help, je suis envahi de virus/vers W32 merci

Question

Bonjour a toutes et a tous,

depuis un certain moment je suis envahi de virus /vers W32, mon ordinateur rame a un point que je n arive meme plus a me connecter car sa coupe et je ne sais pas du tout quoi faire sachant que je suis nul en informatique.

j ai avast comme antivirus avec un ordinateur hp de 256mo de ram

merci de m aidez tres vite 

a bientot

je vous laisse mon Hijackthis   





Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 09:51:51, on 08/12/2007
Platform: Windows XP  (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\logonui.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\dllcache\windmns.exe
C:\WINDOWS\System32\dllcache\wintcpack.exe
C:\WINDOWS\System32
vsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\setup\avast.setup
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\System32\Gothic.exe
C:\WINDOWS\System32\WgaTray.exe
C:\WINDOWS\System32\load.exe
C:\WINDOWS\System32\eXtream.exe
C:\WINDOWS\System32\kdjfsdklfjsl.exe
C:\WINDOWS\System32\SADASDA.exe
C:\WINDOWS\System32\Srb0ty.exe
C:\WINDOWS\System32\Syst3m32.exe
C:\windows\system\hpsysdrv.exe
C:\HP\KBD\KBD.EXE
C:\WINDOWS\System32\hkcmd.exe
C:\Program Files\Microsoft Works\WksSb.exe
C:\WINDOWS\System32\pctspk.exe
C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb04.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\System32\GetWaylayer32.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\System32\xbvuxowlewiv.exe
C:\WINDOWS\System32\Win.exe
C:\WINDOWS\System32undll32.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\hp center\137903\Program\BackWeb-137903.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://neufportail.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.hpe.com/h41271/404D.aspx?cc=us&ll=en&url=http://domainredirects.ext.hpe.com/fr3.hpwis.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://srch-fr3.hpwis.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://srch-fr3.hpwis.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.hpe.com/h41271/404D.aspx?cc=us&ll=en&url=http://domainredirects.ext.hpe.com/fr3.hpwis.com/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE NvQTwk,NvCplDaemon initialize
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
O4 - HKLM\..\Run: [Microsoft Works Portfolio] C:\Program Files\Microsoft Works\WksSb.exe /AllUsers
O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Microsoft Works\WkDetect.exe
O4 - HKLM\..\Run: [PCTVOICE] pctspk.exe
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb04.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [kiss] C:\Program Files\killSh\pingy.exe
O4 - HKLM\..\Run: [Critical Error Safe32] C:\WINDOWS\System32\GetWaylayer32.exe
O4 - HKLM\..\Run: [HOT FIX] Gothic.exe
O4 - HKLM\..\Run: [Windows Service Agccnt] wanwwsx.exe
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.2\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [MicroSoft sys3s1] h4ckn3t.exe
O4 - HKLM\..\Run: [MicroSoft ssadsadas3s1] eXtream.exe
O4 - HKLM\..\Run: [MicroSoft ssadssjdhasjadas3s1] kdjfsdklfjsl.exe
O4 - HKLM\..\Run: [MicroSoft Getway mqbol] xbvuxowlewiv.exe
O4 - HKLM\..\Run: [MicroSoft ssas3s1] SADASDA.exe
O4 - HKLM\..\Run: [MicroSoft Legal Service] Srb0ty.exe
O4 - HKLM\..\Run: [Windows Secure Update] load.exe
O4 - HKLM\..\Run: [MicroSoft Legal Syst3m32] Syst3m32.exe
O4 - HKLM\..\Run: [smsger] C:\WINDOWS\System32\Win.exe
O4 - HKLM\..\Run: [MicroSoft Visual Framwork] MS32.exe
O4 - HKLM\..\Run: [WinDLL (Wseclayer.exe)] rundll32.exe C:\WINDOWS\System32\Wseclayer.exe,start
O4 - HKLM\..\RunServices: [HOT FIX] Gothic.exe
O4 - HKLM\..\RunServices: [Windows Service Agccnt] wanwwsx.exe
O4 - HKLM\..\RunServices: [MicroSoft sys3s1] h4ckn3t.exe
O4 - HKLM\..\RunServices: [MicroSoft ssadsadas3s1] eXtream.exe
O4 - HKLM\..\RunServices: [MicroSoft ssadssjdhasjadas3s1] kdjfsdklfjsl.exe
O4 - HKLM\..\RunServices: [MicroSoft Getway mqbol] xbvuxowlewiv.exe
O4 - HKLM\..\RunServices: [MicroSoft ssas3s1] SADASDA.exe
O4 - HKLM\..\RunServices: [MicroSoft Legal Service] Srb0ty.exe
O4 - HKLM\..\RunServices: [Windows Secure Update] load.exe
O4 - HKLM\..\RunServices: [MicroSoft Legal Syst3m32] Syst3m32.exe
O4 - HKLM\..\RunServices: [smsger] C:\WINDOWS\System32\Win.exe
O4 - HKLM\..\RunServices: [MicroSoft Visual Framwork] MS32.exe
O4 - HKLM\..\RunOnce: [HOT FIX] Gothic.exe
O4 - HKLM\..\RunOnce: [Windows Secure Update] load.exe
O4 - HKLM\..\RunOnce: [MicroSoft sys3s1] h4ckn3t.exe
O4 - HKLM\..\RunOnce: [MicroSoft ssadsadas3s1] eXtream.exe
O4 - HKLM\..\RunOnce: [MicroSoft ssadssjdhasjadas3s1] kdjfsdklfjsl.exe
O4 - HKLM\..\RunOnce: [MicroSoft ssas3s1] SADASDA.exe
O4 - HKLM\..\RunOnce: [MicroSoft Legal Service] Srb0ty.exe
O4 - HKLM\..\RunOnce: [MicroSoft Legal Syst3m32] Syst3m32.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [ErrorSafeFree] "C:\Program Files\ErrorSafe Free\uers.exe" /min
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [Critical Error Safe32] C:\WINDOWS\System32\GetWaylayer32.exe
O4 - HKCU\..\Run: [HOT FIX] Gothic.exe
O4 - HKCU\..\Run: [Windows Service Agccnt] wanwwsx.exe
O4 - HKCU\..\Run: [MicroSoft sys3s1] h4ckn3t.exe
O4 - HKCU\..\Run: [MicroSoft ssadsadas3s1] eXtream.exe
O4 - HKCU\..\Run: [MicroSoft ssadssjdhasjadas3s1] kdjfsdklfjsl.exe
O4 - HKCU\..\Run: [MicroSoft Getway mqbol] xbvuxowlewiv.exe
O4 - HKCU\..\Run: [MicroSoft ssas3s1] SADASDA.exe
O4 - HKCU\..\Run: [MicroSoft Legal Service] Srb0ty.exe
O4 - HKCU\..\Run: [Windows Secure Update] load.exe
O4 - HKCU\..\Run: [MicroSoft Legal Syst3m32] Syst3m32.exe
O4 - HKCU\..\RunOnce: [Windows Secure Update] load.exe
O4 - HKCU\..\RunOnce: [MicroSoft Legal Syst3m32] Syst3m32.exe
O4 - HKCU\..\RunOnce: [MicroSoft ssas3s1] SADASDA.exe
O4 - HKCU\..\RunOnce: [MicroSoft sys3s1] h4ckn3t.exe
O4 - HKCU\..\RunOnce: [MicroSoft ssadssjdhasjadas3s1] kdjfsdklfjsl.exe
O4 - HKCU\..\RunOnce: [HOT FIX] Gothic.exe
O4 - HKCU\..\RunOnce: [MicroSoft ssadsadas3s1] eXtream.exe
O4 - HKCU\..\RunOnce: [MicroSoft Legal Service] Srb0ty.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Run: [MicroSoft ssadssjdhasjadas3s1] kdjfsdklfjsl.exe (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Run: [MicroSoft sys3s1] h4ckn3t.exe (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Run: [MicroSoft Getway mqbol] qrcffqqysayn.exe (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Run: [MicroSoft ssas3s1] SADASDA.exe (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Run: [Critical Error Safe32] C:\WINDOWS\System32\GetWaylayer32.exe (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Run: [MicroSoft Legal Service] Srb0ty.exe (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Run: [Windows Secure Update] load.exe (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Run: [MicroSoft Legal Syst3m32] Syst3m32.exe (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Run: [MicroSoft Visual Framwork] MS32.exe (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [MicroSoft sys3s1] h4ckn3t.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [MicroSoft sys3s1] h4ckn3t.exe (User 'Default user')
O4 - Global Startup: hp center.lnk = C:\Program Files\hp center\137903\Program\BackWeb-137903.exe
O9 - Extra button: Organise-notes - {9455301C-CF6B-11D3-A266-00C04F689C50} - C:\Program Files\Fichiers communs\Microsoft Shared\Reference 2001\EROProj.dll
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\webelated.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\webelated.htm
O16 - DPF: {029FDBA6-3547-11D7-AA4C-0050BF051A00} (Rawflow ICD Client) - http://s.tf1.fr/mmdia/static/rawflow/clients/5.3.1.0/Rawflow.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w2/pr02/resources/MSNPUpld.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/...
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/...
O16 - DPF: {9D190AE6-C81E-4039-8061-978EBAD10073} (F-Secure Online Scanner 3.0) - http://www.securite.neuf.fr/Ols/fscax.cab
O16 - DPF: {CF40ACC5-E1BB-4AFF-AC72-04C2F616BCA7} (get_atlcom Class) - http://www.adobe.com/products/acrobat/nos/gp.cab
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Microsoft Windows DNS Manager - Unknown owner - C:\WINDOWS\System32\dllcache\windmns.exe
O23 - Service: Microsoft Windows TCP Ack Timing - Unknown owner - C:\WINDOWS\System32\dllcache\wintcpack.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32
vsvc32.exe

Lyonnais92 · Answer

Bonjour,

ton Windows est authentique (Cd avec clé de 25 caractères) ?

Télécharge SDFix (créé par AndyManchesta) et sauvegarde le sur ton Bureau.
http://downloads.andymanchesta.com/RemovalTools/SDFix.exe
Double clique sur SDFix.exe et choisis Install pour l'extraire dans un dossier dédié sur le Bureau. Redémarre ton ordinateur en mode sans échec en suivant la procédure que voici :
• Redémarre ton ordinateur
• Après avoir entendu l'ordinateur biper lors du démarrage, mais avant que l'icône Windows apparaisse, tapote la touche F8 (une pression par seconde).
• A la place du chargement normal de Windows, un menu avec différentes options devrait apparaître.
• Choisis la première option, pour exécuter Windows en mode sans échec, puis appuie sur "Entrée".
• Choisis ton compte.
Déroule la liste des instructions ci-dessous :
• Ouvre le dossier SDFix qui vient d'être créé dans le répertoire C:\ et double clique sur RunThis.cmd pour lancer le scrïpt.
• Appuie sur Y pour commencer le processus de nettoyage.
• Il va supprimer les services et les entrées du Registre de certains trojans trouvés puis te demandera d'appuyer sur une touche pour redémarrer.
• Appuie sur une touche pour redémarrer le PC.
• Ton système sera plus long pour redémarrer qu'à l'accoutumée car l'outil va continuer à s'exécuter et supprimer des fichiers.
• Après le chargement du Bureau, l'outil terminera son travail et affichera Finished.
• Appuie sur une touche pour finir l'exécution du scrïpt et charger les icônes de ton Bureau.
• Les icônes du Bureau affichées, le rapport SDFix s'ouvrira à l'écran et s'enregistrera aussi dans le dossier SDFix sous le nom Report.txt.
• Enfin, copie/colle le contenu du fichier Report.txt dans ta prochaine réponse sur le forum, avec un nouveau log Hijackthis !

scoubidou78 · Answer

bonjour lyonnais92,

je viens de voir ton message et je te  remercie de ton aide.

je vais faire ce que tu me dis tout a l heure car j ai quelques courses a faire avant.

peux tu me dire quels virus est present sur mon micro?


a toute a  l heure

scoubidou78 · Answer

j ai oublier de te dire que je n ai pas le cd windows xp puisque j ai acheter mon ordi hp avec windows XP FAMILIALE preinstallé.

je fais ce que tu m as dis ou je ne le fais pas?

MERCI ENCORE

Lyonnais92 · Answer

Re,

tu fais.

scoubidou78 · Answer

re,

voici le rapport sdfix comme convenu 


SDFix: Version 1.117

Run by Propri‚taire on 08/12/2007 at 17:29

Microsoft Windows XP [version 5.1.2600]

Running From: C:\SDFix

Safe Mode:
Checking Services: 


Restoring Windows Registry Values
Restoring Windows Default Hosts File

Rebooting...


Normal Mode:
Checking Files: 

Trojan Files Found:

C:\WINDOWS\SYSTEM32\QRCFFQ~1.EXE - Deleted
C:\WINDOWS\SYSTEM32\SOOZX.EXE - Deleted
C:\WINDOWS\SYSTEM32\XBVUXO~1.EXE - Deleted
C:\WINDOWS\SYSTEM32\SOOZX.EXE - Deleted
C:\WINDOWS\SYSTEM32\27031_~1.EXE - Deleted
C:\WINDOWS\SYSTEM32\APACHE.EXE - Deleted
C:\ADWARE.EXE - Deleted
C:\WINDOWS\system32\Sys32\klog.dat - Deleted
C:\WINDOWS\system32\aliases.ini  - Deleted
C:\WINDOWS\system32\control.ini  - Deleted
C:\WINDOWS\system32\FreeS3x.exe  - Deleted
C:\WINDOWS\system32\GetWaylayer32.exe  - Deleted
C:\WINDOWS\system32\Gothic.exe  - Deleted
C:\WINDOWS\system32\h4ckn3t.exe  - Deleted
C:\WINDOWS\system32\mirc.ini  - Deleted
C:\WINDOWS\system32\ms32.exe  - Deleted
C:\WINDOWS\system32emote.ini  - Deleted
C:\WINDOWS\system32\SADASDA.exe  - Deleted
C:\WINDOWS\system32\servers.ini  - Deleted
C:\WINDOWS\system32\win.exe  - Deleted



Folder C:\WINDOWS\system32\Sys32 - Removed

Removing Temp Files...

ADS Check:

C:\WINDOWS
No streams found. 

C:\WINDOWS\system32
No streams found. 

C:\WINDOWS\system32\svchost.exe
No streams found.
 
C:\WINDOWS\system32
toskrnl.exe
No streams found.
 


                                 Final Check:

catchme 0.3.1262.1 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2007-12-08 17:38:24
Windows 5.1.2600  NTFS

scanning hidden processes ...

scanning hidden services & system hive ...

scanning hidden registry entries ...

scanning hidden files ...

C:\Documents and Settings\Propriétaire\Local Settings\Temporary Internet Files\Content.IE5\EHG7M525\search[1].: 19111 bytes hidden from API

scan completed successfully
hidden processes: 0
hidden services: 0
hidden files: 1


Remaining Services:
------------------



Authorized Application Key Export:

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"h"="h:*:Enabled:Micrcsoft Windows Updeta"
"C:\WINDOWS\System32\Win.exe"="C:\WINDOWS\System32\Win.exe:*:Enabled:smsger"

Remaining Files:
---------------

File Backups: - C:\SDFix\backups\backups.zip

Files with Hidden Attributes:

Wed 11 Apr 2007        32,768 ...H. --- "C:\RACHIDA\~WRL0005.tmp"
Wed 11 Apr 2007        33,280 ...H. --- "C:\RACHIDA\~WRL2497.tmp"
Wed 11 Apr 2007        32,256 ...H. --- "C:\RACHIDA\~WRL3501.tmp"
Sun 25 Apr 1999        21,167 A..H. --- "C:\WINDOWS\SYSTEM32\gon.exe"
Wed  5 Dec 2007       458,752 ..SH. --- "C:\WINDOWS\SYSTEM32\Wseclayer.exe"
Fri 30 Nov 2007     1,771,008 A..HR --- "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP174\A0057648.exe"
Fri 30 Nov 2007       495,616 ..SHR --- "C:\WINDOWS\SYSTEM32\dllcache\windmns.exe"
Sun  2 Dec 2007       458,752 ..SHR --- "C:\WINDOWS\SYSTEM32\dllcache\wintcpack.exe"
Fri 30 Nov 2007     1,771,008 A..HR --- "C:\WINDOWS\SYSTEM32
dafs\Ghost.exe"
Tue 10 Apr 2007        30,720 ...H. --- "C:\Documents and Settings\Propri‚taire\Application Data\Microsoft\ModŠles\~WRL0002.tmp"
Thu  2 Aug 2007        45,568 ...H. --- "C:\Documents and Settings\Propri‚taire\Application Data\Microsoft\ModŠles\~WRL4016.tmp"

Finished! 



et enfin le rapport hijackthis


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 17:49:03, on 08/12/2007
Platform: Windows XP  (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\dllcache\windmns.exe
C:\WINDOWS\System32\dllcache\wintcpack.exe
C:\WINDOWS\System32
vsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\WINDOWS\System32\load.exe
C:\WINDOWS\System32\WgaTray.exe
C:\WINDOWS\System32\eXtream.exe
C:\WINDOWS\System32\kdjfsdklfjsl.exe
C:\WINDOWS\System32\Srb0ty.exe
C:\WINDOWS\System32\Syst3m32.exe
C:\WINDOWS\system32
otepad.exe
C:\windows\system\hpsysdrv.exe
C:\HP\KBD\KBD.EXE
C:\WINDOWS\System32\hkcmd.exe
C:\Program Files\Microsoft Works\WksSb.exe
C:\WINDOWS\System32\pctspk.exe
C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb04.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\System32undll32.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\hp center\137903\Program\BackWeb-137903.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://neufportail.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.hpe.com/h41271/404D.aspx?cc=us&ll=en&url=http://domainredirects.ext.hpe.com/fr3.hpwis.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://srch-fr3.hpwis.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://srch-fr3.hpwis.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.hpe.com/h41271/404D.aspx?cc=us&ll=en&url=http://domainredirects.ext.hpe.com/fr3.hpwis.com/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE NvQTwk,NvCplDaemon initialize
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
O4 - HKLM\..\Run: [Microsoft Works Portfolio] C:\Program Files\Microsoft Works\WksSb.exe /AllUsers
O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Microsoft Works\WkDetect.exe
O4 - HKLM\..\Run: [PCTVOICE] pctspk.exe
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb04.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [kiss] C:\Program Files\killSh\pingy.exe
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.2\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [MicroSoft ssadsadas3s1] eXtream.exe
O4 - HKLM\..\Run: [MicroSoft ssadssjdhasjadas3s1] kdjfsdklfjsl.exe
O4 - HKLM\..\Run: [MicroSoft Getway mqbol] xbvuxowlewiv.exe
O4 - HKLM\..\Run: [MicroSoft Legal Service] Srb0ty.exe
O4 - HKLM\..\Run: [MicroSoft Legal Syst3m32] Syst3m32.exe
O4 - HKLM\..\Run: [smsger] C:\WINDOWS\System32\Win.exe
O4 - HKLM\..\Run: [MicroSoft Visual Framwork] MS32.exe
O4 - HKLM\..\Run: [WinDLL (Wseclayer.exe)] rundll32.exe C:\WINDOWS\System32\Wseclayer.exe,start
O4 - HKLM\..\Run: [Windows Secure Update] load.exe
O4 - HKLM\..\RunServices: [MicroSoft ssadsadas3s1] eXtream.exe
O4 - HKLM\..\RunServices: [MicroSoft ssadssjdhasjadas3s1] kdjfsdklfjsl.exe
O4 - HKLM\..\RunServices: [MicroSoft Getway mqbol] xbvuxowlewiv.exe
O4 - HKLM\..\RunServices: [MicroSoft Legal Service] Srb0ty.exe
O4 - HKLM\..\RunServices: [MicroSoft Legal Syst3m32] Syst3m32.exe
O4 - HKLM\..\RunServices: [smsger] C:\WINDOWS\System32\Win.exe
O4 - HKLM\..\RunServices: [MicroSoft Visual Framwork] MS32.exe
O4 - HKLM\..\RunServices: [Windows Secure Update] load.exe
O4 - HKLM\..\RunOnce: [Windows Secure Update] load.exe
O4 - HKLM\..\RunOnce: [MicroSoft ssadsadas3s1] eXtream.exe
O4 - HKLM\..\RunOnce: [MicroSoft ssadssjdhasjadas3s1] kdjfsdklfjsl.exe
O4 - HKLM\..\RunOnce: [MicroSoft Legal Service] Srb0ty.exe
O4 - HKLM\..\RunOnce: [MicroSoft Legal Syst3m32] Syst3m32.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [ErrorSafeFree] "C:\Program Files\ErrorSafe Free\uers.exe" /min
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [MicroSoft ssadsadas3s1] eXtream.exe
O4 - HKCU\..\Run: [MicroSoft ssadssjdhasjadas3s1] kdjfsdklfjsl.exe
O4 - HKCU\..\Run: [MicroSoft Getway mqbol] xbvuxowlewiv.exe
O4 - HKCU\..\Run: [MicroSoft Legal Service] Srb0ty.exe
O4 - HKCU\..\Run: [Windows Secure Update] load.exe
O4 - HKCU\..\Run: [MicroSoft Legal Syst3m32] Syst3m32.exe
O4 - HKCU\..\RunOnce: [MicroSoft ssadssjdhasjadas3s1] kdjfsdklfjsl.exe
O4 - HKCU\..\RunOnce: [MicroSoft Legal Service] Srb0ty.exe
O4 - HKCU\..\RunOnce: [Windows Secure Update] load.exe
O4 - HKCU\..\RunOnce: [MicroSoft Legal Syst3m32] Syst3m32.exe
O4 - HKCU\..\RunOnce: [MicroSoft ssadsadas3s1] eXtream.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Run: [MicroSoft ssadssjdhasjadas3s1] kdjfsdklfjsl.exe (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Run: [MicroSoft sys3s1] h4ckn3t.exe (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Run: [MicroSoft Getway mqbol] qrcffqqysayn.exe (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Run: [Critical Error Safe32] C:\WINDOWS\System32\GetWaylayer32.exe (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Run: [MicroSoft Legal Service] Srb0ty.exe (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Run: [Windows Secure Update] load.exe (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Run: [MicroSoft Legal Syst3m32] Syst3m32.exe (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Run: [MicroSoft Visual Framwork] MS32.exe (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [MicroSoft sys3s1] h4ckn3t.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [MicroSoft sys3s1] h4ckn3t.exe (User 'Default user')
O4 - Global Startup: hp center.lnk = C:\Program Files\hp center\137903\Program\BackWeb-137903.exe
O9 - Extra button: Organise-notes - {9455301C-CF6B-11D3-A266-00C04F689C50} - C:\Program Files\Fichiers communs\Microsoft Shared\Reference 2001\EROProj.dll
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\webelated.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\webelated.htm
O16 - DPF: {029FDBA6-3547-11D7-AA4C-0050BF051A00} (Rawflow ICD Client) - http://s.tf1.fr/mmdia/static/rawflow/clients/5.3.1.0/Rawflow.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w2/pr02/resources/MSNPUpld.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/...
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/...
O16 - DPF: {9D190AE6-C81E-4039-8061-978EBAD10073} (F-Secure Online Scanner 3.0) - http://www.securite.neuf.fr/Ols/fscax.cab
O16 - DPF: {CF40ACC5-E1BB-4AFF-AC72-04C2F616BCA7} (get_atlcom Class) - http://www.adobe.com/products/acrobat/nos/gp.cab
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Microsoft Windows DNS Manager - Unknown owner - C:\WINDOWS\System32\dllcache\windmns.exe
O23 - Service: Microsoft Windows TCP Ack Timing - Unknown owner - C:\WINDOWS\System32\dllcache\wintcpack.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32
vsvc32.exe

Lyonnais92 · Answer

Re,

télécharge combofix (par sUBs)ici :

http://download.bleepingcomputer.com/sUBs/ComboFix.exe


et enregistre le sur le bureau.

