Ik kan sinds kort niet meer via internet explorer op internet komen. Als ik iexplorer op wil starten krijg ik de volgende melding: In iexplore.exe is een fout opgetreden en moet worden afgesloten. Onze excuses voor dit ongemak.
Als overige informatie geeft ie nog: mod. ver: 6.0.2900.2713
app. ver: 6.0.2900.2180
off set: 00024161
Mod name: shdocvw.dll
Ik denk zelf dat er spyware opzit. Ik heb alleen weinig verstand hiervan dus wil iemand mij alsjeblieft helpen?!

Heb je Windows 2000/XP? Scan dan je PC een met Hitman Pro ( www.hitmanpro.nl ).

Heb windows XP. Heb al geprobeerd met Hitman maar doet het om een of andere reden niet.

Probeer eens een HijackThis log te plaatsen. Download HijackThis hier.
Zet het bestand HijackThis.exe daarna in een eigen map, bijvoorbeeld C:\HijackThis. Start het Programma en kies voor "Do a system scan and save a log file". Kopieer de inhoud van het logbestand in je volgende bericht.

Groeten smeenk :wink:

Heb je t net al als gewoon bericht gestuurd maar k zal het hier ook even neerzetten, voor het geval anderen het ook willen bekijken, graag!

Logfile of HijackThis v1.99.1
Scan saved at 17:26:24, on 08/24/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Norton AntiVirus\SAVScan.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\Logi_MwX.Exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\NavExcel\NavHelper\v2.0.4d\navapp.exe
C:\Program Files\ISTsvc\istsvc.exe
C:\Program Files\BullsEye Network\bin\bargains.exe
C:\Program Files\Java\jre1.5.0_01\bin\jusched.exe
C:\Program Files\Media Access\MediaAccK.exe
C:\temp\salm.exe
C:\Program Files\Media Access\MediaAccess.exe
C:\Program Files\Internet Optimizer\optimize.exe
C:\Program Files\Internet Optimizer\actalert.exe
C:\Program Files\Internet Optimizer\actalert.exe
C:\WINDOWS\wtwxugl.exe
C:\Program Files\Yzpk\Fywozji.exe
C:\Program Files\MessengerPlus! 3\MsgPlus.exe
C:\WINDOWS\system32\vjhmr12k.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\devldr32.exe
C:\Program Files\Oemji\Toolbar\PopupBlocker\OemjiPopupBlocker.exe
C:\Program Files\Ares\Ares.exe
C:\Program Files\Messenger\msmsgs.exe
c:\progra~1\intern~1\iexplore.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\program files\internet explorer\iexplore.exe
C:\Nieuwe map\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.ptwpjsyweliwwrdpuwhhuz.com//azhNO6NCNjS2jhSXA1ekDnceCX4gI0LXXxJGz2ctlnEL7pL_TWDlIdQ9Cg/p75Y.jpg
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.oemji.com
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://www.oemji.com/side_search.html
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen
R3 - URLSearchHook: (no name) - _{CFBFAE00-17A6-11D0-99CB-00C04FD64497} - (no file)
O2 - BHO: BHObj Class - {00000010-6F7D-442C-93E3-4A4827C2E4C8} - C:\WINDOWS\nem220.dll (file missing)
O2 - BHO: My Search BHO - {014DA6C1-189F-421a-88CD-07CFE51CFF10} - C:\Program Files\MySearch\bar\1.bin\S4BAR.DLL (file missing)
O2 - BHO: Yahoo! Companion BHO - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_5_7_0.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: - {3C578101-290B-408A-A7D7-E71FAA518726} - C:\WINDOWS\lbbho.dll
O2 - BHO: PBHelper - {4115122B-85FF-4DD3-9515-F075BEDE5EB5} - C:\Program Files\Oemji\Toolbar\PopupBlocker\PBHelper.dll
O2 - BHO: URLLink Class - {4A2AACF3-ADF6-11D5-98A9-00E018981B9E} - C:\Program Files\NewDotNet\newdotnet6_38.dll
O2 - BHO: BHObj Class - {8F4E5661-F99E-4B3E-8D85-0EA71C0748E4} - C:\WINDOWS\wsem303.dll (file missing)
O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
O2 - BHO: (no name) - {AFAD59F9-E591-876F-FBD3-33632DBD7BC0} - C:\DOCUME~1\GEBRUI~1\APPLIC~1\INTERN~1\Locks love.exe
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.4000.1001\nl\msntb.dll
O2 - BHO: CNavExtBho Class - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O2 - BHO: NavHelper Class - {C1E58A84-95B3-4630-B8C2-D06B77B7A0FC} - C:\Program Files\NavExcel\NavHelper\v2.0.4d\NHelper.dll (file missing)
