C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\webHancer5.zip/whagent.exe Zainfekowanych: not-a-virus:AdWare.Win32.WebHancer.351 pominięty C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\webHancer5.zip/whiehlpr.dll Zainfekowanych: not-a-virus:AdWare.Win32.WebHancer pominięty C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\webHancer5.zip/whinstaller.exe Zainfekowanych: not-a-virus:AdWare.Win32.WebHancer.381 pominięty C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\webHancer5.zip ZIP: zainfekowany - 3 C:\Documents and Settings\Mama\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\java.class-121cd66a-1ab1a8bf.class Zainfekowanych: Exploit.Java.Gimsh.a C:\Documents and Settings\Ola Kardyka\Desktop\marinefree.exe/WISE0050.BIN Zainfekowanych: not-a-virus:AdTool.Win32.WhenU.a pominięty C:\Documents and Settings\Ola Kardyka\Desktop\marinefree.exe/WISE0051.BIN Zainfekowanych: not-a-virus:AdWare.Win32.NewDotNet pominięty C:\Documents and Settings\Ola Kardyka\Desktop\marinefree.exe/WISE0052.BIN/data.rar/whAgent.exe Zainfekowanych: not-a-virus:AdWare.Win32.WebHancer.351 pominięty C:\Documents and Settings\Ola Kardyka\Desktop\marinefree.exe/WISE0052.BIN/data.rar/whInstaller.exe Zainfekowanych: not-a-virus:AdWare.Win32.WebHancer.381 pominięty C:\Documents and Settings\Ola Kardyka\Desktop\marinefree.exe/WISE0052.BIN/data.rar/whSurvey.exe Zainfekowanych: not-a-virus:AdWare.Win32.WebHancer pominięty C:\Documents and Settings\Ola Kardyka\Desktop\marinefree.exe/WISE0052.BIN/data.rar/webhdll.dll Zainfekowanych: not-a-virus:AdWare.Win32.WebHancer.370 pominięty C:\Documents and Settings\Ola Kardyka\Desktop\marinefree.exe/WISE0052.BIN/data.rar/whiehlpr.dll Zainfekowanych: not-a-virus:AdWare.Win32.WebHancer pominięty C:\Documents and Settings\Ola Kardyka\Desktop\marinefree.exe/WISE0052.BIN/data.rar Zainfekowanych: not-a-virus:AdWare.Win32.WebHancer pominięty C:\Documents and Settings\Ola Kardyka\Desktop\marinefree.exe/WISE0052.BIN Zainfekowanych: not-a-virus:AdWare.Win32.WebHancer pominięty C:\Documents and Settings\Ola Kardyka\Desktop\marinefree.exe/WISE0053.BIN Zainfekowanych: not-a-virus:Server-Proxy.Win32.MarketScore.k pominięty C:\Documents and Settings\Ola Kardyka\Desktop\marinefree.exe WiseSFX: zainfekowany - 10 pominięty C:\Documents and Settings\Ola Kardyka\Desktop\marinefree.exe WiseSFXDropper: zainfekowany - 10 pominięty C:\Documents and Settings\Ola Kardyka\Desktop\RevelationV2.zip/SetupRevelationV2.exe/WISE0012.BIN Zainfekowanych: not-a-virus:PSWTool.Win32.SnadBoy.2011 pominięty C:\Documents and Settings\Ola Kardyka\Desktop\RevelationV2.zip/SetupRevelationV2.exe/WISE0013.BIN Zainfekowanych: not-a-virus:PSWTool.Win32.SnadBoy.2011 pominięty C:\Documents and Settings\Ola Kardyka\Desktop\RevelationV2.zip/SetupRevelationV2.exe Zainfekowanych: not-a-virus:PSWTool.Win32.SnadBoy.2011 pominięty C:\Documents and Settings\Ola Kardyka\Desktop\RevelationV2.zip ZIP: zainfekowany - 3 C:\Documents and Settings\Tata\Application Data\Thunderbird\Profiles\ldfw8u4q.default\Mail\Local Folders\Clima Produkt/[From =?utf-8?Q?Ewaryst_Barna=C5=9B_CP?