Bonjour petit probleme de virus ^^
Fermé
mach
-
25 oct. 2007 à 21:27
clownface Messages postés 1490 Date d'inscription mardi 28 août 2007 Statut Membre Dernière intervention 15 juin 2008 - 27 oct. 2007 à 23:54
clownface Messages postés 1490 Date d'inscription mardi 28 août 2007 Statut Membre Dernière intervention 15 juin 2008 - 27 oct. 2007 à 23:54
A voir également:
- Bonjour petit probleme de virus ^^
- Petit colis distribution - Forum Internet / Réseaux sociaux
- Petit 1 comme ² ✓ - Forum Windows
- Tinyurl virus - Forum Virus / Sécurité
- Svchost.exe virus - Guide
- Tlauncher virus ✓ - Forum Jeux vidéo
10 réponses
clownface
Messages postés
1490
Date d'inscription
mardi 28 août 2007
Statut
Membre
Dernière intervention
15 juin 2008
73
25 oct. 2007 à 21:40
25 oct. 2007 à 21:40
Bonsoir,
petit mais costaud...
problème n°1 tu n'as ni antivirus, ni parefeu sur ton poste !!!!
commences par installer ça : https://www.malekal.com/avira-free-security-antivirus-gratuit/
puis là tu trouveras des liens pour un parefeu : http://www.commentcamarche.net/faq/sujet 3486 securite le parefeu de windows xp
ensuite fais un scan antivirus, et postes le rapport
petit mais costaud...
problème n°1 tu n'as ni antivirus, ni parefeu sur ton poste !!!!
commences par installer ça : https://www.malekal.com/avira-free-security-antivirus-gratuit/
puis là tu trouveras des liens pour un parefeu : http://www.commentcamarche.net/faq/sujet 3486 securite le parefeu de windows xp
ensuite fais un scan antivirus, et postes le rapport
bon alors voila le rapport de l'antivirus , et il ya un truc qui ne veut pas partir du tout sussenommé "TR/vundo.gen"
AntiVir PersonalEdition Classic
Report file date: jeudi, 25. octobre 2007 22:12
Scanning for 835736 virus strains and unwanted programs.
Licensed to: Avira AntiVir PersonalEdition Classic
Serial number: 0000149996-ADJIE-0001
Platform: Windows XP
Windows version: (Service Pack 2) [5.1.2600]
Username: PC1
Computer name: CRICRI
Version information:
BUILD.DAT : 270 15603 Bytes 19.09.2007 13:32:00
AVSCAN.EXE : 7.0.6.1 290856 Bytes 23.08.2007 12:16:29
AVSCAN.DLL : 7.0.6.0 49192 Bytes 16.08.2007 11:23:51
LUKE.DLL : 7.0.5.3 147496 Bytes 14.08.2007 14:32:47
LUKERES.DLL : 7.0.6.1 10280 Bytes 21.08.2007 11:35:20
ANTIVIR0.VDF : 6.40.0.0 11030528 Bytes 18.07.2007 13:27:15
ANTIVIR1.VDF : 7.0.0.0 1640448 Bytes 13.09.2007 13:26:55
ANTIVIR2.VDF : 7.0.0.1 2048 Bytes 13.09.2007 13:27:04
ANTIVIR3.VDF : 7.0.0.2 2048 Bytes 13.09.2007 13:27:13
AVEWIN32.DLL : 7.6.0.15 2806272 Bytes 17.09.2007 16:43:56
AVWINLL.DLL : 1.0.0.7 14376 Bytes 26.02.2007 09:36:26
AVPREF.DLL : 7.0.2.2 25640 Bytes 18.07.2007 06:39:17
AVREP.DLL : 7.0.0.1 155688 Bytes 16.04.2007 12:16:24
AVPACK32.DLL : 7.3.0.15 360488 Bytes 03.08.2007 07:46:00
AVREG.DLL : 7.0.1.6 30760 Bytes 18.07.2007 06:17:06
AVARKT.DLL : 1.0.0.20 278568 Bytes 28.08.2007 11:26:33
AVEVTLOG.DLL : 7.0.0.20 86056 Bytes 18.07.2007 06:10:18
NETNT.DLL : 7.0.0.0 7720 Bytes 08.03.2007 10:09:42
RCIMAGE.DLL : 7.0.1.30 2342952 Bytes 07.08.2007 11:38:13
RCTEXT.DLL : 7.0.62.0 86056 Bytes 21.08.2007 11:50:37
SQLITE3.DLL : 3.3.17.1 339968 Bytes 23.07.2007 08:37:21
Configuration settings for the scan:
Jobname..........................: Complete system scan
Configuration file...............: c:\program files\avira\antivir personaledition classic\sysscan.avp
Logging..........................: low
Primary action...................: interactive
Secondary action.................: ignore
Scan master boot sector..........: off
Scan boot sector.................: on
Boot sectors.....................: D:,
Scan memory......................: on
Process scan.....................: on
Scan registry....................: on
Search for rootkits..............: off
Scan all files...................: Intelligent file selection
Scan archives....................: on
Recursion depth..................: 20
Smart extensions.................: on
Macro heuristic..................: on
File heuristic...................: medium
Start of the scan: jeudi, 25. octobre 2007 22:12
The scan of running processes will be started
Scan process 'avscan.exe' - '1' Module(s) have been scanned
Scan process 'avcenter.exe' - '1' Module(s) have been scanned
Scan process 'explorer.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'guard.exe' - '1' Module(s) have been scanned
Scan process 'aawservice.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'lsass.exe' - '1' Module(s) have been scanned
Scan process 'services.exe' - '1' Module(s) have been scanned
Scan process 'winlogon.exe' - '1' Module(s) have been scanned
Scan process 'csrss.exe' - '1' Module(s) have been scanned
Scan process 'smss.exe' - '1' Module(s) have been scanned
13 processes with 13 modules were scanned
Start scanning boot sectors:
Boot sector 'C:\'
[NOTE] No virus was found!
Boot sector 'D:\'
[NOTE] No virus was found!
Starting to scan the registry.
C:\WINDOWS\GenProtect.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\GenProtect.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
C:\WINDOWS\swchost.exe
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '4783f941.qua'!
C:\WINDOWS\swchost.exe
[DETECTION] Contains suspicious code HEUR/Malware
C:\WINDOWS\system32\MFMJEXE.exe
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '476df910.qua'!
C:\WINDOWS\system32\MFMJEXE.exe
[DETECTION] Contains suspicious code HEUR/Malware
C:\WINDOWS\Kvsc3.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\Kvsc3.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
C:\WINDOWS\AVPSrv.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\AVPSrv.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
C:\WINDOWS\mppds.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\mppds.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
C:\WINDOWS\MsIMMs32.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\MsIMMs32.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
C:\WINDOWS\NVDispDrv.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\NVDispDrv.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
C:\WINDOWS\MsPrint32D.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\MsPrint32D.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
C:\WINDOWS\msccrt.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\msccrt.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
C:\WINDOWS\cmdbcs.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\cmdbcs.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
C:\WINDOWS\upxdnd.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\upxdnd.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
C:\WINDOWS\DbgHlp32.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\DbgHlp32.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
C:\WINDOWS\IGM.exe
[DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
[INFO] The file was deleted!
C:\WINDOWS\IGM.exe
[DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
C:\WINDOWS\system32\LYLOADER.EXE
[DETECTION] Is the Trojan horse TR/PSW.Online.agb.2
[INFO] The file was deleted!
C:\WINDOWS\system32\LYLOADER.EXE
[DETECTION] Is the Trojan horse TR/PSW.Online.agb.2
C:\WINDOWS\system32\LYLOADMR.EXE
[DETECTION] Is the Trojan horse TR/PSW.Online.agb.2
[INFO] The file was deleted!
C:\WINDOWS\system32\LYLOADMR.EXE
[DETECTION] Is the Trojan horse TR/PSW.Online.agb.2
The registry was scanned ( '57' files ).
Starting the file scan:
Begin scan in 'C:\'
C:\auto.exe
[DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
[INFO] The file was deleted!
C:\pagefile.sys
[WARNING] The file could not be opened!
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\20E62693.exe
[DETECTION] Contains detection pattern of the worm WORM/Alcra.B
[INFO] The file was deleted!
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\222636E6.exe
[DETECTION] Contains detection pattern of the worm WORM/Rbot.174080
[INFO] The file was deleted!
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\22D36827.exe
[DETECTION] Contains detection pattern of the worm WORM/Rbot.174080
[INFO] The file was deleted!
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\24F121D3.exe
[DETECTION] Contains detection pattern of the worm WORM/Rbot.174080
[INFO] The file was deleted!
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\48FE554B.exe
[DETECTION] Contains detection pattern of the worm WORM/Rbot.174080
[INFO] The file was deleted!
