Archief - hijack this log

sinds vandaag heb ik 3 virusmeldingen gekregen, daarom post ik deze eens


Logfile of HijackThis v1.99.1
Scan saved at 17:21:36, on 6/01/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\SYSTEM32\SVCHOST.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\EXPLORER.EXE
C:\Program Files\Logitech\iTouch\iTouch.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Trend Micro\Internet Security 14\pccguide.exe
C:\Program Files\ScanSoft\OmniPageSE2.0\OpwareSE2.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\PROGRA~1\NOKIA\NOKIAP~1\LAUNCH~1.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE
C:\PROGRA~1\MUSICM~1\MUSICM~2\MMDiag.exe
C:\Program Files\ewido anti-spyware 4.0\guard.exe
C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mim.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\PROGRA~1\TRENDM~1\INTERN~1\PCCTLCOM.EXE
C:\Documents and Settings\All Users\Menu Start\Programma's\Opstarten\svchost.exe
C:\Program Files\Ulead Systems\Ulead Photo Express 3.0 SE\CalCheck.exe
C:\Program Files\VIA\RAID\raid_tool.exe
C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
C:\WINDOWS\System32\svchost.exe
C:\PROGRA~1\TRENDM~1\INTERN~1\Tmntsrv.exe
C:\PROGRA~1\COMMON~1\Nokia\MPAPI\MPAPI3s.exe
C:\PROGRA~1\TRENDM~1\INTERN~1\TMPROXY.EXE
C:\WINDOWS\system32\UAService7.exe
C:\PROGRA~1\TRENDM~1\INTERN~1\TMPFW.EXE
C:\DOCUMENTS AND SETTINGS\PAUL YSEBAERT\LOCAL SETTINGS\APPLICATION DATA\SVCHOST.EXE
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe
C:\PROGRAM FILES\LIMEWIRE\LIMEWIRE.EXE
C:\Program Files\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.telenet.be
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.be/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Telenet Internet
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigURL = http://pac.telenet.be:8080
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen
F2 - REGystem.ini: UserInit=C:\WINDOWS\System32\Userinit.exe
O2 - BHO: Antifraudewerkbalk van Trend Micro - {06647158-359E-4D10-A8DE-E6145DA90BE9} - C:\PROGRA~1\TRENDM~1\INTERN~1\PccIeBar.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\nl-be\msntb.dll
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\nl-be\msntb.dll
O3 - Toolbar: Antifraudewerkbalk van Trend Micro - {871F91FD-3A92-4988-A842-16AB2CFF5AF1} - C:\PROGRA~1\TRENDM~1\INTERN~1\PccIeBar.dll
O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
O4 - HKLM\..\Run: [Easy-PrintToolBox] C:\Program Files\Canon\Easy-PrintToolBox\BJPSMAIN.EXE /logon
O4 - HKLM\..\Run: [zBrowser Launcher] C:\Program Files\Logitech\iTouch\iTouch.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [pccguide.exe] "C:\Program Files\Trend Micro\Internet Security 14\pccguide.exe"
O4 - HKLM\..\Run: [OpwareSE2] "C:\Program Files\ScanSoft\OmniPageSE2.0\OpwareSE2.exe"
O4 - HKLM\..\Run: [MimBoot] C:\PROGRA~1\MUSICM~1\MUSICM~2\mimboot.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [FLMOFFICE4DMOUSE] C:\Program Files\Trust\MI-2510T Optical Combi Tilt Mouse\moffice.exe
O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE -startup
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [MShelp1] "C:\Program Files\MSN Messenger\svchost.exe"
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [RealPlayer] "C:\Program Files\Real\RealPlayer\realplay.exe" /RunUPGToolCommandReBoot
O4 - HKCU\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog
O4 - Startup: Xfire.lnk = C:\Program Files\Xfire\Xfire.exe
O4 - Global Startup: Adobe Reader Snelle start.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: svchost.exe
O4 - Global Startup: Ulead Photo Express 3.0 SE Calendar Checker.lnk = C:\Program Files\Ulead Systems\Ulead Photo Express 3.0 SE\CalCheck.exe
O4 - Global Startup: VIA RAID TOOL.lnk = C:\Program Files\VIA\RAID\raid_tool.exe
O8 - Extra context menu item: &Google Search - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: Backward Links - res://C:\Program Files\Google\GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://C:\Program Files\Google\GoogleToolbar1.dll/cmcache.html
O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Easy-WebPrint Add To Print List - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html
O8 - Extra context menu item: Easy-WebPrint High Speed Print - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html
O8 - Extra context menu item: Easy-WebPrint Preview - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html
O8 - Extra context menu item: Easy-WebPrint Print - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Print.html
O8 - Extra context menu item: Similar Pages - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsimilar.html
O8 - Extra context menu item: Translate into English - res://C:\Program Files\Google\GoogleToolbar1.dll/cmtrans.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INETREPL.DLL
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INETREPL.DLL
O9 - Extra 'Tools' menuitem: Create Mobile Favorite... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INETREPL.DLL
O9 - Extra button: Onderzoek - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {04E214E5-63AF-4236-83C6-A7ADCBF9BD02} (HouseCall Control) - http://housecall60.trendmicro.com/housecall/xscan60.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {31B7EB4E-8B4B-11D1-A789-00A0CC6651A8} (Cult3D ActiveX Player) - http://www.cult3d.com/download/cult.cab
O16 - DPF: {39B0684F-D7BF-4743-B050-FDC3F48F7E3B} (FilePlanet Download Control Class) - http://www.fileplanet.com/fpdlmgr/cabs/FPDC_1_0_0_44.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1120240216328
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
O16 - DPF: {6A060448-60F9-11D5-A6CD-0002B31F7455} (ExentInf Class) - http://exent.planet.nl/AoDSite/classes/ExentCtl.ocx
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1136384588343
O16 - DPF: {6E5A37BF-FD42-463A-877C-4EB7002E68AE} (Housecall ActiveX 6.5) - http://eu-housecall.trendmicro-europe.com/housecall/applet/html/native/x86/win32/activex/hcImpl.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Besturing) - http://a840.g.akamai.net/7/840/537/2005111401/housecall.trendmicro.com/housecall/xscan53.cab
O16 - DPF: {80DD2229-B8E4-4C77-B72F-F22972D723EA} (AvxScanOnline Control) - http://www.bitdefender.com/scan/Msie/bitdefender.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O16 - DPF: {B49C4597-8721-4789-9250-315DFBD9F525} (IWinAmpActiveX Class) - http://cdn.digitalcity.com/radio/ampx/ampx2.6.1.11_en_dl.cab
O16 - DPF: {BB21F850-63F4-4EC9-BF9D-565BD30C9AE9} (ASquaredScanForm Element) - http://www.windowsecurity.com/trojanscan/axscan.cab
O16 - DPF: {D1E7CBDA-E60E-4970-A01C-37301EF7BF98} (Measurement Services Client v.3.7) - http://gameadvisor.futuremark.com/global/msc37.cab
O16 - DPF: {EF0DBA6F-43CE-4B26-9808-2AB38FA0DB29} (MSN Money Ticker) - http://fdl.msn.com/public/investor/v13/ticker.cab
O16 - DPF: {FE0BD779-44EE-4A4B-AA2E-743C63F2E5E6} (IWinAmpActiveX Class) - http://pdl.stream.aol.com/downloads/aol/unagi/ampx_en_dl.cab
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - AppInit_DLLs:
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: ewido anti-spyware 4.0 guard - Anti-Malware Development a.s. - C:\Program Files\ewido anti-spyware 4.0\guard.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: Trend Micro Central Control Component (PcCtlCom) - Trend Micro Incorporated. - C:\PROGRA~1\TRENDM~1\INTERN~1\PcCtlCom.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\Sptisrv.exe
O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
O23 - Service: Trend Micro Real-time Service (Tmntsrv) - Trend Micro Incorporated. - C:\PROGRA~1\TRENDM~1\INTERN~1\Tmntsrv.exe
O23 - Service: Trend Micro Personal Firewall (TmPfw) - Trend Micro Inc. - C:\PROGRA~1\TRENDM~1\INTERN~1\TmPfw.exe
O23 - Service: Trend Micro Proxy Service (tmproxy) - Trend Micro Inc. - C:\PROGRA~1\TRENDM~1\INTERN~1\tmproxy.exe
O23 - Service: SecuROM User Access Service (V7) (UserAccess7) - Sony DADC Austria AG. - C:\WINDOWS\system32\UAService7.exe

Je Java software is verouderd.
Oudere versies hebben lekken die malware de kans geeft om zich te installeren op je systeem.
Doe eerst deze stappen om Java te de-installeren en de nieuwere versie te installeren:

Download Java Runtime Environment (JRE) 6.0.

