Op deze website gebruiken we cookies om content en advertenties te personaliseren, om functies voor social media te bieden en om ons websiteverkeer te analyseren. Ook delen we informatie over uw gebruik van onze site met onze partners voor social media, adverteren en analyse. Deze partners kunnen deze gegevens combineren met andere informatie die u aan ze heeft verstrekt of die ze hebben verzameld op basis van uw gebruik van hun services. Meer informatie.

Akkoord

Vraag & Antwoord

Beveiliging & privacy

Internet explorer heeft fout veroorzaakt

smeenk
20 antwoorden
  • Ik kan sinds kort niet meer via internet explorer op internet komen. Als ik iexplorer op wil starten krijg ik de volgende melding: In iexplore.exe is een fout opgetreden en moet worden afgesloten. Onze excuses voor dit ongemak.
    Als overige informatie geeft ie nog: mod. ver: 6.0.2900.2713
    app. ver: 6.0.2900.2180
    off set: 00024161
    Mod name: shdocvw.dll
    Ik denk zelf dat er spyware opzit. Ik heb alleen weinig verstand hiervan dus wil iemand mij alsjeblieft helpen?!
  • Heb je Windows 2000/XP? Scan dan je PC een met Hitman Pro ( www.hitmanpro.nl ).
  • Heb windows XP. Heb al geprobeerd met Hitman maar doet het om een of andere reden niet.
  • Probeer eens een HijackThis log te plaatsen. Download HijackThis hier.
    Zet het bestand HijackThis.exe daarna in een eigen map, bijvoorbeeld C:\HijackThis. Start het Programma en kies voor "Do a system scan and save a log file". Kopieer de inhoud van het logbestand in je volgende bericht.

    Groeten smeenk :wink:
  • Heb je t net al als gewoon bericht gestuurd maar k zal het hier ook even neerzetten, voor het geval anderen het ook willen bekijken, graag!