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\4C3529C2.exe
[DETECTION] Contains detection pattern of the worm WORM/Alcra.B
[INFO] The file was deleted!
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\65504C13.exe
[DETECTION] Is the Trojan horse TR/Dldr.Nsis.Ag.U.4
[INFO] The file was deleted!
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\750F3A91.exe
[DETECTION] Contains detection pattern of the worm WORM/RJUMP.D
[INFO] The file was deleted!
C:\Documents and Settings\PC1\Local Settings\Temp\LYLOADER.EXE
[DETECTION] Is the Trojan horse TR/PSW.Online.agb.2
[INFO] The file was deleted!
C:\Documents and Settings\PC1\Local Settings\Temp\LYMANGR.DLL
[DETECTION] Is the Trojan horse TR/PSW.Online.agb.2
[INFO] The file was deleted!
C:\Documents and Settings\PC1\Local Settings\Temp\SHQ.DLL
[DETECTION] Is the Trojan horse TR/PSW.Online.agb.2
[INFO] The file was deleted!
C:\Documents and Settings\PC1\Temporary Internet Files\Content.IE5\2MCG2Y7Y\f2b4657b5568d072[1].exe
[DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
[INFO] The file was deleted!
C:\Documents and Settings\PC1\Temporary Internet Files\Content.IE5\2MCG2Y7Y\mosx1024[1]
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '4793fa3a.qua'!
C:\Documents and Settings\PC1\Temporary Internet Files\Content.IE5\4KN7B1JM\mh0618[1].exe
[DETECTION] Is the Trojan horse TR/PSW.Online.agb.2
[INFO] The file was deleted!
C:\Documents and Settings\PC1\Temporary Internet Files\Content.IE5\4KN7B1JM\my0616[1].exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\Documents and Settings\PC1\Temporary Internet Files\Content.IE5\4KN7B1JM\qj0617[1].exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\Documents and Settings\PC1\Temporary Internet Files\Content.IE5\4KN7B1JM\tl0619[1].exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\Documents and Settings\PC1\Temporary Internet Files\Content.IE5\4KN7B1JM\vasya[1]
[DETECTION] Is the Trojan horse TR/Fotomoto.E
[INFO] The file was deleted!
C:\Documents and Settings\PC1\Temporary Internet Files\Content.IE5\AYSTUGY7\jh0619[1].exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\Documents and Settings\PC1\Temporary Internet Files\Content.IE5\AYSTUGY7\qqsg[1].exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\Documents and Settings\PC1\Temporary Internet Files\Content.IE5\AYSTUGY7\wl0618[1].exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\Documents and Settings\PC1\Temporary Internet Files\Content.IE5\AYSTUGY7\zt0616[1].exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\Documents and Settings\PC1\Temporary Internet Files\Content.IE5\MJPH6RK3\cq0619[1].exe
[DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
[INFO] The file was deleted!
C:\Documents and Settings\PC1\Temporary Internet Files\Content.IE5\MJPH6RK3\cs0619[1].exe
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '4750fa64.qua'!
C:\Documents and Settings\PC1\Temporary Internet Files\Content.IE5\MJPH6RK3\dh0616[1].exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\Documents and Settings\PC1\Temporary Internet Files\Content.IE5\MJPH6RK3\dh3[1].exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\Documents and Settings\PC1\Temporary Internet Files\Content.IE5\MJPH6RK3\f2b4657b5568d072[1].exe
[DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
[INFO] The file was deleted!
C:\Documents and Settings\PC1\Temporary Internet Files\Content.IE5\MJPH6RK3\wd0618[1].exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\Documents and Settings\PC1\Temporary Internet Files\Content.IE5\MJPH6RK3\wow0617[1].exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\Program Files\provies.exe
[DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
[INFO] The file was deleted!
C:\Program Files\Fichiers communs\fjOs0r.dll
[DETECTION] Contains suspicious code HEUR/Crypted
[INFO] The file was moved to '476ffc09.qua'!
C:\Program Files\Internet Explorer\OnlO0r.bak
[DETECTION] Is the Trojan horse TR/AutoRun.BK
[INFO] The file was deleted!
C:\Program Files\Internet Explorer\OnlO0r.dll
[DETECTION] Contains suspicious code HEUR/Crypted
[WARNING] An error has occurred and the file was not deleted. ErrorID: 16003
[WARNING] The file could not be deleted!
C:\Program Files\Internet Explorer\rksldk.bak
[DETECTION] Is the Trojan horse TR/AutoRun.BK
[INFO] The file was deleted!
C:\Program Files\Panda Security\TotalScan\pskavs.dll
[DETECTION] Contains detection pattern of the Windows virus W95/Blumblebee.1738
[INFO] The file was deleted!
C:\Program Files\XoftSpySE\Slayerpatch_1.2.exe
[DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Hupigon.BV.358 Backdoor server programs
[INFO] The file was deleted!
C:\WINDOWS\136741MM.DLL
[DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
[INFO] The file was deleted!
C:\WINDOWS\136741WL.DLL
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '4756ffd8.qua'!
C:\WINDOWS\dtxjyi.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\eyuhor.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\gdtzxo.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\ifzknm.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\jmatrr.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\jyisdr.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\kmbqvn.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\kngcdt.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\kqrogx.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\ogpncw.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\olcgia.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\osfhxr.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\qucgqa.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\tfaucb.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\tglpzu.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\twqzwi.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\ueower.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\wrsrku.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\zvhfqt.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\3sak1.dll
[DETECTION] Is the Trojan horse TR/Spy.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\518FC92F.DLL
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '47590136.qua'!
C:\WINDOWS\system32\55550.dll
[DETECTION] Contains suspicious code HEUR/Malware
[WARNING] An error has occurred and the file was not deleted. ErrorID: 16003
[WARNING] The file could not be deleted!
C:\WINDOWS\system32\55551.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '4756013b.qua'!
C:\WINDOWS\system32\6ksx1.dll
[DETECTION] Is the Trojan horse TR/Spy.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\6lsd1.dll
[DETECTION] Is the Trojan horse TR/Spy.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\7338CE33.EXE
[DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\88xk1.dll
[DETECTION] Is the Trojan horse TR/Spy.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\9fdk1.dll
[DETECTION] Is the Trojan horse TR/Spy.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\9kxk1.dll
[DETECTION] Is the Trojan horse TR/Spy.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\as1x1.dll
[DETECTION] Is the Trojan horse TR/Spy.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\AVPSrv.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '47710161.qua'!
C:\WINDOWS\system32\ax1o1.dll
[DETECTION] Is the Trojan horse TR/Spy.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\bbxzdd.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '4799016e.qua'!
C:\WINDOWS\system32\bfdiig.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '47850172.qua'!
C:\WINDOWS\system32\bqkodr.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '478c017e.qua'!
C:\WINDOWS\system32\bryewu.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '479a017f.qua'!
C:\WINDOWS\system32\cbdtlg.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '47850170.qua'!
C:\WINDOWS\system32\cbpwuc.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '47910170.qua'!
C:\WINDOWS\system32\ckugcjcf.exe
[DETECTION] Is the Trojan horse TR/Fotomoto.E
[INFO] The file was deleted!
C:\WINDOWS\system32\cmdbcs.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '4785017d.qua'!
C:\WINDOWS\system32\cqdoor0.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '47850183.qua'!
C:\WINDOWS\system32\cqdoor1.dll
[DETECTION] Contains suspicious code HEUR/Malware
[WARNING] An error has occurred and the file was not deleted. ErrorID: 16003
[WARNING] The file could not be deleted!
C:\WINDOWS\system32\csdoor0.dll
[DETECTION] Contains suspicious code HEUR/Malware
[WARNING] An error has occurred and the file was not deleted. ErrorID: 16003
[WARNING] The file could not be deleted!
C:\WINDOWS\system32\csdoor1.dll
[DETECTION] Is the Trojan horse TR/Spy.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\dadoor0.dll
[DETECTION] Contains suspicious code HEUR/Malware
[WARNING] An error has occurred and the file was not deleted. ErrorID: 16003
[WARNING] The file could not be deleted!
C:\WINDOWS\system32\dadoor1.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '461b4718.qua'!
C:\WINDOWS\system32\DbgHlp32.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '47880179.qua'!
C:\WINDOWS\system32\dfmhhq.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '478e017e.qua'!
C:\WINDOWS\system32\dh3oor1.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '47540180.qua'!
C:\WINDOWS\system32\dkxfkuqa.exe
[DETECTION] Is the Trojan horse TR/Fotomoto.E
[INFO] The file was deleted!
C:\WINDOWS\system32\dmyhly.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '479a0187.qua'!