• Scroll omlaag naar : "The J2SE Runtime Environment (JRE) allows end-users to run Java applications".
• Klik op de "Download" knop aan de rechterkant.
• Vink aan: "Accept License Agreement".
• De pagina zal herladen.
• Klik op de link om Windows Offline Installation te downloaden met Meerdere-talen, en bewaar het naar je Bureaublad.
• Sluit alle programma's die eventueel open zijn - Zeker je web browser!
• Ga dan naar Start > Configuratiescherm > Software en verwijder alle oudere versies van Java uit de Softwarelijst.
• Vink alles aan met Java Runtime Environment (JRE of J2SE) in de naam.
• Klik dan op Verwijderen of op de Wijzig/Verwijder knop.
• Herhaal dit tot alle oudere versies verdwenen zijn.
• Na het verwijderen van alle oudere versies, herstart je pc.
• Dubbelklik vervolgens op jre-6-windows-i586.exe op je Bureaublad om de nieuwste versie van Java te installeren.

* Download ATF cleaner (by Atribune)

Dubbelklik op ATF cleaner om het programma te starten.
Op het tabblad "Main", plaats je een vinkje bij Select All.
Klik op de knop Empty Selected.

Gebruik je ook Firefox als browser:
Klik op tabblad "Firefox", plaats een vinkje bij Select All.
Wil je de door Firefox opgeslagen wachtwoorden behouden, dan klik je in het venster dat verschijnt op "No".
(dit verwijdert het vinkje bij "Firefox saved passwords")
Klik op de knop Empty Selected.

Gebruik je ook Opera als browser:
Klik op tabblad "Opera", plaats een vinkje bij Select All.
Wil je de door Opera opgeslagen wachtwoorden behouden, dan klik je in het venster dat verschijnt op "No".
Klik op de knop Empty Selected.
Ga naar het tabblad "Main" en klik op de knop Exit om het programma af te sluiten.

* Download Dr.Web CureIt naar je bureaublad:
ftp://ftp.drweb.com/pub/drweb/cureit/drweb-cureit.exe

• Dubbelklik drweb-cureit.exe en sta het toe om de express scan te starten.
• Dit zal de bestanden scannen die momenteel in het geheugen geladen zijn en wanneer er iets gevonden wordt, klik de Yes to all knop bij de vraag 'cure it?'. Dit is enkel een korte scan.
• Eenmaal de korte scan is beeïndigd, Klik Options > Change Settings
• Kies de "Scan"-tab en verwijder het vinkje bij "Heuristic analyse"
• Terug in het hoofdvenster kan je de drives selecteren die je wilt laten scannen.
• Selecteer hier alle drives. Een rood bolletje zal dan tevoorschijn komen op de drives die je laat scannen.
• Klik daarna de groene pijl rechts om de scan te starten.
• Klik 'Yes to all' wanneer er gevraagd wordt om cure of move uit te voeren.
• Wanneer de scan gedaan is, kijk of je volgende icoontje kan aanklikken dat staat naast hetgeen gevonden werd:
  
• Indien wel, klik erop en daarna klik op het icoontje er net onder en kies: Move incurable zoals je zal zien in volgende afbeelding:
  
  
  
  Dit zal de bestanden verplaatsen naar volgende map %userprofile%\DoctorWeb\quarantaine-folder indien het niet gedesinfecteerd kan worden. (dit in het geval dat we samples nodig hebben)
• Na bovenstaande te selecteren, in het menu bovenaan van Dr.Web CureIt, klik file en kies save report list. Bewaar de log op je bureaublad.
• Sluit daarna Dr.Web Cureit.
• Herstart je computer!! Belangrijke stap, want het kan zijn dat Dr.Web Cureit bestanden zal verplaatsen/verwijderen tijdens herstart.
• Na het herstarten, Kopieer en plak de inhoud van die log die je eerder hebt bewaard in je volgende post met een nieuw hijackthis logje.