O2 - BHO: OemjiSearchPlus - {D240DC29-C093-4388-B71F-A7103C796B0C} - C:\Program Files\Oemji\OemjiSearchPlus\OemjiPls.dll
O2 - BHO: Helper Class - {D80C4E21-C346-4E21-8E64-20746AA20AEB} - C:\Program Files\NavExcel Search Toolbar\NavExcelBar.dll (file missing)
O2 - BHO: ADP UrlCatcher Class - {F4E04583-354E-4076-BE7D-ED6A80FD66DA} - C:\WINDOWS\system32\msbe.dll (file missing)
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: My Search Bar - {014DA6C9-189F-421a-88CD-07CFE51CFF10} - C:\Program Files\MySearch\bar\1.bin\S4BAR.DLL (file missing)
O3 - Toolbar: NavExcel Toolbar - {5AA06644-BC46-4220-A460-47A6EB47C96D} - C:\Program Files\NavExcel Search Toolbar\NavExcelBar.dll (file missing)
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.4000.1001\nl\msntb.dll
O3 - Toolbar: Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_5_7_0.dll
O3 - Toolbar: YourSiteBar - {86227D9C-0EFE-4f8a-AA55-30386A3F5686} - C:\PROGRA~1\YOURSI~1\ysb.dll (file missing)
O3 - Toolbar: Oemji - {804DB5C7-31E6-4885-850A-F1941B58A4C7} - C:\Program Files\Oemji\Toolbar\OemjiSrc.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.Exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [New.net Startup] rundll32 C:\PROGRA~1\NEWDOT~1\NEWDOT~2.DLL,NewDotNetStartup -s
O4 - HKLM\..\Run: [navapp] C:\Program Files\NavExcel\NavHelper\v2.0.4d\navapp.exe
O4 - HKLM\..\Run: [IST Service] C:\Program Files\ISTsvc\istsvc.exe
O4 - HKLM\..\Run: [BullsEye Network] C:\Program Files\BullsEye Network\bin\bargains.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_01\bin\jusched.exe
O4 - HKLM\..\Run: [Media Access] C:\Program Files\Media Access\MediaAccK.exe
O4 - HKLM\..\Run: [salm] c:\temp\salm.exe
O4 - HKLM\..\Run: [Internet Optimizer] "C:\Program Files\Internet Optimizer\optimize.exe"
O4 - HKLM\..\Run: [sbcbgx] C:\WINDOWS\sbcbgx.exe
O4 - HKLM\..\Run: [V7GUoe] C:\WINDOWS\wtwxugl.exe
O4 - HKLM\..\Run: [-
] C:\WINDOWS\wtwxugl.exe
O4 - HKLM\..\Run: [V÷h$vùõš/‚²‘ÆßfÏNbC:\Program Files\ISTsvc\istsvc.exe] C:\WINDOWS\wtwxugl.exe
O4 - HKLM\..\Run: [Á³# L"h'þ9Óœð3rÅWC:\Program Files\ISTsvc\istsvc.exe] C:\WINDOWS\wtwxugl.exe
O4 - HKLM\..\Run: [Avvyaylr] C:\Program Files\Yzpk\Fywozji.exe
O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe"
O4 - HKLM\..\Run: [vjhmr12k] C:\WINDOWS\system32\vjhmr12k.exe
O4 - HKLM\..\Run: [DEAFLOADGRIMTEST] C:\Documents and Settings\All Users\Application Data\ProxyPokeDeafLoad\OOZE SITE.exe
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe
O4 - HKCU\..\Run: [ares] "C:\Program Files\Ares\Ares.exe" -h
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe" /WinStart
O4 - HKCU\..\Run: [Barbbook] C:\DOCUME~1\GEBRUI~1\APPLIC~1\FUNKJU~1\dupe heart bolt.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_01\bin\npjpi150_01.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_01\bin\npjpi150_01.dll
O9 - Extra button: (no name) - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - (no file)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Hijacked Internet access by New.Net
O10 - Hijacked Internet access by New.Net
O10 - Hijacked Internet access by New.Net
O10 - Hijacked Internet access by New.Net
O10 - Hijacked Internet access by New.Net
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
O16 - DPF: {15AD6789-CDB4-47E1-A9DA-992EE8E6BAD6} - http://static.windupdates.com/cab/DownloadAccess/ie/bridge-c3.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v5consumer/V5Controls/en/x86/client/wuweb_site.cab?1100077309859
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab32846.cab
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab31267.cab
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: Norton AntiVirus Auto-Protect (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
O23 - Service: ZESOFT - Unknown owner - C:\WINDOWS\zeta.exe (file missing)

Er is nogal wat mis op je PC.