C:\WINDOWS\system32\ehflxx.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '47870185.qua'!
C:\WINDOWS\system32\epjfpv.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '478b018d.qua'!
C:\WINDOWS\system32\eyjatiay.exe
[DETECTION] Is the Trojan horse TR/Fotomoto.E
[INFO] The file was deleted!
C:\WINDOWS\system32\FD693CA5.EXE
[DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\fhouto.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '47900187.qua'!
C:\WINDOWS\system32\fihgauno.exe
[DETECTION] Is the Trojan horse TR/Click.Agent.NP
[INFO] The file was deleted!
C:\WINDOWS\system32\fydoor0.dll
[DETECTION] Contains suspicious code HEUR/Malware
[WARNING] An error has occurred and the file was not deleted. ErrorID: 16003
[WARNING] The file could not be deleted!
C:\WINDOWS\system32\fydoor1.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '461b47fb.qua'!
C:\WINDOWS\system32\gianor.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '4782018a.qua'!
C:\WINDOWS\system32\gwhnpx.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '47890199.qua'!
C:\WINDOWS\system32\gzmrotate.dll
[DETECTION] Contains detection pattern of the dropper DR/Agent.141853.A
[INFO] The file was deleted!
C:\WINDOWS\system32\gzudlk.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '4796019d.qua'!
C:\WINDOWS\system32\haregj.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '47930184.qua'!
C:\WINDOWS\system32\hbxzvu.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '47990185.qua'!
C:\WINDOWS\system32\hfmmdo.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '478e018a.qua'!
C:\WINDOWS\system32\hwsvps.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '4794019c.qua'!
C:\WINDOWS\system32\ihfqyo.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '4787018f.qua'!
C:\WINDOWS\system32\iqcogssp.exe
[DETECTION] Is the Trojan horse TR/Fotomoto.E
[INFO] The file was deleted!
C:\WINDOWS\system32\iskwwfvp.exe
[DETECTION] Is the Trojan horse TR/Fotomoto.E
[INFO] The file was deleted!
C:\WINDOWS\system32\jtdoor0.dll
[DETECTION] Is the Trojan horse TR/Spy.Gen
[WARNING] The file could not be deleted!
C:\WINDOWS\system32\k119098062612.exe
[DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11909827612.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11909827623.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11909827634.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11909827655.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11909827666.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k119098328012.exe
[DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k119178233514.exe
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '4752015f.qua'!
C:\WINDOWS\system32\k11923520202.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k119235229414.exe
[DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11923560282.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k119235631014.exe
[DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11930681077.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11930681102.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11930681113.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11930682992.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11930684902.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11930684903.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k119306864614.exe
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '47520163.qua'!
C:\WINDOWS\system32\k11931448011.exe
[DETECTION] Is the Trojan horse TR/PSW.Online.agb.2
[INFO] The file was deleted!
C:\WINDOWS\system32\k11931448012.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k119314500414.exe
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '47520164.qua'!
C:\WINDOWS\system32\k119314528912.exe
[DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k119314529114.exe
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '47520165.qua'!
C:\WINDOWS\system32\k119314535214.exe
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '46cc4706.qua'!
C:\WINDOWS\system32\k11931471722.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11931471733.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11931473086.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11931473096.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k119314731411.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k119314731814.exe
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '47520168.qua'!
C:\WINDOWS\system32\k119314731914.exe
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '46cc4709.qua'!
C:\WINDOWS\system32\k119314731915.exe
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '47520169.qua'!
C:\WINDOWS\system32\k11931485352.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k119314868814.exe
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '46cc470a.qua'!
C:\WINDOWS\system32\k11931489132.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11931489143.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11931489152.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11931489163.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11931489164.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11931489174.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11931489175.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11931489185.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11931489186.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11931489197.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11931489206.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11931489217.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k119314909614.exe
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '4752016d.qua'!
C:\WINDOWS\system32\k119314915414.exe
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '4752016e.qua'!
C:\WINDOWS\system32\k119315008114.exe
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '46cc470f.qua'!
C:\WINDOWS\system32\k119315013914.exe
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '47520170.qua'!
C:\WINDOWS\system32\k11931507932.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11931509822.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11931509833.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11931511142.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11931511162.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11931511163.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k119315125913.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k119315126014.exe
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '47520171.qua'!
C:\WINDOWS\system32\k11931513072.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11931513126.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11931514546.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11931514557.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11931514567.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k119315146112.exe
[DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k119315146414.exe
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '47520173.qua'!
C:\WINDOWS\system32\k119315146514.exe
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '47520174.qua'!
C:\WINDOWS\system32\k11931539363.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11931539373.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11931539374.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11931539394.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11931539428.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11931539438.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k119315394712.exe
[DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k119315395014.exe
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '47520176.qua'!
C:\WINDOWS\system32\k119315395114.exe
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '46cc4717.qua'!
C:\WINDOWS\system32\k11931564022.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11931565332.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11931565343.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11931565352.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11931565354.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11931565363.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11931565374.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11931565375.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11931566662.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11931566683.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11931566704.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11931566715.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11931568392.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11931568412.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11931568413.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11931586082.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11931587436.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11931587446.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11931587447.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11931587457.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k119315875112.exe
[DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k119315875214.exe
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '4752017d.qua'!
C:\WINDOWS\system32\k119315875414.exe
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '4752017e.qua'!
C:\WINDOWS\system32\k11931665612.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11932308352.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k119324048712.exe
[DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k119324048914.exe
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '4752017f.qua'!
C:\WINDOWS\system32\k119324050814.exe
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '46cc47e0.qua'!
C:\WINDOWS\system32\k11932468152.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k119324695511.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k119324695612.exe
[DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k119324695812.exe
[DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k119324695914.exe
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '47520181.qua'!
C:\WINDOWS\system32\k119324696014.exe
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '46cc47e2.qua'!
C:\WINDOWS\system32\k119324696015.exe
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '47520182.qua'!
C:\WINDOWS\system32\k11932514822.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11932516722.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11932518032.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11932518043.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11932518052.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11932518054.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11932518063.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11932518074.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11932518075.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11932519363.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11932519396.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11932519417.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11932519428.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11932519439.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k119325194611.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k119325194914.exe
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '47520186.qua'!
C:\WINDOWS\system32\k119325195015.exe
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '47520187.qua'!
C:\WINDOWS\system32\k119325195314.exe
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '46cc47e8.qua'!
C:\WINDOWS\system32\k119325195415.exe
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '47520189.qua'!
C:\WINDOWS\system32\k11932536668.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11932537213.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11932537224.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11932537235.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11932537246.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11932537267.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11932539182.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11932539193.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11932540462.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11932540482.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11932540483.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11932542452.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11932542463.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11932544322.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11932544333.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11932546212.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11932546223.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11933376422.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11933379592.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11933379603.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11933379614.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k119333911414.exe
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '4752018e.qua'!
C:\WINDOWS\system32\k11933396262.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11933396273.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11933399422.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11933399433.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11933402522.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11933402533.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k119334051512.exe
[DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k119334057614.exe
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '47520191.qua'!
C:\WINDOWS\system32\k119334196812.exe
[DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k119334202512.exe
[DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\keroce.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '479301c7.qua'!
C:\WINDOWS\system32\kqborb.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '478301d3.qua'!
C:\WINDOWS\system32\Kvsc3.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '479401d9.qua'!
C:\WINDOWS\system32\kyuifjax.exe
[DETECTION] Is the Trojan horse TR/Fotomoto.E
[INFO] The file was deleted!
C:\WINDOWS\system32\ljyqfh.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '479a01ce.qua'!
C:\WINDOWS\system32\ls2o1.dll
[DETECTION] Is the Trojan horse TR/Spy.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\LYMANGR.DLL
[DETECTION] Is the Trojan horse TR/PSW.Online.agb.2
[INFO] The file was deleted!
C:\WINDOWS\system32\mhdoor1.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '478501d0.qua'!
C:\WINDOWS\system32\moiphl.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '478a01d8.qua'!
C:\WINDOWS\system32\mppds.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '479101d9.qua'!
C:\WINDOWS\system32\msccrt.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '478401dd.qua'!
C:\WINDOWS\system32\MsIMMs32.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '476a01e0.qua'!
C:\WINDOWS\system32\MsPrint32D.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '477101e1.qua'!
C:\WINDOWS\system32\msvjhf.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '479701e2.qua'!
C:\WINDOWS\system32\mtvkzy.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '479701e4.qua'!
C:\WINDOWS\system32\mydoor1.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '478501ea.qua'!
C:\WINDOWS\system32\n1193231311k.exe
[DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\nllrjn.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '478d01df.qua'!
C:\WINDOWS\system32\NVDispDrv.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '476501cc.qua'!