svchost.exe;c:\documents and settings\all users\menu start\programma's\opstarten;Trojan.MulDrop.3338;Will be cured after reboot.;
svchost.exe;C:\Documents and Settings\All Users\Menu Start\Programma's\Opstarten;Trojan.MulDrop.3338;Deleted.;
[Full] wim zoneveld 07.wma;C:\Documents and Settings\Paul Ysebaert\Shared;Trojan.Isbar.389;Deleted.;
2D Designer v2007.exe;C:\Documents and Settings\Paul Ysebaert\Shared\_;Trojan.MulDrop.3338;Deleted.;
4WomenOnly v.5.2.exe;C:\Documents and Settings\Paul Ysebaert\Shared\_;Trojan.MulDrop.3338;Deleted.;
Ad Muncher v4.7 Final.exe;C:\Documents and Settings\Paul Ysebaert\Shared\_;Trojan.MulDrop.3338;Deleted.;
Adobe Illustrator CS2 12.exe;C:\Documents and Settings\Paul Ysebaert\Shared\_;Trojan.MulDrop.3338;Deleted.;
Age Of Empires III The Warchiefs.exe;C:\Documents and Settings\Paul Ysebaert\Shared\_;Trojan.MulDrop.3338;Deleted.;
Alcohol 120 v.1.9.6.4719.exe;C:\Documents and Settings\Paul Ysebaert\Shared\_;Trojan.MulDrop.3338;Deleted.;
Altova SchemaAgent v.2006.3.2.exe;C:\Documents and Settings\Paul Ysebaert\Shared\_;Trojan.MulDrop.3338;Deleted.;
Amadis 3GP Video Converter v.1.0.exe;C:\Documents and Settings\Paul Ysebaert\Shared\_;Trojan.MulDrop.3338;Deleted.;
Animated GIF Producer v3.0.2.exe;C:\Documents and Settings\Paul Ysebaert\Shared\_;Trojan.MulDrop.3338;Deleted.;
Anno 1701.exe;C:\Documents and Settings\Paul Ysebaert\Shared\_;Trojan.MulDrop.3338;Deleted.;
Anti-Porn v.8.1.9.15.exe;C:\Documents and Settings\Paul Ysebaert\Shared\_;Trojan.MulDrop.3338;Deleted.;
AnyDVD 6.0.7.0.exe;C:\Documents and Settings\Paul Ysebaert\Shared\_;Trojan.MulDrop.3338;Deleted.;
Ashampoo AntiSpyWare 1.40.exe;C:\Documents and Settings\Paul Ysebaert\Shared\_;Trojan.MulDrop.3338;Deleted.;
Auction Wizard 2000 v.2.3.247.exe;C:\Documents and Settings\Paul Ysebaert\Shared\_;Trojan.MulDrop.3338;Deleted.;
Aurora MPEG To DVD Burner 4.7.22.4.exe;C:\Documents and Settings\Paul Ysebaert\Shared\_;Trojan.MulDrop.3338;Deleted.;
avast Pro 4.7.892.exe;C:\Documents and Settings\Paul Ysebaert\Shared\_;Trojan.MulDrop.3338;Deleted.;
AWicons Pro 9.4.0.exe;C:\Documents and Settings\Paul Ysebaert\Shared\_;Trojan.MulDrop.3338;Deleted.;
Bandwidth Monitor Pro 1.30.exe;C:\Documents and Settings\Paul Ysebaert\Shared\_;Trojan.MulDrop.3338;Deleted.;
Beer Tycoon.exe;C:\Documents and Settings\Paul Ysebaert\Shared\_;Trojan.MulDrop.3338;Deleted.;
Blender 2.43 RC1.exe;C:\Documents and Settings\Paul Ysebaert\Shared\_;Trojan.MulDrop.3338;Deleted.;
Capturix ScanShare v.2.09.425.exe;C:\Documents and Settings\Paul Ysebaert\Shared\_;Trojan.MulDrop.3338;Deleted.;
Caribbean Treasures 1.0 Emotion Rays.exe;C:\Documents and Settings\Paul Ysebaert\Shared\_;Trojan.MulDrop.3338;Deleted.;
CDRoller 6.40.4.exe;C:\Documents and Settings\Paul Ysebaert\Shared\_;Trojan.MulDrop.3338;Deleted.;
Chappelles Show - Season 1 - Episode 1 s01e01 DVDrip.exe;C:\Documents and Settings\Paul Ysebaert\Shared\_;Trojan.MulDrop.3338;Deleted.;
Chappelles Show - Season 1 - Episode 2 s01e02 DVDrip.exe;C:\Documents and Settings\Paul Ysebaert\Shared\_;Trojan.MulDrop.3338;Deleted.;
CrashDay ISO for PC - Crack Included.exe;C:\Documents and Settings\Paul Ysebaert\Shared\_;Trojan.MulDrop.3338;Deleted.;
D3DGear v.1.6.6.1032.exe;C:\Documents and Settings\Paul Ysebaert\Shared\_;Trojan.MulDrop.3338;Deleted.;
Devil May Cry 3 Special Edition.exe;C:\Documents and Settings\Paul Ysebaert\Shared\_;Trojan.MulDrop.3338;Deleted.;
Diskeeper Professional Edition 10.0.593.0.exe;C:\Documents and Settings\Paul Ysebaert\Shared\_;Trojan.MulDrop.3338;Deleted.;
Everest Ultimate Edition 3.50.853 Beta Keygen.exe;C:\Documents and Settings\Paul Ysebaert\Shared\_;Trojan.MulDrop.3338;Deleted.;
Family Tree v7.5 Multilanguage.exe;C:\Documents and Settings\Paul Ysebaert\Shared\_;Trojan.MulDrop.3338;Deleted.;
FIFA 2007 Reloaded.exe;C:\Documents and Settings\Paul Ysebaert\Shared\_;Trojan.MulDrop.3338;Deleted.;
FL Studio v6.0.8 XXL.exe;C:\Documents and Settings\Paul Ysebaert\Shared\_;Trojan.MulDrop.3338;Deleted.;
FlashFXP v3.4.1 Build 1149.exe;C:\Documents and Settings\Paul Ysebaert\Shared\_;Trojan.MulDrop.3338;Deleted.;
FliSoft Capture Studio v2.3.exe;C:\Documents and Settings\Paul Ysebaert\Shared\_;Trojan.MulDrop.3338;Deleted.;
FTPGetter v.2.7.0.20.exe;C:\Documents and Settings\Paul Ysebaert\Shared\_;Trojan.MulDrop.3338;Deleted.;
Gael MindGenius Business v.2.410.exe;C:\Documents and Settings\Paul Ysebaert\Shared\_;Trojan.MulDrop.3338;Deleted.;
Ghost Recon Advanced Warfighter.exe;C:\Documents and Settings\Paul Ysebaert\Shared\_;Trojan.MulDrop.3338;Deleted.;
Graham Process Mapping Professional v.7.00.0919..exe;C:\Documents and Settings\Paul Ysebaert\Shared\_;Trojan.MulDrop.3338;Deleted.;
Graham Process Mapping Professional v.7.00.exe;C:\Documents and Settings\Paul Ysebaert\Shared\_;Trojan.MulDrop.3338;Deleted.;
GridinSoft Notepad Pro 3.2.2.4.exe;C:\Documents and Settings\Paul Ysebaert\Shared\_;Trojan.MulDrop.3338;Deleted.;
GTA San Andreas Tokyo Drift.exe;C:\Documents and Settings\Paul Ysebaert\Shared\_;Trojan.MulDrop.3338;Deleted.;
Half-Life 2 Episode One.exe;C:\Documents and Settings\Paul Ysebaert\Shared\_;Trojan.MulDrop.3338;Deleted.;
Hide Files - Folders 2.7.exe;C:\Documents and Settings\Paul Ysebaert\Shared\_;Trojan.MulDrop.3338;Deleted.;
Hushpage Crypter v.1.2.6.2.exe;C:\Documents and Settings\Paul Ysebaert\Shared\_;Trojan.MulDrop.3338;Deleted.;
IDA Pro v.5.0.0.879.exe;C:\Documents and Settings\Paul Ysebaert\Shared\_;Trojan.MulDrop.3338;Deleted.;
ImTOO DVD Creator 2.0.14.1229.exe;C:\Documents and Settings\Paul Ysebaert\Shared\_;Trojan.MulDrop.3338;Deleted.;
IntelliAdmin Outlook Profile Generator 2006.exe;C:\Documents and Settings\Paul Ysebaert\Shared\_;Trojan.MulDrop.3338;Deleted.;
IntelliAdmin Outlook Profile Generator v.20060605.exe;C:\Documents and Settings\Paul Ysebaert\Shared\_;Trojan.MulDrop.3338;Deleted.;
ionCube PHP Encoder v.6.5.9.exe;C:\Documents and Settings\Paul Ysebaert\Shared\_;Trojan.MulDrop.3338;Deleted.;
IPMonitor v5.9.exe;C:\Documents and Settings\Paul Ysebaert\Shared\_;Trojan.MulDrop.3338;Deleted.;
John Tucker Must Die.exe;C:\Documents and Settings\Paul Ysebaert\Shared\_;Trojan.MulDrop.3338;Deleted.;
Little Man.exe;C:\Documents and Settings\Paul Ysebaert\Shared\_;Trojan.MulDrop.3338;Deleted.;
Madden nfl 2007.exe;C:\Documents and Settings\Paul Ysebaert\Shared\_;Trojan.MulDrop.3338;Deleted.;
MAGic v.10.00.867.02.exe;C:\Documents and Settings\Paul Ysebaert\Shared\_;Trojan.MulDrop.3338;Deleted.;
Man On Fire.exe;C:\Documents and Settings\Paul Ysebaert\Shared\_;Trojan.MulDrop.3338;Deleted.;
Maxon Cinema 4D Plug-ins.exe;C:\Documents and Settings\Paul Ysebaert\Shared\_;Trojan.MulDrop.3338;Deleted.;
MediaChance DVD-Lab Pro 2.15.exe;C:\Documents and Settings\Paul Ysebaert\Shared\_;Trojan.MulDrop.3338;Deleted.;