2 double-clique sur combofix.exe et suis les instructions

3 à la fin, il va produire un rapport C:\ComboFix.txt

4 copie/colle ce rapport dans ta prochaine réponse.

Attention, n'utilise pas ta souris ni ton clavier (ni un autre système de pointage) pendant que le programme tourne. Cela pourrait figer l'ordi.

scoubidou78 · Answer

ComboFix 07-12-08.1 - Propriétaire 2007-12-08 18:42:04.1 - NTFSx86 Running from: C:\Documents and Settings\Propriétaire\Bureau\ComboFix.exe . (((((((((((((((((((((((((((((((((((( Autres suppressions )))))))))))))))))))))))))))))))))))))))))))))))) . C:\Documents and Settings\All Users\Application Data\Starware370 C:\Documents and Settings\All Users\Application Data\Starware370\buttons\563_button_1b_def.bmp C:\Documents and Settings\All Users\Application Data\Starware370\buttons\563_button_1b_over.bmp C:\Documents and Settings\All Users\Application Data\Starware370\buttons\572_button_1b_def.bmp C:\Documents and Settings\All Users\Application Data\Starware370\buttons\572_button_1b_over.bmp C:\Documents and Settings\All Users\Application Data\Starware370\buttons\573_button_1b_def.bmp C:\Documents and Settings\All Users\Application Data\Starware370\buttons\573_button_1b_over.bmp C:\Documents and Settings\All Users\Application Data\Starware370\buttons\Button_60.bmp C:\Documents and Settings\All Users\Application Data\Starware370\buttons\Button_70.bmp C:\Documents and Settings\All Users\Application Data\Starware370\buttons\Button_80.bmp C:\Documents and Settings\All Users\Application Data\Starware370\buttons\FindIt.bmp C:\Documents and Settings\All Users\Application Data\Starware370\buttons\FindItHot.bmp C:\Documents and Settings\All Users\Application Data\Starware370\buttons\findithotxp.png C:\Documents and Settings\All Users\Application Data\Starware370\buttons\finditxp.png C:\Documents and Settings\All Users\Application Data\Starware370\buttons\logo.bmp C:\Documents and Settings\All Users\Application Data\Starware370\buttons\logoxp.bmp C:\Documents and Settings\All Users\Application Data\Starware370\contexts\error.xml C:\Documents and Settings\All Users\Application Data\Starware370\contexts\Related.xml C:\Documents and Settings\All Users\Application Data\Starware370\contexts\Travel.xml C:\Documents and Settings\All Users\Application Data\Starware370\SimpleUpdate\ProductMessagingConfig.xml C:\Documents and Settings\All Users\Application Data\Starware370\SimpleUpdate\ProductMessagingConfig.xml.backup C:\Documents and Settings\All Users\Application Data\Starware370\SimpleUpdate\SimpleUpdateConfig.xml C:\Documents and Settings\All Users\Application Data\Starware370\SimpleUpdate\SimpleUpdateConfig.xml.backup C:\Documents and Settings\All Users\Application Data\Starware370\SimpleUpdate\TimerManagerConfig.xml C:\Documents and Settings\All Users\Application Data\Starware370\SimpleUpdate\TimerManagerConfig.xml.backup C:\Documents and Settings\Propriétaire\Application Data\Starware370 C:\Documents and Settings\Propriétaire\Application Data\Starware370\BrowserSearch\BrowserSearch.xml C:\Documents and Settings\Propriétaire\Application Data\Starware370\BrowserSearch\BrowserSearch.xml.backup C:\Documents and Settings\Propriétaire\Application Data\Starware370\Button_6\Button_6Options.xml C:\Documents and Settings\Propriétaire\Application Data\Starware370\Button_6\Button_6Options.xml.backup C:\Documents and Settings\Propriétaire\Application Data\Starware370\Button_7\Button_7Options.xml C:\Documents and Settings\Propriétaire\Application Data\Starware370\Button_7\Button_7Options.xml.backup C:\Documents and Settings\Propriétaire\Application Data\Starware370\Button_8\Button_8Options.xml C:\Documents and Settings\Propriétaire\Application Data\Starware370\Button_8\Button_8Options.xml.backup C:\Documents and Settings\Propriétaire\Application Data\Starware370\Configurator\Configurator.xml C:\Documents and Settings\Propriétaire\Application Data\Starware370\Configurator\Configurator.xml.backup C:\Documents and Settings\Propriétaire\Application Data\Starware370\ErrorSearch\ErrorSearchOptions.xml C:\Documents and Settings\Propriétaire\Application Data\Starware370\ErrorSearch\ErrorSearchOptions.xml.backup C:\Documents and Settings\Propriétaire\Application Data\Starware370\Layouts\ToolbarLayout.xml C:\Documents and Settings\Propriétaire\Application Data\Starware370\Layouts\ToolbarLayout.xml.backup C:\Documents and Settings\Propriétaire\Application Data\Starware370\Manager\ManagerOptions.xml C:\Documents and Settings\Propriétaire\Application Data\Starware370\Manager\ManagerOptions.xml.backup C:\Documents and Settings\Propriétaire\Application Data\Starware370\Paroles\ParolesOptions.xml C:\Documents and Settings\Propriétaire\Application Data\Starware370\Paroles\ParolesOptions.xml.backup C:\Documents and Settings\Propriétaire\Application Data\Starware370\Radio_FR\Radio_FROptions.xml C:\Documents and Settings\Propriétaire\Application Data\Starware370\Radio_FR\Radio_FROptions.xml.backup C:\Documents and Settings\Propriétaire\Application Data\Starware370\Recherche_de_musique\Recherche_de_musiqueOptions.xml C:\Documents and Settings\Propriétaire\Application Data\Starware370\Recherche_de_musique\Recherche_de_musiqueOptions.xml.backup C:\Documents and Settings\Propriétaire\Application Data\Starware370\RelatedSearch\RelatedSearchOptions.xml C:\Documents and Settings\Propriétaire\Application Data\Starware370\RelatedSearch\RelatedSearchOptions.xml.backup C:\Documents and Settings\Propriétaire\Application Data\Starware370\Telechargement\TelechargementOptions.xml C:\Documents and Settings\Propriétaire\Application Data\Starware370\Telechargement\TelechargementOptions.xml.backup C:\Documents and Settings\Propriétaire\Application Data\Starware370\Toolbar\TBProductsOptions.xml C:\Documents and Settings\Propriétaire\Application Data\Starware370\Toolbar\TBProductsOptions.xml.backup C:\Documents and Settings\Propriétaire\Application Data\Starware370\ToolbarLogo\ToolbarLogoOptions.xml C:\Documents and Settings\Propriétaire\Application Data\Starware370\ToolbarLogo\ToolbarLogoOptions.xml.backup C:\Documents and Settings\Propriétaire\Application Data\Starware370\ToolbarSearch\ToolbarSearchOptions.xml C:\Documents and Settings\Propriétaire\Application Data\Starware370\ToolbarSearch\ToolbarSearchOptions.xml.backup C:\Documents and Settings\Propriétaire\Application Data\Starware370\TravelSearch\TravelSearchOptions.xml C:\Documents and Settings\Propriétaire\Application Data\Starware370\TravelSearch\TravelSearchOptions.xml.backup C:\msn.exe C:\Program Files\Starware370 C:\Program Files\Starware370\brand.bmp C:\Program Files\Starware370\icons\star_16.ico C:\Program Files\Starware370\Starware370Config.xml C:\Program Files\Starware370\Starware370Uninstall.exe . ((((((((((((((((((((((((((((( Fichiers créés 2007-11-08 to 2007-12-08 )))))))))))))))))))))))))))))))))))) . 2007-12-08 18:25 . 2007-12-08 18:25 82,426 --a------ C:\lol1.exe 2007-12-08 17:43 . 2007-12-08 17:43 0 --a------ C:\adware.exe 2007-12-08 17:28 . 2007-12-08 17:28 d-------- C:\WINDOWS\ERUNT 2007-12-07 17:54 . 2007-12-08 14:06 53 --a------ C:\WINDOWS\SYSTEM32\x 2007-12-07 13:15 . 2007-12-07 13:17 49,090 --a------ C:\sexy.exe 2007-12-07 13:06 . 2007-12-07 13:08 36,977 --a------ C:\WINDOWS\SYSTEM32\osso.exe 2007-12-07 12:55 . 2007-12-07 12:56 14,254 --a------ C:\WINDOWS\SYSTEM32\jhsadlsghw.exe 2007-12-07 10:52 . 2007-12-07 10:52 d-------- C:\Program Files\Trend Micro 2007-12-07 09:25 . 2007-12-05 21:09 458,752 ---hs---- C:\WINDOWS\SYSTEM32\Wseclayer.exe 2007-12-07 09:24 . 2007-12-05 20:14 27 --a------ C:\WINDOWS\SYSTEM32\kuki.bat 2007-12-06 10:26 . 2007-12-06 10:29 41,771 --a------ C:\djkfijelc.exe 2007-12-05 14:31 . 2007-12-07 17:22 6,814 --a------ C:\eg.exe 2007-12-04 18:53 . 2007-12-05 18:41 441,856 --a------ C:\WINDOWS\SYSTEM32\fy.exe 2007-12-04 18:48 . 2007-12-05 18:49 70,869 --a------ C:\fy.exe 2007-12-03 19:09 . 2007-12-03 19:10 57,344 --a------ C:\WINDOWS\SYSTEM32\ioouoi.exe 2007-12-03 19:07 . 2007-12-03 19:08 195,754 --a------ C:\WINDOWS\SYSTEM32\ksioelskdew.exe 2007-12-03 13:47 . 2007-12-03 13:48 57,344 --a------ C:\WINDOWS\SYSTEM32\mmz.exe 2007-12-03 11:56 . 2007-12-03 11:56 991,314 --a------ C:\WINDOWS\SYSTEM32\dsgsf.exe 2007-12-02 23:15 . 2007-12-02 23:15 57,344 --a------ C:\WINDOWS\SYSTEM32\orc.exe 2007-12-02 19:54 . 2007-12-02 19:53 458,752 -r-hs---- C:\WINDOWS\SYSTEM32\dllcache\wintcpack.exe 2007-12-02 18:00 . 2007-12-02 19:20 12,527 --a------ C:\WINDOWS\SYSTEM32\exe.exe 2007-12-02 17:15 . 2007-12-03 11:59 d-------- C:\Program Files\dsfdsfsdfs 2007-12-02 16:55 . 2007-12-02 17:14 696,623 --a------ C:\WINDOWS\SYSTEM32\dsfsdfscx.exe 2007-12-02 16:51 . 2007-12-02 16:52 14,182 --a------ C:\WINDOWS\SYSTEM32\dsfsdfs.exe 2007-12-02 15:52 . 2007-12-02 15:52 d--h----- C:\WINDOWS\PIF 2007-12-01 11:42 . 2007-12-01 11:42 548,864 --a------ C:\WINDOWS\SYSTEM32\Syst3m32.exe 2007-12-01 11:32 . 2007-12-01 11:32 471,040 --a------ C:\WINDOWS\SYSTEM32\load.exe 2007-11-30 19:27 . 2007-12-07 15:43 56,351 --a------ C:\WINDOWS\SYSTEM32\djkfijelc.exe 2007-11-30 17:14 . 2007-12-07 10:57 d-------- C:\WINDOWS\SYSTEM32 dafs 2007-11-30 17:14 . 2007-12-07 11:34 82,486 --a------ C: awaf.exe 2007-11-30 14:49 . 2007-11-30 14:49 495,616 -r-hs---- C:\WINDOWS\SYSTEM32\dllcache\windmns.exe 2007-11-25 13:34 . 2007-11-25 15:40 d-------- C:\Program Files\dfksdkfksdl 2007-11-25 13:34 . 2007-11-25 15:40 991,319 --a------ C:\WINDOWS\SYSTEM32\dsfds.pif 2007-11-25 11:22 . 2007-11-27 10:00 79,604 --a------ C:\WINDOWS\SYSTEM32\zudkkd.exe 2007-11-24 19:09 . 2007-11-24 19:08 851,968 --a------ C:\WINDOWS\SYSTEM32\Srb0ty.exe 2007-11-23 19:57 . 2007-11-23 19:57 28,017 --a------ C:\WINDOWS\SYSTEM32\lovelyx.sys 2007-11-23 18:12 . 2007-11-23 18:12 923,908 --a------ C:\WINDOWS\SYSTEM32\guygay.exe 2007-11-20 18:48 . 2007-11-20 18:48 726,066 --a------ C:\WINDOWS\SYSTEM32\-r 2007-11-17 17:19 . 2007-11-17 17:19 2,565 --a------ C:\WINDOWS\SYSTEM32\o1o2o3o4 2007-11-17 17:13 . 2007-11-17 17:13 27,038 --a------ C:\WINDOWS\SYSTEM32 iamx 2007-11-17 09:25 . 2007-11-20 17:47 79,604 --a------ C:\WINDOWS\SYSTEM32\zuirna.exe 2007-11-16 18:24 . 2007-11-16 18:30 271,939 --a------ C:\wzipse30.exe 2007-11-15 12:08 . 2007-11-15 12:08 927,214 --a------ C:\sdsdfsdf.exe 2007-11-15 09:21 . 2007-12-07 11:23 991,307 --a------ C:\WINDOWS\SYSTEM32\Sh.exe 2007-11-15 09:21 . 2007-11-15 09:21 72,803 --a------ C:\WINDOWS\SYSTEM32\binsetx.exe 2007-11-14 16:41 . 2007-12-03 15:59 991,310 --a------ C:\cg.pif 2007-11-14 13:33 . 2007-11-14 13:34 d-------- C:\WINDOWS\SYSTEM32\ksomik 2007-11-14 13:27 . 2007-11-14 13:27 725,861 --a------ C:\hidfdfdffdz.pif 2007-11-14 10:49 . 2007-11-14 10:49 1,129,575 --a------ C:\WINDOWS\SYSTEM32\fkdksae.exe 2007-11-14 10:48 . 2007-11-14 10:48 1,129,575 --a------ C:\WINDOWS\SYSTEM32\fkigldje.exe 2007-11-11 20:55 . 2007-11-11 20:55 79,604 --a------ C:\lekzing.exe 2007-11-10 20:11 . 2007-11-10 20:11 991,314 --a------ C:\gexa.exe . (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M )))))))))))))))))))))))))))))))))))))))))))))))) . 2007-12-07 16:25 552,960 ----a-w C:\WINDOWS\SYSTEM32\eXtream.exe 2007-12-07 10:24 49,105 ----a-w C:\Sh.exe 2007-12-07 10:23 --------- d-----w C:\Program Files\killSh 2007-12-07 09:41 --------- d-----w C:\Program Files\sdfhfgd 2007-12-05 17:56 --------- d-----w C:\Program Files\fjhgfdsdfg 2007-12-05 17:41 991,314 ----a-w C:\WINDOWS\SYSTEM32\eg.exe 2007-12-03 15:02 --------- d-----w C:\Program Files\dfrerter 2007-11-26 18:21 --------- d-----w C:\Program Files\sdfsdfsdfs 2007-11-26 18:19 775,031 ----a-w C:\WINDOWS\SYSTEM32\sex.exe 2007-11-23 09:54 46,127 ----a-w C:\WINDOWS\SYSTEM32\ProtectionV.exe 2007-11-20 16:04 112,702 ----a-w C:\esd.exe 2007-11-20 12:31 106,698 ----a-w C:\ddsds.exe 2007-11-18 10:17 544,768 ----a-w C:\WINDOWS\SYSTEM32\kdjfsdklfjsl.exe 2007-11-14 11:02 56,343 ----a-w C:\WINDOWS\SYSTEM32\Fuck.exe 2007-11-11 18:12 60,699 ----a-w C:\kek.exe 2007-11-05 16:35 991,310 ----a-w C:\WINDOWS\SYSTEM32\cg.pif 2007-11-04 17:39 991,314 ----a-w C:\gezzxa.exe 2007-11-02 12:15 523,887 ----a-w C:\WINDOWS\SYSTEM32\kek.exe 2007-11-02 11:51 1,771,008 ----a-r C:\WINDOWS\SYSTEM32\uae.exe 2007-10-31 19:00 29,344 ----a-w C:\WINDOWS\SYSTEM32\ybn3e.dll 2007-10-31 16:09 1,044,509 ----a-w C:\WINDOWS\SYSTEM32 estmangerx.exe 2007-10-31 16:07 923,839 ----a-w C:\WINDOWS\SYSTEM32 estooo.exe 2007-10-29 19:25 725,446 ----a-w C:\klertf.exe 2007-10-29 11:30 725,446 ----a-w C:\hjuing.exe 2007-10-28 19:58 883,093 ----a-w C:\WINDOWS\SYSTEM32\darkworlk.exe 2007-10-28 11:15 6,156 ----a-w C:\ddfsd.pif 2007-10-28 10:46 883,093 ----a-w C:\WINDOWS\SYSTEM32\antivirusv1.exe 2007-10-26 07:38 1,044,520 ----a-w C:\WINDOWS\SYSTEM32\ksxchii.exe 2007-10-25 18:43 1,043,792 ----a-w C:\WINDOWS\SYSTEM32\jdjsdsj.exe 2007-10-25 18:29 922,963 ----a-w C:\WINDOWS\SYSTEM32\chii.exe 2007-10-25 17:05 94,416 ----a-w C:\WINDOWS\system32\drivers\aswmon2.sys 2007-10-25 17:05 93,264 ----a-w C:\WINDOWS\system32\drivers\aswmon.sys 2007-10-25 17:03 23,152 ----a-w C:\WINDOWS\system32\drivers\aswRdr.sys 2007-10-25 17:01 42,912 ----a-w C:\WINDOWS\system32\drivers\aswTdi.sys 2007-10-25 16:58 26,624 ----a-w C:\WINDOWS\system32\drivers\aavmker4.sys 2007-10-25 16:24 815,480 ----a-w C:\WINDOWS\SYSTEM32\aswBoot.exe 2007-10-25 16:14 95,608 ----a-w C:\WINDOWS\SYSTEM32\AvastSS.scr 2007-10-25 15:48 --------- d-----w C:\Program Files\Symantic 2007-10-25 15:28 156,653 ----a-w C:\essd.exe 2007-10-24 16:06 1,771,008 ----a-w C:\WINDOWS\SYSTEM32\d4rk.exe 2007-10-19 19:23 --------- d-----w C:\Program Files\sddsada 2007-10-18 18:35 2,076,261 ----a-w C:\dfsd.exe 2007-10-14 19:25 1,044,509 ----a-w C:\WINDOWS\SYSTEM32\fvist.com.exe 2007-10-09 08:05 --------- d-----w C:\Program Files\Fichiers communs\Adobe 2007-10-07 16:19 463,360 ----a-w C:\ddxf.exe 2007-09-30 08:05 381,440 ----a-w C:\games.exe 2007-09-27 14:05 767,053 ----a-w C:\sfsdfsda.exe 2007-09-27 14:02 991,308 ----a-w C:\WINDOWS\SYSTEM32\Sxfgfd.exe 2007-09-27 13:59 991,308 ----a-w C:\WINDOWS\SYSTEM32\Sx.exe 2007-09-22 10:35 610,304 ----a-w C:\gt.exe . ((((((((((((((((((((((((((((((((( Point de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))) . . REGEDIT4 *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-06-14 07:48] "ErrorSafeFree"="C:\Program Files\ErrorSafe Free\uers.exe" [] "MsnMsgr"="C:\Program Files\MSN Messenger\MsnMsgr.exe" [] "MicroSoft ssadsadas3s1"="eXtream.exe" [2007-12-07 17:25 C:\WINDOWS\SYSTEM32\eXtream.exe] "MicroSoft ssadssjdhasjadas3s1"="kdjfsdklfjsl.exe" [2007-11-18 11:17 C:\WINDOWS\SYSTEM32\kdjfsdklfjsl.exe] "MicroSoft Getway mqbol"="xbvuxowlewiv.exe" [] "MicroSoft Legal Service"="Srb0ty.exe" [2007-11-24 19:08 C:\WINDOWS\SYSTEM32\Srb0ty.exe] "Windows Secure Update"="load.exe" [2007-12-01 11:32 C:\WINDOWS\SYSTEM32\load.exe] "MicroSoft Legal Syst3m32"="Syst3m32.exe" [2007-12-01 11:42 C:\WINDOWS\SYSTEM32\Syst3m32.exe] [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce] "MicroSoft ssadssjdhasjadas3s1"="kdjfsdklfjsl.exe" [2007-11-18 11:17 C:\WINDOWS\SYSTEM32\kdjfsdklfjsl.exe] "MicroSoft Legal Service"="Srb0ty.exe" [2007-11-24 19:08 C:\WINDOWS\SYSTEM32\Srb0ty.exe] "Windows Secure Update"="load.exe" [2007-12-01 11:32 C:\WINDOWS\SYSTEM32\load.exe] "MicroSoft Legal Syst3m32"="Syst3m32.exe" [2007-12-01 11:42 C:\WINDOWS\SYSTEM32\Syst3m32.exe] "MicroSoft ssadsadas3s1"="eXtream.exe" [2007-12-07 17:25 C:\WINDOWS\SYSTEM32\eXtream.exe] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "hpsysdrv"="c:\windows\system\hpsysdrv.exe" [1998-05-07 08:04] "KBD"="C:\HP\KBD\KBD.EXE" [2001-07-06 13:56] "NvCplDaemon"="RUNDLL32.exe" [2001-08-24 01:47 C:\WINDOWS\SYSTEM32 undll32.exe] "IgfxTray"="C:\WINDOWS\System32\igfxtray.exe" [2001-08-07 16:25] "HotKeysCmds"="C:\WINDOWS\System32\hkcmd.exe" [2001-08-07 15:36] "PS2"="C:\WINDOWS\system32\ps2.exe" [2001-07-03 13:13] "Microsoft Works Portfolio"="C:\Program Files\Microsoft Works\WksSb.exe" [2000-07-12 14:14] "Microsoft Works Update Detection"="C:\Program Files\Microsoft Works\WkDetect.exe" [2000-08-04 03:01] "PCTVOICE"="pctspk.exe" [2001-08-01 17:37 C:\WINDOWS\SYSTEM32\pctspk.exe] "HPDJ Taskbar Utility"="C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb04.exe" [2001-10-29 21:31] "avast!"="C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" [2007-10-25 17:20] "kiss"="C:\Program Files\killSh\pingy.exe" [2007-09-14 05:14] "Adobe Photo Downloader"="C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.2\Apps\apdproxy.exe" [] "MicroSoft ssadsadas3s1"="eXtream.exe" [2007-12-07 17:25 C:\WINDOWS\SYSTEM32\eXtream.exe] "MicroSoft ssadssjdhasjadas3s1"="kdjfsdklfjsl.exe" [2007-11-18 11:17 C:\WINDOWS\SYSTEM32\kdjfsdklfjsl.exe] "MicroSoft Getway mqbol"="xbvuxowlewiv.exe" [] "MicroSoft Legal Service"="Srb0ty.exe" [2007-11-24 19:08 C:\WINDOWS\SYSTEM32\Srb0ty.exe] "MicroSoft Legal Syst3m32"="Syst3m32.exe" [2007-12-01 11:42 C:\WINDOWS\SYSTEM32\Syst3m32.exe] "smsger"="C:\WINDOWS\System32\Win.exe" [] "MicroSoft Visual Framwork"="MS32.exe" [] "WinDLL (Wseclayer.exe)"="C:\WINDOWS\System32\Wseclayer.exe" [2007-12-05 21:09] "Windows Secure Update"="load.exe" [2007-12-01 11:32 C:\WINDOWS\SYSTEM32\load.exe] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce] "Windows Secure Update"="load.exe" [2007-12-01 11:32 C:\WINDOWS\SYSTEM32\load.exe] "MicroSoft ssadsadas3s1"="eXtream.exe" [2007-12-07 17:25 C:\WINDOWS\SYSTEM32\eXtream.exe] "MicroSoft ssadssjdhasjadas3s1"="kdjfsdklfjsl.exe" [2007-11-18 11:17 C:\WINDOWS\SYSTEM32\kdjfsdklfjsl.exe] "MicroSoft Legal Service"="Srb0ty.exe" [2007-11-24 19:08 C:\WINDOWS\SYSTEM32\Srb0ty.exe] "MicroSoft Legal Syst3m32"="Syst3m32.exe" [2007-12-01 11:42 C:\WINDOWS\SYSTEM32\Syst3m32.exe] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices] "MicroSoft ssadsadas3s1"="eXtream.exe" [2007-12-07 17:25 C:\WINDOWS\SYSTEM32\eXtream.exe] "MicroSoft ssadssjdhasjadas3s1"="kdjfsdklfjsl.exe" [2007-11-18 11:17 C:\WINDOWS\SYSTEM32\kdjfsdklfjsl.exe] "MicroSoft Getway mqbol"="xbvuxowlewiv.exe" [] "MicroSoft Legal Service"="Srb0ty.exe" [2007-11-24 19:08 C:\WINDOWS\SYSTEM32\Srb0ty.exe] "MicroSoft Legal Syst3m32"="Syst3m32.exe" [2007-12-01 11:42 C:\WINDOWS\SYSTEM32\Syst3m32.exe] "smsger"="C:\WINDOWS\System32\Win.exe" [] "MicroSoft Visual Framwork"="MS32.exe" [] "Windows Secure Update"="load.exe" [2007-12-01 11:32 C:\WINDOWS\SYSTEM32\load.exe] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="C:\WINDOWS\System32\ctfmon.exe" [2001-08-24 01:47] "HOT FIX"="Gothic.exe" [] "MicroSoft ssadsadas3s1"="eXtream.exe" [2007-12-07 17:25 C:\WINDOWS\SYSTEM32\eXtream.exe] "MicroSoft ssadssjdhasjadas3s1"="kdjfsdklfjsl.exe" [2007-11-18 11:17 C:\WINDOWS\SYSTEM32\kdjfsdklfjsl.exe] "MicroSoft sys3s1"="h4ckn3t.exe" [] "MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" [2001-08-02 06:14] "MicroSoft Getway mqbol"="qrcffqqysayn.exe" [] "Critical Error Safe32"="C:\WINDOWS\System32\GetWaylayer32.exe" [] "MicroSoft Legal Service"="Srb0ty.exe" [2007-11-24 19:08 C:\WINDOWS\SYSTEM32\Srb0ty.exe] "Windows Secure Update"="load.exe" [2007-12-01 11:32 C:\WINDOWS\SYSTEM32\load.exe] "MicroSoft Legal Syst3m32"="Syst3m32.exe" [2007-12-01 11:42 C:\WINDOWS\SYSTEM32\Syst3m32.exe] "MicroSoft Visual Framwork"="MS32.exe" [] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce] "MicroSoft sys3s1"="h4ckn3t.exe" [] "MicroSoft ssadssjdhasjadas3s1"="kdjfsdklfjsl.exe" [2007-11-18 11:17 C:\WINDOWS\SYSTEM32\kdjfsdklfjsl.exe] "MicroSoft ssadsadas3s1"="eXtream.exe" [2007-12-07 17:25 C:\WINDOWS\SYSTEM32\eXtream.exe] "HOT FIX"="Gothic.exe" [] "MicroSoft Legal Service"="Srb0ty.exe" [2007-11-24 19:08 C:\WINDOWS\SYSTEM32\Srb0ty.exe] "Windows Secure Update"="load.exe" [2007-12-01 11:32 C:\WINDOWS\SYSTEM32\load.exe] "MicroSoft Legal Syst3m32"="Syst3m32.exe" [2007-12-01 11:42 C:\WINDOWS\SYSTEM32\Syst3m32.exe] "MicroSoft Visual Framwork"="MS32.exe" [] C:\Documents and Settings\All Users\Menu D‚marrer\Programmes\D‚marrage\ hp center.lnk - C:\Program Files\hp center\137903\Program\BackWeb-137903.exe [2001-09-26 19:42:50] *Newly Created Service* - CATCHME *Newly Created Service* - PROCEXP90 . Contenu du dossier 'Scheduled Tasks/Tâches planifiées' "2007-04-11 21:00:00 C:\WINDOWS\Tasks\Rappel d'abonnement 1 auprès de l'ISP.job" - C:\WINDOWS\System32\OOBE\oobebaln.exe "2007-04-13 20:30:00 C:\WINDOWS\Tasks\Rappel d'abonnement 2 auprès de l'ISP.job" - C:\WINDOWS\System32\OOBE\oobebaln.exe "2007-04-16 21:30:00 C:\WINDOWS\Tasks\Rappel d'abonnement 3 auprès de l'ISP.job" - C:\WINDOWS\System32\OOBE\oobebaln.exe . ************************************************************************** catchme 0.3.1331 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2007-12-08 19:01:58 Windows 5.1.2600 NTFS scanning hidden processes ... ? [44744] ? [12852] ? [12872] ? [12900] scanning hidden autostart entries ... scanning hidden files ... ************************************************************************** . Completion time: 2007-12-08 19:08:46 . --- E O F ---