Je hebt Messengerplus geïnstalleerd met Sponsors. Hierdoor is de computer geïnfecteerd met LOP.
Ga naar Configuratiescherm - Software - Programma's wijzigen en verwijderen. Deïnstalleer Messenger plus. (Later kan je deze terug installeren, maar kies dan voor een installatie zonder sponsors.)
Tijdens het deïnstallatieprocess wordt er gevraagd om een securitycode in te geven. Doe dit.

Herstart de computer en ga dan verder met het volgende:

Ga daarna opnieuw naar Configuratiescherm - Software - Programma's wijzigen en verwijderen : deïnstalleer New.net Application en NewDotNet (Domains)
Staan deze er niet tussen, dan kijk je in de dan map c:\Progam Files\NewDotNet. Zoek een in die map naar een bestand uninstallX_XX.exe. De waarde van X (een cijfer) hangt af van de versie van New.net die geïnstalleerd is op de computer.
Vind je de uninstaller ook niet in de map c:\Progam Files\NewDotNet, dan kijk je in de map C:\Windows naar een bestand NDNuninstallX_XX.exe. (zelfde verhaal voor de X.)
Is deze ook niet aanwezig dan kan je deze uninstaller downloaden: http://www.new.net/support/uninstall6_38.exe

Herstart de computer en ga dan verder met het volgende:

Probeer via Configuratiescherm – Software ook het volgende te deïnstalleren:
[b:ee8cc6637e]Internet optimizer
Media acces
1stbar
NavExcel Helper
BargainBuddy
180Search
OemjiSearchPlus[/b:ee8cc6637e]
Of programma's die wat betreft naam hier veel op lijken.

Herstart nadien de PC en maak een nieuw log met HijackThis en post dat in je volgende bericht.

Groeten smeenk :wink:

Dank je! Maar k heb eindelijk Hitman pro kunnen installeren, dus die laat ik nu eerst even alles scannen. Zal ik er daarna nog een Hijack log opzetten?

Het beste lijkt het me dat je eerst de aanwijzingen uit mijn post uitvoert en daarna het systeem scant met HitmanPro daarna wel een nieuw log plaatsen want ik weet zeker dat HitmanPro er niet in zal slagen om alles van je systeem te verwijderen.

Klik op Start -> Configuratiescherm -> Software en verwijder ook het volgende programma:
[b:43ed5c3b5e]Ares[/b:43ed5c3b5e]

Ares is namelijk een verkeerd P2P programma, zie: http://www.spywareinfo.com/articles/p2p/ (bevat spyware)

Groeten smeenk :wink:

Welk gratis P2P programma zou ik wel kunnen gebruiken dan? k heb het eigenlijk alleen nodig om liedjes mee te downloaden.

Hoe kom ik aan een security code? Je zegt dat ik die nodig heb om Messenger Plus eraf te halen.

[quote:cf01e7385e="Loeselein"]Hoe kom ik aan een security code? Je zegt dat ik die nodig heb om Messenger Plus eraf te halen.[/quote:cf01e7385e]Probeer eens een zelfbedachte code in te voeren, dit is namelijk een truc om je er van te weerhouden dit programma te deïnstalleren.[quote:cf01e7385e="Loeselein"]Welk gratis P2P programma zou ik wel kunnen gebruiken dan? k heb het eigenlijk alleen nodig om liedjes mee te downloaden.[/quote:cf01e7385e]Even zoeken op internet en dan in die lijst controleren of er spyware in zit. Ik zou het zo niet weten want ik hou me zelf niet met dergelijke programma's bezig.

Het probleem is, als we de spyware verwijderen die door een dergelijk programma op je systeem is gezet het programma daarna ook niet meer werkt. Daarom beter eerst het programma verwijderen en het gehele systeem spywarevrij maken.