Micrsoft Windows XP With SP3.exe;C:\Documents and Settings\Paul Ysebaert\Shared\_;Trojan.MulDrop.3338;Deleted.;
MobTime Cell Phone Manager 2006 v6.1.0.exe;C:\Documents and Settings\Paul Ysebaert\Shared\_;Trojan.MulDrop.3338;Deleted.;
Movie Label 2007 v2.0.0 Build 234 Network Edition.exe;C:\Documents and Settings\Paul Ysebaert\Shared\_;Trojan.MulDrop.3338;Deleted.;
Nacho Libre.exe;C:\Documents and Settings\Paul Ysebaert\Shared\_;Trojan.MulDrop.3338;Deleted.;
NewLive All Media Fixer Pro v7.1.exe;C:\Documents and Settings\Paul Ysebaert\Shared\_;Trojan.MulDrop.3338;Deleted.;
NRA Gun Club PS2.exe;C:\Documents and Settings\Paul Ysebaert\Shared\_;Trojan.MulDrop.3338;Deleted.;
NTI JewelCase Maker 5.5.0.23.exe;C:\Documents and Settings\Paul Ysebaert\Shared\_;Trojan.MulDrop.3338;Deleted.;
Parallels Workstation 2.2.2112.exe;C:\Documents and Settings\Paul Ysebaert\Shared\_;Trojan.MulDrop.3338;Deleted.;
PC Game - Shrek 2.exe;C:\Documents and Settings\Paul Ysebaert\Shared\_;Trojan.MulDrop.3338;Deleted.;
PDF Converter Personal Edition 2.0.exe;C:\Documents and Settings\Paul Ysebaert\Shared\_;Trojan.MulDrop.3338;Deleted.;
PDF Password Remover v2.5.exe;C:\Documents and Settings\Paul Ysebaert\Shared\_;Trojan.MulDrop.3338;Deleted.;
PhotoDex ProShow Producer v.3.0.1897.exe;C:\Documents and Settings\Paul Ysebaert\Shared\_;Trojan.MulDrop.3338;Deleted.;
Picture Window Pro v4.0.1.1.exe;C:\Documents and Settings\Paul Ysebaert\Shared\_;Trojan.MulDrop.3338;Deleted.;
Pirates Of The Caribbean The Legend Of Jack Sparrow.exe;C:\Documents and Settings\Paul Ysebaert\Shared\_;Trojan.MulDrop.3338;Deleted.;
Plato DVD Ripper v4.41.exe;C:\Documents and Settings\Paul Ysebaert\Shared\_;Trojan.MulDrop.3338;Deleted.;
Portable Ad-Aware SE Professional.exe;C:\Documents and Settings\Paul Ysebaert\Shared\_;Trojan.MulDrop.3338;Deleted.;
Portable Microsoft Word.exe;C:\Documents and Settings\Paul Ysebaert\Shared\_;Trojan.MulDrop.3338;Deleted.;
PrintStudio Pro 2.0.exe;C:\Documents and Settings\Paul Ysebaert\Shared\_;Trojan.MulDrop.3338;Deleted.;
Pro Ecolution Soccer 6.exe;C:\Documents and Settings\Paul Ysebaert\Shared\_;Trojan.MulDrop.3338;Deleted.;
ProShow Gold ver. 2.6.1775.exe;C:\Documents and Settings\Paul Ysebaert\Shared\_;Trojan.MulDrop.3338;Deleted.;
Psychopathia Sexualis Unrated.exe;C:\Documents and Settings\Paul Ysebaert\Shared\_;Trojan.MulDrop.3338;Deleted.;
Real Spy Monitor 2.58.exe;C:\Documents and Settings\Paul Ysebaert\Shared\_;Trojan.MulDrop.3338;Deleted.;
Red Alert 2 and Mods.exe;C:\Documents and Settings\Paul Ysebaert\Shared\_;Trojan.MulDrop.3338;Deleted.;
Shes The Man.exe;C:\Documents and Settings\Paul Ysebaert\Shared\_;Trojan.MulDrop.3338;Deleted.;
Sisulizer v.1.0.182 Enterprise Edition Multilingual.exe;C:\Documents and Settings\Paul Ysebaert\Shared\_;Trojan.MulDrop.3338;Deleted.;
Sisulizer v.1.0.182 Enterprise Edition.exe;C:\Documents and Settings\Paul Ysebaert\Shared\_;Trojan.MulDrop.3338;Deleted.;
Spellforce 2 Shadow Wars.exe;C:\Documents and Settings\Paul Ysebaert\Shared\_;Trojan.MulDrop.3338;Deleted.;
SphereXPlorer v1.1.420.exe;C:\Documents and Settings\Paul Ysebaert\Shared\_;Trojan.MulDrop.3338;Deleted.;
SuperCleaner v2.91.exe;C:\Documents and Settings\Paul Ysebaert\Shared\_;Trojan.MulDrop.3338;Deleted.;
The Glass House.exe;C:\Documents and Settings\Paul Ysebaert\Shared\_;Trojan.MulDrop.3338;Deleted.;
The Grabber 1.4.7B.exe;C:\Documents and Settings\Paul Ysebaert\Shared\_;Trojan.MulDrop.3338;Deleted.;
The Grudge 2.exe;C:\Documents and Settings\Paul Ysebaert\Shared\_;Trojan.MulDrop.3338;Deleted.;
The Simpsons - Season 16 - Complete - All episodes.exe;C:\Documents and Settings\Paul Ysebaert\Shared\_;Trojan.MulDrop.3338;Deleted.;
Tiger Woods PGA Tour 07.exe;C:\Documents and Settings\Paul Ysebaert\Shared\_;Trojan.MulDrop.3338;Deleted.;
Titan Quest.exe;C:\Documents and Settings\Paul Ysebaert\Shared\_;Trojan.MulDrop.3338;Deleted.;
Toon Boom Studio 3.5.058.exe;C:\Documents and Settings\Paul Ysebaert\Shared\_;Trojan.MulDrop.3338;Deleted.;
Total Commander ver. 6.56.exe;C:\Documents and Settings\Paul Ysebaert\Shared\_;Trojan.MulDrop.3338;Deleted.;
Trackmania United.exe;C:\Documents and Settings\Paul Ysebaert\Shared\_;Trojan.MulDrop.3338;Deleted.;
Ulead GIF Animator v5.0 Retail.exe;C:\Documents and Settings\Paul Ysebaert\Shared\_;Trojan.MulDrop.3338;Deleted.;
Ulead GIF Animator v5.exe;C:\Documents and Settings\Paul Ysebaert\Shared\_;Trojan.MulDrop.3338;Deleted.;
Ultra MPEG Converter v2.1.4.exe;C:\Documents and Settings\Paul Ysebaert\Shared\_;Trojan.MulDrop.3338;Deleted.;
URL Helper 2.71.exe;C:\Documents and Settings\Paul Ysebaert\Shared\_;Trojan.MulDrop.3338;Deleted.;
VideoCat v.2.12.exe;C:\Documents and Settings\Paul Ysebaert\Shared\_;Trojan.MulDrop.3338;Deleted.;
VideoInspector v1.9.0.102.exe;C:\Documents and Settings\Paul Ysebaert\Shared\_;Trojan.MulDrop.3338;Deleted.;
Vista Transformation Pack v6.0 Final.exe;C:\Documents and Settings\Paul Ysebaert\Shared\_;Trojan.MulDrop.3338;Deleted.;
Whose Line is it Anyway Best Of Show VHSRip XVID.exe;C:\Documents and Settings\Paul Ysebaert\Shared\_;Trojan.MulDrop.3338;Deleted.;
Windows XP Media Center Edition.exe;C:\Documents and Settings\Paul Ysebaert\Shared\_;Trojan.MulDrop.3338;Deleted.;
Windows XP Pro x64.exe;C:\Documents and Settings\Paul Ysebaert\Shared\_;Trojan.MulDrop.3338;Deleted.;
WinGuard Premium Edition 2007 v6.5.13.exe;C:\Documents and Settings\Paul Ysebaert\Shared\_;Trojan.MulDrop.3338;Deleted.;
Xilisoft Video Converter 3.1.exe;C:\Documents and Settings\Paul Ysebaert\Shared\_;Trojan.MulDrop.3338;Deleted.;
xzxzxzxzxzxz.exe;C:\Documents and Settings\Paul Ysebaert\Shared\_;Trojan.MulDrop.3338;Deleted.;
VBAOL11.CHM\html/olobjAddressEntries.htm;C:\Program Files\Microsoft Office\OFFICE11\1043\VBAOL11.CHM;Modification of VBS.Petik;;
VBAOL11.CHM;C:\Program Files\Microsoft Office\OFFICE11\1043;Archive contains infected objects;Moved.;
A0030996.exe;C:\System Volume Information\_restore{C39AFE3C-AFF7-4A7E-94E4-522758FE8556}\RP127;Trojan.MulDrop.3338;Deleted.;
A0031010.exe;C:\System Volume Information\_restore{C39AFE3C-AFF7-4A7E-94E4-522758FE8556}\RP127;Trojan.MulDrop.3338;Deleted.;
A0031263.exe;C:\System Volume Information\_restore{C39AFE3C-AFF7-4A7E-94E4-522758FE8556}\RP132;Trojan.MulDrop.3338;Deleted.;
A0031264.exe;C:\System Volume Information\_restore{C39AFE3C-AFF7-4A7E-94E4-522758FE8556}\RP132;Trojan.MulDrop.3338;Deleted.;
A0031265.exe;C:\System Volume Information\_restore{C39AFE3C-AFF7-4A7E-94E4-522758FE8556}\RP132;Trojan.MulDrop.3338;Deleted.;
A0031266.exe;C:\System Volume Information\_restore{C39AFE3C-AFF7-4A7E-94E4-522758FE8556}\RP132;Trojan.MulDrop.3338;Deleted.;
A0031267.exe;C:\System Volume Information\_restore{C39AFE3C-AFF7-4A7E-94E4-522758FE8556}\RP132;Trojan.MulDrop.3338;Deleted.;