    Logfile of HijackThis v1.99.1
    Scan saved at 17:26:24, on 08/24/2005
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
    C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Norton AntiVirus
    avapsvc.exe
    C:\WINDOWS\system32
    vsvc32.exe
    C:\Program Files\Norton AntiVirus\SAVScan.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\Logi_MwX.Exe
    C:\Program Files\Common Files\Symantec Shared\ccApp.exe
    C:\WINDOWS\system32\rundll32.exe
    C:\Program Files\NavExcel\NavHelper\v2.0.4d
    avapp.exe
    C:\Program Files\ISTsvc\istsvc.exe
    C:\Program Files\BullsEye Network\bin\bargains.exe
    C:\Program Files\Java\jre1.5.0_01\bin\jusched.exe
    C:\Program Files\Media Access\MediaAccK.exe
    C:\temp\salm.exe
    C:\Program Files\Media Access\MediaAccess.exe
    C:\Program Files\Internet Optimizer\optimize.exe
    C:\Program Files\Internet Optimizer\actalert.exe
    C:\Program Files\Internet Optimizer\actalert.exe
    C:\WINDOWS\wtwxugl.exe
    C:\Program Files\Yzpk\Fywozji.exe
    C:\Program Files\MessengerPlus! 3\MsgPlus.exe
    C:\WINDOWS\system32\vjhmr12k.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\WINDOWS\system32\devldr32.exe
    C:\Program Files\Oemji\Toolbar\PopupBlocker\OemjiPopupBlocker.exe
    C:\Program Files\Ares\Ares.exe
    C:\Program Files\Messenger\msmsgs.exe
    c:\progra~1\intern~1\iexplore.exe
    C:\Program Files\MSN Messenger\msnmsgr.exe
    C:\program files\internet explorer\iexplore.exe
    C:\Nieuwe map\HijackThis.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.ptwpjsyweliwwrdpuwhhuz.com//azhNO6NCNjS2jhSXA1ekDnceCX4gI0LXXxJGz2ctlnEL7pL_TWDlIdQ9Cg/p75Y.jpg
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.oemji.com
    R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://www.oemji.com/side_search.html
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen
    R3 - URLSearchHook: (no name) - _{CFBFAE00-17A6-11D0-99CB-00C04FD64497} - (no file)
    O2 - BHO: BHObj Class - {00000010-6F7D-442C-93E3-4A4827C2E4C8} - C:\WINDOWS
    em220.dll (file missing)
    O2 - BHO: My Search BHO - {014DA6C1-189F-421a-88CD-07CFE51CFF10} - C:\Program Files\MySearch\bar\1.bin\S4BAR.DLL (file missing)
    O2 - BHO: Yahoo! Companion BHO - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_5_7_0.dll
    O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
    O2 - BHO: - {3C578101-290B-408A-A7D7-E71FAA518726} - C:\WINDOWS\lbbho.dll
    O2 - BHO: PBHelper - {4115122B-85FF-4DD3-9515-F075BEDE5EB5} - C:\Program Files\Oemji\Toolbar\PopupBlocker\PBHelper.dll
    O2 - BHO: URLLink Class - {4A2AACF3-ADF6-11D5-98A9-00E018981B9E} - C:\Program Files\NewDotNet
    ewdotnet6_38.dll
    O2 - BHO: BHObj Class - {8F4E5661-F99E-4B3E-8D85-0EA71C0748E4} - C:\WINDOWS\wsem303.dll (file missing)
    O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
    O2 - BHO: (no name) - {AFAD59F9-E591-876F-FBD3-33632DBD7BC0} - C:\DOCUME~1\GEBRUI~1\APPLIC~1\INTERN~1\Locks love.exe
    O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.4000.1001
    l\msntb.dll
    O2 - BHO: CNavExtBho Class - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
    O2 - BHO: NavHelper Class - {C1E58A84-95B3-4630-B8C2-D06B77B7A0FC} - C:\Program Files\NavExcel\NavHelper\v2.0.4d\NHelper.dll (file missing)
    O2 - BHO: OemjiSearchPlus - {D240DC29-C093-4388-B71F-A7103C796B0C} - C:\Program Files\Oemji\OemjiSearchPlus\OemjiPls.dll
    O2 - BHO: Helper Class - {D80C4E21-C346-4E21-8E64-20746AA20AEB} - C:\Program Files\NavExcel Search Toolbar\NavExcelBar.dll (file missing)
    O2 - BHO: ADP UrlCatcher Class - {F4E04583-354E-4076-BE7D-ED6A80FD66DA} - C:\WINDOWS\system32\msbe.dll (file missing)
    O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
    O3 - Toolbar: My Search Bar - {014DA6C9-189F-421a-88CD-07CFE51CFF10} - C:\Program Files\MySearch\bar\1.bin\S4BAR.DLL (file missing)
    O3 - Toolbar: NavExcel Toolbar - {5AA06644-BC46-4220-A460-47A6EB47C96D} - C:\Program Files\NavExcel Search Toolbar\NavExcelBar.dll (file missing)
    O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.4000.1001
    l\msntb.dll
    O3 - Toolbar: Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_5_7_0.dll
    O3 - Toolbar: YourSiteBar - {86227D9C-0EFE-4f8a-AA55-30386A3F5686} - C:\PROGRA~1\YOURSI~1\ysb.dll (file missing)
    O3 - Toolbar: Oemji - {804DB5C7-31E6-4885-850A-F1941B58A4C7} - C:\Program Files\Oemji\Toolbar\OemjiSrc.dll
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
    O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
    O4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.Exe
    O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
    O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
    O4 - HKLM\..\Run: [New.net Startup] rundll32 C:\PROGRA~1\NEWDOT~1\NEWDOT~2.DLL,NewDotNetStartup -s
    O4 - HKLM\..\Run: [navapp] C:\Program Files\NavExcel\NavHelper\v2.0.4d
    avapp.exe
    O4 - HKLM\..\Run: [IST Service] C:\Program Files\ISTsvc\istsvc.exe
    O4 - HKLM\..\Run: [BullsEye Network] C:\Program Files\BullsEye Network\bin\bargains.exe
    O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_01\bin\jusched.exe
    O4 - HKLM\..\Run: [Media Access] C:\Program Files\Media Access\MediaAccK.exe
    O4 - HKLM\..\Run: [salm] c:\temp\salm.exe
    O4 - HKLM\..\Run: [Internet Optimizer] "C:\Program Files\Internet Optimizer\optimize.exe"
    O4 - HKLM\..\Run: [sbcbgx] C:\WINDOWS\sbcbgx.exe
    O4 - HKLM\..\Run: [V7GUoe] C:\WINDOWS\wtwxugl.exe
    O4 - HKLM\..\Run: [-
    ] C:\WINDOWS\wtwxugl.exe
    O4 - HKLM\..\Run: [V÷h$vùõš/‚²‘ÆßfÏNbC:\Program Files\ISTsvc\istsvc.exe] C:\WINDOWS\wtwxugl.exe
    O4 - HKLM\..\Run: [Á³#  L"h'þ9Óœð3rÅWC:\Program Files\ISTsvc\istsvc.exe] C:\WINDOWS\wtwxugl.exe
    O4 - HKLM\..\Run: [Avvyaylr] C:\Program Files\Yzpk\Fywozji.exe
    O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe"
    O4 - HKLM\..\Run: [vjhmr12k] C:\WINDOWS\system32\vjhmr12k.exe
    O4 - HKLM\..\Run: [DEAFLOADGRIMTEST] C:\Documents and Settings\All Users\Application Data\ProxyPokeDeafLoad\OOZE SITE.exe
    O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe
    O4 - HKCU\..\Run: [ares] "C:\Program Files\Ares\Ares.exe" -h
    O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
    O4 - HKCU\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe" /WinStart
    O4 - HKCU\..\Run: [Barbbook] C:\DOCUME~1\GEBRUI~1\APPLIC~1\FUNKJU~1\dupe heart bolt.exe
    O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_01\bin
    pjpi150_01.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_01\bin
    pjpi150_01.dll
    O9 - Extra button: (no name) - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - (no file)
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O10 - Hijacked Internet access by New.Net
    O10 - Hijacked Internet access by New.Net
    O10 - Hijacked Internet access by New.Net
    O10 - Hijacked Internet access by New.Net
    O10 - Hijacked Internet access by New.Net
    O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
    O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
    O16 - DPF: {15AD6789-CDB4-47E1-A9DA-992EE8E6BAD6} - http://static.windupdates.com/cab/DownloadAccess/ie/bridge-c3.cab
    O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
    O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
    O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v5consumer/V5Controls/en/x86/client/wuweb_site.cab?1100077309859
    O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
    O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab32846.cab
    O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab31267.cab
    O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
    O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
    O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
    O23 - Service: Norton AntiVirus Auto-Protect (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus
    avapsvc.exe
    O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
    vsvc32.exe
    O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe
    O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
    O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
    O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
    O23 - Service: ZESOFT - Unknown owner - C:\WINDOWS\zeta.exe (file missing)
  • Er is nogal wat mis op je PC.

