infectados: Trojan-

Spy.HTML.Bankfraud.ri saltado
C:\Documents and Settings\cecilia-ramon\Datos de

programa\Thunderbird\Profiles\hfbs7afi.default\Mai l\Local Folders\Inbox/[From

Cecilia Urquizu <cecilia.urquizu@gmail.com>][Date Mon, 13 Feb 2006 20:12:53

+0100]/UNNAMED/[From "Elena Palomar" <elena.palomar@aeci.org.sv>][Date Mon,

13 Feb 2006 17:01:03 -0600]/UNNAMED/[From Francesc Imbernon

<fimbernon@ub.edu>][Date Tue, 14 Feb 2006 08:54:38 +0100]/text/[From "Royal

Euro Casino" <music@myfunnymail.com>][Date Fri, 02 Feb 2007 07:48:50 -0400]

... /[From "Minerv ... /[From "BB&T" <customers-7123168391ib@bbt.com>][Date

Thu, 29 Mar 2007 18:42:54 +0200 (CEST)]/UNNAMED Infectados: Trojan-

Spy.HTML.Bankfraud.ri saltado
C:\Documents and Settings\cecilia-ramon\Datos de

programa\Thunderbird\Profiles\hfbs7afi.default\Mai l\Local Folders\Inbox/[From

Cecilia Urquizu <cecilia.urquizu@gmail.com>][Date Mon, 13 Feb 2006 20:12:53

+0100]/UNNAMED/[From "Elena Palomar" <elena.palomar@aeci.org.sv>][Date Mon,

13 Feb 2006 17:01:03 -0600]/UNNAMED/[From Francesc Imbernon

<fimbernon@ub.edu>][Date Tue, 14 Feb 2006 08:54:38 +0100]/text/[From "Royal

Euro Casino" <music@myfunnymail.com>][Date Fri, 02 Feb 2007 07:48:50 -0400 .

... /[From "Branch Banking and Trust" <customers-num556325ib@bbt.com>][Date

Tue, 3 Apr 2007 21:38:38 +0200 (C ... /UNNAMED Infectados: Trojan-

Spy.HTML.Bankfraud.ri saltado
C:\Documents and Settings\cecilia-ramon\Datos de

programa\Thunderbird\Profiles\hfbs7afi.default\Mai l\Local Folders\Inbox/[From

Cecilia Urquizu <cecilia.urquizu@gmail.com>][Date Mon, 13 Feb 2006 20:12:53

+0100]/UNNAMED/[From "Elena Palomar" <elena.palomar@aeci.org.sv>][Date Mon,

13 Feb 2006 17:01:03 -0600]/UNNAMED/[From Francesc Imbernon

<fimbernon@ub.edu>][Date Tue, 14 Feb 2006 08:54:38 +0100]/text/[From "Royal

Euro Casino" <music@myfunnymail.com>][Date Fri, 02 Feb 2007 07:48:50 -0400 .

... /[From "Branch Banking and Trust" <customers-num556325ib@bbt.com>][Date

Tue, 3 Apr 2007 21:38:38 +0200 (CEST)]/UNNAMED Infectados: Trojan-

Spy.HTML.Bankfraud.ri saltado
C:\Documents and Settings\cecilia-ramon\Datos de

programa\Thunderbird\Profiles\hfbs7afi.default\Mai l\Local Folders\Inbox/[From

Cecilia Urquizu <cecilia.urquizu@gmail.com>][Date Mon, 13 Feb 2006 20:12:53

+0100]/UNNAMED/[From "Elena Palomar" <elena.palomar@aeci.org.sv>][Date Mon,

13 Feb 2006 17:01:03 -0600]/UNNAMED/[From Francesc Imbernon

<fimbernon@ub.edu>][Date Tue, 14 Feb 2006 08:54:38 +0100]/text/[From "Royal

Euro Casino" <music@myfunnymail.com>][Date Fri, 02 Feb 2007 07:48:50 -0400

... /[From "Sammie Geiger"

<lazbodyawarenesscentersen@bodyawarenesscenter.net >][Date Tue, 3 Apr 2007

11:00:16 -0400]/UNNAMED Infectados: Trojan-Spy.HTML.Bankfraud.ri

saltado
C:\Documents and Settings\cecilia-ramon\Datos de

programa\Thunderbird\Profiles\hfbs7afi.default\Mai l\Local Folders\Inbox/[From

Cecilia Urquizu <cecilia.urquizu@gmail.com>][Date Mon, 13 Feb 2006 20:12:53

+0100]/UNNAMED/[From "Elena Palomar" <elena.palomar@aeci.org.sv>][Date Mon,

13 Feb 2006 17:01:03 -0600]/UNNAMED/[From Francesc Imbernon

<fimbernon@ub.edu>][Date Tue, 14 Feb 2006 08:54:38 +0100]/text/[From "Royal

Euro Casino" <music@myfunnymail.com>][Date Fri, 02 Feb 2007 07:48:50 -0400]

... /[Fro . .. ... /[From " ... /[From "Fallon King"

<sgnlofltf@hemberg.net>][Date Tue, 03 Apr 2007 09:09:28 +0300]/UNNAMED

Infectados: Trojan-Spy.HTML.Bankfraud.ri saltado
C:\Documents and Settings\cecilia-ramon\Datos de

programa\Thunderbird\Profiles\hfbs7afi.default\Mai l\Local Folders\Inbox/[From

Cecilia Urquizu <cecilia.urquizu@gmail.com>][Date Mon, 13 Feb 2006 20:12:53

+0100]/UNNAMED/[From "Elena Palomar" <elena.palomar@aeci.org.sv>][Date Mon,

13 Feb 2006 17:01:03 -0600]/UNNAMED/[From Francesc Imbernon

<fimbernon@ub.edu>][Date Tue, 14 Feb 2006 08:54:38 +0100]/text/[From "Royal

Euro Casino" <music@myfunnymail.com>][Date Fri, 02 Feb 2007 07:48:50 -0400]

... /[Fro . .. ... /[From "Cecil Heard"

<lazbodyshopmallsen@bodyshopmall.com>][Date Mon, 2 Apr 2007 22:29:10

+0600]/UNNAMED Infectados: Trojan-Spy.HTML.Bankfraud.ri saltado
C:\Documents and Settings\cecilia-ramon\Datos de

programa\Thunderbird\Profiles\hfbs7afi.default\Mai l\Local Folders\Inbox/[From

Cecilia Urquizu <cecilia.urquizu@gmail.com>][Date Mon, 13 Feb 2006 20:12:53

+0100]/UNNAMED/[From "Elena Palomar" <elena.palomar@aeci.org.sv>][Date Mon,

13 Feb 2006 17:01:03 -0600]/UNNAMED/[From Francesc Imbernon

<fimbernon@ub.edu>][Date Tue, 14 Feb 2006 08:54:38 +0100]/text/[From "Royal

Euro Casino" <music@myfunnymail.com>][Date Fri, 02 Feb 2007 07:48:50 -0400]

... /[Fro . ... /[From "Barnstabledmd byrdstown"

<barnstabledmd@modulonet.fr>][Date Mon, 2 Apr 2007 23:43:59 +0200]/UNNAMED

Infectados: Trojan-Spy.HTML.Bankfraud.ri saltado
C:\Documents and Settings\cecilia-ramon\Datos de

programa\Thunderbird\Profiles\hfbs7afi.default\Mai l\Local Folders\Inbox/[From

Cecilia Urquizu <cecilia.urquizu@gmail.com>][Date Mon, 13 Feb 2006 20:12:53

+0100]/UNNAMED/[From "Elena Palomar" <elena.palomar@aeci.org.sv>][Date Mon,

13 Feb 2006 17:01:03 -0600]/UNNAMED/[From Francesc Imbernon

<fimbernon@ub.edu>][Date Tue, 14 Feb 2006 08:54:38 +0100]/text/[From "Royal

Euro Casino" <music@myfunnymail.com>][Date Fri, 02 Feb 2007 07:48:50 -0400]

... /[Fro ... /[From "Sterling Avery"

<lazbodiesenformasen@bodiesenforma.com>][Date Mon, 2 Apr 2007 10:05:10

+0000]/UNNAMED Infectados: Trojan-Spy.HTML.Bankfraud.ri saltado
C:\Documents and Settings\cecilia-ramon\Datos de

programa\Thunderbird\Profiles\hfbs7afi.default\Mai l\Local Folders\Inbox/[From

Cecilia Urquizu <cecilia.urquizu@gmail.com>][Date Mon, 13 Feb 2006 20:12:53

+0100]/UNNAMED/[From "Elena Palomar" <elena.palomar@aeci.org.sv>][Date Mon,

13 Feb 2006 17:01:03 -0600]/UNNAMED/[From Francesc Imbernon

<fimbernon@ub.edu>][Date Tue, 14 Feb 2006 08:54:38 +0100]/text/[From "Royal

Euro Casino" <music@myfunnymail.com>][Date Fri, 02 Feb 2007 07:48:50 -0400]