A0031268.exe;C:\System Volume Information\_restore{C39AFE3C-AFF7-4A7E-94E4-522758FE8556}\RP132;Trojan.MulDrop.3338;Deleted.;
A0031269.exe;C:\System Volume Information\_restore{C39AFE3C-AFF7-4A7E-94E4-522758FE8556}\RP132;Trojan.MulDrop.3338;Deleted.;
A0031270.exe;C:\System Volume Information\_restore{C39AFE3C-AFF7-4A7E-94E4-522758FE8556}\RP132;Trojan.MulDrop.3338;Deleted.;
A0031271.exe;C:\System Volume Information\_restore{C39AFE3C-AFF7-4A7E-94E4-522758FE8556}\RP132;Trojan.MulDrop.3338;Deleted.;
A0031272.exe;C:\System Volume Information\_restore{C39AFE3C-AFF7-4A7E-94E4-522758FE8556}\RP132;Trojan.MulDrop.3338;Deleted.;
A0031273.exe;C:\System Volume Information\_restore{C39AFE3C-AFF7-4A7E-94E4-522758FE8556}\RP132;Trojan.MulDrop.3338;Deleted.;
A0031274.exe;C:\System Volume Information\_restore{C39AFE3C-AFF7-4A7E-94E4-522758FE8556}\RP132;Trojan.MulDrop.3338;Deleted.;
A0031275.exe;C:\System Volume Information\_restore{C39AFE3C-AFF7-4A7E-94E4-522758FE8556}\RP132;Trojan.MulDrop.3338;Deleted.;
A0031276.exe;C:\System Volume Information\_restore{C39AFE3C-AFF7-4A7E-94E4-522758FE8556}\RP132;Trojan.MulDrop.3338;Deleted.;
A0031277.exe;C:\System Volume Information\_restore{C39AFE3C-AFF7-4A7E-94E4-522758FE8556}\RP132;Trojan.MulDrop.3338;Deleted.;
A0031278.exe;C:\System Volume Information\_restore{C39AFE3C-AFF7-4A7E-94E4-522758FE8556}\RP132;Trojan.MulDrop.3338;Deleted.;
A0031279.exe;C:\System Volume Information\_restore{C39AFE3C-AFF7-4A7E-94E4-522758FE8556}\RP132;Trojan.MulDrop.3338;Deleted.;
A0031280.exe;C:\System Volume Information\_restore{C39AFE3C-AFF7-4A7E-94E4-522758FE8556}\RP132;Trojan.MulDrop.3338;Deleted.;
A0031281.exe;C:\System Volume Information\_restore{C39AFE3C-AFF7-4A7E-94E4-522758FE8556}\RP132;Trojan.MulDrop.3338;Deleted.;
A0031282.exe;C:\System Volume Information\_restore{C39AFE3C-AFF7-4A7E-94E4-522758FE8556}\RP132;Trojan.MulDrop.3338;Deleted.;
A0031283.exe;C:\System Volume Information\_restore{C39AFE3C-AFF7-4A7E-94E4-522758FE8556}\RP132;Trojan.MulDrop.3338;Deleted.;
A0031284.exe;C:\System Volume Information\_restore{C39AFE3C-AFF7-4A7E-94E4-522758FE8556}\RP132;Trojan.MulDrop.3338;Deleted.;
A0031285.exe;C:\System Volume Information\_restore{C39AFE3C-AFF7-4A7E-94E4-522758FE8556}\RP132;Trojan.MulDrop.3338;Deleted.;
A0031286.exe;C:\System Volume Information\_restore{C39AFE3C-AFF7-4A7E-94E4-522758FE8556}\RP132;Trojan.MulDrop.3338;Deleted.;
A0031287.exe;C:\System Volume Information\_restore{C39AFE3C-AFF7-4A7E-94E4-522758FE8556}\RP132;Trojan.MulDrop.3338;Deleted.;
A0031288.exe;C:\System Volume Information\_restore{C39AFE3C-AFF7-4A7E-94E4-522758FE8556}\RP132;Trojan.MulDrop.3338;Deleted.;
A0031289.exe;C:\System Volume Information\_restore{C39AFE3C-AFF7-4A7E-94E4-522758FE8556}\RP132;Trojan.MulDrop.3338;Deleted.;
A0031290.exe;C:\System Volume Information\_restore{C39AFE3C-AFF7-4A7E-94E4-522758FE8556}\RP132;Trojan.MulDrop.3338;Deleted.;
A0031291.exe;C:\System Volume Information\_restore{C39AFE3C-AFF7-4A7E-94E4-522758FE8556}\RP132;Trojan.MulDrop.3338;Deleted.;
A0031292.exe;C:\System Volume Information\_restore{C39AFE3C-AFF7-4A7E-94E4-522758FE8556}\RP132;Trojan.MulDrop.3338;Deleted.;
A0031293.exe;C:\System Volume Information\_restore{C39AFE3C-AFF7-4A7E-94E4-522758FE8556}\RP132;Trojan.MulDrop.3338;Deleted.;
A0031294.exe;C:\System Volume Information\_restore{C39AFE3C-AFF7-4A7E-94E4-522758FE8556}\RP132;Trojan.MulDrop.3338;Deleted.;
A0031295.exe;C:\System Volume Information\_restore{C39AFE3C-AFF7-4A7E-94E4-522758FE8556}\RP132;Trojan.MulDrop.3338;Deleted.;
A0031296.exe;C:\System Volume Information\_restore{C39AFE3C-AFF7-4A7E-94E4-522758FE8556}\RP132;Trojan.MulDrop.3338;Deleted.;
A0031297.exe;C:\System Volume Information\_restore{C39AFE3C-AFF7-4A7E-94E4-522758FE8556}\RP132;Trojan.MulDrop.3338;Deleted.;
A0031298.exe;C:\System Volume Information\_restore{C39AFE3C-AFF7-4A7E-94E4-522758FE8556}\RP132;Trojan.MulDrop.3338;Deleted.;
A0031299.exe;C:\System Volume Information\_restore{C39AFE3C-AFF7-4A7E-94E4-522758FE8556}\RP132;Trojan.MulDrop.3338;Deleted.;
A0031300.exe;C:\System Volume Information\_restore{C39AFE3C-AFF7-4A7E-94E4-522758FE8556}\RP132;Trojan.MulDrop.3338;Deleted.;
A0031301.exe;C:\System Volume Information\_restore{C39AFE3C-AFF7-4A7E-94E4-522758FE8556}\RP132;Trojan.MulDrop.3338;Deleted.;
A0031302.exe;C:\System Volume Information\_restore{C39AFE3C-AFF7-4A7E-94E4-522758FE8556}\RP132;Trojan.MulDrop.3338;Deleted.;
A0031303.exe;C:\System Volume Information\_restore{C39AFE3C-AFF7-4A7E-94E4-522758FE8556}\RP132;Trojan.MulDrop.3338;Deleted.;
A0031304.exe;C:\System Volume Information\_restore{C39AFE3C-AFF7-4A7E-94E4-522758FE8556}\RP132;Trojan.MulDrop.3338;Deleted.;
A0031305.exe;C:\System Volume Information\_restore{C39AFE3C-AFF7-4A7E-94E4-522758FE8556}\RP132;Trojan.MulDrop.3338;Deleted.;
A0031306.exe;C:\System Volume Information\_restore{C39AFE3C-AFF7-4A7E-94E4-522758FE8556}\RP132;Trojan.MulDrop.3338;Deleted.;
A0031307.exe;C:\System Volume Information\_restore{C39AFE3C-AFF7-4A7E-94E4-522758FE8556}\RP132;Trojan.MulDrop.3338;Deleted.;
A0031308.exe;C:\System Volume Information\_restore{C39AFE3C-AFF7-4A7E-94E4-522758FE8556}\RP132;Trojan.MulDrop.3338;Deleted.;
A0031309.exe;C:\System Volume Information\_restore{C39AFE3C-AFF7-4A7E-94E4-522758FE8556}\RP132;Trojan.MulDrop.3338;Deleted.;
A0031310.exe;C:\System Volume Information\_restore{C39AFE3C-AFF7-4A7E-94E4-522758FE8556}\RP132;Trojan.MulDrop.3338;Deleted.;
A0031311.exe;C:\System Volume Information\_restore{C39AFE3C-AFF7-4A7E-94E4-522758FE8556}\RP132;Trojan.MulDrop.3338;Deleted.;
A0031312.exe;C:\System Volume Information\_restore{C39AFE3C-AFF7-4A7E-94E4-522758FE8556}\RP132;Trojan.MulDrop.3338;Deleted.;
A0031313.exe;C:\System Volume Information\_restore{C39AFE3C-AFF7-4A7E-94E4-522758FE8556}\RP132;Trojan.MulDrop.3338;Deleted.;
A0031314.exe;C:\System Volume Information\_restore{C39AFE3C-AFF7-4A7E-94E4-522758FE8556}\RP132;Trojan.MulDrop.3338;Deleted.;
A0031315.exe;C:\System Volume Information\_restore{C39AFE3C-AFF7-4A7E-94E4-522758FE8556}\RP132;Trojan.MulDrop.3338;Deleted.;
A0031316.exe;C:\System Volume Information\_restore{C39AFE3C-AFF7-4A7E-94E4-522758FE8556}\RP132;Trojan.MulDrop.3338;Deleted.;
A0031317.exe;C:\System Volume Information\_restore{C39AFE3C-AFF7-4A7E-94E4-522758FE8556}\RP132;Trojan.MulDrop.3338;Deleted.;
A0031318.exe;C:\System Volume Information\_restore{C39AFE3C-AFF7-4A7E-94E4-522758FE8556}\RP132;Trojan.MulDrop.3338;Deleted.;
A0031319.exe;C:\System Volume Information\_restore{C39AFE3C-AFF7-4A7E-94E4-522758FE8556}\RP132;Trojan.MulDrop.3338;Deleted.;
A0031320.exe;C:\System Volume Information\_restore{C39AFE3C-AFF7-4A7E-94E4-522758FE8556}\RP132;Trojan.MulDrop.3338;Deleted.;
A0031321.exe;C:\System Volume Information\_restore{C39AFE3C-AFF7-4A7E-94E4-522758FE8556}\RP132;Trojan.MulDrop.3338;Deleted.;
A0031322.exe;C:\System Volume Information\_restore{C39AFE3C-AFF7-4A7E-94E4-522758FE8556}\RP132;Trojan.MulDrop.3338;Deleted.;