C:\WINDOWS\system32\nxpgbq.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '479101f0.qua'!
C:\WINDOWS\system32\oauhxw.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '479601d9.qua'!
C:\WINDOWS\system32\ocvbvu.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '479701db.qua'!
C:\WINDOWS\system32\ohjqtt.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '478b01e1.qua'!
C:\WINDOWS\system32\otgnno.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '478801ee.qua'!
C:\WINDOWS\system32\ovktti.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '478c01f0.qua'!
C:\WINDOWS\system32\oxhryvyl.exe
[DETECTION] Is the Trojan horse TR/Fotomoto.E
[INFO] The file was deleted!
C:\WINDOWS\system32\pmhajh.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '478901ea.qua'!
C:\WINDOWS\system32\puwrxkqh.exe
[DETECTION] Is the Trojan horse TR/Fotomoto.E
[INFO] The file was deleted!
C:\WINDOWS\system32\qhdoor0.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '478501e7.qua'!
C:\WINDOWS\system32\qhdoor1.dll
[DETECTION] Contains suspicious code HEUR/Malware
[WARNING] An error has occurred and the file was not deleted. ErrorID: 16003
[WARNING] The file could not be deleted!
C:\WINDOWS\system32\qjdoor0.dll
[DETECTION] Contains suspicious code HEUR/Malware
[WARNING] An error has occurred and the file was not deleted. ErrorID: 16003
[WARNING] The file could not be deleted!
C:\WINDOWS\system32\qjdoor1.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '461b478b.qua'!
C:\WINDOWS\system32\qommljg.dll
[DETECTION] Is the Trojan horse TR/Vundo.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\qrktnx.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '478c01f4.qua'!
C:\WINDOWS\system32\rbdhun.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '478501e5.qua'!
C:\WINDOWS\system32\rrkwxt.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '478c01f7.qua'!
C:\WINDOWS\system32\rvhqgl.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '478901fb.qua'!
C:\WINDOWS\system32\rxdoor0.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '478501fd.qua'!
C:\WINDOWS\system32\rxdoor1.dll
[DETECTION] Contains suspicious code HEUR/Malware
[WARNING] An error has occurred and the file was not deleted. ErrorID: 16003
[WARNING] The file could not be deleted!
C:\WINDOWS\system32\SHQ.DLL
[DETECTION] Is the Trojan horse TR/PSW.Online.agb.2
[INFO] The file was deleted!
C:\WINDOWS\system32\tjqdvb.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '479201f6.qua'!
C:\WINDOWS\system32\tldoor0.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '478501f9.qua'!
C:\WINDOWS\system32\tldoor1.dll
[DETECTION] Contains suspicious code HEUR/Malware
[WARNING] An error has occurred and the file was not deleted. ErrorID: 16003
[WARNING] The file could not be deleted!
C:\WINDOWS\system32\tupewk.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '47910203.qua'!
C:\WINDOWS\system32\tyzoio.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '479b0207.qua'!
C:\WINDOWS\system32\uleddb.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '478601fb.qua'!
C:\WINDOWS\system32\umvqvw.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '479701fc.qua'!
C:\WINDOWS\system32\upxdnd.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '47990200.qua'!
C:\WINDOWS\system32\uqehbu.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '47860201.qua'!
C:\WINDOWS\system32\urefpetw.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '47860202.qua'!
C:\WINDOWS\system32\urtvqm.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '47950203.qua'!
C:\WINDOWS\system32\usuwxs.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '47960204.qua'!
C:\WINDOWS\system32\vxkbpn.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '478c020b.qua'!
C:\WINDOWS\system32\wddoor0.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '478501f8.qua'!
C:\WINDOWS\system32\wddoor1.dll
[DETECTION] Contains suspicious code HEUR/Malware
[WARNING] An error has occurred and the file was not deleted. ErrorID: 16003
[WARNING] The file could not be deleted!
C:\WINDOWS\system32\wgdoor1.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '478501fc.qua'!
C:\WINDOWS\system32\wivkxq.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '47970200.qua'!
C:\WINDOWS\system32\wkcydvjh.exe
[DETECTION] Is the Trojan horse TR/Fotomoto.E
[INFO] The file was deleted!
C:\WINDOWS\system32\wldoor0.dll
[DETECTION] Contains suspicious code HEUR/Malware
[WARNING] An error has occurred and the file was not deleted. ErrorID: 16003
[WARNING] The file could not be deleted!
C:\WINDOWS\system32\wldoor1.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '461b4465.qua'!
C:\WINDOWS\system32\wodoor1.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '47850209.qua'!
C:\WINDOWS\system32\wrmwwp.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '478e020d.qua'!
C:\WINDOWS\system32\x5cz0.dll
[DETECTION] Is the Trojan horse TR/Spy.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\x5cz1.dll
[DETECTION] Is the Trojan horse TR/Spy.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\xdqtbk.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '47920202.qua'!
C:\WINDOWS\system32\xdxs1.dll
[DETECTION] Is the Trojan horse TR/Spy.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\xdzdbe.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '479b0202.qua'!
C:\WINDOWS\system32\xk0s1.dll
[DETECTION] Is the Trojan horse TR/Spy.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\xk1s1.dll
[DETECTION] Is the Trojan horse TR/Spy.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\xk8s1.dll
[DETECTION] Is the Trojan horse TR/Spy.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\xkikcjjk.exe
[DETECTION] Is the Trojan horse TR/Fotomoto.E
[INFO] The file was deleted!
C:\WINDOWS\system32\xxywvww.dll
[DETECTION] Is the Trojan horse TR/Vundo.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\ypfqjp.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '47870210.qua'!
C:\WINDOWS\system32\ytmlddet.dll
[DETECTION] Is the Trojan horse TR/BHO.AKY
[INFO] The file was deleted!
C:\WINDOWS\system32\ywqrtt.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '47920218.qua'!
C:\WINDOWS\system32\ztdoor0.dll
[DETECTION] Is the Trojan horse TR/Spy.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\zwxxxd.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '47990219.qua'!
C:\WINDOWS\system32\zxdoor1.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '4785021a.qua'!
C:\WINDOWS\system32\__c003E4BC.dat
[DETECTION] Contains suspicious code HEUR/Malware
[WARNING] An error has occurred and the file was not deleted. ErrorID: 16003
[WARNING] The file could not be deleted!
C:\WINDOWS\system32\drivers\dtscsi.sys
[WARNING] The file could not be opened!
C:\WINDOWS\system32\drivers\sptd.sys
[WARNING] The file could not be opened!
C:\WINDOWS\system32\drivers\sptd6173.sys
[WARNING] The file could not be opened!
C:\WINDOWS\Temp\LYLOADMR.EXE
[DETECTION] Is the Trojan horse TR/PSW.Online.agb.2
[INFO] The file was deleted!
C:\WINDOWS\Temp\SHQ.DLL
[DETECTION] Is the Trojan horse TR/PSW.Online.agb.2
[INFO] The file was deleted!
Begin scan in 'D:\' <HP_RECOVERY>
D:\auto.exe
[DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
[INFO] The file was deleted!
D:\System Volume Information\_restore{B0D22BE2-A227-4068-A48A-E6B79217B4BA}\RP145\A0067888.exe
[DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
[INFO] The file was deleted!
D:\System Volume Information\_restore{B0D22BE2-A227-4068-A48A-E6B79217B4BA}\RP146\A0070930.exe
[DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
[INFO] The file was deleted!
D:\System Volume Information\_restore{B0D22BE2-A227-4068-A48A-E6B79217B4BA}\RP155\A0071919.exe
[DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
[INFO] The file was deleted!
D:\System Volume Information\_restore{B0D22BE2-A227-4068-A48A-E6B79217B4BA}\RP158\A0077675.exe
[DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
[INFO] The file was deleted!
End of the scan: jeudi, 25. octobre 2007 22:52
Used time: 40:05 min
The scan has been done completely.
6669 Scanning directories
295154 Files were scanned
243 viruses and/or unwanted programs were found
131 Files were classified as suspicious:
242 files were deleted
0 files were repaired
118 files were moved to quarantine
0 files were renamed
4 Files cannot be scanned
294911 Files not concerned
9057 Archives were scanne
AntiVir PersonalEdition Classic
Report file date: jeudi, 25. octobre 2007 22:12
Scanning for 835736 virus strains and unwanted programs.