    Je hebt Messengerplus geïnstalleerd met Sponsors. Hierdoor is de computer geïnfecteerd met LOP.
    Ga naar Configuratiescherm - Software - Programma's wijzigen en verwijderen. Deïnstalleer Messenger plus. (Later kan je deze terug installeren, maar kies dan voor een installatie zonder sponsors.)
    Tijdens het deïnstallatieprocess wordt er gevraagd om een securitycode in te geven. Doe dit.

    Herstart de computer en ga dan verder met het volgende:

    Ga daarna opnieuw naar Configuratiescherm - Software - Programma's wijzigen en verwijderen : deïnstalleer New.net Application en NewDotNet (Domains)
    Staan deze er niet tussen, dan kijk je in de dan map c:\Progam Files\NewDotNet. Zoek een in die map naar een bestand uninstallX_XX.exe. De waarde van X (een cijfer) hangt af van de versie van New.net die geïnstalleerd is op de computer.
    Vind je de uninstaller ook niet in de map c:\Progam Files\NewDotNet, dan kijk je in de map C:\Windows naar een bestand NDNuninstallX_XX.exe. (zelfde verhaal voor de X.)
    Is deze ook niet aanwezig dan kan je deze uninstaller downloaden: http://www.new.net/support/uninstall6_38.exe

    Herstart de computer en ga dan verder met het volgende:

    Probeer via Configuratiescherm – Software ook het volgende te deïnstalleren:
    [b:ee8cc6637e]Internet optimizer
    Media acces
    1stbar
    NavExcel Helper
    BargainBuddy
    180Search
    OemjiSearchPlus[/b:ee8cc6637e]
    Of programma's die wat betreft naam hier veel op lijken.

    Herstart nadien de PC en maak een nieuw log met HijackThis en post dat in je volgende bericht.

    Groeten smeenk :wink:
  • Dank je! Maar k heb eindelijk Hitman pro kunnen installeren, dus die laat ik nu eerst even alles scannen. Zal ik er daarna nog een Hijack log opzetten?
  • Het beste lijkt het me dat je eerst de aanwijzingen uit mijn post uitvoert en daarna het systeem scant met HitmanPro daarna wel een nieuw log plaatsen want ik weet zeker dat HitmanPro er niet in zal slagen om alles van je systeem te verwijderen.

    Klik op Start -> Configuratiescherm -> Software en verwijder ook het volgende programma:
    [b:43ed5c3b5e]Ares[/b:43ed5c3b5e]

    Ares is namelijk een verkeerd P2P programma, zie: http://www.spywareinfo.com/articles/p2p/ (bevat spyware)

    Groeten smeenk :wink:
  • Welk gratis P2P programma zou ik wel kunnen gebruiken dan? k heb het eigenlijk alleen nodig om liedjes mee te downloaden.
  • Hoe kom ik aan een security code? Je zegt dat ik die nodig heb om Messenger Plus eraf te halen.
  • [quote:cf01e7385e="Loeselein"]Hoe kom ik aan een security code? Je zegt dat ik die nodig heb om Messenger Plus eraf te halen.[/quote:cf01e7385e]Probeer eens een zelfbedachte code in te voeren, dit is namelijk een truc om je er van te weerhouden dit programma te deïnstalleren.[quote:cf01e7385e="Loeselein"]Welk gratis P2P programma zou ik wel kunnen gebruiken dan? k heb het eigenlijk alleen nodig om liedjes mee te downloaden.[/quote:cf01e7385e]Even zoeken op internet en dan in die lijst controleren of er spyware in zit. Ik zou het zo niet weten want ik hou me zelf niet met dergelijke programma's bezig.