... /[Fro ... /[From "VILLARREAL LARHONDA"

<esxrfrxqsldi@flt.acr.gmeds.com>][Date Mon, 02 Apr 2007 02:22:14 -

0800]/UNNAMED Infectados: Trojan-Spy.HTML.Bankfraud.ri saltado
C:\Documents and Settings\cecilia-ramon\Datos de

programa\Thunderbird\Profiles\hfbs7afi.default\Mai l\Local Folders\Inbox/[From

Cecilia Urquizu <cecilia.urquizu@gmail.com>][Date Mon, 13 Feb 2006 20:12:53

+0100]/UNNAMED/[From "Elena Palomar" <elena.palomar@aeci.org.sv>][Date Mon,

13 Feb 2006 17:01:03 -0600]/UNNAMED/[From Francesc Imbernon

<fimbernon@ub.edu>][Date Tue, 14 Feb 2006 08:54:38 +0100]/text/[From "Royal

Euro Casino" <music@myfunnymail.com>][Date Fri, 02 Feb 2007 07:48:50 -0400]

... /[Fro ... /[ ... /[From "Swindler V. Buterbaug"

<100irish@optonline.net>][Date Sun, 01 Apr 2007 21:27:56 -0400]/UNNAMED

Infectados: Trojan-Spy.HTML.Bankfraud.ri saltado
C:\Documents and Settings\cecilia-ramon\Datos de

programa\Thunderbird\Profiles\hfbs7afi.default\Mai l\Local Folders\Inbox/[From

Cecilia Urquizu <cecilia.urquizu@gmail.com>][Date Mon, 13 Feb 2006 20:12:53

+0100]/UNNAMED/[From "Elena Palomar" <elena.palomar@aeci.org.sv>][Date Mon,

13 Feb 2006 17:01:03 -0600]/UNNAMED/[From Francesc Imbernon

<fimbernon@ub.edu>][Date Tue, 14 Feb 2006 08:54:38 +0100]/text/[From "Royal

Euro Casino" <music@myfunnymail.com>][Date Fri, 02 Feb 2007 07:48:50 -0400]

... /[Fro ... /[F .. ... /[From "Percy Medina"

<wahbitbenderder@bitbender.fi>][Date Sun, 1 Apr 2007 04:42:16 +0500]/UNNAMED

Infectados: Trojan-Spy.HTML.Bankfraud.ri saltado
C:\Documents and Settings\cecilia-ramon\Datos de

programa\Thunderbird\Profiles\hfbs7afi.default\Mai l\Local Folders\Inbox/[From

Cecilia Urquizu <cecilia.urquizu@gmail.com>][Date Mon, 13 Feb 2006 20:12:53

+0100]/UNNAMED/[From "Elena Palomar" <elena.palomar@aeci.org.sv>][Date Mon,

13 Feb 2006 17:01:03 -0600]/UNNAMED/[From Francesc Imbernon

<fimbernon@ub.edu>][Date Tue, 14 Feb 2006 08:54:38 +0100]/text/[From "Royal

Euro Casino" <music@myfunnymail.com>][Date Fri, 02 Feb 2007 07:48:50 -0400]

... /[Fro ... /[F ... /[From "Mzkvernier grandiose"

<mzkvernier@kalvesta.com>][Date Sun, 1 Apr 2007 09:43:36 +0800]/UNNAMED

Infectados: Trojan-Spy.HTML.Bankfraud.ri saltado
C:\Documents and Settings\cecilia-ramon\Datos de

programa\Thunderbird\Profiles\hfbs7afi.default\Mai l\Local Folders\Inbox/[From

Cecilia Urquizu <cecilia.urquizu@gmail.com>][Date Mon, 13 Feb 2006 20:12:53

+0100]/UNNAMED/[From "Elena Palomar" <elena.palomar@aeci.org.sv>][Date Mon,

13 Feb 2006 17:01:03 -0600]/UNNAMED/[From Francesc Imbernon

<fimbernon@ub.edu>][Date Tue, 14 Feb 2006 08:54:38 +0100]/text/[From "Royal

Euro Casino" <music@myfunnymail.com>][Date Fri, 02 Feb 2007 07:48:50 -0400]

... /[Fro ... /[F ... ... /[From "Giovanni Bowman"

<stubbierseer@mailc.net>][Date Sat, 31 Mar 2007 1724 +0000]/UNNAMED

Infectados: Trojan-Spy.HTML.Bankfraud.ri saltado
C:\Documents and Settings\cecilia-ramon\Datos de

programa\Thunderbird\Profiles\hfbs7afi.default\Mai l\Local Folders\Inbox/[From

Cecilia Urquizu <cecilia.urquizu@gmail.com>][Date Mon, 13 Feb 2006 20:12:53

+0100]/UNNAMED/[From "Elena Palomar" <elena.palomar@aeci.org.sv>][Date Mon,

13 Feb 2006 17:01:03 -0600]/UNNAMED/[From Francesc Imbernon

<fimbernon@ub.edu>][Date Tue, 14 Feb 2006 08:54:38 +0100]/text/[From "Royal

Euro Casino" <music@myfunnymail.com>][Date Fri, 02 Feb 2007 07:48:50 -0400]

... /[Fro ... /[F ... /[From "Olympia R. Tillman"

<extrahispano@gpscpas.com>][Date Sat, 31 Mar 2007 07:30:13 +0000]/UNNAMED

Infectados: Trojan-Spy.HTML.Bankfraud.ri saltado
C:\Documents and Settings\cecilia-ramon\Datos de

programa\Thunderbird\Profiles\hfbs7afi.default\Mai l\Local Folders\Inbox/[From

Cecilia Urquizu <cecilia.urquizu@gmail.com>][Date Mon, 13 Feb 2006 20:12:53

+0100]/UNNAMED/[From "Elena Palomar" <elena.palomar@aeci.org.sv>][Date Mon,

13 Feb 2006 17:01:03 -0600]/UNNAMED/[From Francesc Imbernon

<fimbernon@ub.edu>][Date Tue, 14 Feb 2006 08:54:38 +0100]/text/[From "Royal

Euro Casino" <music@myfunnymail.com>][Date Fri, 02 Feb 2007 07:48:50 -0400]

... /[Fro ... /[From "Alice Cho"

<gezbigleaguedreamscos@bigleaguedreams.net>][Date Fri, 30 Mar 2007 22:59:23

-0100]/UNNAMED Infectados: Trojan-Spy.HTML.Bankfraud.ri saltado
C:\Documents and Settings\cecilia-ramon\Datos de

programa\Thunderbird\Profiles\hfbs7afi.default\Mai l\Local Folders\Inbox/[From

Cecilia Urquizu <cecilia.urquizu@gmail.com>][Date Mon, 13 Feb 2006 20:12:53

+0100]/UNNAMED/[From "Elena Palomar" <elena.palomar@aeci.org.sv>][Date Mon,

13 Feb 2006 17:01:03 -0600]/UNNAMED/[From Francesc Imbernon

<fimbernon@ub.edu>][Date Tue, 14 Feb 2006 08:54:38 +0100]/text/[From "Royal

Euro Casino" <music@myfunnymail.com>][Date Fri, 02 Feb 2007 07:48:50 -0400]

... /[From "Minerva ... /[From "Concession G. Vacua"

<istamant@glsantos.com>][Date Thu, 29 Mar 2007 20:03:17 +0000]/UNNAMED

Infectados: Trojan-Spy.HTML.Bankfraud.ri saltado
C:\Documents and Settings\cecilia-ramon\Datos de

programa\Thunderbird\Profiles\hfbs7afi.default\Mai l\Local Folders\Inbox/[From

Cecilia Urquizu <cecilia.urquizu@gmail.com>][Date Mon, 13 Feb 2006 20:12:53

+0100]/UNNAMED/[From "Elena Palomar" <elena.palomar@aeci.org.sv>][Date Mon,

13 Feb 2006 17:01:03 -0600]/UNNAMED/[From Francesc Imbernon

<fimbernon@ub.edu>][Date Tue, 14 Feb 2006 08:54:38 +0100]/text/[From "Royal

Euro Casino" <music@myfunnymail.com>][Date Fri, 02 Feb 2007 07:48:50 -0400]

... /[From "Minerva Pryor"

