Sujet Précédent Sujet Suivant

Bonjour petit probleme de virus ^^

mach -  
clownface Messages postés 1490 Statut Membre -
Bonjour,voila, j'ai un petit probleme de virus j'ai essayer tout les antivirus, et antispyware a ma disposition et impossible de l'enlever il revient a chaque demarrage je joint un rapport hijackthis a mon message , je vous remercie d'avance ^^.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:13:18, on 25.10.2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16544)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\WINDOWS\system32\kyuifjax.exe
C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\wanmpsvc.exe
C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe
C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe
C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Hewlett-Packard\HP Pavilion Webcam\tsnp2std.exe
C:\Program Files\HP\Digital Imaging\bin\hpotdd01.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Intel\Wireless\Bin\Dot1XCfg.exe
C:\WINDOWS\IGM.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\WINDOWS\swchost.exe
C:\WINDOWS\IGM.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,First Home Page = C:\Program Files\AOL Toolbar\welcome.html
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O3 - Toolbar: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [QlbCtrl] %ProgramFiles%\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start
O4 - HKLM\..\Run: [Cpqset] C:\Program Files\HPQ\Default Settings\cpqset.exe
O4 - HKLM\..\Run: [RecGuard] C:\Windows\SMINST\RecGuard.exe
O4 - HKLM\..\Run: [Workflow] E:\Workflow.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [SpeedTouch USB Diagnostics] "C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe" /icon
O4 - HKLM\..\Run: [IntelZeroConfig] "C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe"
O4 - HKLM\..\Run: [SVCHOSTwin32] C:\WINDOWS\WINDOWS\SVCHOSTwin32.exe
O4 - HKLM\..\Run: [GenProtect] C:\WINDOWS\GenProtect.exe
O4 - HKLM\..\Run: [WinSysW] C:\WINDOWS\swchost.exe
O4 - HKLM\..\Run: [MFMJ] C:\WINDOWS\system32\MFMJEXE.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [SearchIndexer] rundll32.exe "C:\WINDOWS\system32\hsxlxrtj.dll",sitypnow
O4 - HKLM\..\Run: [7795be10] rundll32.exe "C:\WINDOWS\system32\boukfqkj.dll",b
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [Kvsc3] C:\WINDOWS\Kvsc3.exe
O4 - HKLM\..\Run: [AVPSrv] C:\WINDOWS\AVPSrv.exe
O4 - HKLM\..\Run: [mppds] C:\WINDOWS\mppds.exe
O4 - HKLM\..\Run: [MsIMMs32] C:\WINDOWS\MsIMMs32.exe
O4 - HKLM\..\Run: [NVDispDrv] C:\WINDOWS\NVDispDrv.exe
O4 - HKLM\..\Run: [MsPrint32D] C:\WINDOWS\MsPrint32D.exe
O4 - HKLM\..\Run: [msccrt] C:\WINDOWS\msccrt.exe
O4 - HKLM\..\Run: [cmdbcs] C:\WINDOWS\cmdbcs.exe
O4 - HKLM\..\Run: [upxdnd] C:\WINDOWS\upxdnd.exe
O4 - HKLM\..\Run: [DbgHlp32] C:\WINDOWS\DbgHlp32.exe
O4 - HKLM\..\Run: [WinSysM] C:\WINDOWS\IGM.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [SVCHOSTwin32] C:\WINDOWS\WINDOWS\SVCHOSTwin32.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [updateMgr] C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe AcRdB7_0_9
O4 - HKLM\..\Policies\Explorer\Run: [MSDEG32] LYLoader.exe
O4 - HKLM\..\Policies\Explorer\Run: [MSDWG32] LYLoadbr.exe
O4 - HKLM\..\Policies\Explorer\Run: [MSDCG32 ] LYLeador.exe
O4 - HKLM\..\Policies\Explorer\Run: [MSDOG32] LYLoador.exe
O4 - HKLM\..\Policies\Explorer\Run: [MSDSG32] LYLoadar.exe
O4 - HKLM\..\Policies\Explorer\Run: [MSDMG32] LYLoadmr.exe
O4 - HKLM\..\Policies\Explorer\Run: [MSDHG32] LYLoadhr.exe
O4 - HKLM\..\Policies\Explorer\Run: [MSDQG32] LYLoadqr.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: HP Pavilion Webcam Tray Icon.lnk = ?
O4 - Global Startup: hpoddt01.exe.lnk = ?
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: SVCHOSTwin32.exe.lnk = C:\WINDOWS\WINDOWS\SVCHOSTwin32.exe
O8 - Extra context menu item: &Recherche AOL Toolbar - res://C:\Program Files\AOL Toolbar\toolbar.dll/SEARCH.HTML
O8 - Extra context menu item: Download all with Free Download Manager - file://C:\Program Files\Free Download Manager\dlall.htm
O8 - Extra context menu item: Download selected with Free Download Manager - file://C:\Program Files\Free Download Manager\dlselected.htm
O8 - Extra context menu item: Download Using &BitSpirit - C:\Program Files\BitSpirit\bsurl.htm
O8 - Extra context menu item: Download with Free Download Manager - file://C:\Program Files\Free Download Manager\dllink.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O9 - Extra button: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll
O9 - Extra 'Tools' menuitem: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=https://www.msn.com/de-ch?cobrand=hp.msn.com&ocid=HPDHP&pc=HPDTDF&checklang=1
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://appldnld.apple.com/QuickTime/qtactivex/qtplugin.cab
O16 - DPF: {512FC5A1-7DE1-43F1-BC0C-371622FCB409} (TotalScan Installer Class) - https://www.pandasecurity.com/en/homeusers/online-antivirus/?ref=activescan
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{362030BB-4F5F-408F-AC05-7716DAAC7FE9}: NameServer = 85.68.0.8,85.68.0.7
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: AOL Connectivity Service (AOL ACS) - AOL LLC - C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: DomainService - - C:\WINDOWS\system32\kyuifjax.exe
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: TuneUp WinStyler Theme Service (TUWinStylerThemeSvc) - TuneUp Software GmbH - C:\Program Files\TuneUp Utilities 2006\WinStylerThemeSvc.exe
O23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - C:\WINDOWS\wanmpsvc.exe