    Het probleem is, als we de spyware verwijderen die door een dergelijk programma op je systeem is gezet het programma daarna ook niet meer werkt. Daarom beter eerst het programma verwijderen en het gehele systeem spywarevrij maken.

    Als je Ares daarna opnieuw wilt installeren krijg je dan ook die spyware er weer op, maar dat is dan op dat moment je eigen keuze. Mijn opmerkingen op dit forum dienen gezien te worden als adviezen, wat je daar mee doet moet je uiteraard zelf weten :wink:

    Groeten smeenk
  • Als je doel is: weer lekker te kunnen internetten, MSN'n, een bestandje downloaden. Probeer dan eerst de aanwijzingen van bijvoorbeeld Smeenk op te volgen. Die hebben al vele anderen een cleane PC bezorgd.

    Kijk daarna eens hier voor een spyware-free p2p-programma: http://www.spywareinfo.com/articles/p2p/

    E-mule wordt tegenwoordig veel gebruikt en heeft een groot netwerk van gebruikers: http://www.emule-project.net/home/perl/general.cgi?l=29
  • Ok, toch bedankt. Hier het Hijackthis log. K heb volgens mij t meeste eraf. Al krijg ik nog wel steeds veel popups.

    Logfile of HijackThis v1.99.1
    Scan saved at 11:48:09, on 08/25/2005
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
    C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\Logi_MwX.Exe
    C:\Program Files\Common Files\Symantec Shared\ccApp.exe
    C:\Program Files\Java\jre1.5.0_01\bin\jusched.exe
    C:\Program Files\Yzpk\Fywozji.exe
    C:\Program Files\Norton AntiVirus
    avapsvc.exe
    C:\Program Files\MessengerPlus! 3\MsgPlus.exe
    C:\Program Files\Messenger\msmsgs.exe
    C:\WINDOWS\system32
    vsvc32.exe
    C:\Program Files\Norton AntiVirus\SAVScan.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\WINDOWS\system32\devldr32.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe
    C:\Program Files\MSN Messenger\msnmsgr.exe
    C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
    C:\WINDOWS\system32\wuauclt.exe
    C:\Nieuwe map\HijackThis.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.bemvhwtlppveosa.com/g1CP9bIH_qqChCgVEtfQUA3K/ZuYx1tJo16/QOMvu_LWIQO7euOk8c5ZmXSTnRD8.asp
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.superdudes.nl/*K03N*
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen
    R3 - URLSearchHook: (no name) - - (no file)
    O2 - BHO: Yahoo! Companion BHO - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_5_7_0.dll
    O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
    O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
    O2 - BHO: (no name) - {AFAD59F9-E591-876F-FBD3-33632DBD7BC0} - C:\DOCUME~1\NETWOR~1\APPLIC~1\INTERN~1\Locks love.exe
    O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.4000.1001
    l\msntb.dll
    O2 - BHO: CNavExtBho Class - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
    O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
    O3 - Toolbar: (no name) - {014DA6C9-189F-421a-88CD-07CFE51CFF10} - (no file)
    O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.4000.1001
    l\msntb.dll
    O3 - Toolbar: Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_5_7_0.dll
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
    O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
    O4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.Exe
    O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
    O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
    O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_01\bin\jusched.exe
    O4 - HKLM\..\Run: [Avvyaylr] C:\Program Files\Yzpk\Fywozji.exe
    O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe"
    O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe
    O4 - HKLM\..\Run: [DEAFLOADGRIMTEST] C:\Documents and Settings\All Users\Application Data\ProxyPokeDeafLoad\downloadplay.exe
    O4 - HKCU\..\Run: [ares] "C:\Program Files\Ares\Ares.exe" -h
    O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
    O4 - HKCU\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe" /WinStart
    O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_01\bin
    pjpi150_01.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_01\bin
    pjpi150_01.dll
    O9 - Extra button: (no name) - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - (no file)
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
    O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
    O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
    O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
    O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v5consumer/V5Controls/en/x86/client/wuweb_site.cab?1100077309859
    O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
    O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab32846.cab
    O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab31267.cab
    O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
    O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
    O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
    O23 - Service: Norton AntiVirus Auto-Protect (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus
    avapsvc.exe
    O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
    vsvc32.exe
    O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe
    O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
    O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
    O23 - Service: Webroot Spy Sweeper Engine (svcWRSSSDK) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe
    O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
  • Het log ziet er inderdaad al schoner uit, ik zie echter MessengerPlus en Ares nog steeds in het log staan. Is de deïnstallatie van deze programma's niet gelukt?

    Als je MessengerPlus gedeïnstalleerd hebt kan je deze terug installeren maar dan moet je kiezen voor een installatie zonder sponsors.