<lopbellistonfinancialkac@bellistonfinancial.com >][Date Thu, 29 Mar 2007

0645 -0300]/UNNAMED Infectados: Trojan-Spy.HTML.Bankfraud.ri

saltado
C:\Documents and Settings\cecilia-ramon\Datos de

programa\Thunderbird\Profiles\hfbs7afi.default\Mai l\Local Folders\Inbox/[From

Cecilia Urquizu <cecilia.urquizu@gmail.com>][Date Mon, 13 Feb 2006 20:12:53

+0100]/UNNAMED/[From "Elena Palomar" <elena.palomar@aeci.org.sv>][Date Mon,

13 Feb 2006 17:01:03 -0600]/UNNAMED/[From Francesc Imbernon

<fimbernon@ub.edu>][Date Tue, 14 Feb 2006 08:54:38 +0100]/text/[From "Royal

Euro Casino" <music@myfunnymail.com>][Date Fri, 02 Feb 2007 07:48:50 -0400]

... /[Fr ... ... /[Fr ... /[From "Gregs"

<BengaHarrington@BASSILISBEST.COM>][Date Thu, 29 Mar 2007 02:06:07 -

0400]/UNNAMED Infectados: Trojan-Spy.HTML.Bankfraud.ri saltado
C:\Documents and Settings\cecilia-ramon\Datos de

programa\Thunderbird\Profiles\hfbs7afi.default\Mai l\Local Folders\Inbox/[From

Cecilia Urquizu <cecilia.urquizu@gmail.com>][Date Mon, 13 Feb 2006 20:12:53

+0100]/UNNAMED/[From "Elena Palomar" <elena.palomar@aeci.org.sv>][Date Mon,

13 Feb 2006 17:01:03 -0600]/UNNAMED/[From Francesc Imbernon

<fimbernon@ub.edu>][Date Tue, 14 Feb 2006 08:54:38 +0100]/text/[From "Royal

Euro Casino" <music@myfunnymail.com>][Date Fri, 02 Feb 2007 07:48:50 -0400]

... /[Fr ... ... /[From ... ... /[From "Wendi Bergeron"

<info@cotec.co.nz>][Date Wed, 28 Mar 2007 18:46:56 -0200]/UNNAMED

Infectados: Trojan-Spy.HTML.Bankfraud.ri saltado
C:\Documents and Settings\cecilia-ramon\Datos de

programa\Thunderbird\Profiles\hfbs7afi.default\Mai l\Local Folders\Inbox/[From

Cecilia Urquizu <cecilia.urquizu@gmail.com>][Date Mon, 13 Feb 2006 20:12:53

+0100]/UNNAMED/[From "Elena Palomar" <elena.palomar@aeci.org.sv>][Date Mon,

13 Feb 2006 17:01:03 -0600]/UNNAMED/[From Francesc Imbernon

<fimbernon@ub.edu>][Date Tue, 14 Feb 2006 08:54:38 +0100]/text/[From "Royal

Euro Casino" <music@myfunnymail.com>][Date Fri, 02 Feb 2007 07:48:50 -0400]

... /[Fr ... ... /[From ... /[From Horatio Armstrong

<yongsamp@barbara.com>][Date Wed, 28 Mar 2007 19:31:53 +0300]/UNNAMED

Infectados: Trojan-Spy.HTML.Bankfraud.ri saltado
C:\Documents and Settings\cecilia-ramon\Datos de

programa\Thunderbird\Profiles\hfbs7afi.default\Mai l\Local Folders\Inbox/[From

Cecilia Urquizu <cecilia.urquizu@gmail.com>][Date Mon, 13 Feb 2006 20:12:53

+0100]/UNNAMED/[From "Elena Palomar" <elena.palomar@aeci.org.sv>][Date Mon,

13 Feb 2006 17:01:03 -0600]/UNNAMED/[From Francesc Imbernon

<fimbernon@ub.edu>][Date Tue, 14 Feb 2006 08:54:38 +0100]/text/[From "Royal

Euro Casino" <music@myfunnymail.com>][Date Fri, 02 Feb 2007 07:48:50 -0400]

... /[Fr ... ... /[From "Richard Camacho"

<cesbcliteracyfaf@bcliteracy.org>][Date Tue, 27 Mar 2007 10:23:20

+0500]/UNNAMED Infectados: Trojan-Spy.HTML.Bankfraud.ri saltado
C:\Documents and Settings\cecilia-ramon\Datos de

programa\Thunderbird\Profiles\hfbs7afi.default\Mai l\Local Folders\Inbox/[From

Cecilia Urquizu <cecilia.urquizu@gmail.com>][Date Mon, 13 Feb 2006 20:12:53

+0100]/UNNAMED/[From "Elena Palomar" <elena.palomar@aeci.org.sv>][Date Mon,

13 Feb 2006 17:01:03 -0600]/UNNAMED/[From Francesc Imbernon

<fimbernon@ub.edu>][Date Tue, 14 Feb 2006 08:54:38 +0100]/text/[From "Royal

Euro Casino" <music@myfunnymail.com>][Date Fri, 02 Feb 2007 07:48:50 -0400]

... /[Fr ... /[From "Veneice ... /[From "Sherman Noble"

<nalbatehej@bate.de>][Date Mon, 26 Mar 2007 18:18:23 -0800]/UNNAMED

Infectados: Trojan-Spy.HTML.Bankfraud.ri saltado
C:\Documents and Settings\cecilia-ramon\Datos de

programa\Thunderbird\Profiles\hfbs7afi.default\Mai l\Local Folders\Inbox/[From

Cecilia Urquizu <cecilia.urquizu@gmail.com>][Date Mon, 13 Feb 2006 20:12:53

+0100]/UNNAMED/[From "Elena Palomar" <elena.palomar@aeci.org.sv>][Date Mon,

13 Feb 2006 17:01:03 -0600]/UNNAMED/[From Francesc Imbernon

<fimbernon@ub.edu>][Date Tue, 14 Feb 2006 08:54:38 +0100]/text/[From "Royal

Euro Casino" <music@myfunnymail.com>][Date Fri, 02 Feb 2007 07:48:50 -0400]

... /[Fr ... /[From "Veneice La Delle"

<reefsagglomerated@morgan.ucs.mun.ca>][Date Sun, 25 Mar 2007 18:01:01

+0360]/UNNAMED Infectados: Trojan-Spy.HTML.Bankfraud.ri saltado
C:\Documents and Settings\cecilia-ramon\Datos de

programa\Thunderbird\Profiles\hfbs7afi.default\Mai l\Local Folders\Inbox/[From

Cecilia Urquizu <cecilia.urquizu@gmail.com>][Date Mon, 13 Feb 2006 20:12:53

+0100]/UNNAMED/[From "Elena Palomar" <elena.palomar@aeci.org.sv>][Date Mon,

13 Feb 2006 17:01:03 -0600]/UNNAMED/[From Francesc Imbernon

<fimbernon@ub.edu>][Date Tue, 14 Feb 2006 08:54:38 +0100]/text/[From "Royal

Euro Casino" <music@myfunnymail.com>][Date Fri, 02 Feb 2007 07:48:50 -0400]

... /[From ... / ... /[From "Blanche Conn"

<entangledrazors@speedymail.org>][Date Sun, 25 Mar 2001 11:12:30 -

0200]/UNNAMED Infectados: Trojan-Spy.HTML.Bankfraud.ri saltado
C:\Documents and Settings\cecilia-ramon\Datos de

programa\Thunderbird\Profiles\hfbs7afi.default\Mai l\Local Folders\Inbox/[From

Cecilia Urquizu <cecilia.urquizu@gmail.com>][Date Mon, 13 Feb 2006 20:12:53

+0100]/UNNAMED/[From "Elena Palomar" <elena.palomar@aeci.org.sv>][Date Mon,

13 Feb 2006 17:01:03 -0600]/UNNAMED/[From Francesc Imbernon

<fimbernon@ub.edu>][Date Tue, 14 Feb 2006 08:54:38 +0100]/text/[From "Royal

Euro Casino" <music@myfunnymail.com>][Date Fri, 02 Feb 2007 07:48:50 -0400]

... /[From ... / ... ... /[From "Bart Hurt"

<hagbabytolvajev@babytolva.com>][Date Sat, 24 Mar 2007 11:55:30 -

0100]/UNNAMED Infectados: Trojan-Spy.HTML.Bankfraud.ri saltado
C:\Documents and Settings\cecilia-ramon\Datos de

programa\Thunderbird\Profiles\hfbs7afi.default\Mai l\Local Folders\Inbox/[From

Cecilia Urquizu <cecilia.urquizu@gmail.com>][Date Mon, 13 Feb 2006 20:12:53

+0100]/UNNAMED/[From "Elena Palomar" <elena.palomar@aeci.org.sv>][Date Mon,

13 Feb 2006 17:01:03 -0600]/UNNAMED/[From Francesc Imbernon

<fimbernon@ub.edu>][Date Tue, 14 Feb 2006 08:54:38 +0100]/text/[From "Royal

Euro Casino" <music@myfunnymail.com>][Date Fri, 02 Feb 2007 07:48:50 -0400]