Licensed to: Avira AntiVir PersonalEdition Classic
Serial number: 0000149996-ADJIE-0001
Platform: Windows XP
Windows version: (Service Pack 2) [5.1.2600]
Username: PC1
Computer name: CRICRI
Version information:
BUILD.DAT : 270 15603 Bytes 19.09.2007 13:32:00
AVSCAN.EXE : 7.0.6.1 290856 Bytes 23.08.2007 12:16:29
AVSCAN.DLL : 7.0.6.0 49192 Bytes 16.08.2007 11:23:51
LUKE.DLL : 7.0.5.3 147496 Bytes 14.08.2007 14:32:47
LUKERES.DLL : 7.0.6.1 10280 Bytes 21.08.2007 11:35:20
ANTIVIR0.VDF : 6.40.0.0 11030528 Bytes 18.07.2007 13:27:15
ANTIVIR1.VDF : 7.0.0.0 1640448 Bytes 13.09.2007 13:26:55
ANTIVIR2.VDF : 7.0.0.1 2048 Bytes 13.09.2007 13:27:04
ANTIVIR3.VDF : 7.0.0.2 2048 Bytes 13.09.2007 13:27:13
AVEWIN32.DLL : 7.6.0.15 2806272 Bytes 17.09.2007 16:43:56
AVWINLL.DLL : 1.0.0.7 14376 Bytes 26.02.2007 09:36:26
AVPREF.DLL : 7.0.2.2 25640 Bytes 18.07.2007 06:39:17
AVREP.DLL : 7.0.0.1 155688 Bytes 16.04.2007 12:16:24
AVPACK32.DLL : 7.3.0.15 360488 Bytes 03.08.2007 07:46:00
AVREG.DLL : 7.0.1.6 30760 Bytes 18.07.2007 06:17:06
AVARKT.DLL : 1.0.0.20 278568 Bytes 28.08.2007 11:26:33
AVEVTLOG.DLL : 7.0.0.20 86056 Bytes 18.07.2007 06:10:18
NETNT.DLL : 7.0.0.0 7720 Bytes 08.03.2007 10:09:42
RCIMAGE.DLL : 7.0.1.30 2342952 Bytes 07.08.2007 11:38:13
RCTEXT.DLL : 7.0.62.0 86056 Bytes 21.08.2007 11:50:37
SQLITE3.DLL : 3.3.17.1 339968 Bytes 23.07.2007 08:37:21
Configuration settings for the scan:
Jobname..........................: Complete system scan
Configuration file...............: c:\program files\avira\antivir personaledition classic\sysscan.avp
Logging..........................: low
Primary action...................: interactive
Secondary action.................: ignore
Scan master boot sector..........: off
Scan boot sector.................: on
Boot sectors.....................: D:,
Scan memory......................: on
Process scan.....................: on
Scan registry....................: on
Search for rootkits..............: off
Scan all files...................: Intelligent file selection
Scan archives....................: on
Recursion depth..................: 20
Smart extensions.................: on
Macro heuristic..................: on
File heuristic...................: medium
Start of the scan: jeudi, 25. octobre 2007 22:12
The scan of running processes will be started
Scan process 'avscan.exe' - '1' Module(s) have been scanned
Scan process 'avcenter.exe' - '1' Module(s) have been scanned
Scan process 'explorer.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'guard.exe' - '1' Module(s) have been scanned
Scan process 'aawservice.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'lsass.exe' - '1' Module(s) have been scanned
Scan process 'services.exe' - '1' Module(s) have been scanned
Scan process 'winlogon.exe' - '1' Module(s) have been scanned
Scan process 'csrss.exe' - '1' Module(s) have been scanned
Scan process 'smss.exe' - '1' Module(s) have been scanned
13 processes with 13 modules were scanned
Start scanning boot sectors:
Boot sector 'C:\'
[NOTE] No virus was found!
Boot sector 'D:\'
[NOTE] No virus was found!
Starting to scan the registry.
C:\WINDOWS\GenProtect.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\GenProtect.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
C:\WINDOWS\swchost.exe
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '4783f941.qua'!
C:\WINDOWS\swchost.exe
[DETECTION] Contains suspicious code HEUR/Malware
C:\WINDOWS\system32\MFMJEXE.exe
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '476df910.qua'!
C:\WINDOWS\system32\MFMJEXE.exe
[DETECTION] Contains suspicious code HEUR/Malware
C:\WINDOWS\Kvsc3.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\Kvsc3.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
C:\WINDOWS\AVPSrv.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\AVPSrv.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
C:\WINDOWS\mppds.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\mppds.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
C:\WINDOWS\MsIMMs32.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\MsIMMs32.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
C:\WINDOWS\NVDispDrv.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\NVDispDrv.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
C:\WINDOWS\MsPrint32D.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\MsPrint32D.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
C:\WINDOWS\msccrt.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\msccrt.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
C:\WINDOWS\cmdbcs.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\cmdbcs.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
C:\WINDOWS\upxdnd.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\upxdnd.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
C:\WINDOWS\DbgHlp32.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\DbgHlp32.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
C:\WINDOWS\IGM.exe
[DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
[INFO] The file was deleted!
C:\WINDOWS\IGM.exe
[DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
C:\WINDOWS\system32\LYLOADER.EXE
[DETECTION] Is the Trojan horse TR/PSW.Online.agb.2
[INFO] The file was deleted!
C:\WINDOWS\system32\LYLOADER.EXE
[DETECTION] Is the Trojan horse TR/PSW.Online.agb.2
C:\WINDOWS\system32\LYLOADMR.EXE
[DETECTION] Is the Trojan horse TR/PSW.Online.agb.2
[INFO] The file was deleted!
C:\WINDOWS\system32\LYLOADMR.EXE
[DETECTION] Is the Trojan horse TR/PSW.Online.agb.2
The registry was scanned ( '57' files ).
Starting the file scan:
Begin scan in 'C:\'
C:\auto.exe
[DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
[INFO] The file was deleted!
C:\pagefile.sys
[WARNING] The file could not be opened!
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\20E62693.exe
[DETECTION] Contains detection pattern of the worm WORM/Alcra.B
[INFO] The file was deleted!
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\222636E6.exe
[DETECTION] Contains detection pattern of the worm WORM/Rbot.174080
[INFO] The file was deleted!
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\22D36827.exe
[DETECTION] Contains detection pattern of the worm WORM/Rbot.174080
[INFO] The file was deleted!
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\24F121D3.exe
[DETECTION] Contains detection pattern of the worm WORM/Rbot.174080
[INFO] The file was deleted!
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\48FE554B.exe
[DETECTION] Contains detection pattern of the worm WORM/Rbot.174080
[INFO] The file was deleted!
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\4C3529C2.exe
[DETECTION] Contains detection pattern of the worm WORM/Alcra.B
[INFO] The file was deleted!
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\65504C13.exe
[DETECTION] Is the Trojan horse TR/Dldr.Nsis.Ag.U.4
[INFO] The file was deleted!
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\750F3A91.exe
[DETECTION] Contains detection pattern of the worm WORM/RJUMP.D
[INFO] The file was deleted!
C:\Documents and Settings\PC1\Local Settings\Temp\LYLOADER.EXE
[DETECTION] Is the Trojan horse TR/PSW.Online.agb.2
[INFO] The file was deleted!
C:\Documents and Settings\PC1\Local Settings\Temp\LYMANGR.DLL
[DETECTION] Is the Trojan horse TR/PSW.Online.agb.2
[INFO] The file was deleted!
C:\Documents and Settings\PC1\Local Settings\Temp\SHQ.DLL
[DETECTION] Is the Trojan horse TR/PSW.Online.agb.2
[INFO] The file was deleted!
C:\Documents and Settings\PC1\Temporary Internet Files\Content.IE5\2MCG2Y7Y\f2b4657b5568d072[1].exe
[DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
[INFO] The file was deleted!
C:\Documents and Settings\PC1\Temporary Internet Files\Content.IE5\2MCG2Y7Y\mosx1024[1]
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '4793fa3a.qua'!
C:\Documents and Settings\PC1\Temporary Internet Files\Content.IE5\4KN7B1JM\mh0618[1].exe
[DETECTION] Is the Trojan horse TR/PSW.Online.agb.2
[INFO] The file was deleted!
C:\Documents and Settings\PC1\Temporary Internet Files\Content.IE5\4KN7B1JM\my0616[1].exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\Documents and Settings\PC1\Temporary Internet Files\Content.IE5\4KN7B1JM\qj0617[1].exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\Documents and Settings\PC1\Temporary Internet Files\Content.IE5\4KN7B1JM\tl0619[1].exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\Documents and Settings\PC1\Temporary Internet Files\Content.IE5\4KN7B1JM\vasya[1]
[DETECTION] Is the Trojan horse TR/Fotomoto.E
[INFO] The file was deleted!