Als je Ares daarna opnieuw wilt installeren krijg je dan ook die spyware er weer op, maar dat is dan op dat moment je eigen keuze. Mijn opmerkingen op dit forum dienen gezien te worden als adviezen, wat je daar mee doet moet je uiteraard zelf weten :wink:

Groeten smeenk

Als je doel is: weer lekker te kunnen internetten, MSN'n, een bestandje downloaden. Probeer dan eerst de aanwijzingen van bijvoorbeeld Smeenk op te volgen. Die hebben al vele anderen een cleane PC bezorgd.

Kijk daarna eens hier voor een spyware-free p2p-programma: http://www.spywareinfo.com/articles/p2p/

E-mule wordt tegenwoordig veel gebruikt en heeft een groot netwerk van gebruikers: http://www.emule-project.net/home/perl/general.cgi?l=29

Ok, toch bedankt. Hier het Hijackthis log. K heb volgens mij t meeste eraf. Al krijg ik nog wel steeds veel popups.

Logfile of HijackThis v1.99.1
Scan saved at 11:48:09, on 08/25/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\Logi_MwX.Exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Java\jre1.5.0_01\bin\jusched.exe
C:\Program Files\Yzpk\Fywozji.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\MessengerPlus! 3\MsgPlus.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Norton AntiVirus\SAVScan.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\devldr32.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Nieuwe map\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.bemvhwtlppveosa.com/g1CP9bIH_qqChCgVEtfQUA3K/ZuYx1tJo16/QOMvu_LWIQO7euOk8c5ZmXSTnRD8.asp
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.superdudes.nl/*K03N*
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen
R3 - URLSearchHook: (no name) - - (no file)
O2 - BHO: Yahoo! Companion BHO - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_5_7_0.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
O2 - BHO: (no name) - {AFAD59F9-E591-876F-FBD3-33632DBD7BC0} - C:\DOCUME~1\NETWOR~1\APPLIC~1\INTERN~1\Locks love.exe
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.4000.1001\nl\msntb.dll
O2 - BHO: CNavExtBho Class - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: (no name) - {014DA6C9-189F-421a-88CD-07CFE51CFF10} - (no file)
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.4000.1001\nl\msntb.dll
O3 - Toolbar: Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_5_7_0.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.Exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_01\bin\jusched.exe
O4 - HKLM\..\Run: [Avvyaylr] C:\Program Files\Yzpk\Fywozji.exe
O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe"
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe
O4 - HKLM\..\Run: [DEAFLOADGRIMTEST] C:\Documents and Settings\All Users\Application Data\ProxyPokeDeafLoad\downloadplay.exe
O4 - HKCU\..\Run: [ares] "C:\Program Files\Ares\Ares.exe" -h
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe" /WinStart
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_01\bin\npjpi150_01.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_01\bin\npjpi150_01.dll
O9 - Extra button: (no name) - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - (no file)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v5consumer/V5Controls/en/x86/client/wuweb_site.cab?1100077309859
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab32846.cab
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab31267.cab
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: Norton AntiVirus Auto-Protect (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Webroot Spy Sweeper Engine (svcWRSSSDK) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe

Het log ziet er inderdaad al schoner uit, ik zie echter MessengerPlus en Ares nog steeds in het log staan. Is de deïnstallatie van deze programma's niet gelukt?

Als je MessengerPlus gedeïnstalleerd hebt kan je deze terug installeren maar dan moet je kiezen voor een installatie zonder sponsors.

Als je MessengerPlus al wel gedeïnstalleerd had, start dan HijackThis op en kies voor "Do a system scan only"en plaats een vinkje voor de volgende items:
[b:81fcc46beb]R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.bemvhwtlppveosa.com/g1CP9bIH_qqChCgVEtfQUA3K/ZuYx1tJo16/QOMvu_LWIQO7e uOk8c5ZmXSTnRD8.asp
R3 - URLSearchHook: (no name) - - (no file)
O2 - BHO: (no name) - {AFAD59F9-E591-876F-FBD3-33632DBD7BC0} - C:\DOCUME~1\NETWOR~1\APPLIC~1\INTERN~1\Locks love.exe
O3 - Toolbar: (no name) - {014DA6C9-189F-421a-88CD-07CFE51CFF10} - (no file)
O4 - HKLM\..\Run: [Avvyaylr] C:\Program Files\Yzpk\Fywozji.exe
O4 - HKLM\..\Run: [DEAFLOADGRIMTEST] C:\Documents and Settings\All Users\Application Data\ProxyPokeDeafLoad\downloadplay.exe
O9 - Extra button: (no name) - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - (no file)[/b:81fcc46beb]
Sluit alle open vensters(behalve HijackThis) en klik op "Fix checked" om de geselecteerde items te verwijderen.