    Als je MessengerPlus al wel gedeïnstalleerd had, start dan HijackThis op en kies voor "Do a system scan only"en plaats een vinkje voor de volgende items:
    [b:81fcc46beb]R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.bemvhwtlppveosa.com/g1CP9bIH_qqChCgVEtfQUA3K/ZuYx1tJo16/QOMvu_LWIQO7e uOk8c5ZmXSTnRD8.asp
    R3 - URLSearchHook: (no name) - - (no file)
    O2 - BHO: (no name) - {AFAD59F9-E591-876F-FBD3-33632DBD7BC0} - C:\DOCUME~1\NETWOR~1\APPLIC~1\INTERN~1\Locks love.exe
    O3 - Toolbar: (no name) - {014DA6C9-189F-421a-88CD-07CFE51CFF10} - (no file)
    O4 - HKLM\..\Run: [Avvyaylr] C:\Program Files\Yzpk\Fywozji.exe
    O4 - HKLM\..\Run: [DEAFLOADGRIMTEST] C:\Documents and Settings\All Users\Application Data\ProxyPokeDeafLoad\downloadplay.exe
    O9 - Extra button: (no name) - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - (no file)[/b:81fcc46beb]
    Sluit alle open vensters(behalve HijackThis) en klik op "Fix checked" om de geselecteerde items te verwijderen.

    Herstart de computer, maak een nieuwe log van HijackThis en plaats die in je volgende bericht ter controle.

    Doe daarna ook nog het volgende:
    Open een klablokbestand.
    Kopieer onderstaande code in dit kladblokbestand.
    Ga naar Bestand - Opslaan als.
    Bij "Opslaan in" kies je: Bureaublad
    Bij "Bestandsnaam" zet je: vindjob.bat
    Bij "Opslaan als type" selecteer je: Alle bestanden (*.*).
    Klik op de knop Opslaan.
    [code:1:81fcc46beb]dir %Windir%\tasks /a:h > files.txt
    notepad files.txt[/code:1:81fcc46beb]
    Dubbelklik op vindjob.bat.
    Er opent een kladblokbestand. Post ook de inhoud van dit kladblokbestand.

    Groeten smeenk :wink:
  • Hier alvast het Hijackthis log ter controle

    Logfile of HijackThis v1.99.1
    Scan saved at 14:21:50, on 08/25/2005
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
    C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\Norton AntiVirus
    avapsvc.exe
    C:\WINDOWS\system32
    vsvc32.exe
    C:\Program Files\Norton AntiVirus\SAVScan.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\Logi_MwX.Exe
    C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe
    C:\Program Files\Common Files\Symantec Shared\ccApp.exe
    C:\Program Files\Java\jre1.5.0_01\bin\jusched.exe
    C:\Program Files\Messenger\msmsgs.exe
    C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
    C:\WINDOWS\system32\devldr32.exe
    C:\WINDOWS\system32\wuauclt.exe
    C:\Nieuwe map\HijackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.superdudes.nl/*K03N*
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen
    O2 - BHO: Yahoo! Companion BHO - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_5_7_0.dll
    O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
    O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
    O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.4000.1001
    l\msntb.dll
    O2 - BHO: CNavExtBho Class - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
    O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
    O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.4000.1001
    l\msntb.dll
    O3 - Toolbar: Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_5_7_0.dll
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
    O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
    O4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.Exe
    O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
    O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
    O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_01\bin\jusched.exe
    O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe
    O4 - HKCU\..\Run: [ares] "C:\Program Files\Ares\Ares.exe" -h
    O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_01\bin
    pjpi150_01.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_01\bin
    pjpi150_01.dll
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
    O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
    O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
    O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
    O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v5consumer/V5Controls/en/x86/client/wuweb_site.cab?1100077309859
    O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
    O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab32846.cab
    O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab31267.cab
    O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
    O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
    O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
    O23 - Service: Norton AntiVirus Auto-Protect (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus
    avapsvc.exe
    O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
    vsvc32.exe
    O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe
    O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
    O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
    O23 - Service: Webroot Spy Sweeper Engine (svcWRSSSDK) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe
    O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
  • En hier is de inhoud van het kladblok bestand

    Het volume in station C heeft geen naam.
    Het volumenummer is A406-2374

    Map van C:\WINDOWS\tasks

    08/25/2005 14:00 280 A6EA9A2191890E05.job
    08/25/2005 14:00 266 AA74A74D91875C05.job
    08/25/2005 14:00 274 AF636440918D1618.job
    08/25/2005 14:00 274 B136D83B91514A23.job
    09/07/2001 12:00 65 desktop.ini
    08/25/2005 14:20 6 SA.DAT
    6 bestand(en) 1.165 bytes
    0 map(pen) 11.566.784.512 bytes beschikbaar
  • Je HijackThis log ziet er goed uit :wink:

    Open kladblok en kopieer onderstaande code in dit kladblokbestand. Sla het op als deljob.bat
    Kies voor opslaan als bestandstype (alle bestanden *.*)
    [code:1:9eeec19c89]%systemdrive%
    cd C:\WINDOWS\Tasks

    attrib -r -s -h A6EA9A2191890E05.job
    del A6EA9A2191890E05.job

    attrib -r -s -h AA74A74D91875C05.job
    del AA74A74D91875C05.job

    attrib -r -s -h AF636440918D1618.job
    del AF636440918D1618.job

    attrib -r -s -h B136D83B91514A23.job
    del B136D83B91514A23.job[/code:1:9eeec19c89]Dubbelklik op deljob.bat en voer daarna findjob nog een keer uit en post het resultaat.