10 réponses

Réponse 1 / 10
clownface Messages postés 1490 Statut Membre 73
 
Bonsoir,

petit mais costaud...
problème n°1 tu n'as ni antivirus, ni parefeu sur ton poste !!!!

commences par installer ça : https://www.malekal.com/avira-free-security-antivirus-gratuit/
puis là tu trouveras des liens pour un parefeu : http://www.commentcamarche.net/faq/sujet 3486 securite le parefeu de windows xp

ensuite fais un scan antivirus, et postes le rapport
0
Réponse 2 / 10
mach
 
d'abord merci pour ton aide!! et je vais faire ça tout de suite!
0
Réponse 3 / 10
mach
 
bon alors voila le rapport de l'antivirus , et il ya un truc qui ne veut pas partir du tout sussenommé "TR/vundo.gen"

AntiVir PersonalEdition Classic
Report file date: jeudi, 25. octobre 2007 22:12

Scanning for 835736 virus strains and unwanted programs.

Licensed to: Avira AntiVir PersonalEdition Classic
Serial number: 0000149996-ADJIE-0001
Platform: Windows XP
Windows version: (Service Pack 2) [5.1.2600]
Username: PC1
Computer name: CRICRI

Version information:
BUILD.DAT : 270 15603 Bytes 19.09.2007 13:32:00
AVSCAN.EXE : 7.0.6.1 290856 Bytes 23.08.2007 12:16:29
AVSCAN.DLL : 7.0.6.0 49192 Bytes 16.08.2007 11:23:51
LUKE.DLL : 7.0.5.3 147496 Bytes 14.08.2007 14:32:47
LUKERES.DLL : 7.0.6.1 10280 Bytes 21.08.2007 11:35:20
ANTIVIR0.VDF : 6.40.0.0 11030528 Bytes 18.07.2007 13:27:15
ANTIVIR1.VDF : 7.0.0.0 1640448 Bytes 13.09.2007 13:26:55
ANTIVIR2.VDF : 7.0.0.1 2048 Bytes 13.09.2007 13:27:04
ANTIVIR3.VDF : 7.0.0.2 2048 Bytes 13.09.2007 13:27:13
AVEWIN32.DLL : 7.6.0.15 2806272 Bytes 17.09.2007 16:43:56
AVWINLL.DLL : 1.0.0.7 14376 Bytes 26.02.2007 09:36:26
AVPREF.DLL : 7.0.2.2 25640 Bytes 18.07.2007 06:39:17
AVREP.DLL : 7.0.0.1 155688 Bytes 16.04.2007 12:16:24
AVPACK32.DLL : 7.3.0.15 360488 Bytes 03.08.2007 07:46:00
AVREG.DLL : 7.0.1.6 30760 Bytes 18.07.2007 06:17:06
AVARKT.DLL : 1.0.0.20 278568 Bytes 28.08.2007 11:26:33
AVEVTLOG.DLL : 7.0.0.20 86056 Bytes 18.07.2007 06:10:18
NETNT.DLL : 7.0.0.0 7720 Bytes 08.03.2007 10:09:42
RCIMAGE.DLL : 7.0.1.30 2342952 Bytes 07.08.2007 11:38:13
RCTEXT.DLL : 7.0.62.0 86056 Bytes 21.08.2007 11:50:37
SQLITE3.DLL : 3.3.17.1 339968 Bytes 23.07.2007 08:37:21

Configuration settings for the scan:
Jobname..........................: Complete system scan
Configuration file...............: c:\program files\avira\antivir personaledition classic\sysscan.avp
Logging..........................: low
Primary action...................: interactive
Secondary action.................: ignore
Scan master boot sector..........: off
Scan boot sector.................: on
Boot sectors.....................: D:,
Scan memory......................: on
Process scan.....................: on
Scan registry....................: on
Search for rootkits..............: off
Scan all files...................: Intelligent file selection
Scan archives....................: on
Recursion depth..................: 20
Smart extensions.................: on
Macro heuristic..................: on
File heuristic...................: medium

Start of the scan: jeudi, 25. octobre 2007 22:12

The scan of running processes will be started
Scan process 'avscan.exe' - '1' Module(s) have been scanned
Scan process 'avcenter.exe' - '1' Module(s) have been scanned
Scan process 'explorer.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'guard.exe' - '1' Module(s) have been scanned
Scan process 'aawservice.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'lsass.exe' - '1' Module(s) have been scanned
Scan process 'services.exe' - '1' Module(s) have been scanned
Scan process 'winlogon.exe' - '1' Module(s) have been scanned
Scan process 'csrss.exe' - '1' Module(s) have been scanned
Scan process 'smss.exe' - '1' Module(s) have been scanned
13 processes with 13 modules were scanned

Start scanning boot sectors:
Boot sector 'C:\'
[NOTE] No virus was found!
Boot sector 'D:\'
[NOTE] No virus was found!

