ordinateur infecté Résolu

Question

Bonjour,
j ai besoin d aide pour depanner quelqu un qui a un virus sur son ordi
Un virus apparement connu,il s agit de vundo (c:windows/system32/dayevino.dll)
la connexion internet foire aussi desormais
je voudrais savoir dans quel ordre je dois faire les choses car je l ai deja fait chez moi une fois aidé des forums de ccm
jme rappelle de hijackthis,rsit,malwarebytes ou combo fox mais je sais plus quel ordre c est
jvais devoir faire avec ma clef usb et me deplacer a partir de demain donc voila
merci de votre attention et votre aide

verni29 · Answer

Bonsoir, 

C'est sans doute une infection vundo et peut-être plus.

Pour plus d'infos :

Télécharge Random's System Information Tool (RSIT) de random/random et enregistre le sur ton Bureau. 
http://images.malwareremoval.com/random/RSIT.exe 

# Double-clique sur " RSIT.exe " pour le lancer . 
( Si sous Vista : Click droit sur le fichier et choisir exécuter en tant qu'administrateur )
# dans la fenêtre qui va s’ouvrir choisis  1 month pour l'option "List files/folders created ...". 
# clique ensuite sur " Continue " pour lancer l'analyse ... 

Si la dernière version de HijackThis n'est pas trouvée sur ton PC, RSIT la téléchargera et te demandera d'accepter la licence. 

Attends jusqu’à la fin de l’analyse. deux rapports vont être crées. 

# Poste en deux messages le contenu de " log.txt ", et de " info.txt " ( dans la barre des tâches).

Note : Si tu ne les trouves pas,les rapports sont sauvegardés dans le dossier  C:\rsit.

A+

lorenzodu01 · Answer

merci pour cette rapidite je fais ca vite et je posterais ici des que je le pourrais
merci a+

lorenzodu01 · Answer

bon bein apparement c plus complexe que prevu.....
deja pas moyen de se connecter au net 
et meme rien moyen de faire du tout
5 bonnes minutes pour juste detecter ma clef usb
j ai voulu redemarrer mais ca a mi 15 minutes pour s eteindre en affichant pleins de message de programmes qui ne repondent plus "terminer maintenant ou annuler"
voici la liste des prog qui foirent:
Q+player tray icon
run dll
ccApp
antivirus plusregistration
iexplorer
office watson
windowss internet explorer
ctfmon.exe
puis message qui apparait "...n a pas demarre ZPN500dll introuvable et la plus rien reponds

quand ma clef a ete detectee j ai voulu ouvrir rsit et la..bug general carepond plus et ainsi de suite jusqu au message auto it error
bref pas moyen d ouvrir rsit
j ai deconnecte les connexions internet mais ca change rien
donc voila le souci a cette heure


jprecise quecest sous viista donc je sais pas si c un probleme de compatibilite car je sais pas si c est le meme

verni29 · Answer

Re, 

Tu as une infection par un faux antivirus , Antivirus Plus.
Cela se complique, en effet.

Tu communiques sans doute d'un autre PC.

Fais ceci :

Redémarre en mode sans échec avec prise en charge réseau.
Au redémarrage, tapote sur la touche F5 ou F8.
Essaie de te connecter au net.

Si oui, 

Télécharge Malwarebytes 
( Si il est déjà installé sur le PC, mets le à jour avant de le lancer ).

Tu télécharges MalwareBytes. 
http://www.malwarebytes.org/mbam/program/mbam-setup.exe 

Tu l'installes. Choisis les options par défaut. 
# A la fin de l’installation, il te sera demandé de mettre à jour MalwareBytes et de l’éxecuter .
# Accepte. Après la, mise à jour, le logiciel va s’ouvrir. 

# Dans l’onglet Recherche, sélectionne Exécuter un examen complet. 
# Clique sur recherche. Tu ne sélectionnes que les disques durs de l’ordinateur. 
# Clique sur lancer l’examen. 

# A la fin de la recherche, comme il est demandé, clique sur afficher les résultats.
# Si des infections sont trouvées, clique sur Supprimer la sélection. 
Tu postes le rapport dans ton prochain message.

Si tu ne retrouves pas le rapport, ouvre MalwareBytes et regarde dans l’onglet  Rapport/logs. Il y est. Clique dessus et choisir ouvrir. 