    Groeten smeenk
  • Het volume in station C heeft geen naam.
    Het volumenummer is A406-2374

    Map van C:\WINDOWS\tasks

    09/07/2001 12:00 65 desktop.ini
    08/25/2005 14:20 6 SA.DAT
    2 bestand(en) 71 bytes
    0 map(pen) 11.566.678.016 bytes beschikbaar
  • Het logje lijkt nu goed :)

    Een extra online scan kan overigens nooit kwaad.

    met Bitdefender scan of Panda.

    Als je zo'n scan gedaan hebt krijg je vaak de mogelijkheid om een logje te bewaren zou je deze willen opslaan(copy/paste) wil je dan het resultaat even posten in je volgende bericht, meldt ook even of er nog problemen zijn.

    Groeten smeenk
  • Het is wel heel veel informatie. Maar zijn het ook de gegevens die je moet hebben? Zo te zien heeft ie nog behoorlijk wat virussen gevonden…
    Tot nu toe loopt alles nog prima, heb nog geen problemen gehad.

    Scanned File
    Status

    C:\Program Files\Norton AntiVirus\Quarantine\030733B7.pif=>(Quarantine-2)
    Infected with: Win32.Worm.Sumom.A

    C:\Program Files\Norton AntiVirus\Quarantine\030733B7.pif=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton AntiVirus\Quarantine\0D42736E.exe=>(Quarantine-2)
    Infected with: Trojan.Downloader.VB.FT

    C:\Program Files\Norton AntiVirus\Quarantine\0D42736E.exe=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton AntiVirus\Quarantine\3985061D.exe=>(Quarantine-2)
    Infected with: Trojan.Downloader.Vb.FT

    C:\Program Files\Norton AntiVirus\Quarantine\3985061D.exe=>(Quarantine-2)
    Disinfection failed

    C:\Program Files\Norton AntiVirus\Quarantine\3985061D.exe=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton AntiVirus\Quarantine\5D98784E.exe=>(Quarantine-2)
    Infected with: Trojan.Downloader.VB.FT

    C:\Program Files\Norton AntiVirus\Quarantine\5D98784E.exe=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton AntiVirus\Quarantine\676F5C35.exe=>(Quarantine-2)
    Infected with: Trojan.Downloader.VB.FT

    C:\Program Files\Norton AntiVirus\Quarantine\676F5C35.exe=>(Quarantine-2)
    Deleted

    C:\Program Files\Yzpk\Fywozji.exe
    Infected with: Trojan.Small.CY

    C:\Program Files\Yzpk\Fywozji.exe
    Disinfection failed

    C:\Program Files\Yzpk\Fywozji.exe
    Deleted

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP172\A0053037.exe
    Infected with: Trojan.Downloader.Dyfuca.DX

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP172\A0053037.exe
    Disinfection failed

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP172\A0053037.exe
    Deleted

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP201\A0059123.exe
    Detected with: Adware.Swizzor.ML

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP201\A0059123.exe
    Disinfection failed

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP201\A0059123.exe
    Deleted

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP201\A0059124.exe
    Infected with: Trojan.Downloader.Swizzor.BO

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP201\A0059124.exe
    Deleted

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP201\A0059125.exe
    Infected with: Trojan.Downloader.Swizzor.CA

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP201\A0059125.exe
    Disinfection failed

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP201\A0059125.exe
    Deleted

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP201\A0059126.exe
    Infected with: Trojan.Downloader.Swizzor.CB

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP201\A0059126.exe
    Disinfection failed

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP201\A0059126.exe
    Deleted

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP201\A0059158.exe
    Infected with: Trojan.Downloader.Swizzor.BO

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP201\A0059158.exe
    Deleted

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP201\A0059159.exe
    Infected with: Trojan.Downloader.Swizzor.DH

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP201\A0059159.exe
    Disinfection failed

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP201\A0059159.exe
    Deleted

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP201\A0059160.exe
    Infected with: Trojan.Downloader.Swizzor.CB

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP201\A0059160.exe
    Disinfection failed

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP201\A0059160.exe
    Deleted

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP202\A0059195.exe
    Infected with: Trojan.Downloader.Swizzor.DF

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP202\A0059195.exe
    Disinfection failed

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP202\A0059195.exe
    Deleted

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP202\A0059197.exe
    Infected with: Trojan.Downloader.Swizzor.BO

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP202\A0059197.exe
    Deleted

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP204\A0059279.exe
    Infected with: Trojan.Downloader.Swizzor.CB