... /[From ... / ... /[From "BB&T" <accounts-id37528607898ib@bbt.com>][Date

Sat, 24 Mar 2007 05:40:19 +0100 (CET)]/UNNAMED Infectados: Trojan-

Spy.HTML.Bankfraud.ri saltado
C:\Documents and Settings\cecilia-ramon\Datos de

programa\Thunderbird\Profiles\hfbs7afi.default\Mai l\Local Folders\Inbox/[From

Cecilia Urquizu <cecilia.urquizu@gmail.com>][Date Mon, 13 Feb 2006 20:12:53

+0100]/UNNAMED/[From "Elena Palomar" <elena.palomar@aeci.org.sv>][Date Mon,

13 Feb 2006 17:01:03 -0600]/UNNAMED/[From Francesc Imbernon

<fimbernon@ub.edu>][Date Tue, 14 Feb 2006 08:54:38 +0100]/text/[From "Royal

Euro Casino" <music@myfunnymail.com>][Date Fri, 02 Feb 2007 07:48:50 -0400]

... /[From ... / .. ... /[From ... /[From "Mae Monroe"

<hagbaasjev@baas.it>][Date Fri, 23 Mar 2007 21:56:52 +0500]/UNNAMED

Infectados: Trojan-Spy.HTML.Bankfraud.ri saltado
C:\Documents and Settings\cecilia-ramon\Datos de

programa\Thunderbird\Profiles\hfbs7afi.default\Mai l\Local Folders\Inbox/[From

Cecilia Urquizu <cecilia.urquizu@gmail.com>][Date Mon, 13 Feb 2006 20:12:53

+0100]/UNNAMED/[From "Elena Palomar" <elena.palomar@aeci.org.sv>][Date Mon,

13 Feb 2006 17:01:03 -0600]/UNNAMED/[From Francesc Imbernon

<fimbernon@ub.edu>][Date Tue, 14 Feb 2006 08:54:38 +0100]/text/[From "Royal

Euro Casino" <music@myfunnymail.com>][Date Fri, 02 Feb 2007 07:48:50 -0400]

... /[From ... / .. ... /[From "Pansy Sims"

<rwhimsey@innovativegiclee.com>][Date Fri, 23 Mar 2007 23:55:47

+0800]/UNNAMED Infectados: Trojan-Spy.HTML.Bankfraud.ri saltado
C:\Documents and Settings\cecilia-ramon\Datos de

programa\Thunderbird\Profiles\hfbs7afi.default\Mai l\Local Folders\Inbox/[From

Cecilia Urquizu <cecilia.urquizu@gmail.com>][Date Mon, 13 Feb 2006 20:12:53

+0100]/UNNAMED/[From "Elena Palomar" <elena.palomar@aeci.org.sv>][Date Mon,

13 Feb 2006 17:01:03 -0600]/UNNAMED/[From Francesc Imbernon

<fimbernon@ub.edu>][Date Tue, 14 Feb 2006 08:54:38 +0100]/text/[From "Royal

Euro Casino" <music@myfunnymail.com>][Date Fri, 02 Feb 2007 07:48:50 -0400]

... /[From ... / ... /[From "Carol Hatch"

<syfavianationdof@avianation.com>][Date Thu, 22 Mar 2007 17:48:12

+0600]/UNNAMED Infectados: Trojan-Spy.HTML.Bankfraud.ri saltado
C:\Documents and Settings\cecilia-ramon\Datos de

programa\Thunderbird\Profiles\hfbs7afi.default\Mai l\Local Folders\Inbox/[From

Cecilia Urquizu <cecilia.urquizu@gmail.com>][Date Mon, 13 Feb 2006 20:12:53

+0100]/UNNAMED/[From "Elena Palomar" <elena.palomar@aeci.org.sv>][Date Mon,

13 Feb 2006 17:01:03 -0600]/UNNAMED/[From Francesc Imbernon

<fimbernon@ub.edu>][Date Tue, 14 Feb 2006 08:54:38 +0100]/text/[From "Royal

Euro Casino" <music@myfunnymail.com>][Date Fri, 02 Feb 2007 07:48:50 -0400]

... /[From ... / ... /[From "Shauna Oliver"

<hodauconcertvar@auconcert.com>][Date Wed, 21 Mar 2007 04:36:08 -

0200]/UNNAMED Infectados: Trojan-Spy.HTML.Bankfraud.ri saltado
C:\Documents and Settings\cecilia-ramon\Datos de

programa\Thunderbird\Profiles\hfbs7afi.default\Mai l\Local Folders\Inbox/[From

Cecilia Urquizu <cecilia.urquizu@gmail.com>][Date Mon, 13 Feb 2006 20:12:53

+0100]/UNNAMED/[From "Elena Palomar" <elena.palomar@aeci.org.sv>][Date Mon,

13 Feb 2006 17:01:03 -0600]/UNNAMED/[From Francesc Imbernon

<fimbernon@ub.edu>][Date Tue, 14 Feb 2006 08:54:38 +0100]/text/[From "Royal

Euro Casino" <music@myfunnymail.com>][Date Fri, 02 Feb 2007 07:48:50 -0400]

... /[From ... /[From "Nathaniel Sheldon"

<bodwilburlanddax@wilburland.com>][Date Tue, 20 Mar 2007 15:59:40 -

0100]/UNNAMED Infectados: Trojan-Spy.HTML.Bankfraud.ri saltado
C:\Documents and Settings\cecilia-ramon\Datos de

programa\Thunderbird\Profiles\hfbs7afi.default\Mai l\Local Folders\Inbox/[From

Cecilia Urquizu <cecilia.urquizu@gmail.com>][Date Mon, 13 Feb 2006 20:12:53

+0100]/UNNAMED/[From "Elena Palomar" <elena.palomar@aeci.org.sv>][Date Mon,

13 Feb 2006 17:01:03 -0600]/UNNAMED/[From Francesc Imbernon

<fimbernon@ub.edu>][Date Tue, 14 Feb 2006 08:54:38 +0100]/text/[From "Royal

Euro Casino" <music@myfunnymail.com>][Date Fri, 02 Feb 2007 07:48:50 -0400]

... /[From Yso-885 . ... /[ ... /[From "Ronnie Smith"

<bodwilandax@wilan.be>][Date Tue, 20 Mar 2007 09:50:49 -1200]/UNNAMED

Infectados: Trojan-Spy.HTML.Bankfraud.ri saltado
C:\Documents and Settings\cecilia-ramon\Datos de

programa\Thunderbird\Profiles\hfbs7afi.default\Mai l\Local Folders\Inbox/[From

Cecilia Urquizu <cecilia.urquizu@gmail.com>][Date Mon, 13 Feb 2006 20:12:53

+0100]/UNNAMED/[From "Elena Palomar" <elena.palomar@aeci.org.sv>][Date Mon,

13 Feb 2006 17:01:03 -0600]/UNNAMED/[From Francesc Imbernon

<fimbernon@ub.edu>][Date Tue, 14 Feb 2006 08:54:38 +0100]/text/[From "Royal

Euro Casino" <music@myfunnymail.com>][Date Fri, 02 Feb 2007 07:48:50 -0400]

... /[From Yso-885 . ... /[From Fitzgerald Carr

<wengyikw@barbarajordan.com>][Date Tue, 20 Mar 2007 09:54:36 +0300]/UNNAMED

Infectados: Trojan-Spy.HTML.Bankfraud.ri saltado
C:\Documents and Settings\cecilia-ramon\Datos de

programa\Thunderbird\Profiles\hfbs7afi.default\Mai l\Local Folders\Inbox/[From

Cecilia Urquizu <cecilia.urquizu@gmail.com>][Date Mon, 13 Feb 2006 20:12:53

+0100]/UNNAMED/[From "Elena Palomar" <elena.palomar@aeci.org.sv>][Date Mon,

13 Feb 2006 17:01:03 -0600]/UNNAMED/[From Francesc Imbernon

<fimbernon@ub.edu>][Date Tue, 14 Feb 2006 08:54:38 +0100]/text/[From "Royal

Euro Casino" <music@myfunnymail.com>][Date Fri, 02 Feb 2007 07:48:50 -0400]

... /[From Yso-885 ... /[From "Wakim Jett"