A+

lorenzodu01 · Answer

re 
bon ben je rentre a peine jvais aller voir apres
mais c est bizarre ton mess est ecrit a 19h33 mais je vien juste de le recevoir
la je suis sur mon ordi perso et j ai telecharge malware depuis ici et je vais l amener par clef usb c bon?
je sais que hier c etait impossible d aller sur le net jespere que je pourrais cette fois

a+ merci

verni29 · Answer

Re,

Essaie de te connecter en mode sans échec avec prise en charge réseau.
Tu auras peut être accès au net sous ce mode.

A+

Miss-Coquine · Answer

aaaaaaaaaaaaaaaaaaaaaaaah me touche pas xD

lorenzodu01 · Answer

voila alors la suite du probleme
j ai reussi a ma connecter au net en mode sans echec
mais impossible d executer malaware
ca me met 
create process a echoue code 5
create process a echoue code 2

ca c eatit pour celui que j ai telecharger par rapport a ton lien
pour celui que j avais mis sur ma clef ca s installe mais des qu il s ouvre dans le menu principal ,ca coupe tout et ca cherche dans mes dossiers le programme sans le trouver

verni29 · Answer

OK, 

Télécharge ceci.
http://mbam.malwarebytes.org/program/random.php
C'est le fichier mbam.exe mais genéré avec un nom aléatoire qui devrait tromper le vrius.

Enregistre-le sur ton bureau puis copie le dans C:\program files\Malwarebytes' Anti-Malware\
Double-clique dessus pour lancer malwarebytes.

A+

lorenzodu01 · Answer

c parti l analyse   deja 15 infections en 45s

verni29 · Answer

Regarde le post 4 pour supprimer les détections à la fin du scan.

Ensuite, dans l'onglet quarantaine, supprime tous les fichiers trouvés.

A+

lorenzodu01 · Answer

j arrive vers les 1000 fichiers  infectes et j ai pas encore fini le disque C
jdois tous les supprimer apres ou pas?sinon jte passe le rapport et apres seulement je supprime ca se trouve y en a qui faut pas supprimer

verni29 · Answer

Oui, 

passe moi le rapport et après on avisera.
Attention, le message ne veur pas dire 1000 fichiers. Il y a des clés de la base de registre, des valeurs de clés, ....

A+

lorenzodu01 · Answer

voila c fini
voici le rapport il est enorme:



Malwarebytes' Anti-Malware 1.41
Version de la base de données: 3237
Windows 5.1.2600 Service Pack 2 (Safe Mode)

26/11/2009 17:43:06
mbam-log-2009-11-26 (17-43-05).txt

Type de recherche: Examen complet (C:\|D:\|)
Eléments examinés: 264457
Temps écoulé: 39 minute(s), 12 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 3
Clé(s) du Registre infectée(s): 3
Valeur(s) du Registre infectée(s): 6
Elément(s) de données du Registre infecté(s): 5
Dossier(s) infecté(s): 4
Fichier(s) infecté(s): 910

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
C:\WINDOWS\system32\movezisa.dll (Trojan.Vundo) -> Delete on reboot.
c:\WINDOWS\system32\dayevino.dll (Trojan.Vundo.H) -> Delete on reboot.
C:\WINDOWS\system32\lewiyidi.dll (Trojan.Vundo) -> Delete on reboot.

Clé(s) du Registre infectée(s):
HKEY_CLASSES_ROOT\CLSID\{c215d289-479f-48d0-bb0f-1211c85effe3} (Trojan.Vundo.H) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{c2b5aab8-2183-4be7-81a6-f11493c45872} (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{c2b5aab8-2183-4be7-81a6-f11493c45872} (Trojan.FakeAlert) -> Quarantined and deleted successfully.

Valeur(s) du Registre infectée(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\midiyuyos (Trojan.Vundo.H) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\{c215d289-479f-48d0-bb0f-1211c85effe3} (Trojan.Vundo.H) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\madapilil (Trojan.Vundo.H) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\AntiVirus Plus (Rogue.Antivirus Plus) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run	er8m (Trojan.Agent) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\22410211 (Rogue.Multiple) -> Quarantined and deleted successfully.

Elément(s) de données du Registre infecté(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\AppInit_DLLs (Trojan.Vundo.H) -> Data: c:\windows\system32\dayevino.dll -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\AppInit_DLLs (Trojan.Vundo.H) -> Data: system32\dayevino.dll -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\AntiVirusDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\FirewallDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\UpdatesDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.

Dossier(s) infecté(s):
C:\Documents and Settings\All Users\Application Data\22410211 (Rogue.Multiple) -> Quarantined and deleted successfully.
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\AntiVirus Plus (Rogue.AntiVirusPlus) -> Quarantined and deleted successfully.
C:\Documents and Settings\Compaq_Propriétaire\Menu Démarrer\Programmes\AntiVirus Plus (Rogue.AntiVirusPlus) -> Quarantined and deleted successfully.
C:\Documents and Settings\Compaq_Propriétaire\Application Data\AntiVirus Plus (Rogue.AntiVirusPlus) -> Quarantined and deleted successfully.