Starting to scan the registry.
C:\WINDOWS\GenProtect.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\GenProtect.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
C:\WINDOWS\swchost.exe
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '4783f941.qua'!
C:\WINDOWS\swchost.exe
[DETECTION] Contains suspicious code HEUR/Malware
C:\WINDOWS\system32\MFMJEXE.exe
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '476df910.qua'!
C:\WINDOWS\system32\MFMJEXE.exe
[DETECTION] Contains suspicious code HEUR/Malware
C:\WINDOWS\Kvsc3.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\Kvsc3.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
C:\WINDOWS\AVPSrv.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\AVPSrv.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
C:\WINDOWS\mppds.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\mppds.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
C:\WINDOWS\MsIMMs32.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\MsIMMs32.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
C:\WINDOWS\NVDispDrv.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\NVDispDrv.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
C:\WINDOWS\MsPrint32D.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\MsPrint32D.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
C:\WINDOWS\msccrt.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\msccrt.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
C:\WINDOWS\cmdbcs.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\cmdbcs.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
C:\WINDOWS\upxdnd.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\upxdnd.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
C:\WINDOWS\DbgHlp32.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\DbgHlp32.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
C:\WINDOWS\IGM.exe
[DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
[INFO] The file was deleted!
C:\WINDOWS\IGM.exe
[DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
C:\WINDOWS\system32\LYLOADER.EXE
[DETECTION] Is the Trojan horse TR/PSW.Online.agb.2
[INFO] The file was deleted!
C:\WINDOWS\system32\LYLOADER.EXE
[DETECTION] Is the Trojan horse TR/PSW.Online.agb.2
C:\WINDOWS\system32\LYLOADMR.EXE
[DETECTION] Is the Trojan horse TR/PSW.Online.agb.2
[INFO] The file was deleted!
C:\WINDOWS\system32\LYLOADMR.EXE
[DETECTION] Is the Trojan horse TR/PSW.Online.agb.2

The registry was scanned ( '57' files ).

Starting the file scan:

Begin scan in 'C:\'
C:\auto.exe
[DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
[INFO] The file was deleted!
C:\pagefile.sys
[WARNING] The file could not be opened!
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\20E62693.exe
[DETECTION] Contains detection pattern of the worm WORM/Alcra.B
[INFO] The file was deleted!
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\222636E6.exe
[DETECTION] Contains detection pattern of the worm WORM/Rbot.174080
[INFO] The file was deleted!
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\22D36827.exe
[DETECTION] Contains detection pattern of the worm WORM/Rbot.174080
[INFO] The file was deleted!
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\24F121D3.exe
[DETECTION] Contains detection pattern of the worm WORM/Rbot.174080
[INFO] The file was deleted!
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\48FE554B.exe
[DETECTION] Contains detection pattern of the worm WORM/Rbot.174080
[INFO] The file was deleted!
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\4C3529C2.exe
[DETECTION] Contains detection pattern of the worm WORM/Alcra.B
[INFO] The file was deleted!
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\65504C13.exe
[DETECTION] Is the Trojan horse TR/Dldr.Nsis.Ag.U.4
[INFO] The file was deleted!
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\750F3A91.exe
[DETECTION] Contains detection pattern of the worm WORM/RJUMP.D
[INFO] The file was deleted!
C:\Documents and Settings\PC1\Local Settings\Temp\LYLOADER.EXE
[DETECTION] Is the Trojan horse TR/PSW.Online.agb.2
[INFO] The file was deleted!
C:\Documents and Settings\PC1\Local Settings\Temp\LYMANGR.DLL
[DETECTION] Is the Trojan horse TR/PSW.Online.agb.2
[INFO] The file was deleted!
C:\Documents and Settings\PC1\Local Settings\Temp\SHQ.DLL
[DETECTION] Is the Trojan horse TR/PSW.Online.agb.2
[INFO] The file was deleted!
C:\Documents and Settings\PC1\Temporary Internet Files\Content.IE5\2MCG2Y7Y\f2b4657b5568d072[1].exe
[DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
[INFO] The file was deleted!
C:\Documents and Settings\PC1\Temporary Internet Files\Content.IE5\2MCG2Y7Y\mosx1024[1]
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '4793fa3a.qua'!
C:\Documents and Settings\PC1\Temporary Internet Files\Content.IE5\4KN7B1JM\mh0618[1].exe
[DETECTION] Is the Trojan horse TR/PSW.Online.agb.2
[INFO] The file was deleted!
C:\Documents and Settings\PC1\Temporary Internet Files\Content.IE5\4KN7B1JM\my0616[1].exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\Documents and Settings\PC1\Temporary Internet Files\Content.IE5\4KN7B1JM\qj0617[1].exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\Documents and Settings\PC1\Temporary Internet Files\Content.IE5\4KN7B1JM\tl0619[1].exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\Documents and Settings\PC1\Temporary Internet Files\Content.IE5\4KN7B1JM\vasya[1]
[DETECTION] Is the Trojan horse TR/Fotomoto.E
[INFO] The file was deleted!
C:\Documents and Settings\PC1\Temporary Internet Files\Content.IE5\AYSTUGY7\jh0619[1].exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\Documents and Settings\PC1\Temporary Internet Files\Content.IE5\AYSTUGY7\qqsg[1].exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\Documents and Settings\PC1\Temporary Internet Files\Content.IE5\AYSTUGY7\wl0618[1].exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\Documents and Settings\PC1\Temporary Internet Files\Content.IE5\AYSTUGY7\zt0616[1].exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\Documents and Settings\PC1\Temporary Internet Files\Content.IE5\MJPH6RK3\cq0619[1].exe
[DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
[INFO] The file was deleted!
C:\Documents and Settings\PC1\Temporary Internet Files\Content.IE5\MJPH6RK3\cs0619[1].exe
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '4750fa64.qua'!
C:\Documents and Settings\PC1\Temporary Internet Files\Content.IE5\MJPH6RK3\dh0616[1].exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\Documents and Settings\PC1\Temporary Internet Files\Content.IE5\MJPH6RK3\dh3[1].exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\Documents and Settings\PC1\Temporary Internet Files\Content.IE5\MJPH6RK3\f2b4657b5568d072[1].exe
[DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
[INFO] The file was deleted!
C:\Documents and Settings\PC1\Temporary Internet Files\Content.IE5\MJPH6RK3\wd0618[1].exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\Documents and Settings\PC1\Temporary Internet Files\Content.IE5\MJPH6RK3\wow0617[1].exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\Program Files\provies.exe
[DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
[INFO] The file was deleted!
C:\Program Files\Fichiers communs\fjOs0r.dll
[DETECTION] Contains suspicious code HEUR/Crypted
[INFO] The file was moved to '476ffc09.qua'!
C:\Program Files\Internet Explorer\OnlO0r.bak
[DETECTION] Is the Trojan horse TR/AutoRun.BK
[INFO] The file was deleted!
C:\Program Files\Internet Explorer\OnlO0r.dll
[DETECTION] Contains suspicious code HEUR/Crypted
[WARNING] An error has occurred and the file was not deleted. ErrorID: 16003
[WARNING] The file could not be deleted!
C:\Program Files\Internet Explorer\rksldk.bak
[DETECTION] Is the Trojan horse TR/AutoRun.BK
[INFO] The file was deleted!
C:\Program Files\Panda Security\TotalScan\pskavs.dll
[DETECTION] Contains detection pattern of the Windows virus W95/Blumblebee.1738
[INFO] The file was deleted!
C:\Program Files\XoftSpySE\Slayerpatch_1.2.exe
[DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Hupigon.BV.358 Backdoor server programs
[INFO] The file was deleted!
C:\WINDOWS\136741MM.DLL
[DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
[INFO] The file was deleted!
C:\WINDOWS\136741WL.DLL
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '4756ffd8.qua'!
C:\WINDOWS\dtxjyi.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\eyuhor.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\gdtzxo.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\ifzknm.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\jmatrr.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\jyisdr.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\kmbqvn.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\kngcdt.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\kqrogx.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\ogpncw.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\olcgia.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\osfhxr.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\qucgqa.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\tfaucb.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\tglpzu.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\twqzwi.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\ueower.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\wrsrku.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\zvhfqt.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\3sak1.dll
[DETECTION] Is the Trojan horse TR/Spy.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\518FC92F.DLL
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '47590136.qua'!
C:\WINDOWS\system32\55550.dll
[DETECTION] Contains suspicious code HEUR/Malware
[WARNING] An error has occurred and the file was not deleted. ErrorID: 16003
[WARNING] The file could not be deleted!
C:\WINDOWS\system32\55551.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '4756013b.qua'!
C:\WINDOWS\system32\6ksx1.dll
[DETECTION] Is the Trojan horse TR/Spy.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\6lsd1.dll
[DETECTION] Is the Trojan horse TR/Spy.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\7338CE33.EXE
[DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\88xk1.dll
[DETECTION] Is the Trojan horse TR/Spy.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\9fdk1.dll
[DETECTION] Is the Trojan horse TR/Spy.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\9kxk1.dll
[DETECTION] Is the Trojan horse TR/Spy.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\as1x1.dll
[DETECTION] Is the Trojan horse TR/Spy.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\AVPSrv.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '47710161.qua'!
C:\WINDOWS\system32\ax1o1.dll
[DETECTION] Is the Trojan horse TR/Spy.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\bbxzdd.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '4799016e.qua'!
C:\WINDOWS\system32\bfdiig.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '47850172.qua'!
C:\WINDOWS\system32\bqkodr.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '478c017e.qua'!