C:\Documents and Settings\PC1\Temporary Internet Files\Content.IE5\AYSTUGY7\jh0619[1].exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\Documents and Settings\PC1\Temporary Internet Files\Content.IE5\AYSTUGY7\qqsg[1].exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\Documents and Settings\PC1\Temporary Internet Files\Content.IE5\AYSTUGY7\wl0618[1].exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\Documents and Settings\PC1\Temporary Internet Files\Content.IE5\AYSTUGY7\zt0616[1].exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\Documents and Settings\PC1\Temporary Internet Files\Content.IE5\MJPH6RK3\cq0619[1].exe
[DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
[INFO] The file was deleted!
C:\Documents and Settings\PC1\Temporary Internet Files\Content.IE5\MJPH6RK3\cs0619[1].exe
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '4750fa64.qua'!
C:\Documents and Settings\PC1\Temporary Internet Files\Content.IE5\MJPH6RK3\dh0616[1].exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\Documents and Settings\PC1\Temporary Internet Files\Content.IE5\MJPH6RK3\dh3[1].exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\Documents and Settings\PC1\Temporary Internet Files\Content.IE5\MJPH6RK3\f2b4657b5568d072[1].exe
[DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
[INFO] The file was deleted!
C:\Documents and Settings\PC1\Temporary Internet Files\Content.IE5\MJPH6RK3\wd0618[1].exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\Documents and Settings\PC1\Temporary Internet Files\Content.IE5\MJPH6RK3\wow0617[1].exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\Program Files\provies.exe
[DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
[INFO] The file was deleted!
C:\Program Files\Fichiers communs\fjOs0r.dll
[DETECTION] Contains suspicious code HEUR/Crypted
[INFO] The file was moved to '476ffc09.qua'!
C:\Program Files\Internet Explorer\OnlO0r.bak
[DETECTION] Is the Trojan horse TR/AutoRun.BK
[INFO] The file was deleted!
C:\Program Files\Internet Explorer\OnlO0r.dll
[DETECTION] Contains suspicious code HEUR/Crypted
[WARNING] An error has occurred and the file was not deleted. ErrorID: 16003
[WARNING] The file could not be deleted!
C:\Program Files\Internet Explorer\rksldk.bak
[DETECTION] Is the Trojan horse TR/AutoRun.BK
[INFO] The file was deleted!
C:\Program Files\Panda Security\TotalScan\pskavs.dll
[DETECTION] Contains detection pattern of the Windows virus W95/Blumblebee.1738
[INFO] The file was deleted!
C:\Program Files\XoftSpySE\Slayerpatch_1.2.exe
[DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Hupigon.BV.358 Backdoor server programs
[INFO] The file was deleted!
C:\WINDOWS\136741MM.DLL
[DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
[INFO] The file was deleted!
C:\WINDOWS\136741WL.DLL
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '4756ffd8.qua'!
C:\WINDOWS\dtxjyi.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\eyuhor.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\gdtzxo.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\ifzknm.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\jmatrr.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\jyisdr.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\kmbqvn.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\kngcdt.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\kqrogx.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\ogpncw.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\olcgia.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\osfhxr.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\qucgqa.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\tfaucb.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\tglpzu.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\twqzwi.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\ueower.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\wrsrku.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\zvhfqt.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\3sak1.dll
[DETECTION] Is the Trojan horse TR/Spy.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\518FC92F.DLL
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '47590136.qua'!
C:\WINDOWS\system32\55550.dll
[DETECTION] Contains suspicious code HEUR/Malware
[WARNING] An error has occurred and the file was not deleted. ErrorID: 16003
[WARNING] The file could not be deleted!
C:\WINDOWS\system32\55551.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '4756013b.qua'!
C:\WINDOWS\system32\6ksx1.dll
[DETECTION] Is the Trojan horse TR/Spy.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\6lsd1.dll
[DETECTION] Is the Trojan horse TR/Spy.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\7338CE33.EXE
[DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\88xk1.dll
[DETECTION] Is the Trojan horse TR/Spy.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\9fdk1.dll
[DETECTION] Is the Trojan horse TR/Spy.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\9kxk1.dll
[DETECTION] Is the Trojan horse TR/Spy.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\as1x1.dll
[DETECTION] Is the Trojan horse TR/Spy.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\AVPSrv.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '47710161.qua'!
C:\WINDOWS\system32\ax1o1.dll
[DETECTION] Is the Trojan horse TR/Spy.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\bbxzdd.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '4799016e.qua'!
C:\WINDOWS\system32\bfdiig.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '47850172.qua'!
C:\WINDOWS\system32\bqkodr.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '478c017e.qua'!
C:\WINDOWS\system32\bryewu.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '479a017f.qua'!
C:\WINDOWS\system32\cbdtlg.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '47850170.qua'!
C:\WINDOWS\system32\cbpwuc.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '47910170.qua'!
C:\WINDOWS\system32\ckugcjcf.exe
[DETECTION] Is the Trojan horse TR/Fotomoto.E
[INFO] The file was deleted!
C:\WINDOWS\system32\cmdbcs.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '4785017d.qua'!
C:\WINDOWS\system32\cqdoor0.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '47850183.qua'!
C:\WINDOWS\system32\cqdoor1.dll
[DETECTION] Contains suspicious code HEUR/Malware
[WARNING] An error has occurred and the file was not deleted. ErrorID: 16003
[WARNING] The file could not be deleted!
C:\WINDOWS\system32\csdoor0.dll
[DETECTION] Contains suspicious code HEUR/Malware
[WARNING] An error has occurred and the file was not deleted. ErrorID: 16003
[WARNING] The file could not be deleted!
C:\WINDOWS\system32\csdoor1.dll
[DETECTION] Is the Trojan horse TR/Spy.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\dadoor0.dll
[DETECTION] Contains suspicious code HEUR/Malware
[WARNING] An error has occurred and the file was not deleted. ErrorID: 16003
[WARNING] The file could not be deleted!
C:\WINDOWS\system32\dadoor1.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '461b4718.qua'!
C:\WINDOWS\system32\DbgHlp32.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '47880179.qua'!
C:\WINDOWS\system32\dfmhhq.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '478e017e.qua'!
C:\WINDOWS\system32\dh3oor1.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '47540180.qua'!
C:\WINDOWS\system32\dkxfkuqa.exe
[DETECTION] Is the Trojan horse TR/Fotomoto.E
[INFO] The file was deleted!
C:\WINDOWS\system32\dmyhly.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '479a0187.qua'!
C:\WINDOWS\system32\ehflxx.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '47870185.qua'!
C:\WINDOWS\system32\epjfpv.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '478b018d.qua'!
C:\WINDOWS\system32\eyjatiay.exe
[DETECTION] Is the Trojan horse TR/Fotomoto.E
[INFO] The file was deleted!
C:\WINDOWS\system32\FD693CA5.EXE
[DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\fhouto.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '47900187.qua'!
C:\WINDOWS\system32\fihgauno.exe
[DETECTION] Is the Trojan horse TR/Click.Agent.NP
[INFO] The file was deleted!
C:\WINDOWS\system32\fydoor0.dll
[DETECTION] Contains suspicious code HEUR/Malware
[WARNING] An error has occurred and the file was not deleted. ErrorID: 16003
[WARNING] The file could not be deleted!
C:\WINDOWS\system32\fydoor1.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '461b47fb.qua'!
C:\WINDOWS\system32\gianor.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '4782018a.qua'!
C:\WINDOWS\system32\gwhnpx.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '47890199.qua'!
C:\WINDOWS\system32\gzmrotate.dll
[DETECTION] Contains detection pattern of the dropper DR/Agent.141853.A
[INFO] The file was deleted!
C:\WINDOWS\system32\gzudlk.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '4796019d.qua'!
C:\WINDOWS\system32\haregj.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '47930184.qua'!
C:\WINDOWS\system32\hbxzvu.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '47990185.qua'!
C:\WINDOWS\system32\hfmmdo.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '478e018a.qua'!
C:\WINDOWS\system32\hwsvps.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '4794019c.qua'!
C:\WINDOWS\system32\ihfqyo.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '4787018f.qua'!
C:\WINDOWS\system32\iqcogssp.exe
[DETECTION] Is the Trojan horse TR/Fotomoto.E
[INFO] The file was deleted!
C:\WINDOWS\system32\iskwwfvp.exe
[DETECTION] Is the Trojan horse TR/Fotomoto.E
[INFO] The file was deleted!
C:\WINDOWS\system32\jtdoor0.dll
[DETECTION] Is the Trojan horse TR/Spy.Gen
[WARNING] The file could not be deleted!
C:\WINDOWS\system32\k119098062612.exe
[DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11909827612.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11909827623.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11909827634.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11909827655.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11909827666.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k119098328012.exe
[DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k119178233514.exe
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '4752015f.qua'!