Fichier(s) infecté(s):
c:\WINDOWS\system32\dayevino.dll (Trojan.Vundo.H) -> Delete on reboot.
C:\WINDOWS\system32\movezisa.dll (Trojan.Vundo) -> Delete on reboot.
C:\WINDOWS\system32\lewiyidi.dll (Trojan.Vundo) -> Delete on reboot.
C:\Documents and Settings\Compaq_Propriétaire\Application Data\AntiVirus Plus\AntiVirus Plus.70367224.dll (Trojan.FakeAlert) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP190\A0048970.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP190\A0048971.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP190\A0048972.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP190\A0048973.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP190\A0048974.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP190\A0048975.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP190\A0048976.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP190\A0048977.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP190\A0048978.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP190\A0048979.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP190\A0048980.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP190\A0048981.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP190\A0048982.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP190\A0048983.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP190\A0048984.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP190\A0048985.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP190\A0048986.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP190\A0048987.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP190\A0048988.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP190\A0048989.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP190\A0048990.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP190\A0048991.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP190\A0048992.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP190\A0048993.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP190\A0048994.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP190\A0048995.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP190\A0048996.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP190\A0048997.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP190\A0049016.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP190\A0049017.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP190\A0049018.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP190\A0049019.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP190\A0049020.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP190\A0049021.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP190\A0049022.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP190\A0049023.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP190\A0049024.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP190\A0049025.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP190\A0049026.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP190\A0049027.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP190\A0049028.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP190\A0049029.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP190\A0049030.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP190\A0049031.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP190\A0049032.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP190\A0049033.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP190\A0049034.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP190\A0049035.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP190\A0049036.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP190\A0049037.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP190\A0049038.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP190\A0049039.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP190\A0049040.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP190\A0049041.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP190\A0049042.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP190\A0049043.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP190\A0050028.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP190\A0050029.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP190\A0050030.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP190\A0050031.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP190\A0050032.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP190\A0050033.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP190\A0050034.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP190\A0050035.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP190\A0050036.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP190\A0050037.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP190\A0050038.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP190\A0050039.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP190\A0050040.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP190\A0050041.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP190\A0050042.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP190\A0050043.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP190\A0050044.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP190\A0050045.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP190\A0050046.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP190\A0050047.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP190\A0050048.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP190\A0050049.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP190\A0050050.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP190\A0050051.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP190\A0050052.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP190\A0050053.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP190\A0050054.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP190\A0050055.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP191\A0050056.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP191\A0050057.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP191\A0050058.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP191\A0050059.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP191\A0050060.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP191\A0050061.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP191\A0050062.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP191\A0050063.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP191\A0050064.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP191\A0050065.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP191\A0050066.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP191\A0050067.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP191\A0050068.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP191\A0050069.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP191\A0050070.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP191\A0050071.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP191\A0050072.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP191\A0050073.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP191\A0050074.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP191\A0050075.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP191\A0050076.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP191\A0050077.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP191\A0050078.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP191\A0050079.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP191\A0050080.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP191\A0050081.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP191\A0050082.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP191\A0050083.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP191\A0051048.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP191\A0051049.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP191\A0051050.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP191\A0051051.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP191\A0051052.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP191\A0051053.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP191\A0051054.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP191\A0051055.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP191\A0051056.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP191\A0051057.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP191\A0051058.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP191\A0051059.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP191\A0051060.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP191\A0051061.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP191\A0051062.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP191\A0051063.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP191\A0051064.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP191\A0051065.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP191\A0051066.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP191\A0051067.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP191\A0051068.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP191\A0051069.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP191\A0051070.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP191\A0051071.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP191\A0051072.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP191\A0051073.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP191\A0051074.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP191\A0051075.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP191\A0051097.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP191\A0051098.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP191\A0051099.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP191\A0051100.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP191\A0051101.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP191\A0051102.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP191\A0051103.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP191\A0051104.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP191\A0051105.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP191\A0051106.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP191\A0051107.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP191\A0051108.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP191\A0051109.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP191\A0051110.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP191\A0051111.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP191\A0051112.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP191\A0051113.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP191\A0051114.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP191\A0051115.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP191\A0051116.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP191\A0051117.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP191\A0051118.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP191\A0051119.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP191\A0051120.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP191\A0051121.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP191\A0051122.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP191\A0051123.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP191\A0051124.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP192\A0051141.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP192\A0051142.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP192\A0051143.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP192\A0051144.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP192\A0051145.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP192\A0051146.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP192\A0051147.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP192\A0051148.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP192\A0051149.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP192\A0051150.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP192\A0051151.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP192\A0051152.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP192\A0051153.