scoubidou78 · Answer

voici donc mon rapport combofix

que dois je faire maintenant?

MERCI

scoubidou78 · Answer

bonsoir.

tu es la Lyonnais92? je ne sais pas quoi faire maintenant?

merci d avance

Lyonnais92 · Answer

Re,


- > Ouvre ce lien pour scanner ton PC avec un BitDefender en ligne (uniquement sous Internet Explorer) :

https://www.bitdefender.com/toolbox/

Utilisation :
Cliquer sur "J'accepte" puis accepter également l'ActiveX bloqué par la barre anti-popup du SP2 qui clignotera en haut et l'installer.
Ensuite, cliquer sur "Cliquez ici pour scanner".
Patienter jusqu'à la fin du scan qui peut durer assez longtemps...

Copier/coller le rapport entier sur le forum.

Tutoriel en images ici : http://pageperso.aol.fr/rginformatique/mapage/defender.htm (merci à Balltrap34 pour cette réalisation)

scoubidou78 · Answer

re,

j ai deja avast comme antivirus je fais quoi je le garde?

Lyonnais92 · Answer

Re,

oui, tu le gardes.

avast est résident.

Bit defender est un nscabn en ligne qui va me permettre de voir certaines infections.

Lyonnais92 · Answer

Re,

ensuite :

Télécharge Superantispyware (SAS) en cliquant sur ce lien :

https://www.superantispyware.com/superantispywarefreevspro.html

Choisis "enregistrer" et enregistre-le sur ton bureau.

Double-clique sur l'icône d'installation qui vient de se créer et suis les instructions.

Créé une icône sur le bureau.

Double-clique sur l'icône de SAS (une tête dans un cercle rouge barré) pour le lancer.

- Si l'outil te demande de mettre à jour le programme ("update the program definitions", clique sur yes.
- Sous Configuration and Preferences, clique sur le bouton "Preferences"
- Clique sur l'onglet "Scanning Control "
- Dans "Scanner Options ", assure toi que la case devant lles lignes suivantes est cochée :

Close browsers before scanning
Scan for tracking cookies
Terminate memory threats before quarantining
- Laisse les autres lignes décochées.

- Clique sur le bouton "Close" pour quitter l'écran du centre de contrôle.

- Dans la fenêtre principale, clique, dans "Scan for Harmful Software", sur "Scan your computer".

Dans la colonne de gauche, coche   C:\Fixed Drive.

Dans la colonne de droite, sous "Complete scan", clique sur "Perform Complete Scan"

Clique sur "next" pour lancer le scan. Patiente pendant la durée du scan.

A la fin du scan, une fenêtre de résultats s'ouvre . Clique sur OK.

Assure toi que toutes les lignes de la fenêtre blanche sont cochées et clique sur "Next".

Tout ce qui a été trouvé sera mis en quarantaine. S'il t'es demandé de redémarrer l'ordi ("reboot"), clique sur Yes.

Pour recopier les informations sur le forum, fais ceci :

- après le redémarrage de l'ordi, double-clique sur l'icône pour lancer SAS.
- Clique sur "Preferences" puis sur l'onglet "Statistics/Logs ".
- Dans "scanners logs", double-clique sur SUPERAntiSpyware Scan Log.

- Le rapport va s'ouvrir dans ton éditeur de texte par défaut.

- Copie son contenu dans ta réponse.

scoubidou78 · Answer

bonjour lyonnais92,

desole mais j ai pas pu me connecte hier soir je fais ce que tu me dis et je t envoi le tout 

encore merci a plus

Lyonnais92 · Answer

Bonjour,

pas de souci.

scoubidou78 · Answer

re,

j ai essaye de faire le scan en ligne de bitdefender mais a chaque fois je suis bloquer par avast qui me dis que j ai des virus;
Et quand je mets les virus que avast m a detecter en quarantaine sa me dit : avast espace insuffisant sur le disque avast n a pas pu traiter le fichier...

alors je les supprime mais d autre reviennent et bitdefender bloque sa m enerve car sa fait plusieurs fois que je fais le scan

que dois je faire alors?

Lyonnais92 · Answer

Re,

fais le scan de Superantispyware avant et poste le rapport.

Ta version de Avast est gratuite ?

scoubidou78 · Answer

oui j ai la version gratuite de avast

je fais le scan bitdefender si sa rebloque je ferai le scan de Superantispyware

bonne appetie a toi a de suite 

merci encore

scoubidou78 · Answer

re,

j ai fais le scan de bitdefender et j ai cliker pour demander un rapport mais je ne le trouve pas.

je tenvoie donc mon rapport de Superantispyware et je te l envoi de suite.

A plus

Lyonnais92 · Answer

Re,

pour le rapport Bitdefender, clic droit sur démarrer et rechercher.

Cherche *.txt ou *.log créé aujourd'hui dans ton poste de travail.

Rien qui ressemble à l'heure où tu as fini le scan de bit defender ?

scoubidou78 · Answer

bonjour lyonnais92,

je n ai pas pu faire le scan bitdefender ni celui de superantispyware sa coupe a chaque fois car avast m annonce des virus.

j ai essayer plusieurs fois mais rien de changer.

que dois je faire alors, Help o scours...

faut il que je desactive avast et comment?

en plus a chaque fois sa me mets ressources systeme insuffisantes que faire???  

Merci encore jsui pas du tout une pro de l informatique aie aie

a plus

scoubidou78 · Answer

re,

o secours ya quelqu un???

priss21 · Answer

conseil: vire avast et prends un autre antivirus tel que kaspersky ou autre

Lyonnais92 · Answer

Bonjour,

fais un scan complet avec avast.

poste le rapport et un nouveau rapport Hijackthis.

scoubidou78 · Answer

bonsoir,


BitDefender Online Scanner - Real Time Virus Report
  
  
 
Generated at: Mon, Dec 10, 2007 - 18:54:47
 

--------------------------------------------------------------------------------

 
  
  
 
Scan Info
  
  
 
Scanned Files
 79032
 
Infected Files
 427
 
  
  
 
 
  
  
 
Virus Detected
  
  
 
Backdoor.Rbot.XKD
 1
 
DeepScan:Generic.Sdbot.7E8C3089
 1
 
Backdoor.Irc.Zapchast.WX
 2
 
Trojan.IRC.Flood.AB
 7
 
Backdoor.RBot.XKL
 1
 
Win32.Worm.Randon.Y
 1
 
Backdoor.Irc.Lambot.G
 5
 
Win32.Parite.B
 2
 
Win32.Worm.Randon.AR
 7
 
Win32.Worm.Rbot.AY
 26
 
Backdoor.SDBot.XX
 3
 
Trojan.Mirc.Flood.BW
 7
 
Trojan.Mirc.Flood.AE
 5
 
DeepScan:Generic.Sdbot.BCE2372B
 1
 
Trojan.Patched.Gen
 5
 
Backdoor.Ircflood.B
 41
 
Win32.Irc.Kelebek.A
 2
 
Backdoor.IRC.Zapchast.AMK
 7
 
Generic.Sdbot.272C8EA7
 5
 
GenPack:Virtool.HiddenRun.B
 25
 
Application.Passview.A
 31
 
Trojan.Flood.22016
 1
 
Backdoor.IRC.Zapchast.PK
 2
 
Trojan.Mirc.Flood.AI
 7
 
Backdoor.IRC
 6
 
Trojan.IRC.Gen
 25
 
Trojan.Mirc.Flood.AJ
 7
 
Backdoor.Zapchast.F
 2
 
Trojan.Mirc.Flood.2HK
 7
 
Application.HideWindow.B
 41
 
Backdoor.IRC.Zapchast.JG
 25
 
Trojan.Downloader.Small.ZJ
 26
 
DeepScan:Generic.Sdbot.418FDB91
 1
 
Backdoor.SDBot.DFAW
 1
 
Generic.Sdbot.979B9B77
 3
 
Backdoor.Mirc.580999.A
 1
 
Virtool.HiddenRun.B
 5
 
Win32.IRC.Kelebek
 45
 
Win32.Worm.Rbot.AA
 28
 
Trojan.Uecri.VB.A
 1
 
Generic.Sdbot.5F24DAFF
 1
 
Win32.Worm.Zapchast.PK
 2
 
Trojan.Generic.52576
 2
 
Trojan.Flooder.I
 3
 
  
  
 
 
  
  
 
 

--------------------------------------------------------------------------------
  
  
 
This summary of the scan process will be used by the BitDefender Antivirus Lab to create agregate statistics about virus activity around the world. 
  
  
 voici enfin mon rapport bidefender ouuuuuuuuuuuuuufffffffffffffffff

je te fais un hijakthis de suite

scoubidou78 · Answer

voici mon hijackthis 

 Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 20:15:17, on 10/12/2007
Platform: Windows XP  (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\dllcache\windmns.exe
C:\WINDOWS\System32\dllcache\wintcpack.exe
C:\WINDOWS\System32
vsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\WgaTray.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\WINDOWS\System32\load.exe
C:\WINDOWS\System32\eXtream.exe
C:\WINDOWS\System32\kdjfsdklfjsl.exe
C:\WINDOWS\System32\Srb0ty.exe
C:\WINDOWS\System32\Syst3m32.exe
C:\WINDOWS\System32\Gothic.exe
C:\windows\system\hpsysdrv.exe
C:\HP\KBD\KBD.EXE
C:\WINDOWS\System32\hkcmd.exe
C:\Program Files\Microsoft Works\WksSb.exe
C:\WINDOWS\System32\pctspk.exe
C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb04.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\System32undll32.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\Program Files\hp center\137903\Program\BackWeb-137903.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = 
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.hpe.com/h41271/404D.aspx?cc=us&ll=en&url=http://domainredirects.ext.hpe.com/fr3.hpwis.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://srch-fr3.hpwis.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://srch-fr3.hpwis.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.hpe.com/h41271/404D.aspx?cc=us&ll=en&url=http://domainredirects.ext.hpe.com/fr3.hpwis.com/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE NvQTwk,NvCplDaemon initialize
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
O4 - HKLM\..\Run: [Microsoft Works Portfolio] C:\Program Files\Microsoft Works\WksSb.exe /AllUsers
O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Microsoft Works\WkDetect.exe
O4 - HKLM\..\Run: [PCTVOICE] pctspk.exe
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb04.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [kiss] C:\Program Files\sdfhfgd\pingy.exe
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.2\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [MicroSoft ssadsadas3s1] eXtream.exe
O4 - HKLM\..\Run: [MicroSoft ssadssjdhasjadas3s1] kdjfsdklfjsl.exe
O4 - HKLM\..\Run: [MicroSoft Getway mqbol] xbvuxowlewiv.exe
O4 - HKLM\..\Run: [MicroSoft Legal Service] Srb0ty.exe
O4 - HKLM\..\Run: [MicroSoft Legal Syst3m32] Syst3m32.exe
O4 - HKLM\..\Run: [smsger] C:\WINDOWS\System32\Win.exe
O4 - HKLM\..\Run: [MicroSoft Visual Framwork] MS32.exe
O4 - HKLM\..\Run: [WinDLL (Wseclayer.exe)] rundll32.exe C:\WINDOWS\System32\Wseclayer.exe,start
O4 - HKLM\..\Run: [Windows Secure Update] load.exe
O4 - HKLM\..\Run: [HOT FIX] Gothic.exe
O4 - HKLM\..\Run: [Internet] C:\WINDOWS\System32\l1nksys.exe
O4 - HKLM\..\RunServices: [MicroSoft ssadsadas3s1] eXtream.exe
O4 - HKLM\..\RunServices: [MicroSoft ssadssjdhasjadas3s1] kdjfsdklfjsl.exe
O4 - HKLM\..\RunServices: [MicroSoft Getway mqbol] xbvuxowlewiv.exe
O4 - HKLM\..\RunServices: [MicroSoft Legal Service] Srb0ty.exe
O4 - HKLM\..\RunServices: [MicroSoft Legal Syst3m32] Syst3m32.exe
O4 - HKLM\..\RunServices: [smsger] C:\WINDOWS\System32\Win.exe
O4 - HKLM\..\RunServices: [MicroSoft Visual Framwork] MS32.exe
O4 - HKLM\..\RunServices: [Windows Secure Update] load.exe
O4 - HKLM\..\RunServices: [HOT FIX] Gothic.exe
O4 - HKLM\..\RunServices: [Internet] C:\WINDOWS\System32\l1nksys.exe
O4 - HKLM\..\RunOnce: [Windows Secure Update] load.exe
O4 - HKLM\..\RunOnce: [MicroSoft ssadsadas3s1] eXtream.exe
O4 - HKLM\..\RunOnce: [MicroSoft ssadssjdhasjadas3s1] kdjfsdklfjsl.exe
O4 - HKLM\..\RunOnce: [MicroSoft Legal Service] Srb0ty.exe
O4 - HKLM\..\RunOnce: [MicroSoft Legal Syst3m32] Syst3m32.exe
O4 - HKLM\..\RunOnce: [HOT FIX] Gothic.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [ErrorSafeFree] "C:\Program Files\ErrorSafe Free\uers.exe" /min
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [MicroSoft ssadsadas3s1] eXtream.exe
O4 - HKCU\..\Run: [MicroSoft ssadssjdhasjadas3s1] kdjfsdklfjsl.exe
O4 - HKCU\..\Run: [MicroSoft Getway mqbol] xbvuxowlewiv.exe
O4 - HKCU\..\Run: [MicroSoft Legal Service] Srb0ty.exe
O4 - HKCU\..\Run: [Windows Secure Update] load.exe
O4 - HKCU\..\Run: [MicroSoft Legal Syst3m32] Syst3m32.exe
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - HKCU\..\Run: [HOT FIX] Gothic.exe
O4 - HKCU\..\RunOnce: [MicroSoft ssadssjdhasjadas3s1] kdjfsdklfjsl.exe
O4 - HKCU\..\RunOnce: [MicroSoft Legal Service] Srb0ty.exe
O4 - HKCU\..\RunOnce: [MicroSoft ssadsadas3s1] eXtream.exe
O4 - HKCU\..\RunOnce: [Windows Secure Update] load.exe
O4 - HKCU\..\RunOnce: [HOT FIX] Gothic.exe
O4 - HKCU\..\RunOnce: [MicroSoft Legal Syst3m32] Syst3m32.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Run: [MicroSoft ssadssjdhasjadas3s1] kdjfsdklfjsl.exe (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Run: [MicroSoft sys3s1] h4ckn3t.exe (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Run: [MicroSoft Getway mqbol] qrcffqqysayn.exe (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Run: [Critical Error Safe32] C:\WINDOWS\System32\GetWaylayer32.exe (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Run: [MicroSoft Legal Service] Srb0ty.exe (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Run: [Windows Secure Update] load.exe (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Run: [MicroSoft Legal Syst3m32] Syst3m32.exe (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Run: [MicroSoft Visual Framwork] MS32.exe (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [MicroSoft sys3s1] h4ckn3t.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [MicroSoft sys3s1] h4ckn3t.exe (User 'Default user')
O4 - Global Startup: hp center.lnk = C:\Program Files\hp center\137903\Program\BackWeb-137903.exe
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: Organise-notes - {9455301C-CF6B-11D3-A266-00C04F689C50} - C:\Program Files\Fichiers communs\Microsoft Shared\Reference 2001\EROProj.dll
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\webelated.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\webelated.htm
O16 - DPF: {029FDBA6-3547-11D7-AA4C-0050BF051A00} (Rawflow ICD Client) - http://s.tf1.fr/mmdia/static/rawflow/clients/5.3.1.0/Rawflow.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w2/pr02/resources/MSNPUpld.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/...
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/...
O16 - DPF: {9D190AE6-C81E-4039-8061-978EBAD10073} (F-Secure Online Scanner 3.0) - http://www.securite.neuf.fr/Ols/fscax.cab
O16 - DPF: {CF40ACC5-E1BB-4AFF-AC72-04C2F616BCA7} (get_atlcom Class) - http://www.adobe.com/products/acrobat/nos/gp.cab
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Microsoft Windows DNS Manager - Unknown owner - C:\WINDOWS\System32\dllcache\windmns.exe
O23 - Service: Microsoft Windows TCP Ack Timing - Unknown owner - C:\WINDOWS\System32\dllcache\wintcpack.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32
vsvc32.exe

scoubidou78 · Answer

coucou tu es la?

jsui perdue jsai plus koi faire

peut etre que tu manges?