Herstart de computer, maak een nieuwe log van HijackThis en plaats die in je volgende bericht ter controle.

Doe daarna ook nog het volgende:
Open een klablokbestand.
Kopieer onderstaande code in dit kladblokbestand.
Ga naar Bestand - Opslaan als.
Bij "Opslaan in" kies je: Bureaublad
Bij "Bestandsnaam" zet je: vindjob.bat
Bij "Opslaan als type" selecteer je: Alle bestanden (*.*).
Klik op de knop Opslaan.
[code:1:81fcc46beb]dir %Windir%\tasks /a:h > files.txt
notepad files.txt[/code:1:81fcc46beb]
Dubbelklik op vindjob.bat.
Er opent een kladblokbestand. Post ook de inhoud van dit kladblokbestand.

Groeten smeenk :wink:

Hier alvast het Hijackthis log ter controle

Logfile of HijackThis v1.99.1
Scan saved at 14:21:50, on 08/25/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Norton AntiVirus\SAVScan.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Logi_MwX.Exe
C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Java\jre1.5.0_01\bin\jusched.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
C:\WINDOWS\system32\devldr32.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Nieuwe map\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.superdudes.nl/*K03N*
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen
O2 - BHO: Yahoo! Companion BHO - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_5_7_0.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.4000.1001\nl\msntb.dll
O2 - BHO: CNavExtBho Class - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.4000.1001\nl\msntb.dll
O3 - Toolbar: Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_5_7_0.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.Exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_01\bin\jusched.exe
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe
O4 - HKCU\..\Run: [ares] "C:\Program Files\Ares\Ares.exe" -h
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_01\bin\npjpi150_01.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_01\bin\npjpi150_01.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v5consumer/V5Controls/en/x86/client/wuweb_site.cab?1100077309859
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab32846.cab
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab31267.cab
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: Norton AntiVirus Auto-Protect (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Webroot Spy Sweeper Engine (svcWRSSSDK) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe

En hier is de inhoud van het kladblok bestand

Het volume in station C heeft geen naam.
Het volumenummer is A406-2374

Map van C:\WINDOWS\tasks

08/25/2005 14:00 280 A6EA9A2191890E05.job
08/25/2005 14:00 266 AA74A74D91875C05.job
08/25/2005 14:00 274 AF636440918D1618.job
08/25/2005 14:00 274 B136D83B91514A23.job
09/07/2001 12:00 65 desktop.ini
08/25/2005 14:20 6 SA.DAT
6 bestand(en) 1.165 bytes
0 map(pen) 11.566.784.512 bytes beschikbaar

Je HijackThis log ziet er goed uit :wink:

Open kladblok en kopieer onderstaande code in dit kladblokbestand. Sla het op als deljob.bat
Kies voor opslaan als bestandstype (alle bestanden *.*)
[code:1:9eeec19c89]%systemdrive%
cd C:\WINDOWS\Tasks

attrib -r -s -h A6EA9A2191890E05.job
del A6EA9A2191890E05.job

attrib -r -s -h AA74A74D91875C05.job
del AA74A74D91875C05.job

attrib -r -s -h AF636440918D1618.job
del AF636440918D1618.job

attrib -r -s -h B136D83B91514A23.job
del B136D83B91514A23.job[/code:1:9eeec19c89]Dubbelklik op deljob.bat en voer daarna findjob nog een keer uit en post het resultaat.

Groeten smeenk

Het volume in station C heeft geen naam.
Het volumenummer is A406-2374

Map van C:\WINDOWS\tasks

09/07/2001 12:00 65 desktop.ini
08/25/2005 14:20 6 SA.DAT
2 bestand(en) 71 bytes
0 map(pen) 11.566.678.016 bytes beschikbaar

Het logje lijkt nu goed

Een extra online scan kan overigens nooit kwaad.

met Bitdefender scan of Panda.

Als je zo'n scan gedaan hebt krijg je vaak de mogelijkheid om een logje te bewaren zou je deze willen opslaan(copy/paste) wil je dan het resultaat even posten in je volgende bericht, meldt ook even of er nog problemen zijn.