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP192\A0051154.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP192\A0051155.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP192\A0051156.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP192\A0051157.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP192\A0051158.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP192\A0051159.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP192\A0051160.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP192\A0051161.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP192\A0051162.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP192\A0051163.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP192\A0051164.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP192\A0051165.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP192\A0051166.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP192\A0051167.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP192\A0051168.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP192\A0052126.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP192\A0052127.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP192\A0052128.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP192\A0052129.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP192\A0052130.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP192\A0052131.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP192\A0052132.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP192\A0052133.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP192\A0052134.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP192\A0052135.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP192\A0052136.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP192\A0052137.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP192\A0052138.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP192\A0052139.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP192\A0052140.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP192\A0052141.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP192\A0052142.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP192\A0052143.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP192\A0052144.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP192\A0052145.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP192\A0052146.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP192\A0052147.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP192\A0052148.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP192\A0052149.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP192\A0052150.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP192\A0052151.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP192\A0052152.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP192\A0052153.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP194\A0052266.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP194\A0052267.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP194\A0052268.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP194\A0052269.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP194\A0052270.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP194\A0052271.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP194\A0052272.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP194\A0052273.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP194\A0052274.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP194\A0052275.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP194\A0052276.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP194\A0052277.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP194\A0052278.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP194\A0052279.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP194\A0052280.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP194\A0052281.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP194\A0052282.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP194\A0052283.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP194\A0052284.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP194\A0052285.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP194\A0052286.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP194\A0052287.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP194\A0052288.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP194\A0052289.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP194\A0052290.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP194\A0052291.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP194\A0052292.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP194\A0052293.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP194\A0052309.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP194\A0052310.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP194\A0052311.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP194\A0052312.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP194\A0052313.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP194\A0052314.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP194\A0052315.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP194\A0052316.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP194\A0052317.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP194\A0052318.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP194\A0052319.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP194\A0052320.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP194\A0052321.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP194\A0052322.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP194\A0052323.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP194\A0052324.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP194\A0052325.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP194\A0052326.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP194\A0052327.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP194\A0052328.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP194\A0052329.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP194\A0052330.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP194\A0052331.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP194\A0052332.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP194\A0052333.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP194\A0052334.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP194\A0052335.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP194\A0052336.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP195\A0052339.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP195\A0052340.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP195\A0052341.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP195\A0052342.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP195\A0052343.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP195\A0052344.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP195\A0052345.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP195\A0052346.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP195\A0052347.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP195\A0052348.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP195\A0052349.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP195\A0052350.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP195\A0052351.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP195\A0052352.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP195\A0052353.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP195\A0052354.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP195\A0052355.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP195\A0052356.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP195\A0052357.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP195\A0052358.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP195\A0052359.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP195\A0052360.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP195\A0052361.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP195\A0052362.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP195\A0052363.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP195\A0052364.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP195\A0052365.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP195\A0052366.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP196\A0052381.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP196\A0052382.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP196\A0052383.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP196\A0052384.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP196\A0052385.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP196\A0052386.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP196\A0052387.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP196\A0052388.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP196\A0052389.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP196\A0052390.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP196\A0052391.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP196\A0052392.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP196\A0052393.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP196\A0052394.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP196\A0052395.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP196\A0052396.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP196\A0052397.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP196\A0052398.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP196\A0052399.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP196\A0052400.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP196\A0052401.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP196\A0052402.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP196\A0052403.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP196\A0052404.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP196\A0052405.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP196\A0052406.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP196\A0052407.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP196\A0052408.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP197\A0052421.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP197\A0052422.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP197\A0052423.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP197\A0052424.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP197\A0052426.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP197\A0052427.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP197\A0052428.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP197\A0052429.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP197\A0052430.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP197\A0052431.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP197\A0052432.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP197\A0052433.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP197\A0052434.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP197\A0052435.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP197\A0052436.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP197\A0052437.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP197\A0052438.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP197\A0052439.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP197\A0052440.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP197\A0052441.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP197\A0052442.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP197\A0052443.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP197\A0052444.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP197\A0052445.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP197\A0052446.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP197\A0052447.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP197\A0052448.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP197\A0052449.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP197\A0052488.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP197\A0052489.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP197\A0052490.exe (Trojan.Downloader) ->