C:\WINDOWS\system32\bryewu.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '479a017f.qua'!
C:\WINDOWS\system32\cbdtlg.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '47850170.qua'!
C:\WINDOWS\system32\cbpwuc.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '47910170.qua'!
C:\WINDOWS\system32\ckugcjcf.exe
[DETECTION] Is the Trojan horse TR/Fotomoto.E
[INFO] The file was deleted!
C:\WINDOWS\system32\cmdbcs.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '4785017d.qua'!
C:\WINDOWS\system32\cqdoor0.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '47850183.qua'!
C:\WINDOWS\system32\cqdoor1.dll
[DETECTION] Contains suspicious code HEUR/Malware
[WARNING] An error has occurred and the file was not deleted. ErrorID: 16003
[WARNING] The file could not be deleted!
C:\WINDOWS\system32\csdoor0.dll
[DETECTION] Contains suspicious code HEUR/Malware
[WARNING] An error has occurred and the file was not deleted. ErrorID: 16003
[WARNING] The file could not be deleted!
C:\WINDOWS\system32\csdoor1.dll
[DETECTION] Is the Trojan horse TR/Spy.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\dadoor0.dll
[DETECTION] Contains suspicious code HEUR/Malware
[WARNING] An error has occurred and the file was not deleted. ErrorID: 16003
[WARNING] The file could not be deleted!
C:\WINDOWS\system32\dadoor1.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '461b4718.qua'!
C:\WINDOWS\system32\DbgHlp32.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '47880179.qua'!
C:\WINDOWS\system32\dfmhhq.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '478e017e.qua'!
C:\WINDOWS\system32\dh3oor1.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '47540180.qua'!
C:\WINDOWS\system32\dkxfkuqa.exe
[DETECTION] Is the Trojan horse TR/Fotomoto.E
[INFO] The file was deleted!
C:\WINDOWS\system32\dmyhly.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '479a0187.qua'!
C:\WINDOWS\system32\ehflxx.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '47870185.qua'!
C:\WINDOWS\system32\epjfpv.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '478b018d.qua'!
C:\WINDOWS\system32\eyjatiay.exe
[DETECTION] Is the Trojan horse TR/Fotomoto.E
[INFO] The file was deleted!
C:\WINDOWS\system32\FD693CA5.EXE
[DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\fhouto.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '47900187.qua'!
C:\WINDOWS\system32\fihgauno.exe
[DETECTION] Is the Trojan horse TR/Click.Agent.NP
[INFO] The file was deleted!
C:\WINDOWS\system32\fydoor0.dll
[DETECTION] Contains suspicious code HEUR/Malware
[WARNING] An error has occurred and the file was not deleted. ErrorID: 16003
[WARNING] The file could not be deleted!
C:\WINDOWS\system32\fydoor1.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '461b47fb.qua'!
C:\WINDOWS\system32\gianor.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '4782018a.qua'!
C:\WINDOWS\system32\gwhnpx.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '47890199.qua'!
C:\WINDOWS\system32\gzmrotate.dll
[DETECTION] Contains detection pattern of the dropper DR/Agent.141853.A
[INFO] The file was deleted!
C:\WINDOWS\system32\gzudlk.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '4796019d.qua'!
C:\WINDOWS\system32\haregj.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '47930184.qua'!
C:\WINDOWS\system32\hbxzvu.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '47990185.qua'!
C:\WINDOWS\system32\hfmmdo.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '478e018a.qua'!
C:\WINDOWS\system32\hwsvps.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '4794019c.qua'!
C:\WINDOWS\system32\ihfqyo.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '4787018f.qua'!
C:\WINDOWS\system32\iqcogssp.exe
[DETECTION] Is the Trojan horse TR/Fotomoto.E
[INFO] The file was deleted!
C:\WINDOWS\system32\iskwwfvp.exe
[DETECTION] Is the Trojan horse TR/Fotomoto.E
[INFO] The file was deleted!
C:\WINDOWS\system32\jtdoor0.dll
[DETECTION] Is the Trojan horse TR/Spy.Gen
[WARNING] The file could not be deleted!
C:\WINDOWS\system32\k119098062612.exe
[DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11909827612.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11909827623.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11909827634.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11909827655.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11909827666.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k119098328012.exe
[DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k119178233514.exe
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '4752015f.qua'!
C:\WINDOWS\system32\k11923520202.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k119235229414.exe
[DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11923560282.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k119235631014.exe
[DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11930681077.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11930681102.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11930681113.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11930682992.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11930684902.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11930684903.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k119306864614.exe
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '47520163.qua'!
C:\WINDOWS\system32\k11931448011.exe
[DETECTION] Is the Trojan horse TR/PSW.Online.agb.2
[INFO] The file was deleted!
C:\WINDOWS\system32\k11931448012.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k119314500414.exe
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '47520164.qua'!
C:\WINDOWS\system32\k119314528912.exe
[DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k119314529114.exe
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '47520165.qua'!
C:\WINDOWS\system32\k119314535214.exe
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '46cc4706.qua'!
C:\WINDOWS\system32\k11931471722.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11931471733.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11931473086.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11931473096.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k119314731411.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k119314731814.exe
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '47520168.qua'!
C:\WINDOWS\system32\k119314731914.exe
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '46cc4709.qua'!
C:\WINDOWS\system32\k119314731915.exe
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '47520169.qua'!
C:\WINDOWS\system32\k11931485352.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k119314868814.exe
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '46cc470a.qua'!
C:\WINDOWS\system32\k11931489132.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11931489143.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11931489152.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11931489163.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11931489164.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11931489174.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11931489175.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11931489185.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11931489186.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11931489197.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11931489206.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11931489217.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k119314909614.exe
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '4752016d.qua'!
C:\WINDOWS\system32\k119314915414.exe
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '4752016e.qua'!
C:\WINDOWS\system32\k119315008114.exe
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '46cc470f.qua'!
C:\WINDOWS\system32\k119315013914.exe
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '47520170.qua'!
C:\WINDOWS\system32\k11931507932.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11931509822.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11931509833.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11931511142.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11931511162.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11931511163.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k119315125913.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k119315126014.exe
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '47520171.qua'!