Groeten smeenk

Het is wel heel veel informatie. Maar zijn het ook de gegevens die je moet hebben? Zo te zien heeft ie nog behoorlijk wat virussen gevonden…
Tot nu toe loopt alles nog prima, heb nog geen problemen gehad.

Scanned File
Status

C:\Program Files\Norton AntiVirus\Quarantine\030733B7.pif=>(Quarantine-2)
Infected with: Win32.Worm.Sumom.A

C:\Program Files\Norton AntiVirus\Quarantine\030733B7.pif=>(Quarantine-2)
Deleted

C:\Program Files\Norton AntiVirus\Quarantine\0D42736E.exe=>(Quarantine-2)
Infected with: Trojan.Downloader.VB.FT

C:\Program Files\Norton AntiVirus\Quarantine\0D42736E.exe=>(Quarantine-2)
Deleted

C:\Program Files\Norton AntiVirus\Quarantine\3985061D.exe=>(Quarantine-2)
Infected with: Trojan.Downloader.Vb.FT

C:\Program Files\Norton AntiVirus\Quarantine\3985061D.exe=>(Quarantine-2)
Disinfection failed

C:\Program Files\Norton AntiVirus\Quarantine\3985061D.exe=>(Quarantine-2)
Deleted

C:\Program Files\Norton AntiVirus\Quarantine\5D98784E.exe=>(Quarantine-2)
Infected with: Trojan.Downloader.VB.FT

C:\Program Files\Norton AntiVirus\Quarantine\5D98784E.exe=>(Quarantine-2)
Deleted

C:\Program Files\Norton AntiVirus\Quarantine\676F5C35.exe=>(Quarantine-2)
Infected with: Trojan.Downloader.VB.FT

C:\Program Files\Norton AntiVirus\Quarantine\676F5C35.exe=>(Quarantine-2)
Deleted

C:\Program Files\Yzpk\Fywozji.exe
Infected with: Trojan.Small.CY

C:\Program Files\Yzpk\Fywozji.exe
Disinfection failed

C:\Program Files\Yzpk\Fywozji.exe
Deleted

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP172\A0053037.exe
Infected with: Trojan.Downloader.Dyfuca.DX

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP172\A0053037.exe
Disinfection failed

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP172\A0053037.exe
Deleted

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP201\A0059123.exe
Detected with: Adware.Swizzor.ML

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP201\A0059123.exe
Disinfection failed

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP201\A0059123.exe
Deleted

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP201\A0059124.exe
Infected with: Trojan.Downloader.Swizzor.BO

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP201\A0059124.exe
Deleted

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP201\A0059125.exe
Infected with: Trojan.Downloader.Swizzor.CA

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP201\A0059125.exe
Disinfection failed

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP201\A0059125.exe
Deleted

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP201\A0059126.exe
Infected with: Trojan.Downloader.Swizzor.CB

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP201\A0059126.exe
Disinfection failed

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP201\A0059126.exe
Deleted

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP201\A0059158.exe
Infected with: Trojan.Downloader.Swizzor.BO

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP201\A0059158.exe
Deleted

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP201\A0059159.exe
Infected with: Trojan.Downloader.Swizzor.DH

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP201\A0059159.exe
Disinfection failed

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP201\A0059159.exe
Deleted

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP201\A0059160.exe
Infected with: Trojan.Downloader.Swizzor.CB

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP201\A0059160.exe
Disinfection failed

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP201\A0059160.exe
Deleted

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP202\A0059195.exe
Infected with: Trojan.Downloader.Swizzor.DF

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP202\A0059195.exe
Disinfection failed

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP202\A0059195.exe
Deleted

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP202\A0059197.exe
Infected with: Trojan.Downloader.Swizzor.BO

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP202\A0059197.exe
Deleted

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP204\A0059279.exe
Infected with: Trojan.Downloader.Swizzor.CB

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP204\A0059279.exe
Disinfection failed

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP204\A0059279.exe
Deleted

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP205\A0059302.exe
Infected with: Trojan.Downloader.Swizzor.DF

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP205\A0059302.exe
Disinfection failed

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP205\A0059302.exe
Deleted

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP205\A0059304.exe
Infected with: Trojan.Downloader.Swizzor.BO

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP205\A0059304.exe
Deleted

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP205\A0059305.exe
Infected with: Trojan.Downloader.Swizzor.DJ

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP205\A0059305.exe
Disinfection failed

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP205\A0059305.exe
Deleted

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP205\A0059306.exe
Infected with: Trojan.Downloader.Swizzor.CB