lorenzodu01 · Answer

a la fin message disant 3 elements insupprimables
windows/systme32/dayevino.dll
                            movezisa.dll
                            lewiyidi.dll
j ai ete invite a redemarre ,ce que j ai fais toujours en mode sans echec 
voila

verni29 · Answer

Bon, 

En fait, sur le 910 fichiers, c'est principalement des fichiers de la retauration système qui sont touchés.
par exemple :
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP197\A0052490.exe (Trojan.Downloader) 
Ce qui veut dire que ta restauration système est inutilisable et sera à nettoyer . On verra cela plus tard.

J'aimerais avoir le rapport complet.
Va sur le site de http://cijoint.fr pour y déposer le rapport.
Tu m'indiqueras le lien crée.

Est-ce que tu as réussi à retourner sous windows et à te connecter au net ?

A+

verni29 · Answer

Bon, 

En fait, sur le 910 fichiers, c'est principalement des fichiers de la retauration système qui sont touchés.
par exemple :
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP197\A0052490.exe (Trojan.Downloader) 
Ce qui veut dire que ta restauration système est inutilisable et sera à nettoyer . On verra cela plus tard.

J'aimerais avoir le rapport complet.
Va sur le site de http://cijoint.fr pour y déposer le rapport.
Tu m'indiqueras le lien crée.

Est-ce que tu as réussi à retourner sous windows et à te connecter au net ?

A+

verni29 · Answer

Bon, 

En fait, sur le 910 fichiers, c'est principalement des fichiers de la retauration système qui sont touchés.
par exemple :
C:\System Volume Information\_restore{D7AEF27E-251E-434F-8471-67CC925E0801}\RP197\A0052490.exe (Trojan.Downloader) 
Ce qui veut dire que ta restauration système est inutilisable et sera à nettoyer . On verra cela plus tard.

J'aimerais avoir le rapport complet.
Va sur le site de http://cijoint.fr pour y déposer le rapport.
Tu m'indiqueras le lien crée.

Est-ce que tu as réussi à retourner sous windows et à te connecter au net ?

A+

verni29 · Answer

Bon, 

Sur les 910 fichiers trouvés, La très grande majorité concerne la restauration système.
A nettoyer. On verra cela plus tard.

J'aimerais voir le rapport entier.
Utilise le site http://cijoint.fr pour le déposer et indique moi le lien crée.

As-tu essayé de revenir sous windows et de te connecter au net.

A+

lorenzodu01 · Answer

c le site qui bug!!??
il veut pas m identifier et dit que je ne fais pas partie du site
puis il me dit que la discussion a disparue ou quetu as repondu mais jevois rien depuisque j ai poste a 17h51
bizarre

lorenzodu01 · Answer

il etait pas complet la?
bon ben j y retourne jcroyais que c etait son ordi qui bugait mais au fait c pareil ici
j ai ressaye de me remettre en mode "normal" mais rien n a change

verni29 · Answer

Ok, 

En effet, le site bugue. Sois patient.

Je ne comprends pas bien ta réponse :
j ai ressaye de me remettre en mode "normal" mais rien n a change
Cela veut-il dire que sous windows tu as toujours le même problème ( message , connexion au net ).

1/ Poste le rapport de malwarebytes via le site indiqué

2/ Télécharge Random's System Information Tool (RSIT) de random/random et enregistre le sur ton Bureau. 
http://images.malwareremoval.com/random/RSIT.exe 

# Double-clique sur " RSIT.exe " pour le lancer . 
( Si sous Vista : Click droit sur le fichier et choisir exécuter en tant qu'administrateur )
# dans la fenêtre qui va s’ouvrir choisis  1 month pour l'option "List files/folders created ...". 
# clique ensuite sur " Continue " pour lancer l'analyse ... 

Si la dernière version de HijackThis n'est pas trouvée sur ton PC, RSIT la téléchargera et te demandera d'accepter la licence. 

Attends jusqu’à la fin de l’analyse. deux rapports vont être crées. 

# Poste en deux messages le contenu de " log.txt ", et de " info.txt " ( dans la barre des tâches).

Note : Si tu ne les trouves pas,les rapports sont sauvegardés dans le dossier  C:\rsit.