=][Date Fri, 22 Dec 2006 15:05:55 +0100]/UNNAMED/[From =?iso-8859-2?Q?Krzysztof_Kr=F3likowski?=][Date Tue, 9 Jan 2007 10:25:48 +0100]/UNNAMED/[From pawel.kosior@budimex.com.pl][Date Tue, 9 Jan 2007 16:57:52 +0100]/UNNAMED/[From =?windows-1250?Q?Clima_Pro … /[From “Branch Banking and Trust”][Date Sat, 31 Mar 2007 16:14:14 + … /UNNAMED Zainfekowanych: Trojan-Spy.HTML.Bankfraud.ri pominięty C:\Documents and Settings\Tata\Application Data\Thunderbird\Profiles\ldfw8u4q.default\Mail\Local Folders\Clima Produkt/[From =?utf-8?Q?Ewaryst_Barna=C5=9B_CP?=][Date Fri, 22 Dec 2006 15:05:55 +0100]/UNNAMED/[From =?iso-8859-2?Q?Krzysztof_Kr=F3likowski?=][Date Tue, 9 Jan 2007 10:25:48 +0100]/UNNAMED/[From pawel.kosior@budimex.com.pl][Date Tue, 9 Jan 2007 16:57:52 +0100]/UNNAMED/[From =?windows-1250?Q?Clima_Pro … /[From “Branch Banking and Trust”][Date Sat, 31 Mar 2007 16:14:14 +0100]/UNNAMED Zainfekowanych: Trojan-Spy.HTML.Bankfraud.ri pominięty C:\Documents and Settings\Tata\Application Data\Thunderbird\Profiles\ldfw8u4q.default\Mail\Local Folders\Clima Produkt/[From =?utf-8?Q?Ewaryst_Barna=C5=9B_CP?=][Date Fri, 22 Dec 2006 15:05:55 +0100]/UNNAMED/[From =?iso-8859-2?Q?Krzysztof_Kr=F3likowski?=][Date Tue, 9 Jan 2007 10:25:48 +0100]/UNNAMED/[From pawel.kosior@budimex.com.pl][Date Tue, 9 Jan 2007 16:57:52 +0100]/UNNAMED/[From =?windows-1250?Q?Clima_Produkt_=8Cl=B9sk?=][Date Sun, 25 Mar 2007 19:59:51 +0100]/text Zainfekowanych: Trojan-Spy.HTML.Bankfraud.ri pominięty C:\Documents and Settings\Tata\Application Data\Thunderbird\Profiles\ldfw8u4q.default\Mail\Local Folders\Clima Produkt/[From =?utf-8?Q?Ewaryst_Barna=C5=9B_CP?=][Date Fri, 22 Dec 2006 15:05:55 +0100]/UNNAMED/[From =?iso-8859-2?Q?Krzysztof_Kr=F3likowski?=][Date Tue, 9 Jan 2007 10:25:48 +0100]/UNNAMED/[From pawel.kosior@budimex.com.pl][Date Tue, 9 Jan 2007 16:57:52 +0100]/UNNAMED/[From =?windows-1250?Q?Clima_Produkt_=8Cl=B9sk?=][Date Sun, 25 Mar 2007 18:19:24 +0200]/UNNAMED Zainfekowanych: Trojan-Spy.HTML.Bankfraud.ri pominięty C:\Documents and Settings\Tata\Application Data\Thunderbird\Profiles\ldfw8u4q.default\Mail\Local Folders\Clima Produkt/[From =?utf-8?Q?Ewaryst_Barna=C5=9B_CP?=][Date Fri, 22 Dec 2006 15:05:55 +0100]/UNNAMED/[From =?iso-8859-2?Q?Krzysztof_Kr=F3likowski?=][Date Tue, 9 Jan 2007 10:25:48 +0100]/UNNAMED/[From pawel.kosior@budimex.com.pl][Date Tue, 9 Jan 2007 16:57:52 +0100]/UNNAMED/[From =?windows-1250?Q?Clima_Produkt_=8Cl=B9sk?=][Date Sun, 25 Mar 2007 09:48:37 +0600]/UNNAMED Zainfekowanych: Trojan-Spy.HTML.Bankfraud.ri pominięty C:\Documents and Settings\Tata\Application Data\Thunderbird\Profiles\ldfw8u4q.default\Mail\Local Folders\Clima Produkt/[From =?utf-8?Q?Ewaryst_Barna=C5=9B_CP?