Lyonnais92 · Answer

re,

Télécharge SDFix (créé par AndyManchesta) et sauvegarde le sur ton Bureau.
http://downloads.andymanchesta.com/RemovalTools/SDFix.exe
Double clique sur SDFix.exe et choisis Install pour l'extraire dans un dossier dédié sur le Bureau. Redémarre ton ordinateur en mode sans échec en suivant la procédure que voici :
• Redémarre ton ordinateur
• Après avoir entendu l'ordinateur biper lors du démarrage, mais avant que l'icône Windows apparaisse, tapote la touche F8 (une pression par seconde).
• A la place du chargement normal de Windows, un menu avec différentes options devrait apparaître.
• Choisis la première option, pour exécuter Windows en mode sans échec, puis appuie sur "Entrée".
• Choisis ton compte.
Déroule la liste des instructions ci-dessous :
• Ouvre le dossier SDFix qui vient d'être créé dans le répertoire C:\ et double clique sur RunThis.cmd pour lancer le scrïpt.
• Appuie sur Y pour commencer le processus de nettoyage.
• Il va supprimer les services et les entrées du Registre de certains trojans trouvés puis te demandera d'appuyer sur une touche pour redémarrer.
• Appuie sur une touche pour redémarrer le PC.
• Ton système sera plus long pour redémarrer qu'à l'accoutumée car l'outil va continuer à s'exécuter et supprimer des fichiers.
• Après le chargement du Bureau, l'outil terminera son travail et affichera Finished.
• Appuie sur une touche pour finir l'exécution du scrïpt et charger les icônes de ton Bureau.
• Les icônes du Bureau affichées, le rapport SDFix s'ouvrira à l'écran et s'enregistrera aussi dans le dossier SDFix sous le nom Report.txt.
• Enfin, copie/colle le contenu du fichier Report.txt dans ta prochaine réponse sur le forum, avec un nouveau log Hijackthis !

scoubidou78 · Answer

re,

bien dormi?

je refais un SDFIX meme si j en avais fait un au tout debut comme tu me l avais demandé?

peut etre que tu n est pas connecte?

A PLUS MERCI ENCORE DE TON AIDE

Lyonnais92 · Answer

Bonjour,

scusi, non inutile de refaire SDFix.

 
Si je pouvais avoir le rapport détaille de BitDefender (avec le nom et l'emplacement de sfichiers infectés et ce qu'a fait BitDefender.

Télécharge Superantispyware (SAS) en cliquant sur ce lien :

https://www.superantispyware.com/superantispywarefreevspro.html

Choisis "enregistrer" et enregistre-le sur ton bureau.

Double-clique sur l'icône d'installation qui vient de se créer et suis les instructions.

Créé une icône sur le bureau.

Double-clique sur l'icône de SAS (une tête dans un cercle rouge barré) pour le lancer.

- Si l'outil te demande de mettre à jour le programme ("update the program definitions", clique sur yes.
- Sous Configuration and Preferences, clique sur le bouton "Preferences"
- Clique sur l'onglet "Scanning Control "
- Dans "Scanner Options ", assure toi que la case devant lles lignes suivantes est cochée :

Close browsers before scanning
Scan for tracking cookies
Terminate memory threats before quarantining
- Laisse les autres lignes décochées.

- Clique sur le bouton "Close" pour quitter l'écran du centre de contrôle.

- Dans la fenêtre principale, clique, dans "Scan for Harmful Software", sur "Scan your computer".

Dans la colonne de gauche, coche   C:\Fixed Drive.

Dans la colonne de droite, sous "Complete scan", clique sur "Perform Complete Scan"

Clique sur "next" pour lancer le scan. Patiente pendant la durée du scan.

A la fin du scan, une fenêtre de résultats s'ouvre . Clique sur OK.

Assure toi que toutes les lignes de la fenêtre blanche sont cochées et clique sur "Next".

Tout ce qui a été trouvé sera mis en quarantaine. S'il t'es demandé de redémarrer l'ordi ("reboot"), clique sur Yes.

Pour recopier les informations sur le forum, fais ceci :

- après le redémarrage de l'ordi, double-clique sur l'icône pour lancer SAS.
- Clique sur "Preferences" puis sur l'onglet "Statistics/Logs ".
- Dans "scanners logs", double-clique sur SUPERAntiSpyware Scan Log.

- Le rapport va s'ouvrir dans ton éditeur de texte par défaut.

- Copie son contenu dans ta réponse.

scoubidou78 · Answer

bonjour lyonnais92,

voici le superantispyware que tu ma demandé.

il est pas entier vu que sa bloque a chaque fois sa me dit ressouce systeme insuffisante ????




SUPERAntiSpyware Scan Log
https://www.superantispyware.com/

Generated 12/10/2007 at 01:21 PM

Application Version : 3.9.1008

Core Rules Database Version : 3259
Trace Rules Database Version: 1270

Scan type       : Complete Scan
Total Scan Time : 01:07:55

Memory items scanned      : 419
Memory threats detected   : 0
Registry items scanned    : 4311
Registry threats detected : 0
File items scanned        : 36038
File threats detected     : 19

Adware.Tracking Cookie
	C:\Documents and Settings\Propriétaire\Cookies\propriétaire@ehg-neuftelecom.hitbox[2].txt
	C:\Documents and Settings\Propriétaire\Cookies\propriétaire@smartadserver[2].txt
	C:\Documents and Settings\Propriétaire\Cookies\propriétaire@tradedoubler[1].txt
	C:\Documents and Settings\Propriétaire\Cookies\propriétaire@weborama[1].txt
	C:\Documents and Settings\Propriétaire\Cookies\propriétaire@adserver.aol[1].txt
	C:\Documents and Settings\Propriétaire\Cookies\propriétaire@hitbox[2].txt
	C:\Documents and Settings\Propriétaire\Cookies\propriétaire@statsweb.bnpparibas[2].txt
	C:\Documents and Settings\Propriétaire\Cookies\propriétaire@247realmedia[2].txt
	C:\Documents and Settings\Propriétaire\Cookies\propriétaire@serving-sys[1].txt
	C:\Documents and Settings\Propriétaire\Cookies\propriétaire@yourmedia[1].txt
	C:\Documents and Settings\Propriétaire\Cookies\propriétaire@doubleclick[1].txt
	C:\Documents and Settings\Propriétaire\Cookies\propriétaire@mediaplex[1].txt
	C:\Documents and Settings\Propriétaire\Cookies\propriétaire@xiti[1].txt
	C:\Documents and Settings\Propriétaire\Cookies\propriétaire@ad.yieldmanager[1].txt
	C:\Documents and Settings\Propriétaire\Cookies\propriétaire@aolfr.122.2o7[1].txt
	C:\Documents and Settings\Propriétaire\Cookies\propriétaire@bs.serving-sys[2].txt
	C:\Documents and Settings\Propriétaire\Cookies\propriétaire@advertising[1].txt
	C:\Documents and Settings\Propriétaire\Cookies\propriétaire@bluestreak[1].txt

Trojan.Downloader-Gen/Win
	C:\WINDOWS\SYSTEM32\CHII.EXE

Lyonnais92 · Answer

Bonjour,

télécharge OTMoveIt http://download.bleepingcomputer.com/oldtimer/OTMoveIt.exe (de Old_Timer) sur ton Bureau.
double-clique sur OTMoveIt.exe pour le lancer.
copie la liste qui se trouve en gras  ci-dessous,
et colle-la dans le cadre de gauche de OTMoveIt :Paste List of Files/Folders to be moved.

C:\WINDOWS\SYSTEM32\CHII.EXE
C:\WINDOWS\SYSTEM32\1.EXE
C:\WINDOWS\SYSTEM32\zupacha.EXE


clique sur MoveIt! pour lancer la suppression.
le résultat apparaitra dans le cadre "Results".
clique sur Exit pour fermer.
poste le rapport situé dans C:\_OTMoveIt\MovedFiles.

il te sera peut-être demander de redémarrer le pc pour achever la suppression.si c'est le cas accepte par Yes. 

Relance Superantispyware et poste le rapport.

scoubidou78 · Answer

re,

mon rapport superantispaware pas entier vu que sa bloque


SUPERAntiSpyware Scan Log
https://www.superantispyware.com/

Generated 11/11/2007 at 02:01 PM

Application Version : 3.9.1008

Core Rules Database Version : 3259
Trace Rules Database Version: 1270

Scan type       : Complete Scan
Total Scan Time : 01:15:54

Memory items scanned      : 394
Memory threats detected   : 0
Registry items scanned    : 4311
Registry threats detected : 0
File items scanned        : 35547
File threats detected     : 8

Adware.Tracking Cookie
	C:\Documents and Settings\Propriétaire\Cookies\propriétaire@smartadserver[2].txt
	C:\Documents and Settings\Propriétaire\Cookies\propriétaire@doubleclick[1].txt
	C:\Documents and Settings\Propriétaire\Cookies\propriétaire@mediaplex[1].txt
	C:\Documents and Settings\Propriétaire\Cookies\propriétaire@xiti[1].txt
	C:\Documents and Settings\Propriétaire\Cookies\propriétaire@advertising[2].txt
	C:\Documents and Settings\Propriétaire\Cookies\propriétaire@bluestreak[1].txt
	C:\Documents and Settings\Propriétaire\Local Settings\Temp\Cookies\propriétaire@dictionnaire.mediadico[2].txt
	C:\Documents and Settings\Propriétaire\Local Settings\Temp\Cookies\propriétaire@mediadico[1].txt



rapport OTMoveIt 


C:\WINDOWS\SYSTEM32\CHII.EXE moved successfully.
File/Folder C:\WINDOWS\SYSTEM32\1.EXE not found.
File/Folder C:\WINDOWS\SYSTEM32\zupacha.EXE not found.
 
Created on 11/11/2007 12:06:53


Voila quest ce quil y a sur mon pc? Pourquoi sa bloque a chaque fois et que sa me dit ressources insuffisantes...

MERCI ENCORE 

je suis connecte ce soir

a plus

Lyonnais92 · Answer

re,

télécharge combofix (par sUBs)ici :

http://download.bleepingcomputer.com/sUBs/ComboFix.exe


et enregistre le sur le bureau.

2 double-clique sur combofix.exe et suis les instructions

3 à la fin, il va produire un rapport C:\ComboFix.txt

4 copie/colle ce rapport dans ta prochaine réponse.

Attention, n'utilise pas ta souris ni ton clavier (ni un autre système de pointage) pendant que le programme tourne. Cela pourrait figer l'ordi.

scoubidou78 · Answer

bonjour,

ya quelques j avai telecharger combofix et tavais envoyer un rapport regarde plus haut
je le refais ?


MERCI

scoubidou78 · Answer

bonjour,

ya quelqu un qui peut m aider svp ????


MERCI D AVANCE

Lyonnais92 · Answer

Bonjour,

lol

1) tu refais passer combofix

2) tu me cherches le rapport complet de bit defender

3) tu fais un scan minutieux de ton post de travail avec Avast et tu postes le rapport

4) quel est le taux d'occupation de ton disque dur ?