A+

lorenzodu01 · Answer

quand je dis en mode normal c est a dire pas en mode sans echec ,un redemarrage normal 
ca met comme avant (zpn500dll introuvable   puis dll error)
voici le lien
http://www.cijoint.fr/cjlink.php?file=cj200911/cijTDpRNeI.txt

lorenzodu01 · Answer

Logfile of random's system information tool 1.06 (written by random/random)
Run by Administrateur at 2009-11-26 18:47:41
Microsoft Windows XP Édition familiale Service Pack 2
System drive C: has 61 GB (41%) free of 148 GB
Total RAM: 511 MB (58% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 18:48:01, on 26/11/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Safe mode with network support

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\Administrateur\Bureau\RSIT.exe
C:\Program Files	rend micro\Administrateur.exe

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = search.net-studio.org
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Web assistant - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} - c:\Program Files\Fichiers communs\Symantec Shared\AdBlocking\NISShExt.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.2.4204.1700\swg.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - c:\Program Files\Norton AntiVirus\NavShExt.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_B7C5AC242193BB3E.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - c:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O4 - HKLM\..\Run: [ccApp] "c:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Malwarebytes Anti-Malware (reboot)] "C:\Program Files\Malwarebytes' Anti-Malware\C1X55suMH.exe" /runcleanupscript
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [AntiVirus Plus] "C:\WINDOWS\system32undll32.exe" "C:\Documents and Settings\Compaq_Propriétaire\Application Data\AntiVirus Plus\AntiVirus Plus.70367224.dll", start 70367224 (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [AntiVirus Plus] "C:\WINDOWS\system32undll32.exe" "C:\Documents and Settings\Compaq_Propriétaire\Application Data\AntiVirus Plus\AntiVirus Plus.70367224.dll", start 70367224 (User 'Default user')
O4 - Global Startup: Utilitaire réseau pour SAGEM Wi-Fi 11g USB adapter.lnk = ?
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: CabBuilder - http://kiw.imgag.com/imgag/kiw/toolbar/download/InstallerControl.cab
O16 - DPF: {BD8667B7-38D8-4C77-B580-18C3E146372C} (Creative Toolbox Plug-in) - http://kiw.imgag.com/imgag/cp/install/crusher-kiwen.cab
O16 - DPF: {CF40ACC5-E1BB-4AFF-AC72-04C2F616BCA7} (get_atlcom Class) - http://wwwimages.adobe.com/www.adobe.com/products/acrobat/nos/gp.cab
O16 - DPF: {D0C0F75C-683A-4390-A791-1ACFD5599AB8} (Oberon Flash Game Host) - http://jeuxmultijoueurs.orange.fr/Gameshell/GameHost/1.0/OberonGameHost.cab
O20 - AppInit_DLLs: movezisa.dll c:\windows\system32\maguhugi.dll
O21 - SSODL: wejogebiv - {0635f3b9-e06c-4933-8e74-53a649aeee3f} - c:\windows\system32\maguhugi.dll (file missing)
O22 - SharedTaskScheduler: mujuzedij - {0635f3b9-e06c-4933-8e74-53a649aeee3f} - c:\windows\system32\maguhugi.dll (file missing)
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\ccProxy.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom SA - C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
O23 - Service: getPlus(R) Helper - NOS Microsystems Ltd. - C:\Program Files\NOS\bin\getPlus_HelperSvc.exe
O23 - Service: Service Google Update (gupdate1c9da1047f8ddd6) (gupdate1c9da1047f8ddd6) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~2.EXE
O23 - Service: Service Norton AntiVirus Auto-Protect (navapsvc) - Symantec Corporation - c:\Program Files\Norton AntiVirus
avapsvc.exe
O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Program Files\Fichiers communs\Nero\Nero BackItUp 4\NBService.exe
O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - c:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
O23 - Service: Planificateur LiveUpdate automatique - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: SAVScan - Symantec Corporation - c:\Program Files\Norton AntiVirus\SAVScan.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\Security Center\SymWSC.exe

verni29 · Answer

Ok, 

Tu es certain de l'orthographe du fichier .dll ?
C'est important pour savoir si il est possible de la remplacer ou si c'est un élément infectieux à nettoyer.

Et après le message, as-tu essayé de te connecter au net ?
remarques-tu d'autres symptomes ?

Passe au rapport RSIT.