<spasmednarcissism@fucksheep.org>][Date Fri, 19 Mar 2004 21:24:26

+0480]/UNNAMED Infectados: Trojan-Spy.HTML.Bankfraud.ri saltado
C:\Documents and Settings\cecilia-ramon\Datos de

programa\Thunderbird\Profiles\hfbs7afi.default\Mai l\Local Folders\Inbox/[From

Cecilia Urquizu <cecilia.urquizu@gmail.com>][Date Mon, 13 Feb 2006 20:12:53

+0100]/UNNAMED/[From "Elena Palomar" <elena.palomar@aeci.org.sv>][Date Mon,

13 Feb 2006 17:01:03 -0600]/UNNAMED/[From Francesc Imbernon

<fimbernon@ub.edu>][Date Tue, 14 Feb 2006 08:54:38 +0100]/text/[From "Royal

Euro Casino" <music@myfunnymail.com>][Date Fri, 02 Feb 2007 07:48:50 -0400]

... /[From Yso-8859-1?Q? ... /[From Elisa Gisbert <elisagisbert@yahoo.es>]

[Date Wed, 14 Mar 2007 18:36:37 +0100 (CET)]/text Infectados: Trojan-

Spy.HTML.Bankfraud.ri saltado
C:\Documents and Settings\cecilia-ramon\Datos de

programa\Thunderbird\Profiles\hfbs7afi.default\Mai l\Local Folders\Inbox/[From

Cecilia Urquizu <cecilia.urquizu@gmail.com>][Date Mon, 13 Feb 2006 20:12:53

+0100]/UNNAMED/[From "Elena Palomar" <elena.palomar@aeci.org.sv>][Date Mon,

13 Feb 2006 17:01:03 -0600]/UNNAMED/[From Francesc Imbernon

<fimbernon@ub.edu>][Date Tue, 14 Feb 2006 08:54:38 +0100]/text/[From "Royal

Euro Casino" <music@myfunnymail.com>][Date Fri, 02 Feb 2007 07:48:50 -0400]

... /[From Yso-8859-1?Q?L ... /[From Elisa Gisbert <elisagisbert@yahoo.es>]

[Date Wed, 7 Mar 2007 17:50:22 +0100 (CET)]/text Infectados: Trojan-

Spy.HTML.Bankfraud.ri saltado
C:\Documents and Settings\cecilia-ramon\Datos de

programa\Thunderbird\Profiles\hfbs7afi.default\Mai l\Local Folders\Inbox/[From

Cecilia Urquizu <cecilia.urquizu@gmail.com>][Date Mon, 13 Feb 2006 20:12:53

+0100]/UNNAMED/[From "Elena Palomar" <elena.palomar@aeci.org.sv>][Date Mon,

13 Feb 2006 17:01:03 -0600]/UNNAMED/[From Francesc Imbernon

<fimbernon@ub.edu>][Date Tue, 14 Feb 2006 08:54:38 +0100]/text/[From "Royal

Euro Casino" <music@myfunnymail.com>][Date Fri, 02 Feb 2007 07:48:50 -0400]

... /[From Yso-8859-1?Q?Lic. ... /[From

mrenee.chinchilla@bolhispania.org.bo][Date Tue, 13 Mar 2007 15:05:04 -

0400]/UNNAMED Infectados: Trojan-Spy.HTML.Bankfraud.ri saltado
C:\Documents and Settings\cecilia-ramon\Datos de

programa\Thunderbird\Profiles\hfbs7afi.default\Mai l\Local Folders\Inbox/[From

Cecilia Urquizu <cecilia.urquizu@gmail.com>][Date Mon, 13 Feb 2006 20:12:53

+0100]/UNNAMED/[From "Elena Palomar" <elena.palomar@aeci.org.sv>][Date Mon,

13 Feb 2006 17:01:03 -0600]/UNNAMED/[From Francesc Imbernon

<fimbernon@ub.edu>][Date Tue, 14 Feb 2006 08:54:38 +0100]/text/[From "Royal

Euro Casino" <music@myfunnymail.com>][Date Fri, 02 Feb 2007 07:48:50 -0400]

... /[From Yso-8859-1?Q?Lic._María_Luz_Mardesich_P.?

<mardesic@ucbcba.edu.bo>][Date Tue, 13 Mar 2007 11:35:17 -0400]/UNNAMED

Infectados: Trojan-Spy.HTML.Bankfraud.ri saltado
C:\Documents and Settings\cecilia-ramon\Datos de

programa\Thunderbird\Profiles\hfbs7afi.default\Mai l\Local Folders\Inbox/[From

Cecilia Urquizu <cecilia.urquizu@gmail.com>][Date Mon, 13 Feb 2006 20:12:53

+0100]/UNNAMED/[From "Elena Palomar" <elena.palomar@aeci.org.sv>][Date Mon,

13 Feb 2006 17:01:03 -0600]/UNNAMED/[From Francesc Imbernon

<fimbernon@ub.edu>][Date Tue, 14 Feb 2006 08:54:38 +0100]/text/[From "Royal

Euro Casino" <music@myfunnymail.com>][Date Fri, 02 Feb 2007 07:48:50 -

0400]/html ... /[From "Nora . ... ... /[From

mrenee.chinchilla@bolhispania.org.bo][Date Mon, 12 Mar 2007 09:06:35 -

0400]/UNNAMED Infectados: Trojan-Spy.HTML.Bankfraud.ri saltado
C:\Documents and Settings\cecilia-ramon\Datos de

programa\Thunderbird\Profiles\hfbs7afi.default\Mai l\Local Folders\Inbox/[From

Cecilia Urquizu <cecilia.urquizu@gmail.com>][Date Mon, 13 Feb 2006 20:12:53

+0100]/UNNAMED/[From "Elena Palomar" <elena.palomar@aeci.org.sv>][Date Mon,

13 Feb 2006 17:01:03 -0600]/UNNAMED/[From Francesc Imbernon

<fimbernon@ub.edu>][Date Tue, 14 Feb 2006 08:54:38 +0100]/text/[From "Royal

Euro Casino" <music@myfunnymail.com>][Date Fri, 02 Feb 2007 07:48:50 -

0400]/html ... /[From "Nora . ... /[From "Jaime Delgado"

<kiwurlorgbos@urlorg.com>][Date Mon, 12 Mar 2007 11:23:20 -0060]/UNNAMED

Infectados: Trojan-Spy.HTML.Bankfraud.ri saltado
C:\Documents and Settings\cecilia-ramon\Datos de

programa\Thunderbird\Profiles\hfbs7afi.default\Mai l\Local Folders\Inbox/[From

Cecilia Urquizu <cecilia.urquizu@gmail.com>][Date Mon, 13 Feb 2006 20:12:53

+0100]/UNNAMED/[From "Elena Palomar" <elena.palomar@aeci.org.sv>][Date Mon,

13 Feb 2006 17:01:03 -0600]/UNNAMED/[From Francesc Imbernon

<fimbernon@ub.edu>][Date Tue, 14 Feb 2006 08:54:38 +0100]/text/[From "Royal

Euro Casino" <music@myfunnymail.com>][Date Fri, 02 Feb 2007 07:48:50 -

0400]/html ... /[From "Nora ... /[From "maria renee chinchilla"

<renochi@hotmail.com>][Date Thu, 08 Mar 2007 11:31:24 -0400]/text

Infectados: Trojan-Spy.HTML.Bankfraud.ri saltado
C:\Documents and Settings\cecilia-ramon\Datos de

programa\Thunderbird\Profiles\hfbs7afi.default\Mai l\Local Folders\Inbox/[From

Cecilia Urquizu <cecilia.urquizu@gmail.com>][Date Mon, 13 Feb 2006 20:12:53

+0100]/UNNAMED/[From "Elena Palomar" <elena.palomar@aeci.org.sv>][Date Mon,

13 Feb 2006 17:01:03 -0600]/UNNAMED/[From Francesc Imbernon

<fimbernon@ub.edu>][Date Tue, 14 Feb 2006 08:54:38 +0100]/text/[From "Royal

Euro Casino" <music@myfunnymail.com>][Date Fri, 02 Feb 2007 07:48:50 -

0400]/html ... /[From "Nora Chr ... /[From Elisa Gisbert

<elisagisbert@yahoo.es>][Date Wed, 7 Mar 2007 17:50:22 +0100 (CET)]/text

Infectados: Trojan-Spy.HTML.Bankfraud.ri saltado
C:\Documents and Settings\cecilia-ramon\Datos de

programa\Thunderbird\Profiles\hfbs7afi.default\Mai l\Local Folders\Inbox/[From

Cecilia Urquizu <cecilia.urquizu@gmail.com>][Date Mon, 13 Feb 2006 20:12:53

+0100]/UNNAMED/[From "Elena Palomar" <elena.palomar@aeci.org.sv>][Date Mon,

13 Feb 2006 17:01:03 -0600]/UNNAMED/[From Francesc Imbernon

<fimbernon@ub.edu>][Date Tue, 14 Feb 2006 08:54:38 +0100]/text/[From "Royal

Euro Casino" <music@myfunnymail.com>][Date Fri, 02 Feb 2007 07:48:50 -

0400]/html ... /[From "Nora Christiansen"