scoubidou78 · Answer

bonjour lyonnais92, voici mon rapport combofix ComboFix 07-12-08.1 - Propriétaire 2007-12-14 21:11:57.2 - NTFSx86 Running from: C:\Documents and Settings\Propriétaire\Bureau\ComboFix.exe . (((((((((((((((((((((((((((((((((((( Autres suppressions )))))))))))))))))))))))))))))))))))))))))))))))) . C:\F.exe C:\w.exe . ((((((((((((((((((((((((((((( Fichiers créés 2007-11-14 to 2007-12-14 )))))))))))))))))))))))))))))))))))) . 2007-12-14 19:57 . 2007-12-14 20:01 367,711 --a------ C:\WINDOWS\SYSTEM32 ose.exe 2007-12-14 19:53 . 2007-12-14 19:57 79,604 --a------ C:\WINDOWS\SYSTEM32\zur.exe 2007-12-14 19:17 . 2007-12-14 19:30 79,604 --a------ C:\WINDOWS\SYSTEM32\ijelc.exe 2007-12-14 19:06 . 2007-12-14 19:06 79,604 --a------ C:\WINDOWS\SYSTEM32\ijeldddc.exe 2007-12-10 19:25 . 2007-11-09 09:53 708,364 --a------ C:\yes.exe 2007-12-09 16:33 . 2007-11-11 19:57 d-------- C:\Program Files\SUPERAntiSpyware 2007-12-09 16:33 . 2007-12-09 16:33 d-------- C:\Documents and Settings\Propriétaire\Application Data\SUPERAntiSpyware.com 2007-12-09 16:33 . 2007-12-09 16:33 d-------- C:\Documents and Settings\Propriétaire\Application Data\SUPERAntiSpyware.com 2007-12-09 16:33 . 2007-12-09 16:33 d-------- C:\Documents and Settings\All Users\Application Data\SUPERAntiSpyware.com 2007-12-09 16:32 . 2007-12-09 16:32 d-------- C:\Program Files\Fichiers communs\Wise Installation Wizard 2007-12-09 16:04 . 2007-12-09 16:04 540,672 --a------ C:\WINDOWS\SYSTEM32\Gothic.exe 2007-12-09 13:41 . 2007-12-09 13:41 992,082 --a------ C:\WINDOWS\SYSTEM32\dfgsdfcxvxs.exe 2007-12-09 13:40 . 2007-12-10 17:57 d-------- C:\Program Files\dfdsfsd 2007-12-09 13:39 . 2007-12-09 13:39 992,082 --a------ C:\WINDOWS\SYSTEM32\dfgsdfs.exe 2007-12-08 22:32 . 2007-12-10 18:54 d-------- C:\WINDOWS\BDOSCAN8 2007-12-08 19:35 . 2007-11-09 09:59 d-------- C:\WINDOWS\system.1 2007-12-08 18:25 . 2007-12-08 19:35 705,805 --a------ C:\lol1.exe 2007-12-08 17:43 . 2007-12-14 21:00 0 --a------ C:\adware.exe 2007-12-08 17:28 . 2007-12-08 17:28 d-------- C:\WINDOWS\ERUNT 2007-12-07 13:15 . 2007-12-07 13:17 49,090 --a------ C:\sexy.exe 2007-12-07 12:55 . 2007-12-07 12:56 14,254 --a------ C:\WINDOWS\SYSTEM32\jhsadlsghw.exe 2007-12-07 10:52 . 2007-12-07 10:52 d-------- C:\Program Files\Trend Micro 2007-12-07 09:25 . 2007-12-05 21:09 458,752 ---hs---- C:\WINDOWS\SYSTEM32\Wseclayer.exe 2007-12-07 09:24 . 2007-12-05 20:14 27 --a------ C:\WINDOWS\SYSTEM32\kuki.bat 2007-12-06 10:26 . 2007-12-06 10:29 41,771 --a------ C:\djkfijelc.exe 2007-12-05 14:31 . 2007-12-07 17:22 6,814 --a------ C:\eg.exe 2007-12-04 18:48 . 2007-12-05 18:49 70,869 --a------ C:\fy.exe 2007-12-03 19:07 . 2007-12-03 19:08 195,754 --a------ C:\WINDOWS\SYSTEM32\ksioelskdew.exe 2007-12-03 11:56 . 2007-12-03 11:56 991,314 --a------ C:\WINDOWS\SYSTEM32\dsgsf.exe 2007-12-02 19:54 . 2007-12-02 19:53 458,752 -r-hs---- C:\WINDOWS\SYSTEM32\dllcache\wintcpack.exe 2007-12-02 18:00 . 2007-12-02 19:20 12,527 --a------ C:\WINDOWS\SYSTEM32\exe.exe 2007-12-02 17:15 . 2007-12-09 12:52 d-------- C:\Program Files\dsfdsfsdfs 2007-12-02 16:55 . 2007-12-02 17:14 696,623 --a------ C:\WINDOWS\SYSTEM32\dsfsdfscx.exe 2007-12-02 16:51 . 2007-12-02 16:52 14,182 --a------ C:\WINDOWS\SYSTEM32\dsfsdfs.exe 2007-12-02 15:52 . 2007-12-02 15:52 d--h----- C:\WINDOWS\PIF 2007-12-01 11:42 . 2007-12-01 11:42 548,864 --a------ C:\WINDOWS\SYSTEM32\Syst3m32.exe 2007-12-01 11:32 . 2007-12-01 11:32 471,040 --a------ C:\WINDOWS\SYSTEM32\load.exe 2007-11-30 19:27 . 2007-12-07 15:43 56,351 --a------ C:\WINDOWS\SYSTEM32\djkfijelc.exe 2007-11-30 17:14 . 2007-12-09 14:35 d-------- C:\WINDOWS\SYSTEM32 dafs 2007-11-30 17:14 . 2007-12-07 11:34 82,486 --a------ C: awaf.exe 2007-11-30 14:49 . 2007-11-30 14:49 495,616 -r-hs---- C:\WINDOWS\SYSTEM32\dllcache\windmns.exe 2007-11-25 13:34 . 2007-12-09 11:32 d-------- C:\Program Files\dfksdkfksdl 2007-11-25 13:34 . 2007-11-25 15:40 991,319 --a------ C:\WINDOWS\SYSTEM32\dsfds.pif 2007-11-24 19:09 . 2007-11-24 19:08 851,968 --a------ C:\WINDOWS\SYSTEM32\Srb0ty.exe 2007-11-23 18:12 . 2007-11-23 18:12 923,908 --a------ C:\WINDOWS\SYSTEM32\guygay.exe 2007-11-20 18:48 . 2007-11-20 18:48 726,066 --a------ C:\WINDOWS\SYSTEM32\-r 2007-11-17 17:19 . 2007-11-17 17:19 2,565 --a------ C:\WINDOWS\SYSTEM32\o1o2o3o4 2007-11-15 12:08 . 2007-11-15 12:08 927,214 --a------ C:\sdsdfsdf.exe 2007-11-15 09:21 . 2007-12-07 11:23 991,307 --a------ C:\WINDOWS\SYSTEM32\Sh.exe 2007-11-14 16:41 . 2007-12-03 15:59 991,310 --a------ C:\cg.pif 2007-11-14 13:33 . 2007-12-09 14:32 d-------- C:\WINDOWS\SYSTEM32\ksomik 2007-11-14 13:27 . 2007-11-14 13:27 725,861 --a------ C:\hidfdfdffdz.pif 2007-11-14 10:49 . 2007-11-14 10:49 1,129,575 --a------ C:\WINDOWS\SYSTEM32\fkdksae.exe 2007-11-14 10:48 . 2007-11-14 10:48 1,129,575 --a------ C:\WINDOWS\SYSTEM32\fkigldje.exe . (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M )))))))))))))))))))))))))))))))))))))))))))))))) . 2007-12-10 19:43 --------- d-----w C:\Program Files\killSh 2007-12-10 17:05 --------- d-----w C:\Program Files\sdfhfgd 2007-12-09 11:59 --------- d-----w C:\Program Files\Symantic 2007-12-09 11:59 --------- d-----w C:\Program Files\sdfsdfsdfs 2007-12-09 11:53 --------- d-----w C:\Program Files\fjhgfdsdfg 2007-12-09 11:52 --------- d-----w C:\Program Files\dfrerter 2007-12-07 16:25 552,960 ----a-w C:\WINDOWS\SYSTEM32\eXtream.exe 2007-12-05 17:41 991,314 ----a-w C:\WINDOWS\SYSTEM32\eg.exe 2007-12-04 14:56 93,264 ----a-w C:\WINDOWS\system32\drivers\aswmon.sys 2007-12-04 14:55 94,544 ----a-w C:\WINDOWS\system32\drivers\aswmon2.sys 2007-12-04 14:53 23,152 ----a-w C:\WINDOWS\system32\drivers\aswRdr.sys 2007-12-04 14:51 42,912 ----a-w C:\WINDOWS\system32\drivers\aswTdi.sys 2007-12-04 14:49 26,624 ----a-w C:\WINDOWS\system32\drivers\aavmker4.sys 2007-12-04 13:04 837,496 ----a-w C:\WINDOWS\SYSTEM32\aswBoot.exe 2007-12-04 12:54 95,608 ----a-w C:\WINDOWS\SYSTEM32\AvastSS.scr 2007-11-26 18:19 775,031 ----a-w C:\WINDOWS\SYSTEM32\sex.exe 2007-11-23 09:54 46,127 ----a-w C:\WINDOWS\SYSTEM32\ProtectionV.exe 2007-11-20 16:04 112,702 ----a-w C:\esd.exe 2007-11-20 12:31 106,698 ----a-w C:\ddsds.exe 2007-11-18 10:17 544,768 ----a-w C:\WINDOWS\SYSTEM32\kdjfsdklfjsl.exe 2007-11-14 11:02 56,343 ----a-w C:\WINDOWS\SYSTEM32\Fuck.exe 2007-11-11 18:12 60,699 ----a-w C:\kek.exe 2007-11-10 19:11 991,314 ----a-w C:\gexa.exe 2007-11-09 09:01 991,307 ----a-w C:\Sh.exe 2007-11-05 16:35 991,310 ----a-w C:\WINDOWS\SYSTEM32\cg.pif 2007-11-04 17:39 991,314 ----a-w C:\gezzxa.exe 2007-11-02 12:15 523,887 ----a-w C:\WINDOWS\SYSTEM32\kek.exe 2007-10-31 16:09 1,044,509 ----a-w C:\WINDOWS\SYSTEM32 estmangerx.exe 2007-10-31 16:07 923,839 ----a-w C:\WINDOWS\SYSTEM32 estooo.exe 2007-10-29 19:25 725,446 ----a-w C:\klertf.exe 2007-10-29 11:30 725,446 ----a-w C:\hjuing.exe 2007-10-28 19:58 883,093 ----a-w C:\WINDOWS\SYSTEM32\darkworlk.exe 2007-10-28 11:15 6,156 ----a-w C:\ddfsd.pif 2007-10-28 10:46 883,093 ----a-w C:\WINDOWS\SYSTEM32\antivirusv1.exe 2007-10-26 07:38 1,044,520 ----a-w C:\WINDOWS\SYSTEM32\ksxchii.exe 2007-10-25 18:43 1,043,792 ----a-w C:\WINDOWS\SYSTEM32\jdjsdsj.exe 2007-10-25 15:28 156,653 ----a-w C:\essd.exe 2007-10-25 09:26 53,248 ----a-w C:\WINDOWS\bdoscandel.exe 2007-10-24 16:06 1,771,008 ----a-w C:\WINDOWS\SYSTEM32\d4rk.exe 2007-10-19 19:23 --------- d-----w C:\Program Files\sddsada 2007-10-18 18:35 2,076,261 ----a-w C:\dfsd.exe 2007-10-14 19:25 1,044,509 ----a-w C:\WINDOWS\SYSTEM32\fvist.com.exe 2007-10-07 16:19 463,360 ----a-w C:\ddxf.exe 2007-09-30 08:05 381,440 ----a-w C:\GAMES.EXE 2007-09-27 14:05 767,053 ----a-w C:\sfsdfsda.exe 2007-09-27 14:02 991,308 ----a-w C:\WINDOWS\SYSTEM32\Sxfgfd.exe 2007-09-27 13:59 991,308 ----a-w C:\WINDOWS\SYSTEM32\Sx.exe 2001-08-24 00:47 78,644 --sh--r C:\WINDOWS\SYSTEM32\l1nksys.exe . ((((((((((((((((((((((((((((( snapshot@2007-12-08_19.04.22.04 ))))))))))))))))))))))))))))))))))))))))) . + 2007-12-08 21:40:46 45,056 ----a-w C:\WINDOWS\BDOSCAN8\avxdisk.dll + 2007-12-08 21:40:46 10,240 ----a-w C:\WINDOWS\BDOSCAN8\avxs.dll + 2007-12-08 21:40:46 27,136 ----a-w C:\WINDOWS\BDOSCAN8\avxt.dll + 2007-12-08 21:40:56 181,760 ----a-w C:\WINDOWS\BDOSCAN8\bdcore.dll + 2007-12-09 09:04:23 77,824 ----a-w C:\WINDOWS\BDOSCAN8\bdupd.dll + 2007-10-25 09:26:48 53,248 ----a-w C:\WINDOWS\BDOSCAN8\ipsupd.dll + 2007-12-08 21:40:57 142,848 ----a-w C:\WINDOWS\BDOSCAN8\libfn.dll + 2007-12-08 21:40:47 86,016 ----a-w C:\WINDOWS\BDOSCAN8\librtvr.dll + 2007-10-25 09:26:48 118,784 ----a-w C:\WINDOWS\Downloaded Program Files\bdupd.dll + 2007-10-25 09:26:48 53,248 ----a-w C:\WINDOWS\Downloaded Program Files\ipsupd.dll + 2007-12-09 15:33:31 29,696 ----a-r C:\WINDOWS\Installer\{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}\IconCDDCBBF11.exe + 2007-12-09 15:33:31 18,944 ----a-r C:\WINDOWS\Installer\{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}\IconCDDCBBF13.exe + 2007-12-09 15:33:31 65,024 ----a-r C:\WINDOWS\Installer\{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}\IconCDDCBBF15.exe + 2003-01-13 12:57:58 589,881 ----a-w C:\WINDOWS\LastGood\System32\dllcache\jscript.dll + 2003-01-13 12:57:58 589,881 ----a-w C:\WINDOWS\LastGood\System32\jscript.dll + 2007-12-10 18:26:55 19,001 ----a-w C:\WINDOWS\system.1\Swfwin32.dll + 2007-02-03 06:01:54 580,999 ----a-w C:\WINDOWS\system.1\window.com - 2007-12-08 16:36:11 16,384 ----a-w C:\WINDOWS\SYSTEM32\config\systemprofile\Cookies\index.dat + 2007-12-14 19:58:47 16,384 ----a-w C:\WINDOWS\SYSTEM32\config\systemprofile\Cookies\index.dat - 2007-12-08 16:36:11 32,768 ----a-w C:\WINDOWS\SYSTEM32\config\systemprofile\Local Settings\Historique\History.IE5\index.dat + 2007-12-14 19:58:47 32,768 ----a-w C:\WINDOWS\SYSTEM32\config\systemprofile\Local Settings\Historique\History.IE5\index.dat + 2007-11-12 08:31:04 458,752 ----a-w C:\WINDOWS\SYSTEM32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\2RSFGDQP\84785_winhtb[3].exe + 2007-12-10 08:11:32 495,616 ----a-w C:\WINDOWS\SYSTEM32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\8TIRYPQB\84785_winhtb[3].exe + 2007-12-10 18:18:51 495,616 ----a-w C:\WINDOWS\SYSTEM32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\8TIRYPQB\84785_winhtb[4].exe + 2007-12-14 12:10:21 458,752 ----a-w C:\WINDOWS\SYSTEM32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\8TIRYPQB\84785_winhtb[5].exe - 2007-12-08 16:36:11 49,152 ----a-w C:\WINDOWS\SYSTEM32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\index.dat + 2007-12-14 19:58:47 49,152 ----a-w C:\WINDOWS\SYSTEM32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\index.dat + 2007-12-09 07:58:43 495,616 ----a-w C:\WINDOWS\SYSTEM32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\S3GR8L8P\84785_winhtb[3].exe + 2007-11-12 07:38:01 458,752 ----a-w C:\WINDOWS\SYSTEM32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\S3GR8L8P\84785_winhtb[4].exe + 2007-11-11 19:30:30 495,616 ----a-w C:\WINDOWS\SYSTEM32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\YF8VKTEH\84785_winhtb[2].exe + 2007-12-14 09:48:01 458,752 ----a-w C:\WINDOWS\SYSTEM32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\YF8VKTEH\84785_winhtb[3].exe - 2007-12-08 17:41:07 262,144 ----a-w C:\WINDOWS\SYSTEM32\config\systemprofile\NTUSER.DAT + 2007-12-14 20:11:43 262,144 ----a-w C:\WINDOWS\SYSTEM32\config\systemprofile\NTUSER.DAT - 2003-01-13 12:57:58 589,881 ----a-w C:\WINDOWS\SYSTEM32\dllcache\jscript.dll + 2003-01-13 13:57:58 589,881 ----a-w C:\WINDOWS\SYSTEM32\dllcache\jscript.dll - 2003-01-13 12:57:58 589,881 ----a-w C:\WINDOWS\SYSTEM32\jscript.dll + 2003-01-13 13:57:58 589,881 ----a-w C:\WINDOWS\SYSTEM32\jscript.dll - 2007-11-02 07:12:57 18,238,072 ----a-w C:\WINDOWS\SYSTEM32\MRT.exe + 2007-12-02 23:00:05 18,684,536 ----a-w C:\WINDOWS\SYSTEM32\MRT.exe + 2007-12-14 19:58:40 16,384 ----atw C:\WINDOWS\Temp\Perflib_Perfdata_574.dat . -- Snapshot reset to current date -- . ((((((((((((((((((((((((((((((((( Point de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))) . . REGEDIT4 *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-06-14 07:48] "ErrorSafeFree"="C:\Program Files\ErrorSafe Free\uers.exe" [] "MsnMsgr"="C:\Program Files\MSN Messenger\MsnMsgr.exe" [] "MicroSoft ssadsadas3s1"="eXtream.exe" [2007-12-07 17:25 C:\WINDOWS\SYSTEM32\eXtream.exe] "MicroSoft ssadssjdhasjadas3s1"="kdjfsdklfjsl.exe" [2007-11-18 11:17 C:\WINDOWS\SYSTEM32\kdjfsdklfjsl.exe] "MicroSoft Getway mqbol"="xbvuxowlewiv.exe" [] "MicroSoft Legal Service"="Srb0ty.exe" [2007-11-24 19:08 C:\WINDOWS\SYSTEM32\Srb0ty.exe] "Windows Secure Update"="load.exe" [2007-12-01 11:32 C:\WINDOWS\SYSTEM32\load.exe] "MicroSoft Legal Syst3m32"="Syst3m32.exe" [2007-12-01 11:42 C:\WINDOWS\SYSTEM32\Syst3m32.exe] "SUPERAntiSpyware"="C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe" [2007-06-21 14:06] "HOT FIX"="Gothic.exe" [2007-12-09 16:04 C:\WINDOWS\SYSTEM32\Gothic.exe] [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce] "Windows Secure Update"="load.exe" [2007-12-01 11:32 C:\WINDOWS\SYSTEM32\load.exe] "MicroSoft Legal Syst3m32"="Syst3m32.exe" [2007-12-01 11:42 C:\WINDOWS\SYSTEM32\Syst3m32.exe] "HOT FIX"="Gothic.exe" [2007-12-09 16:04 C:\WINDOWS\SYSTEM32\Gothic.exe] "MicroSoft ssadsadas3s1"="eXtream.exe" [2007-12-07 17:25 C:\WINDOWS\SYSTEM32\eXtream.exe] "MicroSoft ssadssjdhasjadas3s1"="kdjfsdklfjsl.exe" [2007-11-18 11:17 C:\WINDOWS\SYSTEM32\kdjfsdklfjsl.exe] "MicroSoft Legal Service"="Srb0ty.exe" [2007-11-24 19:08 C:\WINDOWS\SYSTEM32\Srb0ty.exe] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "hpsysdrv"="c:\windows\system\hpsysdrv.exe" [1998-05-07 08:04] "KBD"="C:\HP\KBD\KBD.EXE" [2001-07-06 13:56] "NvCplDaemon"="RUNDLL32.exe" [2001-08-24 01:47 C:\WINDOWS\SYSTEM32 undll32.exe] "IgfxTray"="C:\WINDOWS\System32\igfxtray.exe" [2001-08-07 16:25] "HotKeysCmds"="C:\WINDOWS\System32\hkcmd.exe" [2001-08-07 15:36] "PS2"="C:\WINDOWS\system32\ps2.exe" [2001-07-03 13:13] "Microsoft Works Portfolio"="C:\Program Files\Microsoft Works\WksSb.exe" [2000-07-12 14:14] "Microsoft Works Update Detection"="C:\Program Files\Microsoft Works\WkDetect.exe" [2000-08-04 03:01] "PCTVOICE"="pctspk.exe" [2001-08-01 17:37 C:\WINDOWS\SYSTEM32\pctspk.exe] "HPDJ Taskbar Utility"="C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb04.exe" [2001-10-29 21:31] "avast!"="C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" [2007-12-04 14:00] "kiss"="C:\Program Files\sdfhfgd\pingy.exe" [] "Adobe Photo Downloader"="C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.2\Apps\apdproxy.exe" [] "MicroSoft ssadsadas3s1"="eXtream.exe" [2007-12-07 17:25 C:\WINDOWS\SYSTEM32\eXtream.exe] "MicroSoft ssadssjdhasjadas3s1"="kdjfsdklfjsl.exe" [2007-11-18 11:17 C:\WINDOWS\SYSTEM32\kdjfsdklfjsl.exe] "MicroSoft Getway mqbol"="xbvuxowlewiv.exe" [] "MicroSoft Legal Service"="Srb0ty.exe" [2007-11-24 19:08 C:\WINDOWS\SYSTEM32\Srb0ty.exe] "MicroSoft Legal Syst3m32"="Syst3m32.exe" [2007-12-01 11:42 C:\WINDOWS\SYSTEM32\Syst3m32.exe] "smsger"="C:\WINDOWS\System32\Win.exe" [] "MicroSoft Visual Framwork"="MS32.exe" [] "WinDLL (Wseclayer.exe)"="C:\WINDOWS\System32\Wseclayer.exe" [2007-12-05 21:09] "Windows Secure Update"="load.exe" [2007-12-01 11:32 C:\WINDOWS\SYSTEM32\load.exe] "HOT FIX"="Gothic.exe" [2007-12-09 16:04 C:\WINDOWS\SYSTEM32\Gothic.exe] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce] "Windows Secure Update"="load.exe" [2007-12-01 11:32 C:\WINDOWS\SYSTEM32\load.exe] "MicroSoft ssadsadas3s1"="eXtream.exe" [2007-12-07 17:25 C:\WINDOWS\SYSTEM32\eXtream.exe] "MicroSoft ssadssjdhasjadas3s1"="kdjfsdklfjsl.exe" [2007-11-18 11:17 C:\WINDOWS\SYSTEM32\kdjfsdklfjsl.exe] "MicroSoft Legal Service"="Srb0ty.exe" [2007-11-24 19:08 C:\WINDOWS\SYSTEM32\Srb0ty.exe] "MicroSoft Legal Syst3m32"="Syst3m32.exe" [2007-12-01 11:42 C:\WINDOWS\SYSTEM32\Syst3m32.exe] "HOT FIX"="Gothic.exe" [2007-12-09 16:04 C:\WINDOWS\SYSTEM32\Gothic.exe] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices] "MicroSoft ssadsadas3s1"="eXtream.exe" [2007-12-07 17:25 C:\WINDOWS\SYSTEM32\eXtream.exe] "MicroSoft ssadssjdhasjadas3s1"="kdjfsdklfjsl.exe" [2007-11-18 11:17 C:\WINDOWS\SYSTEM32\kdjfsdklfjsl.exe] "MicroSoft Getway mqbol"="xbvuxowlewiv.exe" [] "MicroSoft Legal Service"="Srb0ty.exe" [2007-11-24 19:08 C:\WINDOWS\SYSTEM32\Srb0ty.exe] "MicroSoft Legal Syst3m32"="Syst3m32.exe" [2007-12-01 11:42 C:\WINDOWS\SYSTEM32\Syst3m32.exe] "smsger"="C:\WINDOWS\System32\Win.exe" [] "MicroSoft Visual Framwork"="MS32.exe" [] "Windows Secure Update"="load.exe" [2007-12-01 11:32 C:\WINDOWS\SYSTEM32\load.exe] "HOT FIX"="Gothic.exe" [2007-12-09 16:04 C:\WINDOWS\SYSTEM32\Gothic.exe] "Internet"="C:\WINDOWS\System32\l1nksys.exe" [2001-08-24 01:47] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="C:\WINDOWS\System32\ctfmon.exe" [2001-08-24 01:47] "HOT FIX"="Gothic.exe" [2007-12-09 16:04 C:\WINDOWS\SYSTEM32\Gothic.exe] "MicroSoft ssadsadas3s1"="eXtream.exe" [2007-12-07 17:25 C:\WINDOWS\SYSTEM32\eXtream.exe] "MicroSoft ssadssjdhasjadas3s1"="kdjfsdklfjsl.exe" [2007-11-18 11:17 C:\WINDOWS\SYSTEM32\kdjfsdklfjsl.exe] "MicroSoft sys3s1"="h4ckn3t.exe" [] "MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" [2001-08-02 06:14] "MicroSoft Getway mqbol"="qrcffqqysayn.exe" [] "Critical Error Safe32"="C:\WINDOWS\System32\GetWaylayer32.exe" [] "MicroSoft Legal Service"="Srb0ty.exe" [2007-11-24 19:08 C:\WINDOWS\SYSTEM32\Srb0ty.exe] "Windows Secure Update"="load.exe" [2007-12-01 11:32 C:\WINDOWS\SYSTEM32\load.exe] "MicroSoft Legal Syst3m32"="Syst3m32.exe" [2007-12-01 11:42 C:\WINDOWS\SYSTEM32\Syst3m32.exe] "MicroSoft Visual Framwork"="MS32.exe" [] "Windows Services Aganter"="xhzeum.exe" [] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce] "MicroSoft sys3s1"="h4ckn3t.exe" [] "MicroSoft ssadssjdhasjadas3s1"="kdjfsdklfjsl.exe" [2007-11-18 11:17 C:\WINDOWS\SYSTEM32\kdjfsdklfjsl.exe] "MicroSoft ssadsadas3s1"="eXtream.exe" [2007-12-07 17:25 C:\WINDOWS\SYSTEM32\eXtream.exe] "HOT FIX"="Gothic.exe" [2007-12-09 16:04 C:\WINDOWS\SYSTEM32\Gothic.exe] "MicroSoft Legal Service"="Srb0ty.exe" [2007-11-24 19:08 C:\WINDOWS\SYSTEM32\Srb0ty.exe] "Windows Secure Update"="load.exe" [2007-12-01 11:32 C:\WINDOWS\SYSTEM32\load.exe] "MicroSoft Legal Syst3m32"="Syst3m32.exe" [2007-12-01 11:42 C:\WINDOWS\SYSTEM32\Syst3m32.exe] "MicroSoft Visual Framwork"="MS32.exe" [] C:\Documents and Settings\All Users\Menu D‚marrer\Programmes\D‚marrage\ hp center.lnk - C:\Program Files\hp center\137903\Program\BackWeb-137903.exe [2001-09-26 19:42:50] [hkey_local_machine\software\microsoft\windows\currentversion\explorer\shellexecutehooks] "{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= C:\Program Files\SUPERAntiSpyware\SASSEH.DLL [2006-12-20 13:55 77824] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon otify\!SASWinLogon] C:\Program Files\SUPERAntiSpyware\SASWINLO.dll 2007-04-19 13:41 294912 C:\Program Files\SUPERAntiSpyware\SASWINLO.dll . Contenu du dossier 'Scheduled Tasks/Tâches planifiées' "2007-04-11 21:00:00 C:\WINDOWS\Tasks\Rappel d'abonnement 1 auprès de l'ISP.job" - C:\WINDOWS\System32\OOBE\oobebaln.exe "2007-04-13 20:30:00 C:\WINDOWS\Tasks\Rappel d'abonnement 2 auprès de l'ISP.job" - C:\WINDOWS\System32\OOBE\oobebaln.exe "2007-04-16 21:30:00 C:\WINDOWS\Tasks\Rappel d'abonnement 3 auprès de l'ISP.job" - C:\WINDOWS\System32\OOBE\oobebaln.exe . ************************************************************************** catchme 0.3.1331 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2007-12-14 21:31:54 Windows 5.1.2600 NTFS scanning hidden processes ... ? [44700] ? [44712] ? [44736] scanning hidden autostart entries ... scanning hidden files ... ************************************************************************** . Completion time: 2007-12-14 21:42:51 C:\ComboFix2.txt ... 2007-12-08 19:08 . --- E O F --- mon disque dur fait en taille utilisé : 5.12go et en taille libre : 30.4 go voila je tenvoi ensuite le rapport bitdefender et avast a plus

Lyonnais92 · Answer

Bonjour,

Rends toi sur ce site :
http://www.zonavirus.com/datos/descargas/95/elibagla.asp
tout en bas de cette page tu trouveras un outil
à télécharger,clique sur "escargar Elibagla" (le numéro de version change au fur et à mesure des mises à jour)
installe ce fichier sur le bureau.
ensuite double-clic sur Elibagla.exe
>laisse la case "eliminar ficheros automaticamente" coché
>clique sur"explorar"
>laisse-le travailler
>poste le rapport final qui sera dans c:\infosat.txt

Si, dans le rapport, tu vois un texte semblable à celui-ci

Por favor, envienos una muestra del fichero
C:\Muestras\HLDRRR.EXE.Muestra EliBagle v10.24
a "virus@satinfo.es". Gracias;

envoie ce(s) fichier(s) (dans l'exemple C:\Muestras\HLDRRR.EXE.Muestra EliBagle v10.24 ) à l'adresse e-mail indiquée (virus@satinfo.es).

L'outil a rencontré un fichier qu'il reconnait mais ne sait pas encore éradiquer. Dans 24 heures environ, sur le site, la version de déchargement (v10.24 dans l'exemple) aura changé par rapport à celle actuelle. Tu retéléchargeras l'outil, tu le relanceras et tu posteras le rapport.

scoubidou78 · Answer

re,

rapport ELIBAGLE



	  Sat Dec 15 11:58:06 2007
EliBagle v10.78  (c)2007 S.G.H. / Satinfo S.L.
----------------------------------------------
Lista de Acciones (por Acción Directa):

	  Sat Dec 15 11:58:34 2007
EliBagle v10.78  (c)2007 S.G.H. / Satinfo S.L.
----------------------------------------------
Lista de Acciones (por Exploración):
Explorando Unidad C:\

Nº Total de Directorios:   2192
Nº Total de Ficheros:      35777
Nº de Ficheros Analizados: 7652
Nº de Ficheros Infectados: 0
Nº de Ficheros Limpiados:  0

	  Sat Dec 15 12:06:46 2007
EliBagle v10.78  (c)2007 S.G.H. / Satinfo S.L.
----------------------------------------------
Lista de Acciones (por Exploración):
Explorando Unidad C:\

Nº Total de Directorios:   2192
Nº Total de Ficheros:      35780
Nº de Ficheros Analizados: 7652
Nº de Ficheros Infectados: 0
Nº de Ficheros Limpiados:  0

Lyonnais92 · Answer

Re,

tu n'arrives pas à avoir les rapports de BitDefender et Avast ?

Quand ont commencé tes problèmes ?

scoubidou78 · Answer

re,

oui mais problemes de virus ont commencer  ya 2 mois environ.internet coupe a chaque fois et avast me dit a chaque fois que j ai des virus et sa me dit aussi ressources systemes insuffisantes pour terminer le service demande... et aussi espace disque insuffisant...