A+

lorenzodu01 · Answer

voila j ai envoye les deux rapports rsit log et info    je vais essayer de redemarer normalement voir ce que ca donne

lorenzodu01 · Answer

bon ben j ai essaye de redemarrer et voila les symptomes que j ai pu observes:
a l allumage deja le ventillo s emballe grave
ca m a demande d executer antimalware bytes,le fichier c1x555.. celui que tu m a envoye en supplement
j attends 20 secondes et la mesage wlanutl.exe:
"cette aplication n a pas pa demarrer car ZPDN50.dll est introuvable "
je met ok
j essaie d ouvrir iexplorer et la message rundll :
"erreur de chargement de C:doc/compaq proprietaire/application data/antivirus+.70367224.dll"module introuvable
je clique sur ok et la c la fin   plus rien ne reponds meme en etant patient      le ventillo s emballe et tous mes programmes defilent en erreur avec message terminer maintanant"
voila

lorenzodu01 · Answer

rapport rsit


http://www.cijoint.fr/cjlink.php?file=cj200911/cijEY3Gi1o.txt

lorenzodu01 · Answer

bon ben la je vais retourner chez moi je reviendrais chez eux demain donc tu peux m indiquer la future etape comme ca je pourrais faire ca tranquille si tu veux 
merci :)

verni29 · Answer

Ok, 

désolè pour le test mais je voulais savoir le nom de fichier .dll.
Le PC est encore bien infecté.

En mode sans echec avec prise en charge réseau :

Tu vas télécharger ComBoFix et enregistre le sur ton bureau ( important pour la suite )
http://download.bleepingcomputer.com/sUBs/ComboFix.exe

# Désactive les protections résidentes de ton ordinateur ( antivirus, antispyware et parefeu )
# Branche tes différents supports amovibles ( clés USB, disque dur externe ) sans les ouvrir.

# Lance Combofix.exe et suis les invites.
# Il te sera demandé d’installer la console de récupération.
Important. Fais le absolument.

Il est possible que ComBoFix redémarre l’ordinateur pour supprimer certains fichiers. 

# Une fois le scan fini, un rapport va apparaitre.

Copie/colle ce rapport dans ta prochaine réponse.

Note : Si tu ne le trouves pas, il est à C:\ComboFix.txt.

A+

lorenzodu01 · Answer

ok demain jmoccupe de ca mais comment je desactive les protections?
si dans la barre d outils pour norton ca suffit pour norton?
pour le pare feu jefais connections dansdemarrer puis proprietes puis avance et je desactive de la c est ca?
et pour le reste?

verni29 · Answer

Re, 

En mode sans échec, sont lancés le minimum de logiciels.
Donc, tes protections seront désactivées.

Je n'y avais pas pensé mais essaie de limiter les risques de réinfection en ne te connectant que pour prendre connaissance des consignes.

Il reste encore des infections mais on a supprimé le plus gros.

A+

lorenzodu01 · Answer

slt
y a du nouveau
un informaticien est passé et il a pense que en reinstallant tout ca fonctionnerait
alors il a fait ca en faisant f12 il a tout remis a neuf et internet marche desormais meme sans etre en mode sans echec
mais ce que je trouve bizarre c est que le message apparait toujours au demarrage" cette aplication n a pas pa demarrer car ZPDN50.dll est introuvable"
donc je sais pas ce que tu en penses,si il a bien fait ou pas

verni29 · Answer

Re, 

Une réinstall sur une installation existante recrée un dossier Windows.0 ou écrase l'existant.
Cela a en partie régler le problème puisque la base de registre a été réécrite et donc les entrées infectieuses sont absentes.

Le problème est que les fichiers infectés sont toujours présents. 
Innofensifs ? certains oui et d'autres non.

Il faudrait déjà le vérifier puis les supprimer.

Pour le fichier ZDPN50.DLL, qu'en dit l'informaticien ? 
Il te fait faire une manip et après ? 
Je me renseigne.

1/ recommence la manip avec RSIT, stp.
Poste-le via http://cijoint.fr

2/ fais la manip suivante pour retrouver les infos sur ZDPN50.DLL

Télécharge OAD et enregistre le sur ton bureau
 http://sosvirus.changelog.fr/OAD.exe

• Double clique sur le OAD pour le lancer.
• dans la fenêtre qui va s'ouvrir, tape le nom de fichier à rechercher, puis valide par Entrée

Nom du fichier : ZDPN50.DLL

• Choisis le type de recherche : sélectionne l'option 6 puis valide par Entrée.

OAD va maintenant rechercher le fichier. Laisse le travailler jusqu'à ce qu'il en ai terminé.
Le rapport de recherche s'affichera automatiquement à dès qu'il en aura terminé.

Fais un copier / coller de ce rapport dans ton prochain post.

Note : Suivant la taille des disques dur cette recherche peut prendre plusieurs minutes. Sois patient(e)

A+

Utilisateur anonyme · Answer

Bonsoir,

Verni29, j'ai regarder son log MBAM, ==> "no action taken" --> faute d'innattention ? ou tactique :D ?

A +

verni29 · Answer

Salut, limon8

Citation :
Verni29, j'ai regarder son log MBAM, ==> "no action taken"

Je vois que tu poses une bonne question.