C:\WINDOWS\system32\k11931513072.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11931513126.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11931514546.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11931514557.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11931514567.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k119315146112.exe
[DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k119315146414.exe
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '47520173.qua'!
C:\WINDOWS\system32\k119315146514.exe
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '47520174.qua'!
C:\WINDOWS\system32\k11931539363.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11931539373.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11931539374.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11931539394.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11931539428.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11931539438.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k119315394712.exe
[DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k119315395014.exe
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '47520176.qua'!
C:\WINDOWS\system32\k119315395114.exe
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '46cc4717.qua'!
C:\WINDOWS\system32\k11931564022.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11931565332.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11931565343.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11931565352.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11931565354.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11931565363.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11931565374.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11931565375.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11931566662.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11931566683.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11931566704.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11931566715.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11931568392.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11931568412.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11931568413.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11931586082.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11931587436.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11931587446.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11931587447.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11931587457.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k119315875112.exe
[DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k119315875214.exe
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '4752017d.qua'!
C:\WINDOWS\system32\k119315875414.exe
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '4752017e.qua'!
C:\WINDOWS\system32\k11931665612.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11932308352.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k119324048712.exe
[DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k119324048914.exe
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '4752017f.qua'!
C:\WINDOWS\system32\k119324050814.exe
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '46cc47e0.qua'!
C:\WINDOWS\system32\k11932468152.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k119324695511.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k119324695612.exe
[DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k119324695812.exe
[DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k119324695914.exe
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '47520181.qua'!
C:\WINDOWS\system32\k119324696014.exe
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '46cc47e2.qua'!
C:\WINDOWS\system32\k119324696015.exe
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '47520182.qua'!
C:\WINDOWS\system32\k11932514822.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11932516722.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11932518032.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11932518043.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11932518052.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11932518054.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11932518063.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11932518074.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11932518075.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11932519363.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11932519396.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11932519417.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11932519428.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11932519439.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k119325194611.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k119325194914.exe
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '47520186.qua'!
C:\WINDOWS\system32\k119325195015.exe
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '47520187.qua'!
C:\WINDOWS\system32\k119325195314.exe
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '46cc47e8.qua'!
C:\WINDOWS\system32\k119325195415.exe
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '47520189.qua'!
C:\WINDOWS\system32\k11932536668.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11932537213.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11932537224.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11932537235.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11932537246.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11932537267.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11932539182.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11932539193.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11932540462.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11932540482.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11932540483.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11932542452.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11932542463.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11932544322.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11932544333.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11932546212.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11932546223.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11933376422.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11933379592.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11933379603.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11933379614.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k119333911414.exe
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '4752018e.qua'!
C:\WINDOWS\system32\k11933396262.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11933396273.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11933399422.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11933399433.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11933402522.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k11933402533.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k119334051512.exe
[DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k119334057614.exe
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '47520191.qua'!
C:\WINDOWS\system32\k119334196812.exe
[DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\k119334202512.exe
[DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\keroce.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '479301c7.qua'!
C:\WINDOWS\system32\kqborb.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '478301d3.qua'!
C:\WINDOWS\system32\Kvsc3.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '479401d9.qua'!
C:\WINDOWS\system32\kyuifjax.exe
[DETECTION] Is the Trojan horse TR/Fotomoto.E
[INFO] The file was deleted!
C:\WINDOWS\system32\ljyqfh.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '479a01ce.qua'!
C:\WINDOWS\system32\ls2o1.dll
[DETECTION] Is the Trojan horse TR/Spy.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\LYMANGR.DLL
[DETECTION] Is the Trojan horse TR/PSW.Online.agb.2
[INFO] The file was deleted!
C:\WINDOWS\system32\mhdoor1.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '478501d0.qua'!
C:\WINDOWS\system32\moiphl.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '478a01d8.qua'!
C:\WINDOWS\system32\mppds.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '479101d9.qua'!
C:\WINDOWS\system32\msccrt.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '478401dd.qua'!
C:\WINDOWS\system32\MsIMMs32.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '476a01e0.qua'!