A0031323.exe;C:\System Volume Information\_restore{C39AFE3C-AFF7-4A7E-94E4-522758FE8556}\RP132;Trojan.MulDrop.3338;Deleted.;
A0031324.exe;C:\System Volume Information\_restore{C39AFE3C-AFF7-4A7E-94E4-522758FE8556}\RP132;Trojan.MulDrop.3338;Deleted.;
A0031325.exe;C:\System Volume Information\_restore{C39AFE3C-AFF7-4A7E-94E4-522758FE8556}\RP132;Trojan.MulDrop.3338;Deleted.;
A0031326.exe;C:\System Volume Information\_restore{C39AFE3C-AFF7-4A7E-94E4-522758FE8556}\RP132;Trojan.MulDrop.3338;Deleted.;
A0031327.exe;C:\System Volume Information\_restore{C39AFE3C-AFF7-4A7E-94E4-522758FE8556}\RP132;Trojan.MulDrop.3338;Deleted.;
A0031328.exe;C:\System Volume Information\_restore{C39AFE3C-AFF7-4A7E-94E4-522758FE8556}\RP132;Trojan.MulDrop.3338;Deleted.;
A0031329.exe;C:\System Volume Information\_restore{C39AFE3C-AFF7-4A7E-94E4-522758FE8556}\RP132;Trojan.MulDrop.3338;Deleted.;
A0031330.exe;C:\System Volume Information\_restore{C39AFE3C-AFF7-4A7E-94E4-522758FE8556}\RP132;Trojan.MulDrop.3338;Deleted.;
A0031331.exe;C:\System Volume Information\_restore{C39AFE3C-AFF7-4A7E-94E4-522758FE8556}\RP132;Trojan.MulDrop.3338;Deleted.;
A0031332.exe;C:\System Volume Information\_restore{C39AFE3C-AFF7-4A7E-94E4-522758FE8556}\RP132;Trojan.MulDrop.3338;Deleted.;
A0031333.exe;C:\System Volume Information\_restore{C39AFE3C-AFF7-4A7E-94E4-522758FE8556}\RP132;Trojan.MulDrop.3338;Deleted.;
A0031334.exe;C:\System Volume Information\_restore{C39AFE3C-AFF7-4A7E-94E4-522758FE8556}\RP132;Trojan.MulDrop.3338;Deleted.;
A0031335.exe;C:\System Volume Information\_restore{C39AFE3C-AFF7-4A7E-94E4-522758FE8556}\RP132;Trojan.MulDrop.3338;Deleted.;
A0031336.exe;C:\System Volume Information\_restore{C39AFE3C-AFF7-4A7E-94E4-522758FE8556}\RP132;Trojan.MulDrop.3338;Deleted.;
A0031337.exe;C:\System Volume Information\_restore{C39AFE3C-AFF7-4A7E-94E4-522758FE8556}\RP132;Trojan.MulDrop.3338;Deleted.;
A0031338.exe;C:\System Volume Information\_restore{C39AFE3C-AFF7-4A7E-94E4-522758FE8556}\RP132;Trojan.MulDrop.3338;Deleted.;
A0031339.exe;C:\System Volume Information\_restore{C39AFE3C-AFF7-4A7E-94E4-522758FE8556}\RP132;Trojan.MulDrop.3338;Deleted.;
A0031340.exe;C:\System Volume Information\_restore{C39AFE3C-AFF7-4A7E-94E4-522758FE8556}\RP132;Trojan.MulDrop.3338;Deleted.;
A0031341.exe;C:\System Volume Information\_restore{C39AFE3C-AFF7-4A7E-94E4-522758FE8556}\RP132;Trojan.MulDrop.3338;Deleted.;
A0031342.exe;C:\System Volume Information\_restore{C39AFE3C-AFF7-4A7E-94E4-522758FE8556}\RP132;Trojan.MulDrop.3338;Deleted.;
A0031343.exe;C:\System Volume Information\_restore{C39AFE3C-AFF7-4A7E-94E4-522758FE8556}\RP132;Trojan.MulDrop.3338;Deleted.;
A0031344.exe;C:\System Volume Information\_restore{C39AFE3C-AFF7-4A7E-94E4-522758FE8556}\RP132;Trojan.MulDrop.3338;Deleted.;
A0031345.exe;C:\System Volume Information\_restore{C39AFE3C-AFF7-4A7E-94E4-522758FE8556}\RP132;Trojan.MulDrop.3338;Deleted.;
A0031346.exe;C:\System Volume Information\_restore{C39AFE3C-AFF7-4A7E-94E4-522758FE8556}\RP132;Trojan.MulDrop.3338;Deleted.;
A0031347.exe;C:\System Volume Information\_restore{C39AFE3C-AFF7-4A7E-94E4-522758FE8556}\RP132;Trojan.MulDrop.3338;Deleted.;
A0031348.exe;C:\System Volume Information\_restore{C39AFE3C-AFF7-4A7E-94E4-522758FE8556}\RP132;Trojan.MulDrop.3338;Deleted.;
A0031349.exe;C:\System Volume Information\_restore{C39AFE3C-AFF7-4A7E-94E4-522758FE8556}\RP132;Trojan.MulDrop.3338;Deleted.;
A0031350.exe;C:\System Volume Information\_restore{C39AFE3C-AFF7-4A7E-94E4-522758FE8556}\RP132;Trojan.MulDrop.3338;Deleted.;
A0031351.exe;C:\System Volume Information\_restore{C39AFE3C-AFF7-4A7E-94E4-522758FE8556}\RP132;Trojan.MulDrop.3338;Deleted.;
A0031352.exe;C:\System Volume Information\_restore{C39AFE3C-AFF7-4A7E-94E4-522758FE8556}\RP132;Trojan.MulDrop.3338;Deleted.;
A0031353.exe;C:\System Volume Information\_restore{C39AFE3C-AFF7-4A7E-94E4-522758FE8556}\RP132;Trojan.MulDrop.3338;Deleted.;
A0031354.exe;C:\System Volume Information\_restore{C39AFE3C-AFF7-4A7E-94E4-522758FE8556}\RP132;Trojan.MulDrop.3338;Deleted.;
A0031355.exe;C:\System Volume Information\_restore{C39AFE3C-AFF7-4A7E-94E4-522758FE8556}\RP132;Trojan.MulDrop.3338;Deleted.;
A0031356.exe;C:\System Volume Information\_restore{C39AFE3C-AFF7-4A7E-94E4-522758FE8556}\RP132;Trojan.MulDrop.3338;Deleted.;
A0031357.exe;C:\System Volume Information\_restore{C39AFE3C-AFF7-4A7E-94E4-522758FE8556}\RP132;Trojan.MulDrop.3338;Deleted.;
A0031358.exe;C:\System Volume Information\_restore{C39AFE3C-AFF7-4A7E-94E4-522758FE8556}\RP132;Trojan.MulDrop.3338;Deleted.;
A0031359.exe;C:\System Volume Information\_restore{C39AFE3C-AFF7-4A7E-94E4-522758FE8556}\RP132;Trojan.MulDrop.3338;Deleted.;
A0031360.exe;C:\System Volume Information\_restore{C39AFE3C-AFF7-4A7E-94E4-522758FE8556}\RP132;Trojan.MulDrop.3338;Deleted.;
A0031361.exe;C:\System Volume Information\_restore{C39AFE3C-AFF7-4A7E-94E4-522758FE8556}\RP132;Trojan.MulDrop.3338;Deleted.;
A0031362.exe;C:\System Volume Information\_restore{C39AFE3C-AFF7-4A7E-94E4-522758FE8556}\RP132;Trojan.MulDrop.3338;Deleted.;
A0031363.exe;C:\System Volume Information\_restore{C39AFE3C-AFF7-4A7E-94E4-522758FE8556}\RP132;Trojan.MulDrop.3338;Deleted.;
A0031364.exe;C:\System Volume Information\_restore{C39AFE3C-AFF7-4A7E-94E4-522758FE8556}\RP132;Trojan.MulDrop.3338;Deleted.;
A0031365.exe;C:\System Volume Information\_restore{C39AFE3C-AFF7-4A7E-94E4-522758FE8556}\RP132;Trojan.MulDrop.3338;Deleted.;
A0031366.exe;C:\System Volume Information\_restore{C39AFE3C-AFF7-4A7E-94E4-522758FE8556}\RP132;Trojan.MulDrop.3338;Deleted.;
A0031367.exe;C:\System Volume Information\_restore{C39AFE3C-AFF7-4A7E-94E4-522758FE8556}\RP132;Trojan.MulDrop.3338;Deleted.;
A0031368.exe;C:\System Volume Information\_restore{C39AFE3C-AFF7-4A7E-94E4-522758FE8556}\RP132;Trojan.MulDrop.3338;Deleted.;
A0031369.exe;C:\System Volume Information\_restore{C39AFE3C-AFF7-4A7E-94E4-522758FE8556}\RP132;Trojan.MulDrop.3338;Deleted.;
A0031370.exe;C:\System Volume Information\_restore{C39AFE3C-AFF7-4A7E-94E4-522758FE8556}\RP132;Trojan.MulDrop.3338;Deleted.;
A0031371.exe;C:\System Volume Information\_restore{C39AFE3C-AFF7-4A7E-94E4-522758FE8556}\RP132;Trojan.MulDrop.3338;Deleted.;
A0031372.exe;C:\System Volume Information\_restore{C39AFE3C-AFF7-4A7E-94E4-522758FE8556}\RP132;Trojan.MulDrop.3338;Deleted.;
A0020604.rbf;C:\System Volume Information\_restore{C39AFE3C-AFF7-4A7E-94E4-522758FE8556}\RP78;Win95.SK;Incurable.Moved.;
update.txt;C:\WINDOWS\bdonlinescan\Plugins;Modification of Win32.Rammstein.13346;Moved.;
kbdbene.exe;C:\WINDOWS\system32;Trojan.Popuper;Deleted.;
msjtes40.exe;C:\WINDOWS\system32;Trojan.Click.1703;Deleted.;
wiaservc.exe;C:\WINDOWS\system32;Trojan.DownLoader.9905;Deleted.;
wowfax.exe;C:\WINDOWS\system32;Trojan.Popuper;Deleted.;