AIE AIE jsuis perdu  je vais essaye de faire un scan avast et bitdefender pourvu que sa coupe pas

bon a plus

Lyonnais92 · Answer

Re,

aprsè les é scans fais ceci :

Télécharge ce programme puis double clic dessus (ferme ton antivirus s'il te détecte quoi que ce soit)
http://www.suspectfile.com/systemscan/

* Coche uniquement ces cases, décoche tout le reste :

- Recent Files, 90 days

Puis clic sur scan now, soit patient.
Une fois qu'il aura terminé, un rapport va s'ouvrir, copie et colle son contenu ici et vérifie qu'il soit bien en entier, si besoin crée deux messages.

scoubidou78 · Answer

re,

voici le rapport bitdefender

BitDefender Online Scanner
  
  
 
Scan report generated at: Mon, Dec 17, 2007 - 13:22:27
 
 
  
  
 
Scan path: A:\;C:\;D:\;
  
  
 
 
  
  
 
Statistics
 
Time
 00:50:41
 
Files
 111655
 
Folders
 2198
 
Boot Sectors
 3
 
Archives
 12752
 
Packed Files
 7495
 
  
  
 
Results
 
Identified Viruses 
 31
 
Infected Files 
 351
 
Suspect Files 
 0
 
Warnings
 0
 
Disinfected
 2
 
Deleted Files
 347
 
  
  
 
Engines Info
 
Virus Definitions
 882560
 
Engine build
 AVCORE v1.0 (build 2422) (i386) (Sep 25 2007 08:26:36)
 
Scan plugins
 14
 
Archive plugins
 38
 
Unpack plugins
 7
 
E-mail plugins
 6
 
System plugins
 1
 
  
  
 
Scan Settings
 
First Action
 Disinfect
 
Second Action
 Delete
 
Heuristics
 Yes
 
Enable Warnings
 Yes
 
Scanned Extensions
 *;
 
Exclude Extensions
  
 
Scan Emails
 Yes
 
Scan Archives
 Yes
 
Scan Packed
 Yes
 
Scan Files
 Yes
 
Scan Boot
 Yes
 
  
  
 
  Scanned File
  Status
 
C:\cg.pif=>(RAR Sfx o)=>aliases.ini
 Infected with: Backdoor.IRC.Zapchast.JG
 
C:\cg.pif=>(RAR Sfx o)=>aliases.ini
 Disinfection failed
 
C:\cg.pif=>(RAR Sfx o)=>aliases.ini
 Deleted
 
C:\cg.pif=>(RAR Sfx o)
 Update failed
 
C:\cg.pif=>(RAR Sfx o)=>cult.exe
 Infected with: Win32.Worm.Rbot.AA
 
C:\cg.pif=>(RAR Sfx o)=>cult.exe
 Disinfection failed
 
C:\cg.pif=>(RAR Sfx o)=>cult.exe
 Deleted
 
C:\cg.pif=>(RAR Sfx o)
 Update failed
 
C:\cg.pif=>(RAR Sfx o)=>hd.exe
 Detected with: Application.HideWindow.B
 
C:\cg.pif=>(RAR Sfx o)=>hd.exe
 Disinfection failed
 
C:\cg.pif=>(RAR Sfx o)=>hd.exe
 Deleted
 
C:\cg.pif=>(RAR Sfx o)
 Update failed
 
C:\cg.pif=>(RAR Sfx o)=>kiss.exe
 Infected with: Win32.IRC.Kelebek
 
C:\cg.pif=>(RAR Sfx o)=>kiss.exe
 Disinfection failed
 
C:\cg.pif=>(RAR Sfx o)=>kiss.exe
 Deleted
 
C:\cg.pif=>(RAR Sfx o)
 Update failed
 
C:\cg.pif=>(RAR Sfx o)=>ksat.bat
 Infected with: Trojan.IRC.Gen
 
C:\cg.pif=>(RAR Sfx o)=>ksat.bat
 Disinfection failed
 
C:\cg.pif=>(RAR Sfx o)=>ksat.bat
 Deleted
 
C:\cg.pif=>(RAR Sfx o)
 Update failed
 
C:\cg.pif=>(RAR Sfx o)=>lovely.sys
 Infected with: Backdoor.Ircflood.B
 
C:\cg.pif=>(RAR Sfx o)=>lovely.sys
 Disinfection failed
 
C:\cg.pif=>(RAR Sfx o)=>lovely.sys
 Deleted
 
C:\cg.pif=>(RAR Sfx o)
 Update failed
 
C:\cg.pif=>(RAR Sfx o)=>orrl.exe
 Infected with: Win32.Worm.Rbot.AY
 
C:\cg.pif=>(RAR Sfx o)=>orrl.exe
 Disinfection failed
 
C:\cg.pif=>(RAR Sfx o)=>orrl.exe
 Deleted
 
C:\cg.pif=>(RAR Sfx o)
 Update failed
 
C:\cg.pif=>(RAR Sfx o)=>pingy.exe
 Infected with: Trojan.Downloader.Small.ZJ
 
C:\cg.pif=>(RAR Sfx o)=>pingy.exe
 Disinfection failed
 
C:\cg.pif=>(RAR Sfx o)=>pingy.exe
 Deleted
 
C:\cg.pif=>(RAR Sfx o)
 Update failed
 
C:\cg.pif=>(RAR Sfx o)=>ps2m.exe
 Detected with: Application.Passview.A
 
C:\cg.pif=>(RAR Sfx o)=>ps2m.exe
 Disinfection failed
 
C:\cg.pif=>(RAR Sfx o)=>ps2m.exe
 Deleted
 
C:\cg.pif=>(RAR Sfx o)
 Update failed
 
C:\cg.pif=>(RAR Sfx o)=>repcale.exe
 Infected with: GenPack:Virtool.HiddenRun.B
 
C:\cg.pif=>(RAR Sfx o)=>repcale.exe
 Disinfection failed
 
C:\cg.pif=>(RAR Sfx o)=>repcale.exe
 Deleted
 
C:\cg.pif=>(RAR Sfx o)
 Update failed
 
C:\dfsd.exe=>(CAB Sfx o)=>colfld.dll
 Infected with: Win32.Worm.Randon.AR
 
C:\dfsd.exe=>(CAB Sfx o)=>colfld.dll
 Disinfection failed
 
C:\dfsd.exe=>(CAB Sfx o)=>colfld.dll
 Deleted
 
C:\dfsd.exe=>(CAB Sfx o)
 Update failed
 
C:\dfsd.exe=>(CAB Sfx o)=>dbqp.fon
 Infected with: Trojan.Mirc.Flood.2HK
 
C:\dfsd.exe=>(CAB Sfx o)=>dbqp.fon
 Disinfection failed
 
C:\dfsd.exe=>(CAB Sfx o)=>dbqp.fon
 Deleted
 
C:\dfsd.exe=>(CAB Sfx o)
 Update failed
 
C:\dfsd.exe=>(CAB Sfx o)=>fvist.com.exe=>(CAB Sfx o)=>cl.dll
 Infected with: Trojan.Mirc.Flood.AE
 
C:\dfsd.exe=>(CAB Sfx o)=>fvist.com.exe=>(CAB Sfx o)=>cl.dll
 Disinfection failed
 
C:\dfsd.exe=>(CAB Sfx o)=>fvist.com.exe=>(CAB Sfx o)=>cl.dll
 Deleted
 
C:\dfsd.exe=>(CAB Sfx o)=>fvist.com.exe=>(CAB Sfx o)
 Update failed
 
C:\dfsd.exe=>(CAB Sfx o)=>fvist.com.exe=>(CAB Sfx o)=>colfld.dll
 Infected with: Win32.Worm.Randon.AR
 
C:\dfsd.exe=>(CAB Sfx o)=>fvist.com.exe=>(CAB Sfx o)=>colfld.dll
 Disinfection failed
 
C:\dfsd.exe=>(CAB Sfx o)=>fvist.com.exe=>(CAB Sfx o)=>colfld.dll
 Deleted
 
C:\dfsd.exe=>(CAB Sfx o)=>fvist.com.exe=>(CAB Sfx o)
 Update failed
 
C:\dfsd.exe=>(CAB Sfx o)=>fvist.com.exe=>(CAB Sfx o)=>dbqp.fon
 Infected with: Trojan.Mirc.Flood.2HK
 
C:\dfsd.exe=>(CAB Sfx o)=>fvist.com.exe=>(CAB Sfx o)=>dbqp.fon
 Disinfection failed
 
C:\dfsd.exe=>(CAB Sfx o)=>fvist.com.exe=>(CAB Sfx o)=>dbqp.fon
 Deleted
 
C:\dfsd.exe=>(CAB Sfx o)=>fvist.com.exe=>(CAB Sfx o)
 Update failed
 
C:\dfsd.exe=>(CAB Sfx o)=>fvist.com.exe=>(CAB Sfx o)=>dmans.dll
 Infected with: Backdoor.Irc.Lambot.G
 
C:\dfsd.exe=>(CAB Sfx o)=>fvist.com.exe=>(CAB Sfx o)=>dmans.dll
 Disinfection failed
 
C:\dfsd.exe=>(CAB Sfx o)=>fvist.com.exe=>(CAB Sfx o)=>dmans.dll
 Deleted
 
C:\dfsd.exe=>(CAB Sfx o)=>fvist.com.exe=>(CAB Sfx o)
 Update failed
 
C:\dfsd.exe=>(CAB Sfx o)=>fvist.com.exe=>(CAB Sfx o)=>fvist.com
 Infected with: Backdoor.IRC
 
C:\dfsd.exe=>(CAB Sfx o)=>fvist.com.exe=>(CAB Sfx o)=>fvist.com
 Disinfection failed
 
C:\dfsd.exe=>(CAB Sfx o)=>fvist.com.exe=>(CAB Sfx o)=>fvist.com
 Deleted
 
C:\dfsd.exe=>(CAB Sfx o)=>fvist.com.exe=>(CAB Sfx o)
 Update failed
 
C:\dfsd.exe=>(CAB Sfx o)=>fvist.com.exe=>(CAB Sfx o)=>k.exe
 Infected with: Generic.Sdbot.272C8EA7
 
C:\dfsd.exe=>(CAB Sfx o)=>fvist.com.exe=>(CAB Sfx o)=>k.exe
 Deleted
 
C:\dfsd.exe=>(CAB Sfx o)=>fvist.com.exe=>(CAB Sfx o)
 Update failed
 
C:\dfsd.exe=>(CAB Sfx o)=>fvist.com.exe=>(CAB Sfx o)=>mansor.exe
 Infected with: Virtool.HiddenRun.B
 
C:\dfsd.exe=>(CAB Sfx o)=>fvist.com.exe=>(CAB Sfx o)=>mansor.exe
 Disinfection failed
 
C:\dfsd.exe=>(CAB Sfx o)=>fvist.com.exe=>(CAB Sfx o)=>mansor.exe
 Deleted
 
C:\dfsd.exe=>(CAB Sfx o)=>fvist.com.exe=>(CAB Sfx o)
 Update failed
 
C:\dfsd.exe=>(CAB Sfx o)=>fvist.com.exe=>(CAB Sfx o)=>neiom.dll
 Infected with: Trojan.Mirc.Flood.AI
 
C:\dfsd.exe=>(CAB Sfx o)=>fvist.com.exe=>(CAB Sfx o)=>neiom.dll
 Disinfection failed
 
C:\dfsd.exe=>(CAB Sfx o)=>fvist.com.exe=>(CAB Sfx o)=>neiom.dll
 Deleted
 
C:\dfsd.exe=>(CAB Sfx o)=>fvist.com.exe=>(CAB Sfx o)
 Update failed
 
C:\dfsd.exe=>(CAB Sfx o)=>fvist.com.exe=>(CAB Sfx o)=>NITE.exe
 Infected with: Trojan.Patched.Gen
 
C:\dfsd.exe=>(CAB Sfx o)=>fvist.com.exe=>(CAB Sfx o)=>NITE.exe
 Disinfection failed
 
C:\dfsd.exe=>(CAB Sfx o)=>fvist.com.exe=>(CAB Sfx o)=>NITE.exe
 Deleted
 
C:\dfsd.exe=>(CAB Sfx o)=>fvist.com.exe=>(CAB Sfx o)
 Update failed
 
C:\dfsd.exe=>(CAB Sfx o)=>fvist.com.exe=>(CAB Sfx o)=>psme2.exe
 Detected with: Application.Passview.A
 
C:\dfsd.exe=>(CAB Sfx o)=>fvist.com.exe=>(CAB Sfx o)=>psme2.exe
 Disinfection failed
 
C:\dfsd.exe=>(CAB Sfx o)=>fvist.com.exe=>(CAB Sfx o)=>psme2.exe
 Deleted
 
C:\dfsd.exe=>(CAB Sfx o)=>fvist.com.exe=>(CAB Sfx o)
 Update failed
 
C:\dfsd.exe=>(CAB Sfx o)=>fvist.com.exe=>(CAB Sfx o)=>sohid.com
 Detected with: Application.HideWindow.B
 
C:\dfsd.exe=>(CAB Sfx o)=>fvist.com.exe=>(CAB Sfx o)=>sohid.com
 Disinfection failed
 
C:\dfsd.exe=>(CAB Sfx o)=>fvist.com.exe=>(CAB Sfx o)=>sohid.com
 Deleted
 
C:\dfsd.exe=>(CAB Sfx o)=>fvist.com.exe=>(CAB Sfx o)
 Update failed
 
C:\dfsd.exe=>(CAB Sfx o)=>fvist.com.exe=>(CAB Sfx o)=>xxx-spam.dll
 Infected with: Trojan.Mirc.Flood.BW
 
C:\dfsd.exe=>(CAB Sfx o)=>fvist.com.exe=>(CAB Sfx o)=>xxx-spam.dll
 Disinfection failed
 
C:\dfsd.exe=>(CAB Sfx o)=>fvist.com.exe=>(CAB Sfx o)=>xxx-spam.dll
 Deleted
 
C:\dfsd.exe=>(CAB Sfx o)=>fvist.com.exe=>(CAB Sfx o)
 Update failed
 
C:\dfsd.exe=>(CAB Sfx o)=>fvist.com.exe=>(CAB Sfx o)=>xxxx-inviter.dll
 Infected with: Trojan.Mirc.Flood.AJ
 
C:\dfsd.exe=>(CAB Sfx o)=>fvist.com.exe=>(CAB Sfx o)=>xxxx-inviter.dll
 Disinfection failed
 
C:\dfsd.exe=>(CAB Sfx o)=>fvist.com.exe=>(CAB Sfx o)=>xxxx-inviter.dll
 Deleted
 
C:\dfsd.exe=>(CAB Sfx o)=>fvist.com.exe=>(CAB Sfx o)
 Update failed
 
C:\dfsd.exe=>(CAB Sfx o)=>fvist.com.exe=>(CAB Sfx o)=>ybn1e.dll
 Infected with: Backdoor.IRC.Zapchast.AMK
 
C:\dfsd.exe=>(CAB Sfx o)=>fvist.com.exe=>(CAB Sfx o)=>ybn1e.dll
 Disinfection failed
 
C:\dfsd.exe=>(CAB Sfx o)=>fvist.com.exe=>(CAB Sfx o)=>ybn1e.dll
 Deleted
 
C:\dfsd.exe=>(CAB Sfx o)=>fvist.com.exe=>(CAB Sfx o)
 Update failed
 
C:\dfsd.exe=>(CAB Sfx o)=>fvist.com.exe=>(CAB Sfx o)=>ybn2e.dll
 Infected with: Backdoor.Ircflood.B
 
C:\dfsd.exe=>(CAB Sfx o)=>fvist.com.exe=>(CAB Sfx o)=>ybn2e.dll
 Disinfection failed
 
C:\dfsd.exe=>(CAB Sfx o)=>fvist.com.exe=>(CAB Sfx o)=>ybn2e.dll
 Deleted
 
C:\dfsd.exe=>(CAB Sfx o)=>fvist.com.exe=>(CAB Sfx o)
 Update failed
 
C:\dfsd.exe=>(CAB Sfx o)=>fvist.com.exe=>(CAB Sfx o)=>ybn3e.dll
 Infected with: Trojan.IRC.Flood.AB
 
C:\dfsd.exe=>(CAB Sfx o)=>fvist.com.exe=>(CAB Sfx o)=>ybn3e.dll
 Disinfection failed
 
C:\dfsd.exe=>(CAB Sfx o)=>fvist.com.exe=>(CAB Sfx o)=>ybn3e.dll
 Deleted
 
C:\dfsd.exe=>(CAB Sfx o)=>fvist.com.exe=>(CAB Sfx o)
 Update failed
 
C:\dfsd.exe=>(CAB Sfx o)=>neiom.dll
 Infected with: Trojan.Mirc.Flood.AI
 
C:\dfsd.exe=>(CAB Sfx o)=>neiom.dll
 Disinfection failed
 
C:\dfsd.exe=>(CAB Sfx o)=>neiom.dll
 Deleted
 
C:\dfsd.exe=>(CAB Sfx o)
 Update failed
 
C:\dfsd.exe=>(CAB Sfx o)=>xxx-spam.dll
 Infected with: Trojan.Mirc.Flood.BW
 
C:\dfsd.exe=>(CAB Sfx o)=>xxx-spam.dll
 Disinfection failed
 
C:\dfsd.exe=>(CAB Sfx o)=>xxx-spam.dll
 Deleted
 
C:\dfsd.exe=>(CAB Sfx o)
 Update failed
 
C:\dfsd.exe=>(CAB Sfx o)=>xxxx-inviter.dll
 Infected with: Trojan.Mirc.Flood.AJ
 
C:\dfsd.exe=>(CAB Sfx o)=>xxxx-inviter.dll
 Disinfection failed
 
C:\dfsd.exe=>(CAB Sfx o)=>xxxx-inviter.dll
 Deleted
 
C:\dfsd.exe=>(CAB Sfx o)
 Update failed
 
C:\dfsd.exe=>(CAB Sfx o)=>ybn1e.dll
 Infected with: Backdoor.IRC.Zapchast.AMK
 
C:\dfsd.exe=>(CAB Sfx o)=>ybn1e.dll
 Disinfection failed
 
C:\dfsd.exe=>(CAB Sfx o)=>ybn1e.dll
 Deleted
 
C:\dfsd.exe=>(CAB Sfx o)
 Update failed
 
C:\dfsd.exe=>(CAB Sfx o)=>ybn3e.dll
 Infected with: Trojan.IRC.Flood.AB
 
C:\dfsd.exe=>(CAB Sfx o)=>ybn3e.dll
 Disinfection failed
 
C:\dfsd.exe=>(CAB Sfx o)=>ybn3e.dll
 Deleted
 
C:\dfsd.exe=>(CAB Sfx o)
 Update failed
 
C:\gexa.exe=>(RAR Sfx o)=>cult.exe
 Infected with: Win32.Worm.Rbot.AA
 
C:\gexa.exe=>(RAR Sfx o)=>cult.exe
 Disinfection failed
 
C:\gexa.exe=>(RAR Sfx o)=>cult.exe
 Deleted
 
C:\gexa.exe=>(RAR Sfx o)
 Update failed
 
C:\gexa.exe=>(RAR Sfx o)=>hd.exe
 Detected with: Application.HideWindow.B
 
C:\gexa.exe=>(RAR Sfx o)=>hd.exe
 Disinfection failed
 
C:\gexa.exe=>(RAR Sfx o)=>hd.exe
 Deleted
 
C:\gexa.exe=>(RAR Sfx o)
 Update failed
 
C:\gexa.exe=>(RAR Sfx o)=>kiss.exe
 Infected with: Win32.IRC.Kelebek
 
C:\gexa.exe=>(RAR Sfx o)=>kiss.exe
 Disinfection failed
 
C:\gexa.exe=>(RAR Sfx o)=>kiss.exe
 Deleted
 
C:\gexa.exe=>(RAR Sfx o)
 Update failed
 
C:\gexa.exe=>(RAR Sfx o)=>ksat.bat
 Infected with: Trojan.IRC.Gen
 
C:\gexa.exe=>(RAR Sfx o)=>ksat.bat
 Disinfection failed
 
C:\gexa.exe=>(RAR Sfx o)=>ksat.bat
 Deleted
 
C:\gexa.exe=>(RAR Sfx o)
 Update failed
 
C:\gexa.exe=>(RAR Sfx o)=>lovely.sys
 Infected with: Backdoor.Ircflood.B
 
C:\gexa.exe=>(RAR Sfx o)=>lovely.sys
 Disinfection failed
 
C:\gexa.exe=>(RAR Sfx o)=>lovely.sys
 Deleted
 
C:\gexa.exe=>(RAR Sfx o)
 Update failed
 
C:\gexa.exe=>(RAR Sfx o)=>orrl.exe
 Infected with: Win32.Worm.Rbot.AY
 
C:\gexa.exe=>(RAR Sfx o)=>orrl.exe
 Disinfection failed
 
C:\gexa.exe=>(RAR Sfx o)=>orrl.exe
 Deleted
 
C:\gexa.exe=>(RAR Sfx o)
 Update failed
 
C:\gexa.exe=>(RAR Sfx o)=>pingy.exe
 Infected with: Trojan.Downloader.Small.ZJ
 
C:\gexa.exe=>(RAR Sfx o)=>pingy.exe
 Disinfection failed
 
C:\gexa.exe=>(RAR Sfx o)=>pingy.exe
 Deleted
 
C:\gexa.exe=>(RAR Sfx o)
 Update failed
 
C:\gexa.exe=>(RAR Sfx o)=>ps2m.exe
 Detected with: Application.Passview.A
 
C:\gexa.exe=>(RAR Sfx o)=>ps2m.exe
 Disinfection failed
 
C:\gexa.exe=>(RAR Sfx o)=>ps2m.exe
 Deleted
 
C:\gexa.exe=>(RAR Sfx o)
 Update failed
 
C:\gexa.exe=>(RAR Sfx o)=>repcale.exe
 Infected with: GenPack:Virtool.HiddenRun.B
 
C:\gexa.exe=>(RAR Sfx o)=>repcale.exe
 Disinfection failed
 
C:\gexa.exe=>(RAR Sfx o)=>repcale.exe
 Deleted
 
C:\gexa.exe=>(RAR Sfx o)
 Update failed
 
C:\gexa.exe=>(RAR Sfx o)=>aliases.ini
 Infected with: Backdoor.IRC.Zapchast.JG
 
C:\gexa.exe=>(RAR Sfx o)=>aliases.ini
 Disinfection failed
 
C:\gexa.exe=>(RAR Sfx o)=>aliases.ini
 Deleted
 
C:\gexa.exe=>(RAR Sfx o)
 Update failed
 
C:\gezzxa.exe=>(RAR Sfx o)=>cult.exe
 Infected with: Win32.Worm.Rbot.AA
 
C:\gezzxa.exe=>(RAR Sfx o)=>cult.exe
 Disinfection failed
 
C:\gezzxa.exe=>(RAR Sfx o)=>cult.exe
 Deleted
 
C:\gezzxa.exe=>(RAR Sfx o)
 Update failed
 
C:\gezzxa.exe=>(RAR Sfx o)=>hd.exe
 Detected with: Application.HideWindow.B
 
C:\gezzxa.exe=>(RAR Sfx o)=>hd.exe
 Disinfection failed
 
C:\gezzxa.exe=>(RAR Sfx o)=>hd.exe
 Deleted
 
C:\gezzxa.exe=>(RAR Sfx o)
 Update failed
 
C:\gezzxa.exe=>(RAR Sfx o)=>kiss.exe
 Infected with: Win32.IRC.Kelebek
 
C:\gezzxa.exe=>(RAR Sfx o)=>kiss.exe
 Disinfection failed
 
C:\gezzxa.exe=>(RAR Sfx o)=>kiss.exe
 Deleted
 
C:\gezzxa.exe=>(RAR Sfx o)
 Update failed
 
C:\gezzxa.exe=>(RAR Sfx o)=>ksat.bat
 Infected with: Trojan.IRC.Gen
 
C:\gezzxa.exe=>(RAR Sfx o)=>ksat.bat
 Disinfection failed
 
C:\gezzxa.exe=>(RAR Sfx o)=>ksat.bat
 Deleted
 
C:\gezzxa.exe=>(RAR Sfx o)
 Update failed
 
C:\gezzxa.exe=>(RAR Sfx o)=>lovely.sys
 Infected with: Backdoor.Ircflood.B
 
C:\gezzxa.exe=>(RAR Sfx o)=>lovely.sys
 Disinfection failed
 
C:\gezzxa.exe=>(RAR Sfx o)=>lovely.sys
 Deleted
 
C:\gezzxa.exe=>(RAR Sfx o)
 Update failed
 
C:\gezzxa.exe=>(RAR Sfx o)=>orrl.exe
 Infected with: Win32.Worm.Rbot.AY
 
C:\gezzxa.exe=>(RAR Sfx o)=>orrl.exe
 Disinfection failed
 
C:\gezzxa.exe=>(RAR Sfx o)=>orrl.exe
 Deleted
 
C:\gezzxa.exe=>(RAR Sfx o)
 Update failed
 
C:\gezzxa.exe=>(RAR Sfx o)=>pingy.exe
 Infected with: Trojan.Downloader.Small.ZJ
 
C:\gezzxa.exe=>(RAR Sfx o)=>pingy.exe
 Disinfection failed
 
C:\gezzxa.exe=>(RAR Sfx o)=>pingy.exe
 Deleted
 
C:\gezzxa.exe=>(RAR Sfx o)
 Update failed
 
C:\gezzxa.exe=>(RAR Sfx o)=>ps2m.exe
 Detected with: Application.Passview.A
 
C:\gezzxa.exe=>(RAR Sfx o)=>ps2m.exe
 Disinfection failed
 
C:\gezzxa.exe=>(RAR Sfx o)=>ps2m.exe
 Deleted
 
C:\gezzxa.exe=>(RAR Sfx o)
 Update failed
 
C:\gezzxa.exe=>(RAR Sfx o)=>repcale.exe
 Infected with: GenPack:Virtool.HiddenRun.B
 