C:\WINDOWS\system32\MsPrint32D.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '477101e1.qua'!
C:\WINDOWS\system32\msvjhf.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '479701e2.qua'!
C:\WINDOWS\system32\mtvkzy.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '479701e4.qua'!
C:\WINDOWS\system32\mydoor1.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '478501ea.qua'!
C:\WINDOWS\system32\n1193231311k.exe
[DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\nllrjn.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '478d01df.qua'!
C:\WINDOWS\system32\NVDispDrv.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '476501cc.qua'!
C:\WINDOWS\system32\nxpgbq.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '479101f0.qua'!
C:\WINDOWS\system32\oauhxw.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '479601d9.qua'!
C:\WINDOWS\system32\ocvbvu.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '479701db.qua'!
C:\WINDOWS\system32\ohjqtt.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '478b01e1.qua'!
C:\WINDOWS\system32\otgnno.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '478801ee.qua'!
C:\WINDOWS\system32\ovktti.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '478c01f0.qua'!
C:\WINDOWS\system32\oxhryvyl.exe
[DETECTION] Is the Trojan horse TR/Fotomoto.E
[INFO] The file was deleted!
C:\WINDOWS\system32\pmhajh.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '478901ea.qua'!
C:\WINDOWS\system32\puwrxkqh.exe
[DETECTION] Is the Trojan horse TR/Fotomoto.E
[INFO] The file was deleted!
C:\WINDOWS\system32\qhdoor0.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '478501e7.qua'!
C:\WINDOWS\system32\qhdoor1.dll
[DETECTION] Contains suspicious code HEUR/Malware
[WARNING] An error has occurred and the file was not deleted. ErrorID: 16003
[WARNING] The file could not be deleted!
C:\WINDOWS\system32\qjdoor0.dll
[DETECTION] Contains suspicious code HEUR/Malware
[WARNING] An error has occurred and the file was not deleted. ErrorID: 16003
[WARNING] The file could not be deleted!
C:\WINDOWS\system32\qjdoor1.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '461b478b.qua'!
C:\WINDOWS\system32\qommljg.dll
[DETECTION] Is the Trojan horse TR/Vundo.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\qrktnx.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '478c01f4.qua'!
C:\WINDOWS\system32\rbdhun.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '478501e5.qua'!
C:\WINDOWS\system32\rrkwxt.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '478c01f7.qua'!
C:\WINDOWS\system32\rvhqgl.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '478901fb.qua'!
C:\WINDOWS\system32\rxdoor0.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '478501fd.qua'!
C:\WINDOWS\system32\rxdoor1.dll
[DETECTION] Contains suspicious code HEUR/Malware
[WARNING] An error has occurred and the file was not deleted. ErrorID: 16003
[WARNING] The file could not be deleted!
C:\WINDOWS\system32\SHQ.DLL
[DETECTION] Is the Trojan horse TR/PSW.Online.agb.2
[INFO] The file was deleted!
C:\WINDOWS\system32\tjqdvb.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '479201f6.qua'!
C:\WINDOWS\system32\tldoor0.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '478501f9.qua'!
C:\WINDOWS\system32\tldoor1.dll
[DETECTION] Contains suspicious code HEUR/Malware
[WARNING] An error has occurred and the file was not deleted. ErrorID: 16003
[WARNING] The file could not be deleted!
C:\WINDOWS\system32\tupewk.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '47910203.qua'!
C:\WINDOWS\system32\tyzoio.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '479b0207.qua'!
C:\WINDOWS\system32\uleddb.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '478601fb.qua'!
C:\WINDOWS\system32\umvqvw.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '479701fc.qua'!
C:\WINDOWS\system32\upxdnd.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '47990200.qua'!
C:\WINDOWS\system32\uqehbu.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '47860201.qua'!
C:\WINDOWS\system32\urefpetw.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '47860202.qua'!
C:\WINDOWS\system32\urtvqm.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '47950203.qua'!
C:\WINDOWS\system32\usuwxs.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '47960204.qua'!
C:\WINDOWS\system32\vxkbpn.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '478c020b.qua'!
C:\WINDOWS\system32\wddoor0.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '478501f8.qua'!
C:\WINDOWS\system32\wddoor1.dll
[DETECTION] Contains suspicious code HEUR/Malware
[WARNING] An error has occurred and the file was not deleted. ErrorID: 16003
[WARNING] The file could not be deleted!
C:\WINDOWS\system32\wgdoor1.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '478501fc.qua'!
C:\WINDOWS\system32\wivkxq.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '47970200.qua'!
C:\WINDOWS\system32\wkcydvjh.exe
[DETECTION] Is the Trojan horse TR/Fotomoto.E
[INFO] The file was deleted!
C:\WINDOWS\system32\wldoor0.dll
[DETECTION] Contains suspicious code HEUR/Malware
[WARNING] An error has occurred and the file was not deleted. ErrorID: 16003
[WARNING] The file could not be deleted!
C:\WINDOWS\system32\wldoor1.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '461b4465.qua'!
C:\WINDOWS\system32\wodoor1.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '47850209.qua'!
C:\WINDOWS\system32\wrmwwp.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '478e020d.qua'!
C:\WINDOWS\system32\x5cz0.dll
[DETECTION] Is the Trojan horse TR/Spy.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\x5cz1.dll
[DETECTION] Is the Trojan horse TR/Spy.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\xdqtbk.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '47920202.qua'!
C:\WINDOWS\system32\xdxs1.dll
[DETECTION] Is the Trojan horse TR/Spy.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\xdzdbe.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '479b0202.qua'!
C:\WINDOWS\system32\xk0s1.dll
[DETECTION] Is the Trojan horse TR/Spy.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\xk1s1.dll
[DETECTION] Is the Trojan horse TR/Spy.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\xk8s1.dll
[DETECTION] Is the Trojan horse TR/Spy.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\xkikcjjk.exe
[DETECTION] Is the Trojan horse TR/Fotomoto.E
[INFO] The file was deleted!
C:\WINDOWS\system32\xxywvww.dll
[DETECTION] Is the Trojan horse TR/Vundo.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\ypfqjp.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '47870210.qua'!
C:\WINDOWS\system32\ytmlddet.dll
[DETECTION] Is the Trojan horse TR/BHO.AKY
[INFO] The file was deleted!
C:\WINDOWS\system32\ywqrtt.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '47920218.qua'!
C:\WINDOWS\system32\ztdoor0.dll
[DETECTION] Is the Trojan horse TR/Spy.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\zwxxxd.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '47990219.qua'!
C:\WINDOWS\system32\zxdoor1.dll
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '4785021a.qua'!
C:\WINDOWS\system32\__c003E4BC.dat
[DETECTION] Contains suspicious code HEUR/Malware
[WARNING] An error has occurred and the file was not deleted. ErrorID: 16003
[WARNING] The file could not be deleted!
C:\WINDOWS\system32\drivers\dtscsi.sys
[WARNING] The file could not be opened!
C:\WINDOWS\system32\drivers\sptd.sys
[WARNING] The file could not be opened!
C:\WINDOWS\system32\drivers\sptd6173.sys
[WARNING] The file could not be opened!
C:\WINDOWS\Temp\LYLOADMR.EXE
[DETECTION] Is the Trojan horse TR/PSW.Online.agb.2
[INFO] The file was deleted!
C:\WINDOWS\Temp\SHQ.DLL
[DETECTION] Is the Trojan horse TR/PSW.Online.agb.2
[INFO] The file was deleted!
Begin scan in 'D:\' <HP_RECOVERY>
D:\auto.exe
[DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
[INFO] The file was deleted!
D:\System Volume Information\_restore{B0D22BE2-A227-4068-A48A-E6B79217B4BA}\RP145\A0067888.exe
[DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
[INFO] The file was deleted!
D:\System Volume Information\_restore{B0D22BE2-A227-4068-A48A-E6B79217B4BA}\RP146\A0070930.exe
[DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
[INFO] The file was deleted!
D:\System Volume Information\_restore{B0D22BE2-A227-4068-A48A-E6B79217B4BA}\RP155\A0071919.exe
[DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
[INFO] The file was deleted!
D:\System Volume Information\_restore{B0D22BE2-A227-4068-A48A-E6B79217B4BA}\RP158\A0077675.exe
[DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
[INFO] The file was deleted!