Logfile of HijackThis v1.99.1
Scan saved at 15:33:31, on 7/01/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\SYSTEM32\SVCHOST.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Logitech\iTouch\iTouch.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Trend Micro\Internet Security 14\pccguide.exe
C:\Program Files\ScanSoft\OmniPageSE2.0\OpwareSE2.exe
C:\Program Files\Trust\MI-2510T Optical Combi Tilt Mouse\moffice.exe
C:\PROGRA~1\NOKIA\NOKIAP~1\LAUNCH~1.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Java\jre1.6.0\bin\jusched.exe
C:\Program Files\Trust\MI-2510T Optical Combi Tilt Mouse\MOUSE32A.DAT
C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\PROGRA~1\MUSICM~1\MUSICM~2\MMDiag.exe
C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe
C:\Program Files\ewido anti-spyware 4.0\guard.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Ulead Systems\Ulead Photo Express 3.0 SE\CalCheck.exe
C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mim.exe
C:\Program Files\VIA\RAID\raid_tool.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\PROGRA~1\TRENDM~1\INTERN~1\PCCTLCOM.EXE
C:\PROGRA~1\COMMON~1\Nokia\MPAPI\MPAPI3s.exe
C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
C:\WINDOWS\System32\svchost.exe
C:\PROGRA~1\TRENDM~1\INTERN~1\Tmntsrv.exe
C:\PROGRA~1\TRENDM~1\INTERN~1\TMPROXY.EXE
C:\WINDOWS\system32\UAService7.exe
C:\PROGRA~1\TRENDM~1\INTERN~1\TMPFW.EXE
C:\DOCUMENTS AND SETTINGS\PAUL YSEBAERT\LOCAL SETTINGS\APPLICATION DATA\SVCHOST.EXE
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe
C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE
C:\Program Files\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.telenet.be
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.be/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Telenet Internet
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigURL = http://pac.telenet.be:8080
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen
F2 - REGystem.ini: UserInit=C:\WINDOWS\System32\Userinit.exe
O2 - BHO: Antifraudewerkbalk van Trend Micro - {06647158-359E-4D10-A8DE-E6145DA90BE9} - C:\PROGRA~1\TRENDM~1\INTERN~1\PccIeBar.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0\bin\ssv.dll
O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\nl-be\msntb.dll
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\nl-be\msntb.dll
O3 - Toolbar: Antifraudewerkbalk van Trend Micro - {871F91FD-3A92-4988-A842-16AB2CFF5AF1} - C:\PROGRA~1\TRENDM~1\INTERN~1\PccIeBar.dll
O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
O4 - HKLM\..\Run: [Easy-PrintToolBox] C:\Program Files\Canon\Easy-PrintToolBox\BJPSMAIN.EXE /logon
O4 - HKLM\..\Run: [zBrowser Launcher] C:\Program Files\Logitech\iTouch\iTouch.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [pccguide.exe] "C:\Program Files\Trend Micro\Internet Security 14\pccguide.exe"
O4 - HKLM\..\Run: [OpwareSE2] "C:\Program Files\ScanSoft\OmniPageSE2.0\OpwareSE2.exe"
O4 - HKLM\..\Run: [MimBoot] C:\PROGRA~1\MUSICM~1\MUSICM~2\mimboot.exe
O4 - HKLM\..\Run: [FLMOFFICE4DMOUSE] C:\Program Files\Trust\MI-2510T Optical Combi Tilt Mouse\moffice.exe
O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE -startup
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [MShelp1] "C:\Program Files\MSN Messenger\svchost.exe"
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0\bin\jusched.exe"
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [RealPlayer] "C:\Program Files\Real\RealPlayer\realplay.exe" /RunUPGToolCommandReBoot
O4 - HKCU\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog
O4 - Startup: Xfire.lnk = C:\Program Files\Xfire\Xfire.exe
O4 - Global Startup: Adobe Reader Snelle start.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Ulead Photo Express 3.0 SE Calendar Checker.lnk = C:\Program Files\Ulead Systems\Ulead Photo Express 3.0 SE\CalCheck.exe
O4 - Global Startup: VIA RAID TOOL.lnk = C:\Program Files\VIA\RAID\raid_tool.exe
O8 - Extra context menu item: &Google Search - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: Backward Links - res://C:\Program Files\Google\GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://C:\Program Files\Google\GoogleToolbar1.dll/cmcache.html
O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Easy-WebPrint Add To Print List - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html
O8 - Extra context menu item: Easy-WebPrint High Speed Print - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html
O8 - Extra context menu item: Easy-WebPrint Preview - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html
O8 - Extra context menu item: Easy-WebPrint Print - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Print.html
O8 - Extra context menu item: Similar Pages - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsimilar.html
O8 - Extra context menu item: Translate into English - res://C:\Program Files\Google\GoogleToolbar1.dll/cmtrans.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0\bin\ssv.dll
O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INETREPL.DLL
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INETREPL.DLL
O9 - Extra 'Tools' menuitem: Create Mobile Favorite... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INETREPL.DLL
O9 - Extra button: Onderzoek - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {04E214E5-63AF-4236-83C6-A7ADCBF9BD02} (HouseCall Control) - http://housecall60.trendmicro.com/housecall/xscan60.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {31B7EB4E-8B4B-11D1-A789-00A0CC6651A8} (Cult3D ActiveX Player) - http://www.cult3d.com/download/cult.cab
O16 - DPF: {39B0684F-D7BF-4743-B050-FDC3F48F7E3B} (FilePlanet Download Control Class) - http://www.fileplanet.com/fpdlmgr/cabs/FPDC_1_0_0_44.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1120240216328
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
O16 - DPF: {6A060448-60F9-11D5-A6CD-0002B31F7455} (ExentInf Class) - http://exent.planet.nl/AoDSite/classes/ExentCtl.ocx
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1136384588343
O16 - DPF: {6E5A37BF-FD42-463A-877C-4EB7002E68AE} (Housecall ActiveX 6.5) - http://eu-housecall.trendmicro-europe.com/housecall/applet/html/native/x86/win32/activex/hcImpl.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Besturing) - http://a840.g.akamai.net/7/840/537/2005111401/housecall.trendmicro.com/housecall/xscan53.cab
O16 - DPF: {80DD2229-B8E4-4C77-B72F-F22972D723EA} (AvxScanOnline Control) - http://www.bitdefender.com/scan/Msie/bitdefender.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O16 - DPF: {B49C4597-8721-4789-9250-315DFBD9F525} (IWinAmpActiveX Class) - http://cdn.digitalcity.com/radio/ampx/ampx2.6.1.11_en_dl.cab
O16 - DPF: {BB21F850-63F4-4EC9-BF9D-565BD30C9AE9} (ASquaredScanForm Element) - http://www.windowsecurity.com/trojanscan/axscan.cab
O16 - DPF: {D1E7CBDA-E60E-4970-A01C-37301EF7BF98} (Measurement Services Client v.3.7) - http://gameadvisor.futuremark.com/global/msc37.cab
O16 - DPF: {EF0DBA6F-43CE-4B26-9808-2AB38FA0DB29} (MSN Money Ticker) - http://fdl.msn.com/public/investor/v13/ticker.cab
O16 - DPF: {FE0BD779-44EE-4A4B-AA2E-743C63F2E5E6} (IWinAmpActiveX Class) - http://pdl.stream.aol.com/downloads/aol/unagi/ampx_en_dl.cab
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - AppInit_DLLs:
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: ewido anti-spyware 4.0 guard - Anti-Malware Development a.s. - C:\Program Files\ewido anti-spyware 4.0\guard.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: Trend Micro Central Control Component (PcCtlCom) - Trend Micro Incorporated. - C:\PROGRA~1\TRENDM~1\INTERN~1\PcCtlCom.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\Sptisrv.exe
O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
O23 - Service: Trend Micro Real-time Service (Tmntsrv) - Trend Micro Incorporated. - C:\PROGRA~1\TRENDM~1\INTERN~1\Tmntsrv.exe
O23 - Service: Trend Micro Personal Firewall (TmPfw) - Trend Micro Inc. - C:\PROGRA~1\TRENDM~1\INTERN~1\TmPfw.exe
O23 - Service: Trend Micro Proxy Service (tmproxy) - Trend Micro Inc. - C:\PROGRA~1\TRENDM~1\INTERN~1\tmproxy.exe
O23 - Service: SecuROM User Access Service (V7) (UserAccess7) - Sony DADC Austria AG. - C:\WINDOWS\system32\UAService7.exe