=][Date Fri, 22 Dec 2006 15:05:55 +0100]/UNNAMED/[From =?iso-8859-2?Q?Krzysztof_Kr=F3likowski?=][Date Tue, 9 Jan 2007 10:25:48 +0100]/UNNAMED/[From pawel.kosior@budimex.com.pl][Date Tue, 9 Jan 2007 16:57:52 +0100]/UNNAMED/[From =?windows-1250?Q?Clima_Produkt_=8Cl=B9sk?=][Date Mon, 19 Mar 2007 20:26:72 +0100]/UNNAMED Zainfekowanych: Trojan-Spy.HTML.Bankfraud.ri pominięty C:\Documents and Settings\Tata\Application Data\Thunderbird\Profiles\ldfw8u4q.default\Mail\Local Folders\Clima Produkt/[From =?utf-8?Q?Ewaryst_Barna=C5=9B_CP?=][Date Fri, 22 Dec 2006 15:05:55 +0100]/UNNAMED/[From =?iso-8859-2?Q?Krzysztof_Kr=F3likowski?=][Date Tue, 9 Jan 2007 10:25:48 +0100]/UNNAMED/[From pawel.kosior@budimex.com.pl][Date Tue, 9 Jan 2007 16:57:52 +0100]/UNNAMED/[From =?windows-1250?Q?Clima_Produkt_=8Cl=B9sk?=][Date Sun, 11 Mar 2007 11:04:49 +0100]/UNNAMED Zainfekowanych: Trojan-Spy.HTML.Bankfraud.ri pominięty C:\Documents and Settings\Tata\Application Data\Thunderbird\Profiles\ldfw8u4q.default\Mail\Local Folders\Clima Produkt/[From =?utf-8?Q?Ewaryst_Barna=C5=9B_CP?=][Date Fri, 22 Dec 2006 15:05:55 +0100]/UNNAMED/[From =?iso-8859-2?Q?Krzysztof_Kr=F3likowski?=][Date Tue, 9 Jan 2007 10:25:48 +0100]/UNNAMED/[From pawel.kosior@budimex.com.pl][Date Tue, 9 Jan 2007 16:57:52 +0100]/UNNAMED/[From =?windows-1250?Q?Clima_Produkt_=8Cl=B9sk?=][Date Sat, 10 Mar 2007 21:33:55 +0200]/UNNAMED Zainfekowanych: Trojan-Spy.HTML.Bankfraud.ri pominięty C:\Documents and Settings\Tata\Application Data\Thunderbird\Profiles\ldfw8u4q.default\Mail\Local Folders\Clima Produkt/[From =?utf-8?Q?Ewaryst_Barna=C5=9B_CP?=][Date Fri, 22 Dec 2006 15:05:55 +0100]/UNNAMED/[From =?iso-8859-2?Q?Krzysztof_Kr=F3likowski?=][Date Tue, 9 Jan 2007 10:25:48 +0100]/UNNAMED/[From pawel.kosior@budimex.com.pl][Date Tue, 9 Jan 2007 16:57:52 +0100]/UNNAMED/[From =?windows-1250?Q?Clima_Produkt_=8Cl=B9sk?=][Date Sat, 10 Mar 2007 17:46:14 +0100]/UNNAMED Zainfekowanych: Trojan-Spy.HTML.Bankfraud.ri pominięty C:\Documents and Settings\Tata\Application Data\Thunderbird\Profiles\ldfw8u4q.default\Mail\Local Folders\Clima Produkt/[From =?utf-8?Q?Ewaryst_Barna=C5=9B_CP?=][Date Fri, 22 Dec 2006 15:05:55 +0100]/UNNAMED/[From =?iso-8859-2?Q?Krzysztof_Kr=F3likowski?=][Date Tue, 9 Jan 2007 10:25:48 +0100]/UNNAMED/[From pawel.kosior@budimex.com.pl][Date Tue, 9 Jan 2007 16:57:52 +0100]/UNNAMED/[From =?windows-1250?Q?Clima_Produkt_=8Cl=B9sk?=][Date Sat, 10 Mar 2007 19:47:48 +0800]/UNNAMED Zainfekowanych: Trojan-Spy.HTML.Bankfraud.ri pominięty C:\Documents and Settings\Tata\Application Data\Thunderbird\Profiles\ldfw8u4q.default\Mail\Local Folders\Clima Produkt/[From =?utf-8?Q?Ewaryst_Barna=C5=9B_CP?=][Date Fri, 22 Dec 2006 15:05:55 +0100]/UNNAMED/[From =?iso-8859-2?Q?Krzysztof_Kr=F3likowski?