Regardons donc de plus près les rapports.
Pour suivre l'évolution de l'infection, compare les rapports MBAM puis le rapport RSIT qui suit ce rapport.

MBAM : 3 fichiers vraiment infectieux et chargés en mémoire.
Module(s) mémoire infecté(s):
C:\WINDOWS\system32\movezisa.dll (Trojan.Vundo) -> Delete on reboot.
c:\WINDOWS\system32\dayevino.dll (Trojan.Vundo.H) -> Delete on reboot.
C:\WINDOWS\system32\lewiyidi.dll (Trojan.Vundo) -> Delete on reboot. 

Ils ne se retrouvent plus dans les fichiers infectieux détectés par RSIT :
2009-11-25 11:53:30 ----AH---- C:\WINDOWS\system32\BITB.tmp
2009-11-25 11:53:29 ----AH---- C:\WINDOWS\system32\BITA.tmp
2009-11-25 11:52:10 ----AH---- C:\WINDOWS\system32\BIT9.tmp
2009-11-24 19:16:13 ----SH---- C:\WINDOWS\system32ugobiho.dll
2009-11-24 19:16:13 ----SH---- C:\WINDOWS\system32\bulimane.dll
2009-11-24 19:15:55 ----SH---- C:\WINDOWS\system32\dijuboru.dll
2009-11-22 12:40:29 ----SH---- C:\WINDOWS\system32\bulopazo.dll
2009-11-19 16:58:50 ----SH---- C:\WINDOWS\system32\kagavuva.dll
2009-11-19 16:55:43 ----A---- C:\WINDOWS\system32	dlcmd.dll
2009-11-14 08:40:31 ----SH---- C:\WINDOWS\system32	adagagu.dll
2009-11-14 08:40:31 ----SH---- C:\WINDOWS\system32\pafiloha.dll
2009-11-11 16:56:30 ----A---- C:\WINDOWS\system32\6134,149.exe 

de plus, MBAM donnait des indications sur des entrées de la base registre infectieuses :
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\midiyuyos 

Et RSIT ne donne plus cette valeur :
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"ccApp"=c:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe [2007-02-21 58984]
"QuickTime Task"=C:\Program Files\QuickTime\qttask.exe [2009-05-26 413696]
"Malwarebytes Anti-Malware (reboot)"=C:\Program Files\Malwarebytes' Anti-Malware\C1X55suMH.exe [2009-11-26 1312080] 

Oui, il y a bien supprimé les infections avec MBAM.

L'infection Vundo crée bien souvent beaucoup de fichiers. MBAM ne les a pas tous supprimés.
Comme je le dis à Lorenzodu01, il faut les supprimer.

@+

Utilisateur anonyme · Answer

Bonjour,

Je te remercie des explications verni29, ca fait plaisir :).


Bonne continuation.

lorenzodu01 · Answer

ahah!
desole pour l absence mais j etais de nuit et j ai fait des horaires de fou cette semaine(12h22h)et eux bossent  tte la journee donc  je m en suis pas trop preoccupe
desole
combofix c est pour les dd externes c ca?mais elle en a jamais eu donc je sais pas si ca sert
jviens d aller voir vite fait chez eux aujour dhui et ya des nouveaux soucis
l informaticien mavait dit que le Zp500 c etait pas grave mais maintenant plus moyen de se connecter a internet a cause de norton qui demande une clef d activation carrement inexistante sur les bons de commandes donc c bien la merde
pendant une semaine ca marchait bien apparement mais la avec le nouveau souci plus moyen d aller sur le net donc je vais naviguer un peu sur le net deja pour essayer de resoudre ce souci de renouvellement norton en priorite car je peux plus me connecter de chez moi non plus car je suis en wifi et quand il pleut ca marche pas :(
encore desole
a+

verni29 · Answer

Bonsoir, 

Il y avait aussi ceci dans les rapports précédents :
2009-11-19 16:55:43 ----A---- C:\WINDOWS\system32	dlcmd.dll 
Une infection qui peut être compliquée à enlever.

Je ne sais pas exactement ce qu'a fait l'informaticien.
F12 --> sorcément , c'est une réinstallation d'usine mais j'aimerais savoir.

Pour info, non Combofix, ce n'est pas pour uniquement les supports amovibles.
C'est un outil très puissant mais à ne pas utiliser sans recommandation et un suivi par quelqu'un connaissant cet outil.

Je ne garderais pas indéfiniment ce sujet dans mes suivis.
Il faudrait un rapport RSIT pour connaitre l'état du PC.

A+

Ordinateur infecté

39 réponses

Votre réponse

Newsletters