C:\WINDOWS\system32\k11923520202.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k119235229414.exe
[DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11923560282.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k119235631014.exe
[DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11930681077.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11930681102.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11930681113.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11930682992.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11930684902.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11930684903.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k119306864614.exe
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '47520163.qua'!
C:\WINDOWS\system32\k11931448011.exe
[DETECTION] Is the Trojan horse TR/PSW.Online.agb.2
[INFO] The file was deleted!
C:\WINDOWS\system32\k11931448012.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k119314500414.exe
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '47520164.qua'!
C:\WINDOWS\system32\k119314528912.exe
[DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k119314529114.exe
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '47520165.qua'!
C:\WINDOWS\system32\k119314535214.exe
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '46cc4706.qua'!
C:\WINDOWS\system32\k11931471722.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11931471733.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11931473086.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11931473096.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k119314731411.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k119314731814.exe
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '47520168.qua'!
C:\WINDOWS\system32\k119314731914.exe
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '46cc4709.qua'!
C:\WINDOWS\system32\k119314731915.exe
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '47520169.qua'!
C:\WINDOWS\system32\k11931485352.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k119314868814.exe
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '46cc470a.qua'!
C:\WINDOWS\system32\k11931489132.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11931489143.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11931489152.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11931489163.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11931489164.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11931489174.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11931489175.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11931489185.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11931489186.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11931489197.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11931489206.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11931489217.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k119314909614.exe
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '4752016d.qua'!
C:\WINDOWS\system32\k119314915414.exe
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '4752016e.qua'!
C:\WINDOWS\system32\k119315008114.exe
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '46cc470f.qua'!
C:\WINDOWS\system32\k119315013914.exe
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '47520170.qua'!
C:\WINDOWS\system32\k11931507932.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11931509822.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11931509833.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11931511142.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11931511162.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11931511163.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k119315125913.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k119315126014.exe
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '47520171.qua'!
C:\WINDOWS\system32\k11931513072.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11931513126.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11931514546.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11931514557.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11931514567.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k119315146112.exe
[DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k119315146414.exe
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '47520173.qua'!
C:\WINDOWS\system32\k119315146514.exe
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '47520174.qua'!
C:\WINDOWS\system32\k11931539363.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11931539373.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11931539374.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11931539394.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11931539428.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11931539438.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k119315394712.exe
[DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k119315395014.exe
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '47520176.qua'!
C:\WINDOWS\system32\k119315395114.exe
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '46cc4717.qua'!
C:\WINDOWS\system32\k11931564022.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11931565332.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11931565343.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11931565352.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11931565354.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11931565363.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11931565374.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11931565375.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11931566662.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11931566683.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11931566704.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11931566715.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11931568392.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11931568412.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11931568413.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11931586082.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11931587436.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11931587446.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11931587447.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11931587457.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k119315875112.exe
[DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k119315875214.exe
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '4752017d.qua'!
C:\WINDOWS\system32\k119315875414.exe
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '4752017e.qua'!
C:\WINDOWS\system32\k11931665612.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11932308352.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k119324048712.exe
[DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k119324048914.exe
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '4752017f.qua'!
C:\WINDOWS\system32\k119324050814.exe
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '46cc47e0.qua'!
C:\WINDOWS\system32\k11932468152.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k119324695511.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k119324695612.exe
[DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k119324695812.exe
[DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k119324695914.exe
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '47520181.qua'!
C:\WINDOWS\system32\k119324696014.exe
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '46cc47e2.qua'!
C:\WINDOWS\system32\k119324696015.exe
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '47520182.qua'!
C:\WINDOWS\system32\k11932514822.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11932516722.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11932518032.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11932518043.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11932518052.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11932518054.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11932518063.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11932518074.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11932518075.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11932519363.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11932519396.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11932519417.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11932519428.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11932519439.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k119325194611.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k119325194914.exe
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '47520186.qua'!
C:\WINDOWS\system32\k119325195015.exe
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '47520187.qua'!
C:\WINDOWS\system32\k119325195314.exe
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '46cc47e8.qua'!
C:\WINDOWS\system32\k119325195415.exe
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '47520189.qua'!
C:\WINDOWS\system32\k11932536668.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11932537213.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11932537224.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11932537235.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11932537246.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11932537267.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11932539182.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11932539193.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11932540462.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11932540482.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11932540483.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11932542452.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11932542463.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11932544322.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11932544333.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11932546212.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11932546223.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11933376422.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11933379592.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11933379603.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11933379614.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k119333911414.exe
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '4752018e.qua'!
C:\WINDOWS\system32\k11933396262.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11933396273.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11933399422.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11933399433.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11933402522.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11933402533.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k119334051512.exe
[DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k119334057614.exe
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '47520191.qua'!
C:\WINDOWS\system32\k119334196812.exe
[DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k119334202512.exe
[DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\keroce.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '479301c7.qua'!
C:\WINDOWS\system32\kqborb.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '478301d3.qua'!
C:\WINDOWS\system32\Kvsc3.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '479401d9.qua'!
C:\WINDOWS\system32\kyuifjax.exe
[DETECTION] Is the Trojan horse TR/Fotomoto.E
[INFO] The file was deleted!
C:\WINDOWS\system32\ljyqfh.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '479a01ce.qua'!
C:\WINDOWS\system32\ls2o1.dll
[DETECTION] Is the Trojan horse TR/Spy.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\LYMANGR.DLL
[DETECTION] Is the Trojan horse TR/PSW.Online.agb.2
[INFO] The file was deleted!
C:\WINDOWS\system32\mhdoor1.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '478501d0.qua'!
C:\WINDOWS\system32\moiphl.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '478a01d8.qua'!
C:\WINDOWS\system32\mppds.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '479101d9.qua'!
C:\WINDOWS\system32\msccrt.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '478401dd.qua'!
C:\WINDOWS\system32\MsIMMs32.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '476a01e0.qua'!
C:\WINDOWS\system32\MsPrint32D.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '477101e1.qua'!
C:\WINDOWS\system32\msvjhf.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '479701e2.qua'!
C:\WINDOWS\system32\mtvkzy.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '479701e4.qua'!
C:\WINDOWS\system32\mydoor1.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '478501ea.qua'!
C:\WINDOWS\system32\n1193231311k.exe
[DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\nllrjn.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '478d01df.qua'!
C:\WINDOWS\system32\NVDispDrv.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '476501cc.qua'!
C:\WINDOWS\system32\nxpgbq.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '479101f0.qua'!
C:\WINDOWS\system32\oauhxw.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '479601d9.qua'!
C:\WINDOWS\system32\ocvbvu.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '479701db.qua'!
C:\WINDOWS\system32\ohjqtt.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '478b01e1.qua'!
C:\WINDOWS\system32\otgnno.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '478801ee.qua'!
C:\WINDOWS\system32\ovktti.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '478c01f0.qua'!
C:\WINDOWS\system32\oxhryvyl.exe
[DETECTION] Is the Trojan horse TR/Fotomoto.E
[INFO] The file was deleted!
C:\WINDOWS\system32\pmhajh.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '478901ea.qua'!
C:\WINDOWS\system32\puwrxkqh.exe
[DETECTION] Is the Trojan horse TR/Fotomoto.E
[INFO] The file was deleted!
C:\WINDOWS\system32\qhdoor0.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '478501e7.qua'!
C:\WINDOWS\system32\qhdoor1.dll
[DETECTION] Contains suspicious code HEUR/Malware
[WARNING] An error has occurred and the file was not deleted. ErrorID: 16003
[WARNING] The file could not be deleted!
C:\WINDOWS\system32\qjdoor0.dll
[DETECTION] Contains suspicious code HEUR/Malware
[WARNING] An error has occurred and the file was not deleted. ErrorID: 16003
[WARNING] The file could not be deleted!
C:\WINDOWS\system32\qjdoor1.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '461b478b.qua'!
C:\WINDOWS\system32\qommljg.dll
[DETECTION] Is the Trojan horse TR/Vundo.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\qrktnx.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '478c01f4.qua'!
C:\WINDOWS\system32\rbdhun.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '478501e5.qua'!
C:\WINDOWS\system32\rrkwxt.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '478c01f7.qua'!
C:\WINDOWS\system32\rvhqgl.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '478901fb.qua'!
C:\WINDOWS\system32\rxdoor0.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '478501fd.qua'!
C:\WINDOWS\system32\rxdoor1.dll
[DETECTION] Contains suspicious code HEUR/Malware
[WARNING] An error has occurred and the file was not deleted. ErrorID: 16003
[WARNING] The file could not be deleted!
C:\WINDOWS\system32\SHQ.DLL
[DETECTION] Is the Trojan horse TR/PSW.Online.agb.2
[INFO] The file was deleted!
C:\WINDOWS\system32\tjqdvb.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '479201f6.qua'!