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP204\A0059279.exe
    Disinfection failed

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP204\A0059279.exe
    Deleted

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP205\A0059302.exe
    Infected with: Trojan.Downloader.Swizzor.DF

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP205\A0059302.exe
    Disinfection failed

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP205\A0059302.exe
    Deleted

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP205\A0059304.exe
    Infected with: Trojan.Downloader.Swizzor.BO

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP205\A0059304.exe
    Deleted

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP205\A0059305.exe
    Infected with: Trojan.Downloader.Swizzor.DJ

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP205\A0059305.exe
    Disinfection failed

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP205\A0059305.exe
    Deleted

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP205\A0059306.exe
    Infected with: Trojan.Downloader.Swizzor.CB

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP205\A0059306.exe
    Disinfection failed

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP205\A0059306.exe
    Deleted

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP205\A0059332.exe
    Infected with: Trojan.Downloader.Swizzor.DF

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP205\A0059332.exe
    Disinfection failed

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP205\A0059332.exe
    Deleted

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP205\A0059333.exe
    Infected with: Trojan.Downloader.Swizzor.DE

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP205\A0059333.exe
    Disinfection failed

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP205\A0059333.exe
    Deleted

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP205\A0059335.exe
    Infected with: Trojan.Downloader.Swizzor.BO

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP205\A0059335.exe
    Deleted

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP205\A0059337.exe
    Infected with: Trojan.Downloader.Swizzor.CB

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP205\A0059337.exe
    Disinfection failed

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP205\A0059337.exe
    Deleted

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP206\A0059403.exe
    Infected with: Trojan.Downloader.Swizzor.DF

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP206\A0059403.exe
    Disinfection failed

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP206\A0059403.exe
    Deleted

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP206\A0059404.exe
    Infected with: Trojan.Downloader.Swizzor.DE

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP206\A0059404.exe
    Disinfection failed

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP206\A0059404.exe
    Deleted

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP209\A0061532.exe
    Infected with: Trojan.Downloader.Swizzor.DF

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP209\A0061532.exe
    Disinfection failed

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP209\A0061532.exe
    Deleted

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP209\A0061533.exe
    Infected with: Trojan.Downloader.Swizzor.DE

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP209\A0061533.exe
    Disinfection failed

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP209\A0061533.exe
    Deleted

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP209\A0061535.exe
    Infected with: Trojan.Downloader.Swizzor.BO

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP209\A0061535.exe
    Deleted

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP209\A0061537.exe
    Infected with: Trojan.Downloader.Swizzor.CB

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP209\A0061537.exe
    Disinfection failed

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP209\A0061537.exe
    Deleted

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP210\A0061639.exe
    Infected with: Trojan.Downloader.Dyfuca.3

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP210\A0061639.exe
    Disinfection failed

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP210\A0061639.exe
    Deleted

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP210\A0061640.exe=>(NSIS o)=>lzma_nsis0005
    Infected with: Trojan.Clicker.Vb.EX

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP210\A0061640.exe=>(NSIS o)=>lzma_nsis0005
    Disinfection failed

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP210\A0061640.exe=>(NSIS o)=>lzma_nsis0005
    Deleted

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP210\A0061640.exe=>(NSIS o)
    Update failed

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP210\A0061640.exe=>(NSIS o)=>lzma_nsis0006
    Infected with: Trojan.Multidropper.NB

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP210\A0061640.exe=>(NSIS o)=>lzma_nsis0006
    Disinfection failed

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP210\A0061640.exe=>(NSIS o)=>lzma_nsis0006
    Deleted

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP210\A0061640.exe=>(NSIS o)
    Update failed

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP210\A0061657.exe
    Infected with: GenPack:Trojan.Downloader.Dyfuca.EI

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP210\A0061657.exe
    Disinfection failed

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP210\A0061657.exe
    Deleted

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP210\A0061659.exe
    Infected with: Trojan.Small.CY

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP210\A0061659.exe
    Disinfection failed

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP210\A0061659.exe
    Deleted

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP210\A0061661.dll
    Infected with: Trojan.Downloader.Dyfuca.DT

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP210\A0061661.dll
    Disinfection failed

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP210\A0061661.dll
    Deleted

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP212\A0061744.exe
    Infected with: Trojan.Downloader.Swizzor.DF

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP212\A0061744.exe
    Disinfection failed

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP212\A0061744.exe
    Deleted

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP212\A0061745.exe
    Infected with: Trojan.Downloader.Swizzor.DE

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP212\A0061745.exe
    Disinfection failed

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP212\A0061745.exe
    Deleted

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP216\A0061920.exe
    Infected with: Trojan.Downloader.Swizzor.DF

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP216\A0061920.exe
    Disinfection failed

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP216\A0061920.exe
    Deleted

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP216\A0061921.exe
    Infected with: Trojan.Downloader.Swizzor.DE

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP216\A0061921.exe
    Disinfection failed

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP216\A0061921.exe
    Deleted