C:\gezzxa.exe=>(RAR Sfx o)=>repcale.exe
 Disinfection failed
 
C:\gezzxa.exe=>(RAR Sfx o)=>repcale.exe
 Deleted
 
C:\gezzxa.exe=>(RAR Sfx o)
 Update failed
 
C:\gezzxa.exe=>(RAR Sfx o)=>aliases.ini
 Infected with: Backdoor.IRC.Zapchast.JG
 
C:\gezzxa.exe=>(RAR Sfx o)=>aliases.ini
 Disinfection failed
 
C:\gezzxa.exe=>(RAR Sfx o)=>aliases.ini
 Deleted
 
C:\gezzxa.exe=>(RAR Sfx o)
 Update failed
 
C:\hp\bin\ProcessLogger.exe
 Infected with: DeepScan:Generic.Malware.P!.5F1AEB08
 
C:\hp\bin\ProcessLogger.exe
 Disinfection failed
 
C:\hp\bin\ProcessLogger.exe
 Deleted
 
C:\klertf.exe=>(CAB Sfx o)=>jinso.exe
 Infected with: Win32.IRC.Kelebek
 
C:\klertf.exe=>(CAB Sfx o)=>jinso.exe
 Disinfection failed
 
C:\klertf.exe=>(CAB Sfx o)=>jinso.exe
 Deleted
 
C:\klertf.exe=>(CAB Sfx o)
 Update failed
 
C:\lol1.exe=>(RAR Sfx o)=>Swfwin32.dll
 Infected with: Trojan.Flooder.I
 
C:\lol1.exe=>(RAR Sfx o)=>Swfwin32.dll
 Disinfection failed
 
C:\lol1.exe=>(RAR Sfx o)=>Swfwin32.dll
 Deleted
 
C:\lol1.exe=>(RAR Sfx o)
 Update failed
 
C:\lol1.exe=>(RAR Sfx o)=>window.com
 Infected with: Backdoor.Mirc.580999.A
 
C:\lol1.exe=>(RAR Sfx o)=>window.com
 Disinfection failed
 
C:\lol1.exe=>(RAR Sfx o)=>window.com
 Deleted
 
C:\lol1.exe=>(RAR Sfx o)
 Update failed
 
C:\Program Files\dfrerter\aliases.ini
 Infected with: Backdoor.IRC.Zapchast.JG
 
C:\Program Files\dfrerter\aliases.ini
 Disinfection failed
 
C:\Program Files\dfrerter\aliases.ini
 Deleted
 
C:\Program Files\dfrerter\cult.exe
 Infected with: Win32.Worm.Rbot.AA
 
C:\Program Files\dfrerter\cult.exe
 Disinfection failed
 
C:\Program Files\dfrerter\cult.exe
 Deleted
 
C:\Program Files\dfrerter\hd.exe
 Detected with: Application.HideWindow.B
 
C:\Program Files\dfrerter\hd.exe
 Disinfection failed
 
C:\Program Files\dfrerter\hd.exe
 Deleted
 
C:\Program Files\dfrerter\kiss.exe
 Infected with: Win32.IRC.Kelebek
 
C:\Program Files\dfrerter\kiss.exe
 Disinfection failed
 
C:\Program Files\dfrerter\kiss.exe
 Deleted
 
C:\Program Files\dfrerter\ksat.bat
 Infected with: Trojan.IRC.Gen
 
C:\Program Files\dfrerter\ksat.bat
 Disinfection failed
 
C:\Program Files\dfrerter\ksat.bat
 Deleted
 
C:\Program Files\dfrerter\lovely.sys
 Infected with: Backdoor.Ircflood.B
 
C:\Program Files\dfrerter\lovely.sys
 Disinfection failed
 
C:\Program Files\dfrerter\lovely.sys
 Deleted
 
C:\Program Files\dfrerter\orrl.exe
 Infected with: Win32.Worm.Rbot.AY
 
C:\Program Files\dfrerter\orrl.exe
 Disinfection failed
 
C:\Program Files\dfrerter\orrl.exe
 Deleted
 
C:\Program Files\dfrerter\pingy.exe
 Infected with: Trojan.Downloader.Small.ZJ
 
C:\Program Files\dfrerter\pingy.exe
 Disinfection failed
 
C:\Program Files\dfrerter\pingy.exe
 Deleted
 
C:\Program Files\dfrerter\ps2m.exe
 Detected with: Application.Passview.A
 
C:\Program Files\dfrerter\ps2m.exe
 Disinfection failed
 
C:\Program Files\dfrerter\ps2m.exe
 Deleted
 
C:\Program Files\dfrerterepcale.exe
 Infected with: GenPack:Virtool.HiddenRun.B
 
C:\Program Files\dfrerterepcale.exe
 Disinfection failed
 
C:\Program Files\dfrerterepcale.exe
 Deleted
 
C:\Program Files\killSh\aliases.ini
 Infected with: Backdoor.IRC.Zapchast.JG
 
C:\Program Files\killSh\aliases.ini
 Disinfection failed
 
C:\Program Files\killSh\aliases.ini
 Deleted
 
C:\Program Files\killSh\cult.exe
 Infected with: Win32.Worm.Rbot.AA
 
C:\Program Files\killSh\cult.exe
 Disinfection failed
 
C:\Program Files\killSh\cult.exe
 Deleted
 
C:\Program Files\killSh\ksat.bat
 Infected with: Trojan.IRC.Gen
 
C:\Program Files\killSh\ksat.bat
 Disinfection failed
 
C:\Program Files\killSh\ksat.bat
 Deleted
 
C:\Program Files\killSh\orrl.exe
 Infected with: Win32.Worm.Rbot.AY
 
C:\Program Files\killSh\orrl.exe
 Disinfection failed
 
C:\Program Files\killSh\orrl.exe
 Deleted
 
C:\Program Files\killSh\pingy.exe
 Infected with: Trojan.Downloader.Small.ZJ
 
C:\Program Files\killSh\pingy.exe
 Disinfection failed
 
C:\Program Files\killSh\pingy.exe
 Deleted
 
C:\sdsdfsdf.exe=>(CAB Sfx o)=>cult.exe
 Infected with: Win32.Worm.Rbot.AA
 
C:\sdsdfsdf.exe=>(CAB Sfx o)=>cult.exe
 Disinfection failed
 
C:\sdsdfsdf.exe=>(CAB Sfx o)=>cult.exe
 Deleted
 
C:\sdsdfsdf.exe=>(CAB Sfx o)
 Update failed
 
C:\sdsdfsdf.exe=>(CAB Sfx o)=>l.o.v.e.l.y.x
 Infected with: Backdoor.Ircflood.B
 
C:\sdsdfsdf.exe=>(CAB Sfx o)=>l.o.v.e.l.y.x
 Disinfection failed
 
C:\sdsdfsdf.exe=>(CAB Sfx o)=>l.o.v.e.l.y.x
 Deleted
 
C:\sdsdfsdf.exe=>(CAB Sfx o)
 Update failed
 
C:\sdsdfsdf.exe=>(CAB Sfx o)=>lovely.dll
 Infected with: Trojan.Generic.52576
 
C:\sdsdfsdf.exe=>(CAB Sfx o)=>lovely.dll
 Disinfection failed
 
C:\sdsdfsdf.exe=>(CAB Sfx o)=>lovely.dll
 Deleted
 
C:\sdsdfsdf.exe=>(CAB Sfx o)
 Update failed
 
C:\sdsdfsdf.exe=>(CAB Sfx o)=>ms04.exe
 Infected with: Trojan.Downloader.Small.ZJ
 
C:\sdsdfsdf.exe=>(CAB Sfx o)=>ms04.exe
 Disinfection failed
 
C:\sdsdfsdf.exe=>(CAB Sfx o)=>ms04.exe
 Deleted
 
C:\sdsdfsdf.exe=>(CAB Sfx o)
 Update failed
 
C:\sdsdfsdf.exe=>(CAB Sfx o)=>nass3r.exe
 Detected with: Application.HideWindow.B
 
C:\sdsdfsdf.exe=>(CAB Sfx o)=>nass3r.exe
 Disinfection failed
 
C:\sdsdfsdf.exe=>(CAB Sfx o)=>nass3r.exe
 Deleted
 
C:\sdsdfsdf.exe=>(CAB Sfx o)
 Update failed
 
C:\sdsdfsdf.exe=>(CAB Sfx o)=>orrl.exe
 Infected with: Win32.Worm.Rbot.AY
 
C:\sdsdfsdf.exe=>(CAB Sfx o)=>orrl.exe
 Disinfection failed
 
C:\sdsdfsdf.exe=>(CAB Sfx o)=>orrl.exe
 Deleted
 
C:\sdsdfsdf.exe=>(CAB Sfx o)
 Update failed
 
C:\sdsdfsdf.exe=>(CAB Sfx o)=>ps2m.exe
 Detected with: Application.Passview.A
 
C:\sdsdfsdf.exe=>(CAB Sfx o)=>ps2m.exe
 Disinfection failed
 
C:\sdsdfsdf.exe=>(CAB Sfx o)=>ps2m.exe
 Deleted
 
C:\sdsdfsdf.exe=>(CAB Sfx o)
 Update failed
 
C:\sdsdfsdf.exe=>(CAB Sfx o)=>virgin.exe
 Infected with: Win32.IRC.Kelebek
 
C:\sdsdfsdf.exe=>(CAB Sfx o)=>virgin.exe
 Disinfection failed
 
C:\sdsdfsdf.exe=>(CAB Sfx o)=>virgin.exe
 Deleted
 
C:\sdsdfsdf.exe=>(CAB Sfx o)
 Update failed
 
C:\Sh.exe=>(RAR Sfx o)=>aliases.ini
 Infected with: Backdoor.IRC.Zapchast.JG
 
C:\Sh.exe=>(RAR Sfx o)=>aliases.ini
 Disinfection failed
 
C:\Sh.exe=>(RAR Sfx o)=>aliases.ini
 Deleted
 
C:\Sh.exe=>(RAR Sfx o)
 Update failed
 
C:\Sh.exe=>(RAR Sfx o)=>cult.exe
 Infected with: Win32.Worm.Rbot.AA
 
C:\Sh.exe=>(RAR Sfx o)=>cult.exe
 Disinfection failed
 
C:\Sh.exe=>(RAR Sfx o)=>cult.exe
 Deleted
 
C:\Sh.exe=>(RAR Sfx o)
 Update failed
 
C:\Sh.exe=>(RAR Sfx o)=>hd.exe
 Detected with: Application.HideWindow.B
 
C:\Sh.exe=>(RAR Sfx o)=>hd.exe
 Disinfection failed
 
C:\Sh.exe=>(RAR Sfx o)=>hd.exe
 Deleted
 
C:\Sh.exe=>(RAR Sfx o)
 Update failed
 
C:\Sh.exe=>(RAR Sfx o)=>kiss.exe
 Infected with: Win32.IRC.Kelebek
 
C:\Sh.exe=>(RAR Sfx o)=>kiss.exe
 Disinfection failed
 
C:\Sh.exe=>(RAR Sfx o)=>kiss.exe
 Deleted
 
C:\Sh.exe=>(RAR Sfx o)
 Update failed
 
C:\Sh.exe=>(RAR Sfx o)=>ksat.bat
 Infected with: Trojan.IRC.Gen
 
C:\Sh.exe=>(RAR Sfx o)=>ksat.bat
 Disinfection failed
 
C:\Sh.exe=>(RAR Sfx o)=>ksat.bat
 Deleted
 
C:\Sh.exe=>(RAR Sfx o)
 Update failed
 
C:\Sh.exe=>(RAR Sfx o)=>lovely.sys
 Infected with: Backdoor.Ircflood.B
 
C:\Sh.exe=>(RAR Sfx o)=>lovely.sys
 Disinfection failed
 
C:\Sh.exe=>(RAR Sfx o)=>lovely.sys
 Deleted
 
C:\Sh.exe=>(RAR Sfx o)
 Update failed
 
C:\Sh.exe=>(RAR Sfx o)=>orrl.exe
 Infected with: Win32.Worm.Rbot.AY
 
C:\Sh.exe=>(RAR Sfx o)=>orrl.exe
 Disinfection failed
 
C:\Sh.exe=>(RAR Sfx o)=>orrl.exe
 Deleted
 
C:\Sh.exe=>(RAR Sfx o)
 Update failed
 
C:\Sh.exe=>(RAR Sfx o)=>pingy.exe
 Infected with: Trojan.Downloader.Small.ZJ
 
C:\Sh.exe=>(RAR Sfx o)=>pingy.exe
 Disinfection failed
 
C:\Sh.exe=>(RAR Sfx o)=>pingy.exe
 Deleted
 
C:\Sh.exe=>(RAR Sfx o)
 Update failed
 
C:\Sh.exe=>(RAR Sfx o)=>ps2m.exe
 Detected with: Application.Passview.A
 
C:\Sh.exe=>(RAR Sfx o)=>ps2m.exe
 Disinfection failed
 
C:\Sh.exe=>(RAR Sfx o)=>ps2m.exe
 Deleted
 
C:\Sh.exe=>(RAR Sfx o)
 Update failed
 
C:\Sh.exe=>(RAR Sfx o)=>repcale.exe
 Infected with: GenPack:Virtool.HiddenRun.B
 
C:\Sh.exe=>(RAR Sfx o)=>repcale.exe
 Disinfection failed
 
C:\Sh.exe=>(RAR Sfx o)=>repcale.exe
 Deleted
 
C:\Sh.exe=>(RAR Sfx o)
 Update failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP184\A0098871.exe=>(RAR Sfx o)=>Swfwin32.dll
 Infected with: Trojan.Flooder.I
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP184\A0098871.exe=>(RAR Sfx o)=>Swfwin32.dll
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP184\A0098871.exe=>(RAR Sfx o)=>Swfwin32.dll
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP184\A0098871.exe=>(RAR Sfx o)
 Update failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP184\A0098871.exe=>(RAR Sfx o)=>window.com
 Infected with: Backdoor.Mirc.580999.A
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP184\A0098871.exe=>(RAR Sfx o)=>window.com
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP184\A0098871.exe=>(RAR Sfx o)=>window.com
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP184\A0098871.exe=>(RAR Sfx o)
 Update failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP184\A0098871.exe=>(RAR Sfx o)=>timer.txt
 Infected with: Backdoor.Ircflood.B
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP184\A0098871.exe=>(RAR Sfx o)=>timer.txt
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP184\A0098871.exe=>(RAR Sfx o)=>timer.txt
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP184\A0098871.exe=>(RAR Sfx o)
 Update failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP184\A0098871.exe=>(RAR Sfx o)=>timer2.txt
 Infected with: Backdoor.Ircflood.B
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP184\A0098871.exe=>(RAR Sfx o)=>timer2.txt
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP184\A0098871.exe=>(RAR Sfx o)=>timer2.txt
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP184\A0098871.exe=>(RAR Sfx o)
 Update failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP184\A0098872.exe=>(RAR Sfx o)=>aliases.ini
 Infected with: Backdoor.IRC.Zapchast.JG
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP184\A0098872.exe=>(RAR Sfx o)=>aliases.ini
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP184\A0098872.exe=>(RAR Sfx o)=>aliases.ini
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP184\A0098872.exe=>(RAR Sfx o)
 Update failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP184\A0098872.exe=>(RAR Sfx o)=>cult.exe
 Infected with: Win32.Worm.Rbot.AA
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP184\A0098872.exe=>(RAR Sfx o)=>cult.exe
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP184\A0098872.exe=>(RAR Sfx o)=>cult.exe
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP184\A0098872.exe=>(RAR Sfx o)
 Update failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP184\A0098872.exe=>(RAR Sfx o)=>hd.exe
 Detected with: Application.HideWindow.B
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP184\A0098872.exe=>(RAR Sfx o)=>hd.exe
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP184\A0098872.exe=>(RAR Sfx o)=>hd.exe
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP184\A0098872.exe=>(RAR Sfx o)
 Update failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP184\A0098872.exe=>(RAR Sfx o)=>kiss.exe
 Infected with: Win32.IRC.Kelebek
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP184\A0098872.exe=>(RAR Sfx o)=>kiss.exe
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP184\A0098872.exe=>(RAR Sfx o)=>kiss.exe
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP184\A0098872.exe=>(RAR Sfx o)
 Update failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP184\A0098872.exe=>(RAR Sfx o)=>ksat.bat
 Infected with: Trojan.IRC.Gen
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP184\A0098872.exe=>(RAR Sfx o)=>ksat.bat
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP184\A0098872.exe=>(RAR Sfx o)=>ksat.bat
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP184\A0098872.exe=>(RAR Sfx o)
 Update failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP184\A0098872.exe=>(RAR Sfx o)=>lovely.sys
 Infected with: Backdoor.Ircflood.B
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP184\A0098872.exe=>(RAR Sfx o)=>lovely.sys
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP184\A0098872.exe=>(RAR Sfx o)=>lovely.sys
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP184\A0098872.exe=>(RAR Sfx o)
 Update failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP184\A0098872.exe=>(RAR Sfx o)=>orrl.exe
 Infected with: Win32.Worm.Rbot.AY
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP184\A0098872.exe=>(RAR Sfx o)=>orrl.exe
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP184\A0098872.exe=>(RAR Sfx o)=>orrl.exe
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP184\A0098872.exe=>(RAR Sfx o)
 Update failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP184\A0098872.exe=>(RAR Sfx o)=>pingy.exe
 Infected with: Trojan.Downloader.Small.ZJ
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP184\A0098872.exe=>(RAR Sfx o)=>pingy.exe
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP184\A0098872.exe=>(RAR Sfx o)=>pingy.exe
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP184\A0098872.exe=>(RAR Sfx o)
 Update failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP184\A0098872.exe=>(RAR Sfx o)=>ps2m.exe
 Detected with: Application.Passview.A
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP184\A0098872.exe=>(RAR Sfx o)=>ps2m.exe
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP184\A0098872.exe=>(RAR Sfx o)=>ps2m.exe
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP184\A0098872.exe=>(RAR Sfx o)
 Update failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP184\A0098872.exe=>(RAR Sfx o)=>repcale.exe
 Infected with: GenPack:Virtool.HiddenRun.B
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP184\A0098872.exe=>(RAR Sfx o)=>repcale.exe
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP184\A0098872.exe=>(RAR Sfx o)=>repcale.exe
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP184\A0098872.exe=>(RAR Sfx o)
 Update failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP184\A0099884.sys
 Infected with: Backdoor.Ircflood.B
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP184\A0099884.sys
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP184\A0099884.sys
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP184\A0099885.exe
 Detected with: Application.Passview.A
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP184\A0099885.exe
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP184\A0099885.exe
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP184\A0099886.EXE
 Infected with: GenPack:Virtool.HiddenRun.B
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP184\A0099886.EXE
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP184\A0099886.EXE
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0102932.pif=>(RAR Sfx o)=>aliases.ini
 Infected with: Backdoor.IRC.Zapchast.JG
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0102932.pif=>(RAR Sfx o)=>aliases.ini
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0102932.pif=>(RAR Sfx o)=>aliases.ini
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0102932.pif=>(RAR Sfx o)
 Update failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0102932.pif=>(RAR Sfx o)=>cult.exe
 Infected with: Win32.Worm.Rbot.AA
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0102932.pif=>(RAR Sfx o)=>cult.exe
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0102932.pif=>(RAR Sfx o)=>cult.exe
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0102932.pif=>(RAR Sfx o)
 Update failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0102932.pif=>(RAR Sfx o)=>hd.exe
 Detected with: Application.HideWindow.B
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0102932.pif=>(RAR Sfx o)=>hd.exe
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0102932.pif=>(RAR Sfx o)=>hd.exe
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0102932.pif=>(RAR Sfx o)
 Update failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0102932.pif=>(RAR Sfx o)=>kiss.exe
 Infected with: Win32.IRC.Kelebek
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0102932.pif=>(RAR Sfx o)=>kiss.exe
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0102932.pif=>(RAR Sfx o)=>kiss.exe
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0102932.pif=>(RAR Sfx o)
 Update failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0102932.pif=>(RAR Sfx o)=>ksat.bat
 Infected with: Trojan.IRC.Gen
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0102932.pif=>(RAR Sfx o)=>ksat.bat
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0102932.pif=>(RAR Sfx o)=>ksat.bat
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0102932.pif=>(RAR Sfx o)
 Update failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0102932.pif=>(RAR Sfx o)=>lovely.sys
 Infected with: Backdoor.Ircflood.B
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0102932.pif=>(RAR Sfx o)=>lovely.sys
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0102932.pif=>(RAR Sfx o)=>lovely.sys
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0102932.pif=>(RAR Sfx o)
 Update failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0102932.pif=>(RAR Sfx o)=>orrl.exe
 Infected with: Win32.Worm.Rbot.AY
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0102932.pif=>(RAR Sfx o)=>orrl.exe
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0102932.pif=>(RAR Sfx o)=>orrl.exe
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0102932.pif=>(RAR Sfx o)
 Update failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0102932.pif=>(RAR Sfx o)=>pingy.exe
 Infected with: Trojan.Downloader.Small.ZJ
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0102932.pif=>(RAR Sfx o)=>pingy.exe
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0102932.pif=>(RAR Sfx o)=>pingy.exe
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0102932.pif=>(RAR Sfx o)
 Update failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0102932.pif=>(RAR Sfx o)=>ps2m.exe
 Detected with: Application.Passview.A
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0102932.pif=>(RAR Sfx o)=>ps2m.exe
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0102932.pif=>(RAR Sfx o)=>ps2m.exe
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0102932.pif=>(RAR Sfx o)
 Update failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0102932.pif=>(RAR Sfx o)=>repcale.exe
 Infected with: GenPack:Virtool.HiddenRun.B
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0102932.pif=>(RAR Sfx o)=>repcale.exe
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0102932.pif=>(RAR Sfx o)=>repcale.exe
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0102932.pif=>(RAR Sfx o)
 Update failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0104933.exe
 Infected with: DeepScan:Generic.Malware.P!.5F1AEB08
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0104933.exe
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0104933.exe
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0104935.ini
 Infected with: Backdoor.IRC.Zapchast.JG
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0104935.ini
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0104935.ini
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0104937.exe
 Infected with: Win32.Worm.Rbot.AA
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0104937.exe
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0104937.exe
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0104939.exe
 Detected with: Application.HideWindow.B
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0104939.exe
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0104939.exe
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0104941.exe
 Infected with: Win32.IRC.Kelebek
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0104941.exe
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0104941.exe
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0104943.bat
 Infected with: Trojan.IRC.Gen
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0104943.bat
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0104943.bat
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0104945.sys
 Infected with: Backdoor.Ircflood.B
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0104945.sys
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0104945.sys
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0104947.exe
 Infected with: Win32.Worm.Rbot.AY
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0104947.exe
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0104947.exe
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0104949.exe
 Infected with: Trojan.Downloader.Small.ZJ
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0104949.exe
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0104949.exe
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0104951.exe
 Detected with: Application.Passview.A
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0104951.exe
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0104951.exe
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0104953.exe
 Infected with: GenPack:Virtool.HiddenRun.B
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0104953.exe
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0104953.exe
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0104955.ini
 Infected with: Backdoor.IRC.Zapchast.JG
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0104955.ini
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0104955.ini
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0104957.exe
 Infected with: Win32.Worm.Rbot.AA
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0104957.exe
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0104957.exe
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0104959.bat
 Infected with: Trojan.IRC.Gen
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0104959.bat
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0104959.bat
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0104961.exe
 Infected with: Win32.Worm.Rbot.AY
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0104961.exe
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0104961.exe
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0104963.exe
 Infected with: Trojan.Downloader.Small.ZJ
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0104963.exe
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0104963.exe
 Deleted
 