C:\WINDOWS\system32\tldoor0.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '478501f9.qua'!
C:\WINDOWS\system32\tldoor1.dll
[DETECTION] Contains suspicious code HEUR/Malware
[WARNING] An error has occurred and the file was not deleted. ErrorID: 16003
[WARNING] The file could not be deleted!
C:\WINDOWS\system32\tupewk.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '47910203.qua'!
C:\WINDOWS\system32\tyzoio.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '479b0207.qua'!
C:\WINDOWS\system32\uleddb.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '478601fb.qua'!
C:\WINDOWS\system32\umvqvw.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '479701fc.qua'!
C:\WINDOWS\system32\upxdnd.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '47990200.qua'!
C:\WINDOWS\system32\uqehbu.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '47860201.qua'!
C:\WINDOWS\system32\urefpetw.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '47860202.qua'!
C:\WINDOWS\system32\urtvqm.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '47950203.qua'!
C:\WINDOWS\system32\usuwxs.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '47960204.qua'!
C:\WINDOWS\system32\vxkbpn.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '478c020b.qua'!
C:\WINDOWS\system32\wddoor0.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '478501f8.qua'!
C:\WINDOWS\system32\wddoor1.dll
[DETECTION] Contains suspicious code HEUR/Malware
[WARNING] An error has occurred and the file was not deleted. ErrorID: 16003
[WARNING] The file could not be deleted!
C:\WINDOWS\system32\wgdoor1.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '478501fc.qua'!
C:\WINDOWS\system32\wivkxq.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '47970200.qua'!
C:\WINDOWS\system32\wkcydvjh.exe
[DETECTION] Is the Trojan horse TR/Fotomoto.E
[INFO] The file was deleted!
C:\WINDOWS\system32\wldoor0.dll
[DETECTION] Contains suspicious code HEUR/Malware
[WARNING] An error has occurred and the file was not deleted. ErrorID: 16003
[WARNING] The file could not be deleted!
C:\WINDOWS\system32\wldoor1.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '461b4465.qua'!
C:\WINDOWS\system32\wodoor1.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '47850209.qua'!
C:\WINDOWS\system32\wrmwwp.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '478e020d.qua'!
C:\WINDOWS\system32\x5cz0.dll
[DETECTION] Is the Trojan horse TR/Spy.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\x5cz1.dll
[DETECTION] Is the Trojan horse TR/Spy.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\xdqtbk.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '47920202.qua'!
C:\WINDOWS\system32\xdxs1.dll
[DETECTION] Is the Trojan horse TR/Spy.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\xdzdbe.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '479b0202.qua'!
C:\WINDOWS\system32\xk0s1.dll
[DETECTION] Is the Trojan horse TR/Spy.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\xk1s1.dll
[DETECTION] Is the Trojan horse TR/Spy.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\xk8s1.dll
[DETECTION] Is the Trojan horse TR/Spy.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\xkikcjjk.exe
[DETECTION] Is the Trojan horse TR/Fotomoto.E
[INFO] The file was deleted!
C:\WINDOWS\system32\xxywvww.dll
[DETECTION] Is the Trojan horse TR/Vundo.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\ypfqjp.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '47870210.qua'!
C:\WINDOWS\system32\ytmlddet.dll
[DETECTION] Is the Trojan horse TR/BHO.AKY
[INFO] The file was deleted!
C:\WINDOWS\system32\ywqrtt.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '47920218.qua'!
C:\WINDOWS\system32\ztdoor0.dll
[DETECTION] Is the Trojan horse TR/Spy.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\zwxxxd.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '47990219.qua'!
C:\WINDOWS\system32\zxdoor1.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '4785021a.qua'!
C:\WINDOWS\system32\__c003E4BC.dat
[DETECTION] Contains suspicious code HEUR/Malware
[WARNING] An error has occurred and the file was not deleted. ErrorID: 16003
[WARNING] The file could not be deleted!
C:\WINDOWS\system32\drivers\dtscsi.sys
[WARNING] The file could not be opened!
C:\WINDOWS\system32\drivers\sptd.sys
[WARNING] The file could not be opened!
C:\WINDOWS\system32\drivers\sptd6173.sys
[WARNING] The file could not be opened!
C:\WINDOWS\Temp\LYLOADMR.EXE
[DETECTION] Is the Trojan horse TR/PSW.Online.agb.2
[INFO] The file was deleted!
C:\WINDOWS\Temp\SHQ.DLL
[DETECTION] Is the Trojan horse TR/PSW.Online.agb.2
[INFO] The file was deleted!
Begin scan in 'D:\' <HP_RECOVERY>
D:\auto.exe
[DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
[INFO] The file was deleted!
D:\System Volume Information\_restore{B0D22BE2-A227-4068-A48A-E6B79217B4BA}\RP145\A0067888.exe
[DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
[INFO] The file was deleted!
D:\System Volume Information\_restore{B0D22BE2-A227-4068-A48A-E6B79217B4BA}\RP146\A0070930.exe
[DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
[INFO] The file was deleted!
D:\System Volume Information\_restore{B0D22BE2-A227-4068-A48A-E6B79217B4BA}\RP155\A0071919.exe
[DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
[INFO] The file was deleted!
D:\System Volume Information\_restore{B0D22BE2-A227-4068-A48A-E6B79217B4BA}\RP158\A0077675.exe
[DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
[INFO] The file was deleted!
End of the scan: jeudi, 25. octobre 2007 22:52
Used time: 40:05 min
The scan has been done completely.
6669 Scanning directories
295154 Files were scanned
243 viruses and/or unwanted programs were found
131 Files were classified as suspicious:
242 files were deleted
0 files were repaired
118 files were moved to quarantine
0 files were renamed
4 Files cannot be scanned
294911 Files not concerned
9057 Archives were scanne
clownface
Messages postés
1490
Date d'inscription
mardi 28 août 2007
Statut
Membre
Dernière intervention
15 juin 2008
73
25 oct. 2007 à 23:43
25 oct. 2007 à 23:43
eh bé...
on va recommencer ce scan pour voir un peu mieux ou on en est.
postes le rapport, ainsi qu'un nouvel hijackthis ensuite.
(par contre je quitte pour ce soir, je serai de retour demain soir)
A+
on va recommencer ce scan pour voir un peu mieux ou on en est.
postes le rapport, ainsi qu'un nouvel hijackthis ensuite.
(par contre je quitte pour ce soir, je serai de retour demain soir)
A+
Vous n’avez pas trouvé la réponse que vous recherchez ?
Posez votre question
clownface
Messages postés
1490
Date d'inscription
mardi 28 août 2007
Statut
Membre
Dernière intervention
15 juin 2008
73
26 oct. 2007 à 00:10
26 oct. 2007 à 00:10
il faut dire qu'il y avait du monde...
j'espère que tu as bien installé le parefeu et que tu ne laisses rien passé que tu ne connais pas
bon j'le dis plus, je file ! A+
j'espère que tu as bien installé le parefeu et que tu ne laisses rien passé que tu ne connais pas
bon j'le dis plus, je file ! A+
Bon alors jai un autre ptit probleme la , jai fais les scans etc pour avoir un rapports avec moin de 1500 virus ou autre logiciel malveillant, et mtn effectivement il ne trouve plus rien , mais je maintenant je suis oblige de le demarrer en mode sans echec si je veux pouvoir faire quelquechose, car en mode normal le bureau bloque au demarrage, et je ne peut rien faire, il nya rien qui demarre ni l'antivirus ni zonealarm au demarrage, et quand je fais un scan en mode sans echec il ne trouve plus rien , et en ce moment je ne peut plus rien faire d'autre dessus , c'est l'ordinateur de mon colocataire et il est parti pour le week end avec, il ne reviendra que dimanche soir.
clownface
Messages postés
1490
Date d'inscription
mardi 28 août 2007
Statut
Membre
Dernière intervention
15 juin 2008
73
26 oct. 2007 à 19:43
26 oct. 2007 à 19:43
bonsoir,
ok on verra dimanche soir alors.
met-il des messages d'erreur au démarrage ?
ok on verra dimanche soir alors.
met-il des messages d'erreur au démarrage ?
bonsoir
euh non il ne met aucun message d'erreur , il bloque juste on ne peut rien faire meme pas ouvrir le gestionnnaire de tache
euh non il ne met aucun message d'erreur , il bloque juste on ne peut rien faire meme pas ouvrir le gestionnnaire de tache
clownface
Messages postés
1490
Date d'inscription
mardi 28 août 2007
Statut
Membre
Dernière intervention
15 juin 2008
73
27 oct. 2007 à 23:54
27 oct. 2007 à 23:54
bonsoir,
ok, tu reposteras un nouvel hijackthis.
ok, tu reposteras un nouvel hijackthis.