Krijg je nog altijd de virusmeldingen?

neen, ik krijg geen virusmelding meer

Nog een paar tips om problemen te voorkomen in de toekomst:

Installeer alvast volgende GRATIS programmatjes indien je ze nog niet hebt:

Spywareblaster
Adaware se
Spybot s&d


Tijdens het surfen, klik niet overal klakkeloos op ja als je dit gevraagd wordt... doe dit enkel wanneer je het volledig vertrouwt.

En kies eventueel een alternatieve browser zoals Opera of Firefox.

En ik raad je ook aan om af en toe een online virusscan uit te voeren. housecall en/of Bitdefender. Want, wat de ene scanner niet kan vinden, kan een andere misschien wel.
Zorg er ook voor dat je virusscanner die op je systeem geïnstalleerd is altijd up to date is!!

En... geregeld eens een bezoekje brengen aan: http://windowsupdate.microsoft.com/

Bekijk ook eens deze 2 filmpjes.. Heel interessant:
http://www2.trosradar.nl/mediaplayer/player.php?videoID=524&mode=dossier#
http://www.benedelman.org/spyware/security-111804.wmv


Meer preventietips zijn ook op volgende sites te vinden:

http://www.bluemedicine.be
http://users.telenet.be/marcvn/spyware
How did I get infected in the first place (article by TonyKlein)
Het voorkomen van spyware-infecties en browserhijacking