<puttravelnetworksdew@travelnetworks.com>][Date Tue, 6 Mar 2007 20:31:00 -

0180]/UNNAMED Infectados: Trojan-Spy.HTML.Bankfraud.ri saltado
C:\Documents and Settings\cecilia-ramon\Datos de

programa\Thunderbird\Profiles\hfbs7afi.default\Mai l\Local Folders\Inbox/[From

Cecilia Urquizu <cecilia.urquizu@gmail.com>][Date Mon, 13 Feb 2006 20:12:53

+0100]/UNNAMED/[From "Elena Palomar" <elena.palomar@aeci.org.sv>][Date Mon,

13 Feb 2006 17:01:03 -0600]/UNNAMED/[From Francesc Imbernon

<fimbernon@ub.edu>][Date Tue, 14 Feb 2006 08:54:38 +0100]/text/[From "Royal

Euro Casino" <music@myfunnymail.com>][Date Fri, 02 Feb 2007 07:48:50 -

0400]/html/[From " ... /[ ... /[From ... /[From Francesc Imbernon

<fimbernon@ub.edu>][Date Tue, 06 Mar 2007 20:28:13 +0100]/text Infectados:

Trojan-Spy.HTML.Bankfraud.ri saltado
C:\Documents and Settings\cecilia-ramon\Datos de

programa\Thunderbird\Profiles\hfbs7afi.default\Mai l\Local Folders\Inbox/[From

Cecilia Urquizu <cecilia.urquizu@gmail.com>][Date Mon, 13 Feb 2006 20:12:53

+0100]/UNNAMED/[From "Elena Palomar" <elena.palomar@aeci.org.sv>][Date Mon,

13 Feb 2006 17:01:03 -0600]/UNNAMED/[From Francesc Imbernon

<fimbernon@ub.edu>][Date Tue, 14 Feb 2006 08:54:38 +0100]/text/[From "Royal

Euro Casino" <music@myfunnymail.com>][Date Fri, 02 Feb 2007 07:48:50 -

0400]/html/[From " ... /[ ... /[From "Lashanitra Ghori"

<bookcaserobins@winenara.com>][Date Fri, 2 Mar 2007 19:12:37 +0300]/text

Infectados: Trojan-Spy.HTML.Bankfraud.ri saltado
C:\Documents and Settings\cecilia-ramon\Datos de

programa\Thunderbird\Profiles\hfbs7afi.default\Mai l\Local Folders\Inbox/[From

Cecilia Urquizu <cecilia.urquizu@gmail.com>][Date Mon, 13 Feb 2006 20:12:53

+0100]/UNNAMED/[From "Elena Palomar" <elena.palomar@aeci.org.sv>][Date Mon,

13 Feb 2006 17:01:03 -0600]/UNNAMED/[From Francesc Imbernon

<fimbernon@ub.edu>][Date Tue, 14 Feb 2006 08:54:38 +0100]/text/[From "Royal

Euro Casino" <music@myfunnymail.com>][Date Fri, 02 Feb 2007 07:48:50 -

0400]/html/[From " ... /[ . ... /[From "nessie aura"

<hurleighcorty@jamieadams.com>][Date Thu, 1 Mar 2007 04:49:43 +0900]/UNNAMED

Infectados: Trojan-Spy.HTML.Bankfraud.ri saltado
C:\Documents and Settings\cecilia-ramon\Datos de

programa\Thunderbird\Profiles\hfbs7afi.default\Mai l\Local Folders\Inbox/[From

Cecilia Urquizu <cecilia.urquizu@gmail.com>][Date Mon, 13 Feb 2006 20:12:53

+0100]/UNNAMED/[From "Elena Palomar" <elena.palomar@aeci.org.sv>][Date Mon,

13 Feb 2006 17:01:03 -0600]/UNNAMED/[From Francesc Imbernon

<fimbernon@ub.edu>][Date Tue, 14 Feb 2006 08:54:38 +0100]/text/[From "Royal

Euro Casino" <music@myfunnymail.com>][Date Fri, 02 Feb 2007 07:48:50 -

0400]/html/[From " ... /[ ... /[From MARCOS ANTONIO LATORRE BELTRAN

<alatorre@ub.edu>][Date Mon, 26 Feb 2007 18:57:41 +0100]/text Infectados:

Trojan-Spy.HTML.Bankfraud.ri saltado
C:\Documents and Settings\cecilia-ramon\Datos de

programa\Thunderbird\Profiles\hfbs7afi.default\Mai l\Local Folders\Inbox/[From

Cecilia Urquizu <cecilia.urquizu@gmail.com>][Date Mon, 13 Feb 2006 20:12:53

+0100]/UNNAMED/[From "Elena Palomar" <elena.palomar@aeci.org.sv>][Date Mon,

13 Feb 2006 17:01:03 -0600]/UNNAMED/[From Francesc Imbernon

<fimbernon@ub.edu>][Date Tue, 14 Feb 2006 08:54:38 +0100]/text/[From "Royal

Euro Casino" <music@myfunnymail.com>][Date Fri, 02 Feb 2007 07:48:50 -

0400]/html/[From " ... /[From "Erin Fleming"

<miscountscloudiest@savedolphins.com>][Date Mon, 26 Feb 2007 16:18:55 -

0120]/UNNAMED Infectados: Trojan-Spy.HTML.Bankfraud.ri saltado
C:\Documents and Settings\cecilia-ramon\Datos de

programa\Thunderbird\Profiles\hfbs7afi.default\Mai l\Local Folders\Inbox/[From

Cecilia Urquizu <cecilia.urquizu@gmail.com>][Date Mon, 13 Feb 2006 20:12:53

+0100]/UNNAMED/[From "Elena Palomar" <elena.palomar@aeci.org.sv>][Date Mon,

13 Feb 2006 17:01:03 -0600]/UNNAMED/[From Francesc Imbernon

<fimbernon@ub.edu>][Date Tue, 14 Feb 2006 08:54:38 +0100]/text/[From "Royal

Euro Casino" <music@myfunnymail.com>][Date Fri, 02 Feb 2007 07:48:50 -

0400]/html/[From "Alice St . ... /[From Yso-8859-1?Q?fèlix_Tejero?

<ftejero@xtec.net>][Date Sun, 25 Feb 2007 19:18:35 +0100]/text Infectados:

Trojan-Spy.HTML.Bankfraud.ri saltado
C:\Documents and Settings\cecilia-ramon\Datos de

programa\Thunderbird\Profiles\hfbs7afi.default\Mai l\Local Folders\Inbox/[From

Cecilia Urquizu <cecilia.urquizu@gmail.com>][Date Mon, 13 Feb 2006 20:12:53

+0100]/UNNAMED/[From "Elena Palomar" <elena.palomar@aeci.org.sv>][Date Mon,

13 Feb 2006 17:01:03 -0600]/UNNAMED/[From Francesc Imbernon

<fimbernon@ub.edu>][Date Tue, 14 Feb 2006 08:54:38 +0100]/text/[From "Royal

Euro Casino" <music@myfunnymail.com>][Date Fri, 02 Feb 2007 07:48:50 -

0400]/html/[From "Alice St ... /[ ... /[From Francesc Imbernon

<fimbernon@ub.edu>][Date Sun, 25 Feb 2007 16:47:22 +0100]/UNNAMED

Infectados: Trojan-Spy.HTML.Bankfraud.ri saltado
C:\Documents and Settings\cecilia-ramon\Datos de

programa\Thunderbird\Profiles\hfbs7afi.default\Mai l\Local Folders\Inbox/[From

Cecilia Urquizu <cecilia.urquizu@gmail.com>][Date Mon, 13 Feb 2006 20:12:53

+0100]/UNNAMED/[From "Elena Palomar" <elena.palomar@aeci.org.sv>][Date Mon,

13 Feb 2006 17:01:03 -0600]/UNNAMED/[From Francesc Imbernon

<fimbernon@ub.edu>][Date Tue, 14 Feb 2006 08:54:38 +0100]/text/[From "Royal

Euro Casino" <music@myfunnymail.com>][Date Fri, 02 Feb 2007 07:48:50 -

0400]/html/[From "Alice St ... /[ ... /[From

mrenee.chinchilla@bolhispania.org.bo][Date Fri, 23 Feb 2007 11:23:16 -

0400]/UNNAMED Infectados: Trojan-Spy.HTML.Bankfraud.ri saltado
C:\Documents and Settings\cecilia-ramon\Datos de