End of the scan: jeudi, 25. octobre 2007 22:52
Used time: 40:05 min

The scan has been done completely.

6669 Scanning directories
295154 Files were scanned
243 viruses and/or unwanted programs were found
131 Files were classified as suspicious:
242 files were deleted
0 files were repaired
118 files were moved to quarantine
0 files were renamed
4 Files cannot be scanned
294911 Files not concerned
9057 Archives were scanne
0
Réponse 4 / 10
clownface Messages postés 1490 Statut Membre 73
 
eh bé...
on va recommencer ce scan pour voir un peu mieux ou on en est.
postes le rapport, ainsi qu'un nouvel hijackthis ensuite.
(par contre je quitte pour ce soir, je serai de retour demain soir)
A+
0

Vous n’avez pas trouvé la réponse que vous recherchez ?

Posez votre question
Réponse 5 / 10
mach
 
ok merci de ton aide, je fais un autre scan, il yen a de plus en plus >_<, bonne nuit a demain
0
Réponse 6 / 10
clownface Messages postés 1490 Statut Membre 73
 
il faut dire qu'il y avait du monde...
j'espère que tu as bien installé le parefeu et que tu ne laisses rien passé que tu ne connais pas
bon j'le dis plus, je file ! A+
0
Réponse 7 / 10
mach
 
Bon alors jai un autre ptit probleme la , jai fais les scans etc pour avoir un rapports avec moin de 1500 virus ou autre logiciel malveillant, et mtn effectivement il ne trouve plus rien , mais je maintenant je suis oblige de le demarrer en mode sans echec si je veux pouvoir faire quelquechose, car en mode normal le bureau bloque au demarrage, et je ne peut rien faire, il nya rien qui demarre ni l'antivirus ni zonealarm au demarrage, et quand je fais un scan en mode sans echec il ne trouve plus rien , et en ce moment je ne peut plus rien faire d'autre dessus , c'est l'ordinateur de mon colocataire et il est parti pour le week end avec, il ne reviendra que dimanche soir.
0
Réponse 8 / 10
clownface Messages postés 1490 Statut Membre 73
 
bonsoir,
ok on verra dimanche soir alors.
met-il des messages d'erreur au démarrage ?
0
Réponse 9 / 10
mach
 
bonsoir
euh non il ne met aucun message d'erreur , il bloque juste on ne peut rien faire meme pas ouvrir le gestionnnaire de tache
0
Réponse 10 / 10
clownface Messages postés 1490 Statut Membre 73
 
bonsoir,

ok, tu reposteras un nouvel hijackthis.
0

Discussions similaires

comment écrire des petits chiffres ?
Elisa-x3 -
Luka_65 -

9 réponses
Dimensions L x l x H : comment lire ces infos ?
Miss-Curieuse -
valou -

8 réponses
[Ecrire Exposant 12] 10² ou 10³ ok mais...
tessai -
rayous -

43 réponses
Softonic,est-ce un virus ?
techmel1 -
techmel1 -

6 réponses
Comment écrire un chiffre en petit caractè
Essegnon -
transat -

5 réponses