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP205\A0059306.exe
Disinfection failed

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP205\A0059306.exe
Deleted

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP205\A0059332.exe
Infected with: Trojan.Downloader.Swizzor.DF

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP205\A0059332.exe
Disinfection failed

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP205\A0059332.exe
Deleted

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP205\A0059333.exe
Infected with: Trojan.Downloader.Swizzor.DE

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP205\A0059333.exe
Disinfection failed

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP205\A0059333.exe
Deleted

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP205\A0059335.exe
Infected with: Trojan.Downloader.Swizzor.BO

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP205\A0059335.exe
Deleted

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP205\A0059337.exe
Infected with: Trojan.Downloader.Swizzor.CB

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP205\A0059337.exe
Disinfection failed

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP205\A0059337.exe
Deleted

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP206\A0059403.exe
Infected with: Trojan.Downloader.Swizzor.DF

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP206\A0059403.exe
Disinfection failed

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP206\A0059403.exe
Deleted

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP206\A0059404.exe
Infected with: Trojan.Downloader.Swizzor.DE

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP206\A0059404.exe
Disinfection failed

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP206\A0059404.exe
Deleted

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP209\A0061532.exe
Infected with: Trojan.Downloader.Swizzor.DF

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP209\A0061532.exe
Disinfection failed

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP209\A0061532.exe
Deleted

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP209\A0061533.exe
Infected with: Trojan.Downloader.Swizzor.DE

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP209\A0061533.exe
Disinfection failed

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP209\A0061533.exe
Deleted

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP209\A0061535.exe
Infected with: Trojan.Downloader.Swizzor.BO

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP209\A0061535.exe
Deleted

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP209\A0061537.exe
Infected with: Trojan.Downloader.Swizzor.CB

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP209\A0061537.exe
Disinfection failed

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP209\A0061537.exe
Deleted

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP210\A0061639.exe
Infected with: Trojan.Downloader.Dyfuca.3

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP210\A0061639.exe
Disinfection failed

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP210\A0061639.exe
Deleted

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP210\A0061640.exe=>(NSIS o)=>lzma_nsis0005
Infected with: Trojan.Clicker.Vb.EX

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP210\A0061640.exe=>(NSIS o)=>lzma_nsis0005
Disinfection failed

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP210\A0061640.exe=>(NSIS o)=>lzma_nsis0005
Deleted

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP210\A0061640.exe=>(NSIS o)
Update failed

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP210\A0061640.exe=>(NSIS o)=>lzma_nsis0006
Infected with: Trojan.Multidropper.NB

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP210\A0061640.exe=>(NSIS o)=>lzma_nsis0006
Disinfection failed

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP210\A0061640.exe=>(NSIS o)=>lzma_nsis0006
Deleted

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP210\A0061640.exe=>(NSIS o)
Update failed

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP210\A0061657.exe
Infected with: GenPack:Trojan.Downloader.Dyfuca.EI

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP210\A0061657.exe
Disinfection failed

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP210\A0061657.exe
Deleted

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP210\A0061659.exe
Infected with: Trojan.Small.CY

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP210\A0061659.exe
Disinfection failed

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP210\A0061659.exe
Deleted

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP210\A0061661.dll
Infected with: Trojan.Downloader.Dyfuca.DT

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP210\A0061661.dll
Disinfection failed

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP210\A0061661.dll
Deleted

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP212\A0061744.exe
Infected with: Trojan.Downloader.Swizzor.DF

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP212\A0061744.exe
Disinfection failed

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP212\A0061744.exe
Deleted

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP212\A0061745.exe
Infected with: Trojan.Downloader.Swizzor.DE

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP212\A0061745.exe
Disinfection failed

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP212\A0061745.exe
Deleted

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP216\A0061920.exe
Infected with: Trojan.Downloader.Swizzor.DF

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP216\A0061920.exe
Disinfection failed

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP216\A0061920.exe
Deleted

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP216\A0061921.exe
Infected with: Trojan.Downloader.Swizzor.DE

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP216\A0061921.exe
Disinfection failed

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP216\A0061921.exe
Deleted

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP216\A0061952.exe
Infected with: Trojan.Downloader.Swizzor.DF

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP216\A0061952.exe
Disinfection failed

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP216\A0061952.exe
Deleted

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP216\A0061953.exe
Infected with: Trojan.Downloader.Swizzor.DE

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP216\A0061953.exe
Disinfection failed