programa\Thunderbird\Profiles\hfbs7afi.default\Mai l\Local Folders\Inbox/[From

Cecilia Urquizu <cecilia.urquizu@gmail.com>][Date Mon, 13 Feb 2006 20:12:53

+0100]/UNNAMED/[From "Elena Palomar" <elena.palomar@aeci.org.sv>][Date Mon,

13 Feb 2006 17:01:03 -0600]/UNNAMED/[From Francesc Imbernon

<fimbernon@ub.edu>][Date Tue, 14 Feb 2006 08:54:38 +0100]/text/[From "Royal

Euro Casino" <music@myfunnymail.com>][Date Fri, 02 Feb 2007 07:48:50 -

0400]/html/[From "Alice St ... /[ ... /[From

mrenee.chinchilla@bolhispania.org.bo][Date Fri, 23 Feb 2007 11:19:27 -

0400]/UNNAMED Infectados: Trojan-Spy.HTML.Bankfraud.ri saltado
C:\Documents and Settings\cecilia-ramon\Datos de

programa\Thunderbird\Profiles\hfbs7afi.default\Mai l\Local Folders\Inbox/[From

Cecilia Urquizu <cecilia.urquizu@gmail.com>][Date Mon, 13 Feb 2006 20:12:53

+0100]/UNNAMED/[From "Elena Palomar" <elena.palomar@aeci.org.sv>][Date Mon,

13 Feb 2006 17:01:03 -0600]/UNNAMED/[From Francesc Imbernon

<fimbernon@ub.edu>][Date Tue, 14 Feb 2006 08:54:38 +0100]/text/[From "Royal

Euro Casino" <music@myfunnymail.com>][Date Fri, 02 Feb 2007 07:48:50 -

0400]/html/[From "Alice St ... /[ ... /[From

mrenee.chinchilla@bolhispania.org.bo][Date Fri, 23 Feb 2007 10:08:33 -

0400]/UNNAMED Infectados: Trojan-Spy.HTML.Bankfraud.ri saltado
C:\Documents and Settings\cecilia-ramon\Datos de

programa\Thunderbird\Profiles\hfbs7afi.default\Mai l\Local Folders\Inbox/[From

Cecilia Urquizu <cecilia.urquizu@gmail.com>][Date Mon, 13 Feb 2006 20:12:53

+0100]/UNNAMED/[From "Elena Palomar" <elena.palomar@aeci.org.sv>][Date Mon,

13 Feb 2006 17:01:03 -0600]/UNNAMED/[From Francesc Imbernon

<fimbernon@ub.edu>][Date Tue, 14 Feb 2006 08:54:38 +0100]/text/[From "Royal

Euro Casino" <music@myfunnymail.com>][Date Fri, 02 Feb 2007 07:48:50 -

0400]/html/[From "Alice St ... /[From "Rachid Overbeck"

<ruffedmist@pcservice.de>][Date Fri, 23 Feb 2007 10:07:50 -0600]/UNNAMED

Infectados: Trojan-Spy.HTML.Bankfraud.ri saltado
C:\Documents and Settings\cecilia-ramon\Datos de

programa\Thunderbird\Profiles\hfbs7afi.default\Mai l\Local Folders\Inbox/[From

Cecilia Urquizu <cecilia.urquizu@gmail.com>][Date Mon, 13 Feb 2006 20:12:53

+0100]/UNNAMED/[From "Elena Palomar" <elena.palomar@aeci.org.sv>][Date Mon,

13 Feb 2006 17:01:03 -0600]/UNNAMED/[From Francesc Imbernon

<fimbernon@ub.edu>][Date Tue, 14 Feb 2006 08:54:38 +0100]/text/[From "Royal

Euro Casino" <music@myfunnymail.com>][Date Fri, 02 Feb 2007 07:48:50 -

0400]/html/[From "Alice St ... /[F ... /[From

mrenee.chinchilla@bolhispania.org.bo][Date Thu, 22 Feb 2007 15:53:10 -

0400]/UNNAMED Infectados: Trojan-Spy.HTML.Bankfraud.ri saltado
C:\Documents and Settings\cecilia-ramon\Datos de

programa\Thunderbird\Profiles\hfbs7afi.default\Mai l\Local Folders\Inbox/[From

Cecilia Urquizu <cecilia.urquizu@gmail.com>][Date Mon, 13 Feb 2006 20:12:53

+0100]/UNNAMED/[From "Elena Palomar" <elena.palomar@aeci.org.sv>][Date Mon,

13 Feb 2006 17:01:03 -0600]/UNNAMED/[From Francesc Imbernon

<fimbernon@ub.edu>][Date Tue, 14 Feb 2006 08:54:38 +0100]/text/[From "Royal

Euro Casino" <music@myfunnymail.com>][Date Fri, 02 Feb 2007 07:48:50 -

0400]/html/[From "Alice St ... /[From Joaquim Gimenez Rodriguez

<jgimenez@uoc.edu>][Date Wed, 21 Feb 2007 22:54:10 +0100]/UNNAMED

Infectados: Trojan-Spy.HTML.Bankfraud.ri saltado
C:\Documents and Settings\cecilia-ramon\Datos de

programa\Thunderbird\Profiles\hfbs7afi.default\Mai l\Local Folders\Inbox/[From

Cecilia Urquizu <cecilia.urquizu@gmail.com>][Date Mon, 13 Feb 2006 20:12:53

+0100]/UNNAMED/[From "Elena Palomar" <elena.palomar@aeci.org.sv>][Date Mon,

13 Feb 2006 17:01:03 -0600]/UNNAMED/[From Francesc Imbernon

<fimbernon@ub.edu>][Date Tue, 14 Feb 2006 08:54:38 +0100]/text/[From "Royal

Euro Casino" <music@myfunnymail.com>][Date Fri, 02 Feb 2007 07:48:50 -

0400]/html/[From "Alice Stark" < ... /[Fro ... /[From "flow"

<kbgrarjjqnh@com.sg>][Date Wed, 21 Feb 2007 17:40:16 -0800]/UNNAMED

Infectados: Trojan-Spy.HTML.Bankfraud.ri saltado
C:\Documents and Settings\cecilia-ramon\Datos de

programa\Thunderbird\Profiles\hfbs7afi.default\Mai l\Local Folders\Inbox/[From

Cecilia Urquizu <cecilia.urquizu@gmail.com>][Date Mon, 13 Feb 2006 20:12:53

+0100]/UNNAMED/[From "Elena Palomar" <elena.palomar@aeci.org.sv>][Date Mon,

13 Feb 2006 17:01:03 -0600]/UNNAMED/[From Francesc Imbernon

<fimbernon@ub.edu>][Date Tue, 14 Feb 2006 08:54:38 +0100]/text/[From "Royal

Euro Casino" <music@myfunnymail.com>][Date Fri, 02 Feb 2007 07:48:50 -

0400]/html/[From "Alice Stark" < ... /[From SERAFIN ANTUNEZ MARCOS

<santunez@ub.edu>][Date Mon, 19 Feb 2007 13:23:32 +0100]/text Infectados:

Trojan-Spy.HTML.Bankfraud.ri saltado
C:\Documents and Settings\cecilia-ramon\Datos de

programa\Thunderbird\Profiles\hfbs7afi.default\Mai l\Local Folders\Inbox/[From

Cecilia Urquizu <cecilia.urquizu@gmail.com>][Date Mon, 13 Feb 2006 20:12:53

+0100]/UNNAMED/[From "Elena Palomar" <elena.palomar@aeci.org.sv>][Date Mon,

13 Feb 2006 17:01:03 -0600]/UNNAMED/[From Francesc Imbernon

<fimbernon@ub.edu>][Date Tue, 14 Feb 2006 08:54:38 +0100]/text/[From "Royal

Euro Casino" <music@myfunnymail.com>][Date Fri, 02 Feb 2007 07:48:50 -

0400]/html/[From "Alice Stark" < ... /[From Chi Lawrence

<bsterling@printegra.com>][Date Mon, 19 Feb 2007 12:13:28 +0100]/UNNAMED

Infectados: Trojan-Spy.HTML.Bankfraud.ri saltado
C:\Documents and Settings\cecilia-ramon\Datos de

programa\Thunderbird\Profiles\hfbs7afi.default\Mai l\Local Folders\Inbox/[From

Cecilia Urquizu <cecilia.urquizu@gmail.com>][Date Mon, 13 Feb 2006 20:12:53

+0100]/UNNAMED/[From "Elena Palomar" <elena.palomar@aeci.org.sv>][Date Mon,

13 Feb 2006 17:01:03 -0600]/UNNAMED/[From Francesc Imbernon

<fimbernon@ub.edu>][Date Tue, 14 Feb 2006 08:54:38 +0100]/text/[From "Royal

Euro Casino" <music@myfunnymail.com>][Date Fri, 02 Feb 2007 07:48:50 -

0400]/html/[From "Alice Stark" <a_ .. ... /[From Francesc Imbernon

<fimbernon@ub.edu>][Date Fri, 16 Feb 2007 12:09:24 +0100]/text Infectados:

Trojan-Spy.HTML.Bankfraud.ri saltado
C:\Documents and Settings\cecilia-ramon\Datos de

programa\Thunderbird\Profiles\hfbs7afi.default\Mai l\Local Folders\Inbox/[From

Cecilia Urquizu <cecilia.urquizu@gmail.com>][Date Mon, 13 Feb 2006 20:12:53

+0100]/UNNAMED/[From "Elena Palomar" <elena.palomar@aeci.org.sv>][Date Mon,

13 Feb 2006 17:01:03 -0600]/UNNAMED/[From Francesc Imbernon

<fimbernon@ub.edu>][Date Tue, 14 Feb 2006 08:54:38 +0100]/text/[From "Royal

Euro Casino" <music@myfunnymail.com>][Date Fri, 02 Feb 2007 07:48:50 -

0400]/html/[From "Alice Stark" <a_ ... /[From

mrenee.chinchilla@bolhispania.org.bo][Date Wed, 14 Feb 2007 17:46:51 -

0400]/UNNAMED Infectados: Trojan-Spy.HTML.Bankfraud.ri saltado
C:\Documents and Settings\cecilia-ramon\Datos de

programa\Thunderbird\Profiles\hfbs7afi.default\Mai l\Local Folders\Inbox/[From

Cecilia Urquizu <cecilia.urquizu@gmail.com>][Date Mon, 13 Feb 2006 20:12:53

+0100]/UNNAMED/[From "Elena Palomar" <elena.palomar@aeci.org.sv>][Date Mon,

13 Feb 2006 17:01:03 -0600]/UNNAMED/[From Francesc Imbernon

<fimbernon@ub.edu>][Date Tue, 14 Feb 2006 08:54:38 +0100]/text/[From "Royal

Euro Casino" <music@myfunnymail.com>][Date Fri, 02 Feb 2007 07:48:50 -

0400]/html/[From "Alice Stark" <a_moir@acc30.dx.deere.com>][Date Wed, 14 Feb

2007 14:33:20 -0180]/UNNAMED Infectados: Trojan-Spy.HTML.Bankfraud.ri

saltado
C:\Documents and Settings\cecilia-ramon\Datos de

programa\Thunderbird\Profiles\hfbs7afi.default\Mai l\Local Folders\Inbox/[From

Cecilia Urquizu <cecilia.urquizu@gmail.com>][Date Mon, 13 Feb 2006 20:12:53

+0100]/UNNAMED/[From "Elena Palomar" <elena.palomar@aeci.org.sv>][Date Mon,

13 Feb 2006 17:01:03 -0600]/UNNAMED/[From Francesc Imbernon

<fimbernon@ub.edu>][Date Tue, 14 Feb 2006 08:54:38 +0100]/text/[From "Royal

Euro Casino" <music@myfunnymail.com>][Date Fri, 02 Feb 2007 07:48:50 -

0400]/html Infectados: Trojan-Spy.HTML.Bankfraud.ri saltado
C:\Documents and Settings\cecilia-ramon\Datos de

programa\Thunderbird\Profiles\hfbs7afi.default\Mai l\Local Folders\Inbox/[From

Cecilia Urquizu <cecilia.urquizu@gmail.com>][Date Mon, 13 Feb 2006 20:12:53

+0100]/UNNAMED/[From "Elena Palomar" <elena.palomar@aeci.org.sv>][Date Mon,

13 Feb 2006 17:01:03 -0600]/UNNAMED/[From Francesc Imbernon

<fimbernon@ub.edu>][Date Tue, 14 Feb 2006 08:54:38 +0100]/text Infectados:

Trojan-Spy.HTML.Bankfraud.ri saltado
C:\Documents and Settings\cecilia-ramon\Datos de

programa\Thunderbird\Profiles\hfbs7afi.default\Mai l\Local Folders\Inbox/[From

Cecilia Urquizu <cecilia.urquizu@gmail.com>][Date Mon, 13 Feb 2006 20:12:53

+0100]/UNNAMED/[From "Elena Palomar" <elena.palomar@aeci.org.sv>][Date Mon,

13 Feb 2006 17:01:03 -0600]/UNNAMED Infectados: Trojan-

Spy.HTML.Bankfraud.ri saltado
C:\Documents and Settings\cecilia-ramon\Datos de

programa\Thunderbird\Profiles\hfbs7afi.default\Mai l\Local Folders\Inbox/[From

Cecilia Urquizu <cecilia.urquizu@gmail.com>][Date Mon, 13 Feb 2006 20:12:53

+0100]/UNNAMED Infectados: Trojan-Spy.HTML.Bankfraud.ri saltado
C:\Documents and Settings\cecilia-ramon\Datos de

programa\Thunderbird\Profiles\hfbs7afi.default\Mai l\Local Folders\Inbox

MailBerkeleymboxx: infectado - 68 saltado
C:\AUTORUN.1NF Infectados: Worm.Win32.AutoRun.tgf saltado
C:\autorun.inf\lpt3.This folder was created by Flash_Disinfector

Object is locked saltado
C:\AUTORUN.2NF Infectados: Worm.Win32.AutoRun.tgf saltado
C:\AUTORUN.3NF Infectados: Worm.Win32.AutoRun.tgf saltado
C:\AUTORUN.4NF Infectados: Worm.Win32.AutoRun.tgf saltado
C:\AUTORUN.5NF Infectados: Worm.Win32.AutoRun.tgf saltado
C:\AUTORUN.6NF Infectados: Worm.Win32.AutoRun.tgf saltado
C:\AUTORUN.7NF Infectados: Worm.Win32.AutoRun.tgf saltado
C:\AUTORUN.8NF Infectados: Worm.Win32.AutoRun.tgf saltado
C:\AUTORUN.9NF Infectados: Worm.Win32.AutoRun.tgf saltado
D:\AUTORUN.7NF Infectados: Worm.Win32.AutoRun.tgf saltado
D:\autorun.inf\lpt3.This folder was created by Flash_Disinfector

Object is locked saltado
D:\AUTORUN.0NF Infectados: Worm.Win32.AutoRun.tgf saltado
D:\AUTORUN.1NF Infectados: Worm.Win32.AutoRun.tgf saltado
D:\AUTORUN.2NF Infectados: Worm.Win32.AutoRun.tgf saltado
D:\AUTORUN.3NF Infectados: Worm.Win32.AutoRun.tgf saltado
D:\AUTORUN.4NF Infectados: Worm.Win32.AutoRun.tgf saltado
D:\AUTORUN.5NF Infectados: Worm.Win32.AutoRun.tgf saltado
D:\AUTORUN.6NF Infectados: Worm.Win32.AutoRun.tgf saltado

Análisis completado.

Hola MonInValde Bienvenid@ al Foro De InfoSpyware



Por favor realiza lo siguiente saltandote lo que NO te permita realizar



-* Descarga y/o actualiza las siguientes herramientas pero sin ejecutarlas aun

-*Kaspersky AVP-Tool + Manual
-* SUPERAntispyware + Manual
-* Cleaner + Manual


ejecuta y utiliza Kaspersky AVP-Tool segun su Manual
ejecuta SUPERAntispyware y elimina todo lo que detecte Lee su manual
Utiliza Cleaner de la siguiente manera

Primero utiliza la opcion "Limpiador" para eliminar cookies y archivos temporales de internet Despues utiliza la opcion "Registro" haciendo una copia de seguridad




reinicia el pc y comenta los resultados ...

Hola,
Gracias por las indicaciones.
El Kasperspy AVPTool parece que ha funcionado bien. Ha detectado 37 infecciones y dice haber borrado los archivos.
El SuperAntiSpyware no lo puedo instalar. Windows me dice que no lo permite. ¿?
El CCleaner me sigue funcionando, y he pasado el Limpiador y el Registro.

Anoche el Kasperspy online no me funcionó. Desinstalé la versión anterior y reinicié, pero no hubo manera.
Cuando pueda pasarlo, pondré los resultados.

Saludos

si el avpTool funciono entonces ya no seria nesesario pasar el kaspersky online ya que son los mismos .. solo comenta los resultados ? como sigue todo ahora?

Hola, perdón por la tardanza.

Pues parece que Kasperspy AVPTool hizo su trabajo.
No parece haber rastro de los virus. F-Secure no encuentra nada, y como tu dices, me puedo ahorrar el Kasperspy online.
Después de asegurarme que el PC no tenía nada, he revisado cada USB. Todo infectado, pero ya solucionado.

Muchas gracias
Saludos

cualquier cosa ya sabes donde encontrarnos ..