=][Date Tue, 9 Jan 2007 10:25:48 +0100]/UNNAMED/[From pawel.kosior@budimex.com.pl][Date Tue, 9 Jan 2007 16:57:52 +0100]/UNNAMED/[From =?windows-1250?Q?Clima_Produkt_=8Cl=B9sk?=][Date Sat, 3 Mar 2007 13:04:33 -0060]/UNNAMED Zainfekowanych: Trojan-Spy.HTML.Bankfraud.ri pominięty C:\Documents and Settings\Tata\Application Data\Thunderbird\Profiles\ldfw8u4q.default\Mail\Local Folders\Clima Produkt/[From =?utf-8?Q?Ewaryst_Barna=C5=9B_CP?=][Date Fri, 22 Dec 2006 15:05:55 +0100]/UNNAMED/[From =?iso-8859-2?Q?Krzysztof_Kr=F3likowski?=][Date Tue, 9 Jan 2007 10:25:48 +0100]/UNNAMED/[From pawel.kosior@budimex.com.pl][Date Tue, 9 Jan 2007 16:57:52 +0100]/UNNAMED/[From =?windows-1250?Q?Clima_Produkt_=8Cl=B9sk?=][Date Fri, … /[From klimatgs@interia.pl][Date 04 Feb 2007 19:15:58 +0100]/text Zainfekowanych: Trojan-Spy.HTML.Bankfraud.ri pominięty C:\Documents and Settings\Tata\Application Data\Thunderbird\Profiles\ldfw8u4q.default\Mail\Local Folders\Clima Produkt/[From =?utf-8?Q?Ewaryst_Barna=C5=9B_CP?=][Date Fri, 22 Dec 2006 15:05:55 +0100]/UNNAMED/[From =?iso-8859-2?Q?Krzysztof_Kr=F3likowski?=][Date Tue, 9 Jan 2007 10:25:48 +0100]/UNNAMED/[From pawel.kosior@budimex.com.pl][Date Tue, 9 Jan 2007 16:57:52 +0100]/UNNAMED/[From =?windows-1250?Q?Clima_Produkt_=8Cl=B9sk?=][Date Fri, 22 Dec 2006 11:49:12 +0100]/UNNAMED Zainfekowanych: Trojan-Spy.HTML.Bankfraud.ri pominięty C:\Documents and Settings\Tata\Application Data\Thunderbird\Profiles\ldfw8u4q.default\Mail\Local Folders\Clima Produkt/[From =?utf-8?Q?Ewaryst_Barna=C5=9B_CP?=][Date Fri, 22 Dec 2006 15:05:55 +0100]/UNNAMED/[From =?iso-8859-2?Q?Krzysztof_Kr=F3likowski?=][Date Tue, 9 Jan 2007 10:25:48 +0100]/UNNAMED/[From pawel.kosior@budimex.com.pl][Date Tue, 9 Jan 2007 16:57:52 +0100]/UNNAMED Zainfekowanych: Trojan-Spy.HTML.Bankfraud.ri pominięty C:\Documents and Settings\Tata\Application Data\Thunderbird\Profiles\ldfw8u4q.default\Mail\Local Folders\Clima Produkt/[From =?utf-8?Q?Ewaryst_Barna=C5=9B_CP?=][Date Fri, 22 Dec 2006 15:05:55 +0100]/UNNAMED/[From =?iso-8859-2?Q?Krzysztof_Kr=F3likowski?=][Date Tue, 9 Jan 2007 10:25:48 +0100]/UNNAMED Zainfekowanych: Trojan-Spy.HTML.Bankfraud.ri pominięty C:\Documents and Settings\Tata\Application Data\Thunderbird\Profiles\ldfw8u4q.default\Mail\Local Folders\Clima Produkt/[From =?utf-8?Q?Ewaryst_Barna=C5=9B_CP?=][Date Fri, 22 Dec 2006 15:05:55 +0100]/UNNAMED Zainfekowanych: Trojan-Spy.HTML.Bankfraud.ri pominięty C:\Documents and Settings\Tata\Application Data\Thunderbird\Profiles\ldfw8u4q.default\Mail\Local Folders\Clima Produkt Mail Berkeley mbox: zainfekowany - 16 C:\Program Files\AWS\WxBugSetup60b6.04.0.9m.EXE/WISE0016.BIN Zainfekowanych: not-a-virus:AdWare.Win32.MyWay.j pominięty C:\Program Files\AWS\WxBugSetup60b6.04.0.9m.EXE WiseSFX: zainfekowany - 1 pominięty C:\Program Files\AWS\WxBugSetup60b6.04.0.9m.EXE WiseSFXDropper: zainfekowany - 1 C:\WINDOWS\system32\even32.dll Zainfekowanych: Trojan-Downloader.Win32.Agent.kpo