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP216\A0061953.exe
Deleted

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP221\A0067125.exe=>(NSIS o)
Infected with: Trojan.Downloader.Exact.Downloader.B

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP221\A0067125.exe=>(NSIS o)
Disinfection failed

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP221\A0067125.exe=>(NSIS o)
Deleted

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP221\A0067125.exe
Update failed

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP221\A0067128.exe
Infected with: Trojan.Downloader.Istbar.BI

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP221\A0067128.exe
Disinfection failed

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP221\A0067128.exe
Deleted

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP221\A0067129.exe
Infected with: Trojan.Downloader.Dyfuca.3

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP221\A0067129.exe
Disinfection failed

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP221\A0067129.exe
Deleted

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP221\A0067130.exe
Infected with: GenPack:Trojan.Downloader.Dyfuca.EI

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP221\A0067130.exe
Disinfection failed

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP221\A0067130.exe
Deleted

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP221\A0067131.exe
Detected with: Adware.180Solutions.5.11

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP221\A0067131.exe
Disinfection failed

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP221\A0067131.exe
Deleted

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP221\A0067132.exe
Infected with: Trojan.Downloader.IstBar.IJ

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP221\A0067132.exe
Deleted

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP221\A0067149.exe
Infected with: Trojan.Downloader.Swizzor.DF

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP221\A0067149.exe
Disinfection failed

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP221\A0067149.exe
Deleted

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP221\A0067150.exe
Infected with: Trojan.Downloader.Swizzor.DE

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP221\A0067150.exe
Disinfection failed

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP221\A0067150.exe
Deleted

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP221\A0067155.exe
Infected with: Trojan.Lopad.C

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP221\A0067155.exe
Disinfection failed

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP221\A0067155.exe
Deleted

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP221\A0067156.exe
Infected with: Trojan.WinAd.18436

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP221\A0067156.exe
Disinfection failed

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP221\A0067156.exe
Deleted

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP221\A0067157.exe
Infected with: Trojan.Delautoexec.51272.A

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP221\A0067157.exe
Disinfection failed

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP221\A0067157.exe
Deleted

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP221\A0067158.dll
Infected with: Trojan.Winad.L.DLL

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP221\A0067158.dll
Disinfection failed

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP221\A0067158.dll
Deleted

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP221\A0067168.exe
Infected with: Trojan.Downloader.Swizzor.DE

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP221\A0067168.exe
Disinfection failed

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP221\A0067168.exe
Deleted

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP221\A0067171.exe
Infected with: Trojan.Downloader.Swizzor.DJ

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP221\A0067171.exe
Disinfection failed

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP221\A0067171.exe
Deleted

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP221\A0067181.exe
Infected with: Trojan.Downloader.Swizzor.DF

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP221\A0067181.exe
Disinfection failed

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP221\A0067181.exe
Deleted

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP222\A0067235.dll
Detected with: Application.Adware.NewDotNet.B

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP222\A0067235.dll
Disinfection failed

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP222\A0067235.dll
Deleted

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP222\A0067286.exe
Infected with: Trojan.Lopad.C

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP222\A0067286.exe
Disinfection failed

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP222\A0067286.exe
Deleted

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP222\A0067305.pif=>(Quarantine-2)
Infected with: Win32.Worm.Sumom.A

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP222\A0067305.pif=>(Quarantine-2)
Deleted

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP222\A0067306.exe=>(Quarantine-2)
Infected with: Trojan.Downloader.VB.FT

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP222\A0067306.exe=>(Quarantine-2)
Deleted

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP222\A0067307.exe=>(Quarantine-2)
Infected with: Trojan.Downloader.Vb.FT

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP222\A0067307.exe=>(Quarantine-2)
Disinfection failed

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP222\A0067307.exe=>(Quarantine-2)
Deleted

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP222\A0067308.exe=>(Quarantine-2)
Infected with: Trojan.Downloader.VB.FT

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP222\A0067308.exe=>(Quarantine-2)
Deleted

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP222\A0067309.exe=>(Quarantine-2)
Infected with: Trojan.Downloader.VB.FT

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP222\A0067309.exe=>(Quarantine-2)
Deleted

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP222\A0067310.exe
Infected with: Trojan.Small.CY

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP222\A0067310.exe
Disinfection failed

C:\System Volume Information\_restore{581E4DC0-C4C4-4987-B2EC-5A6917324202}\RP222\A0067310.exe
Deleted