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP216\A0061952.exe
    Infected with: Trojan.Downloader.Swizzor.DF

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP216\A0061952.exe
    Disinfection failed

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP216\A0061952.exe
    Deleted

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP216\A0061953.exe
    Infected with: Trojan.Downloader.Swizzor.DE

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP216\A0061953.exe
    Disinfection failed

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP216\A0061953.exe
    Deleted

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP221\A0067125.exe=>(NSIS o)
    Infected with: Trojan.Downloader.Exact.Downloader.B

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP221\A0067125.exe=>(NSIS o)
    Disinfection failed

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP221\A0067125.exe=>(NSIS o)
    Deleted

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP221\A0067125.exe
    Update failed

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP221\A0067128.exe
    Infected with: Trojan.Downloader.Istbar.BI

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP221\A0067128.exe
    Disinfection failed

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP221\A0067128.exe
    Deleted

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP221\A0067129.exe
    Infected with: Trojan.Downloader.Dyfuca.3

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP221\A0067129.exe
    Disinfection failed

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP221\A0067129.exe
    Deleted

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP221\A0067130.exe
    Infected with: GenPack:Trojan.Downloader.Dyfuca.EI

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP221\A0067130.exe
    Disinfection failed

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP221\A0067130.exe
    Deleted

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP221\A0067131.exe
    Detected with: Adware.180Solutions.5.11

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP221\A0067131.exe
    Disinfection failed

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP221\A0067131.exe
    Deleted

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP221\A0067132.exe
    Infected with: Trojan.Downloader.IstBar.IJ

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP221\A0067132.exe
    Deleted

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP221\A0067149.exe
    Infected with: Trojan.Downloader.Swizzor.DF

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP221\A0067149.exe
    Disinfection failed

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP221\A0067149.exe
    Deleted

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP221\A0067150.exe
    Infected with: Trojan.Downloader.Swizzor.DE

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP221\A0067150.exe
    Disinfection failed

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP221\A0067150.exe
    Deleted

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP221\A0067155.exe
    Infected with: Trojan.Lopad.C

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP221\A0067155.exe
    Disinfection failed

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP221\A0067155.exe
    Deleted

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP221\A0067156.exe
    Infected with: Trojan.WinAd.18436

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP221\A0067156.exe
    Disinfection failed

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP221\A0067156.exe
    Deleted

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP221\A0067157.exe
    Infected with: Trojan.Delautoexec.51272.A

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP221\A0067157.exe
    Disinfection failed

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP221\A0067157.exe
    Deleted

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP221\A0067158.dll
    Infected with: Trojan.Winad.L.DLL

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP221\A0067158.dll
    Disinfection failed

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP221\A0067158.dll
    Deleted

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP221\A0067168.exe
    Infected with: Trojan.Downloader.Swizzor.DE

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP221\A0067168.exe
    Disinfection failed

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP221\A0067168.exe
    Deleted

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP221\A0067171.exe
    Infected with: Trojan.Downloader.Swizzor.DJ

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP221\A0067171.exe
    Disinfection failed

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP221\A0067171.exe
    Deleted

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP221\A0067181.exe
    Infected with: Trojan.Downloader.Swizzor.DF

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP221\A0067181.exe
    Disinfection failed

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP221\A0067181.exe
    Deleted

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP222\A0067235.dll
    Detected with: Application.Adware.NewDotNet.B

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP222\A0067235.dll
    Disinfection failed

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP222\A0067235.dll
    Deleted

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP222\A0067286.exe
    Infected with: Trojan.Lopad.C

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP222\A0067286.exe
    Disinfection failed

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP222\A0067286.exe
    Deleted

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP222\A0067305.pif=>(Quarantine-2)
    Infected with: Win32.Worm.Sumom.A

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP222\A0067305.pif=>(Quarantine-2)
    Deleted

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP222\A0067306.exe=>(Quarantine-2)
    Infected with: Trojan.Downloader.VB.FT

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP222\A0067306.exe=>(Quarantine-2)
    Deleted

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP222\A0067307.exe=>(Quarantine-2)
    Infected with: Trojan.Downloader.Vb.FT

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP222\A0067307.exe=>(Quarantine-2)
    Disinfection failed

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP222\A0067307.exe=>(Quarantine-2)
    Deleted

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP222\A0067308.exe=>(Quarantine-2)
    Infected with: Trojan.Downloader.VB.FT

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP222\A0067308.exe=>(Quarantine-2)
    Deleted

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP222\A0067309.exe=>(Quarantine-2)
    Infected with: Trojan.Downloader.VB.FT

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP222\A0067309.exe=>(Quarantine-2)
    Deleted

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP222\A0067310.exe
    Infected with: Trojan.Small.CY

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP222\A0067310.exe
    Disinfection failed

    C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP222\A0067310.exe
    Deleted

Beantwoord deze vraag

Dit is een gearchiveerde pagina. Antwoorden is niet meer mogelijk.