C:\WINDOWS\system.1	imer.txt
 Infected with: Backdoor.Ircflood.B
 
C:\WINDOWS\system.1	imer.txt
 Disinfection failed
 
C:\WINDOWS\system.1	imer.txt
 Deleted
 
C:\WINDOWS\system.1	imer2.txt
 Infected with: Backdoor.Ircflood.B
 
C:\WINDOWS\system.1	imer2.txt
 Disinfection failed
 
C:\WINDOWS\system.1	imer2.txt
 Deleted
 
C:\WINDOWS\system.1\window.com
 Infected with: Backdoor.Mirc.580999.A
 
C:\WINDOWS\system.1\window.com
 Disinfection failed
 
C:\WINDOWS\system.1\window.com
 Deleted
 
C:\WINDOWS\SYSTEM32\-r=>(CAB Sfx o)=>th7ya.exe
 Infected with: Win32.IRC.Kelebek
 
C:\WINDOWS\SYSTEM32\-r=>(CAB Sfx o)=>th7ya.exe
 Disinfection failed
 
C:\WINDOWS\SYSTEM32\-r=>(CAB Sfx o)=>th7ya.exe
 Deleted
 
C:\WINDOWS\SYSTEM32\-r=>(CAB Sfx o)
 Update failed
 
C:\WINDOWS\SYSTEM32\antivirusv1.exe=>(CAB Sfx o)=>d4rk.exe
 Infected with: Win32.Parite.B
 
C:\WINDOWS\SYSTEM32\antivirusv1.exe=>(CAB Sfx o)=>d4rk.exe
 Disinfected
 
C:\WINDOWS\SYSTEM32\antivirusv1.exe=>(CAB Sfx o)
 Update failed
 
C:\WINDOWS\SYSTEM32\antivirusv1.exe=>(CAB Sfx o)=>d4rky.exe
 Detected with: Application.HideWindow.B
 
C:\WINDOWS\SYSTEM32\antivirusv1.exe=>(CAB Sfx o)=>d4rky.exe
 Disinfection failed
 
C:\WINDOWS\SYSTEM32\antivirusv1.exe=>(CAB Sfx o)=>d4rky.exe
 Deleted
 
C:\WINDOWS\SYSTEM32\antivirusv1.exe=>(CAB Sfx o)
 Update failed
 
C:\WINDOWS\SYSTEM32\antivirusv1.exe=>(CAB Sfx o)=>d4rky[2]
 Infected with: Backdoor.Ircflood.B
 
C:\WINDOWS\SYSTEM32\antivirusv1.exe=>(CAB Sfx o)=>d4rky[2]
 Disinfection failed
 
C:\WINDOWS\SYSTEM32\antivirusv1.exe=>(CAB Sfx o)=>d4rky[2]
 Deleted
 
C:\WINDOWS\SYSTEM32\antivirusv1.exe=>(CAB Sfx o)
 Update failed
 
C:\WINDOWS\SYSTEM32\antivirusv1.exe=>(CAB Sfx o)=>d4rky[3]
 Infected with: Win32.IRC.Kelebek
 
C:\WINDOWS\SYSTEM32\antivirusv1.exe=>(CAB Sfx o)=>d4rky[3]
 Disinfection failed
 
C:\WINDOWS\SYSTEM32\antivirusv1.exe=>(CAB Sfx o)=>d4rky[3]
 Deleted
 
C:\WINDOWS\SYSTEM32\antivirusv1.exe=>(CAB Sfx o)
 Update failed
 
C:\WINDOWS\SYSTEM32\antivirusv1.exe=>(CAB Sfx o)=>d4rky[4]
 Infected with: Backdoor.Ircflood.B
 
C:\WINDOWS\SYSTEM32\antivirusv1.exe=>(CAB Sfx o)=>d4rky[4]
 Disinfection failed
 
C:\WINDOWS\SYSTEM32\antivirusv1.exe=>(CAB Sfx o)=>d4rky[4]
 Deleted
 
C:\WINDOWS\SYSTEM32\antivirusv1.exe=>(CAB Sfx o)
 Update failed
 
C:\WINDOWS\SYSTEM32\antivirusv1.exe=>(CAB Sfx o)=>d4rky[5]
 Infected with: Backdoor.Ircflood.B
 
C:\WINDOWS\SYSTEM32\antivirusv1.exe=>(CAB Sfx o)=>d4rky[5]
 Disinfection failed
 
C:\WINDOWS\SYSTEM32\antivirusv1.exe=>(CAB Sfx o)=>d4rky[5]
 Deleted
 
C:\WINDOWS\SYSTEM32\antivirusv1.exe=>(CAB Sfx o)
 Update failed
 
C:\WINDOWS\SYSTEM32\antivirusv1.exe=>(CAB Sfx o)=>d4rky[6]
 Infected with: Backdoor.Ircflood.B
 
C:\WINDOWS\SYSTEM32\antivirusv1.exe=>(CAB Sfx o)=>d4rky[6]
 Disinfection failed
 
C:\WINDOWS\SYSTEM32\antivirusv1.exe=>(CAB Sfx o)=>d4rky[6]
 Deleted
 
C:\WINDOWS\SYSTEM32\antivirusv1.exe=>(CAB Sfx o)
 Update failed
 
C:\WINDOWS\SYSTEM32\antivirusv1.exe=>(CAB Sfx o)=>d4rky[7]
 Infected with: Backdoor.Ircflood.B
 
C:\WINDOWS\SYSTEM32\antivirusv1.exe=>(CAB Sfx o)=>d4rky[7]
 Disinfection failed
 
C:\WINDOWS\SYSTEM32\antivirusv1.exe=>(CAB Sfx o)=>d4rky[7]
 Deleted
 
C:\WINDOWS\SYSTEM32\antivirusv1.exe=>(CAB Sfx o)
 Update failed
 
C:\WINDOWS\SYSTEM32\cg.pif=>(RAR Sfx o)=>aliases.ini
 Infected with: Backdoor.IRC.Zapchast.JG
 
C:\WINDOWS\SYSTEM32\cg.pif=>(RAR Sfx o)=>aliases.ini
 Disinfection failed
 
C:\WINDOWS\SYSTEM32\cg.pif=>(RAR Sfx o)=>aliases.ini
 Deleted
 
C:\WINDOWS\SYSTEM32\cg.pif=>(RAR Sfx o)
 Update failed
 
C:\WINDOWS\SYSTEM32\cg.pif=>(RAR Sfx o)=>cult.exe
 Infected with: Win32.Worm.Rbot.AA
 
C:\WINDOWS\SYSTEM32\cg.pif=>(RAR Sfx o)=>cult.exe
 Disinfection failed
 
C:\WINDOWS\SYSTEM32\cg.pif=>(RAR Sfx o)=>cult.exe
 Deleted
 
C:\WINDOWS\SYSTEM32\cg.pif=>(RAR Sfx o)
 Update failed
 
C:\WINDOWS\SYSTEM32\cg.pif=>(RAR Sfx o)=>hd.exe
 Detected with: Application.HideWindow.B
 
C:\WINDOWS\SYSTEM32\cg.pif=>(RAR Sfx o)=>hd.exe
 Disinfection failed
 
C:\WINDOWS\SYSTEM32\cg.pif=>(RAR Sfx o)=>hd.exe
 Deleted
 
C:\WINDOWS\SYSTEM32\cg.pif=>(RAR Sfx o)
 Update failed
 
C:\WINDOWS\SYSTEM32\cg.pif=>(RAR Sfx o)=>kiss.exe
 Infected with: Win32.IRC.Kelebek
 
C:\WINDOWS\SYSTEM32\cg.pif=>(RAR Sfx o)=>kiss.exe
 Disinfection failed
 
C:\WINDOWS\SYSTEM32\cg.pif=>(RAR Sfx o)=>kiss.exe
 Deleted
 
C:\WINDOWS\SYSTEM32\cg.pif=>(RAR Sfx o)
 Update failed
 
C:\WINDOWS\SYSTEM32\cg.pif=>(RAR Sfx o)=>ksat.bat
 Infected with: Trojan.IRC.Gen
 
C:\WINDOWS\SYSTEM32\cg.pif=>(RAR Sfx o)=>ksat.bat
 Disinfection failed
 
C:\WINDOWS\SYSTEM32\cg.pif=>(RAR Sfx o)=>ksat.bat
 Deleted
 
C:\WINDOWS\SYSTEM32\cg.pif=>(RAR Sfx o)
 Update failed
 
C:\WINDOWS\SYSTEM32\cg.pif=>(RAR Sfx o)=>lovely.sys
 Infected with: Backdoor.Ircflood.B
 
C:\WINDOWS\SYSTEM32\cg.pif=>(RAR Sfx o)=>lovely.sys
 Disinfection failed
 
C:\WINDOWS\SYSTEM32\cg.pif=>(RAR Sfx o)=>lovely.sys
 Deleted
 
C:\WINDOWS\SYSTEM32\cg.pif=>(RAR Sfx o)
 Update failed
 
C:\WINDOWS\SYSTEM32\cg.pif=>(RAR Sfx o)=>orrl.exe
 Infected with: Win32.Worm.Rbot.AY
 
C:\WINDOWS\SYSTEM32\cg.pif=>(RAR Sfx o)=>orrl.exe
 Disinfection failed
 
C:\WINDOWS\SYSTEM32\cg.pif=>(RAR Sfx o)=>orrl.exe
 Deleted
 
C:\WINDOWS\SYSTEM32\cg.pif=>(RAR Sfx o)
 Update failed
 
C:\WINDOWS\SYSTEM32\cg.pif=>(RAR Sfx o)=>pingy.exe
 Infected with: Trojan.Downloader.Small.ZJ
 
C:\WINDOWS\SYSTEM32\cg.pif=>(RAR Sfx o)=>pingy.exe
 Disinfection failed
 
C:\WINDOWS\SYSTEM32\cg.pif=>(RAR Sfx o)=>pingy.exe
 Deleted
 
C:\WINDOWS\SYSTEM32\cg.pif=>(RAR Sfx o)
 Update failed
 
C:\WINDOWS\SYSTEM32\cg.pif=>(RAR Sfx o)=>ps2m.exe
 Detected with: Application.Passview.A
 
C:\WINDOWS\SYSTEM32\cg.pif=>(RAR Sfx o)=>ps2m.exe
 Disinfection failed
 
C:\WINDOWS\SYSTEM32\cg.pif=>(RAR Sfx o)=>ps2m.exe
 Deleted
 
C:\WINDOWS\SYSTEM32\cg.pif=>(RAR Sfx o)
 Update failed
 
C:\WINDOWS\SYSTEM32\cg.pif=>(RAR Sfx o)=>repcale.exe
 Infected with: GenPack:Virtool.HiddenRun.B
 
C:\WINDOWS\SYSTEM32\cg.pif=>(RAR Sfx o)=>repcale.exe
 Disinfection failed
 
C:\WINDOWS\SYSTEM32\cg.pif=>(RAR Sfx o)=>repcale.exe
 Deleted
 
C:\WINDOWS\SYSTEM32\cg.pif=>(RAR Sfx o)
 Update failed
 
C:\WINDOWS\SYSTEM32\darkworlk.exe=>(CAB Sfx o)=>d4rk.exe
 Infected with: Win32.Parite.B
 
C:\WINDOWS\SYSTEM32\darkworlk.exe=>(CAB Sfx o)=>d4rk.exe
 Disinfected
 
C:\WINDOWS\SYSTEM32\darkworlk.exe=>(CAB Sfx o)
 Update failed
 
C:\WINDOWS\SYSTEM32\darkworlk.exe=>(CAB Sfx o)=>d4rky.exe
 Detected with: Application.HideWindow.B
 
C:\WINDOWS\SYSTEM32\darkworlk.exe=>(CAB Sfx o)=>d4rky.exe
 Disinfection failed
 
C:\WINDOWS\SYSTEM32\darkworlk.exe=>(CAB Sfx o)=>d4rky.exe
 Deleted
 
C:\WINDOWS\SYSTEM32\darkworlk.exe=>(CAB Sfx o)
 Update failed
 
C:\WINDOWS\SYSTEM32\darkworlk.exe=>(CAB Sfx o)=>d4rky[2]
 Infected with: Backdoor.Ircflood.B
 
C:\WINDOWS\SYSTEM32\darkworlk.exe=>(CAB Sfx o)=>d4rky[2]
 Disinfection failed
 
C:\WINDOWS\SYSTEM32\darkworlk.exe=>(CAB Sfx o)=>d4rky[2]
 Deleted
 
C:\WINDOWS\SYSTEM32\darkworlk.exe=>(CAB Sfx o)
 Update failed
 
C:\WINDOWS\SYSTEM32\darkworlk.exe=>(CAB Sfx o)=>d4rky[3]
 Infected with: Win32.IRC.Kelebek
 
C:\WINDOWS\SYSTEM32\darkworlk.exe=>(CAB Sfx o)=>d4rky[3]
 Disinfection failed
 
C:\WINDOWS\SYSTEM32\darkworlk.exe=>(CAB Sfx o)=>d4rky[3]
 Deleted
 
C:\WINDOWS\SYSTEM32\darkworlk.exe=>(CAB Sfx o)
 Update failed
 
C:\WINDOWS\SYSTEM32\darkworlk.exe=>(CAB Sfx o)=>d4rky[4]
 Infected with: Backdoor.Ircflood.B
 
C:\WINDOWS\SYSTEM32\darkworlk.exe=>(CAB Sfx o)=>d4rky[4]
 Disinfection failed
 
C:\WINDOWS\SYSTEM32\darkworlk.exe=>(CAB Sfx o)=>d4rky[4]
 Deleted
 
C:\WINDOWS\SYSTEM32\darkworlk.exe=>(CAB Sfx o)
 Update failed
 
C:\WINDOWS\SYSTEM32\darkworlk.exe=>(CAB Sfx o)=>d4rky[5]
 Infected with: Backdoor.Ircflood.B
 
C:\WINDOWS\SYSTEM32\darkworlk.exe=>(CAB Sfx o)=>d4rky[5]
 Disinfection failed
 
C:\WINDOWS\SYSTEM32\darkworlk.exe=>(CAB Sfx o)=>d4rky[5]
 Deleted
 
C:\WINDOWS\SYSTEM32\darkworlk.exe=>(CAB Sfx o)
 Update failed
 
C:\WINDOWS\SYSTEM32\darkworlk.exe=>(CAB Sfx o)=>d4rky[6]
 Infected with: Backdoor.Ircflood.B
 
C:\WINDOWS\SYSTEM32\darkworlk.exe=>(CAB Sfx o)=>d4rky[6]
 Disinfection failed
 
C:\WINDOWS\SYSTEM32\darkworlk.exe=>(CAB Sfx o)=>d4rky[6]
 Deleted
 
C:\WINDOWS\SYSTEM32\darkworlk.exe=>(CAB Sfx o)
 Update failed
 
C:\WINDOWS\SYSTEM32\darkworlk.exe=>(CAB Sfx o)=>d4rky[7]
 Infected with: Backdoor.Ircflood.B
 
C:\WINDOWS\SYSTEM32\darkworlk.exe=>(CAB Sfx o)=>d4rky[7]
 Disinfection failed
 
C:\WINDOWS\SYSTEM32\darkworlk.exe=>(CAB Sfx o)=>d4rky[7]
 Deleted
 
C:\WINDOWS\SYSTEM32\darkworlk.exe=>(CAB Sfx o)
 Update failed
 
C:\WINDOWS\SYSTEM32\dfgsdfcxvxs.exe=>(RAR Sfx o)=>orrl.exe
 Infected with: Win32.Worm.Rbot.AY
 
C:\WINDOWS\SYSTEM32\dfgsdfcxvxs.exe=>(RAR Sfx o)=>orrl.exe
 Disinfection failed
 
C:\WINDOWS\SYSTEM32\dfgsdfcxvxs.exe=>(RAR Sfx o)=>orrl.exe
 Deleted
 
C:\WINDOWS\SYSTEM32\dfgsdfcxvxs.exe=>(RAR Sfx o)
 Update failed
 
C:\WINDOWS\SYSTEM32\dfgsdfcxvxs.exe=>(RAR Sfx o)=>pingy.exe
 Infected with: Trojan.Downloader.Small.ZJ
 
C:\WINDOWS\SYSTEM32\dfgsdfcxvxs.exe=>(RAR Sfx o)=>pingy.exe
 Disinfection failed
 
C:\WINDOWS\SYSTEM32\dfgsdfcxvxs.exe=>(RAR Sfx o)=>pingy.exe
 Deleted
 
C:\WINDOWS\SYSTEM32\dfgsdfcxvxs.exe=>(RAR Sfx o)
 Update failed
 
C:\WINDOWS\SYSTEM32\dfgsdfcxvxs.exe=>(RAR Sfx o)=>ps2m.exe
 Detected with: Application.Passview.A
 
C:\WINDOWS\SYSTEM32\dfgsdfcxvxs.exe=>(RAR Sfx o)=>ps2m.exe
 Disinfection failed
 
C:\WINDOWS\SYSTEM32\dfgsdfcxvxs.exe=>(RAR Sfx o)=>ps2m.exe
 Deleted
 
C:\WINDOWS\SYSTEM32\dfgsdfcxvxs.exe=>(RAR Sfx o)
 Update failed
 
C:\WINDOWS\SYSTEM32\dfgsdfcxvxs.exe=>(RAR Sfx o)=>repcale.exe
 Infected with: GenPack:Virtool.HiddenRun.B
 
C:\WINDOWS\SYSTEM32\dfgsdfcxvxs.exe=>(RAR Sfx o)=>repcale.exe
 Disinfection failed
 
C:\WINDOWS\SYSTEM32\dfgsdfcxvxs.exe=>(RAR Sfx o)=>repcale.exe
 Deleted
 
C:\WINDOWS\SYSTEM32\dfgsdfcxvxs.exe=>(RAR Sfx o)
 Update failed
 
C:\WINDOWS\SYSTEM32\dfgsdfcxvxs.exe=>(RAR Sfx o)=>aliases.ini
 Infected with: Backdoor.IRC.Zapchast.JG
 
C:\WINDOWS\SYSTEM32\dfgsdfcxvxs.exe=>(RAR Sfx o)=>aliases.ini
 Disinfection failed
 
C:\WINDOWS\SYSTEM32\dfgsdfcxvxs.exe=>(RAR Sfx o)=>aliases.ini
 Deleted
 
C:\WINDOWS\SYSTEM32\dfgsdfcxvxs.exe=>(RAR Sfx o)

scoubidou78 · Answer

re,

voici le rapport bitdefender

BitDefender Online Scanner
  
  
 
Scan report generated at: Mon, Dec 17, 2007 - 13:22:27
 
 
  
  
 
Scan path: A:\;C:\;D:\;
  
  
 
 
  
  
 
Statistics
 
Time
 00:50:41
 
Files
 111655
 
Folders
 2198
 
Boot Sectors
 3
 
Archives
 12752
 
Packed Files
 7495
 
  
  
 
Results
 
Identified Viruses 
 31
 
Infected Files 
 351
 
Suspect Files 
 0
 
Warnings
 0
 
Disinfected
 2
 
Deleted Files
 347
 
  
  
 
Engines Info
 
Virus Definitions
 882560
 
Engine build
 AVCORE v1.0 (build 2422) (i386) (Sep 25 2007 08:26:36)
 
Scan plugins
 14
 
Archive plugins
 38
 
Unpack plugins
 7
 
E-mail plugins
 6
 
System plugins
 1
 
  
  
 
Scan Settings
 
First Action
 Disinfect
 
Second Action
 Delete
 
Heuristics
 Yes
 
Enable Warnings
 Yes
 
Scanned Extensions
 *;
 
Exclude Extensions
  
 
Scan Emails
 Yes
 
Scan Archives
 Yes
 
Scan Packed
 Yes
 
Scan Files
 Yes
 
Scan Boot
 Yes
 
  
  
 
  Scanned File
  Status
 
C:\cg.pif=>(RAR Sfx o)=>aliases.ini
 Infected with: Backdoor.IRC.Zapchast.JG
 
C:\cg.pif=>(RAR Sfx o)=>aliases.ini
 Disinfection failed
 
C:\cg.pif=>(RAR Sfx o)=>aliases.ini
 Deleted
 
C:\cg.pif=>(RAR Sfx o)
 Update failed
 
C:\cg.pif=>(RAR Sfx o)=>cult.exe
 Infected with: Win32.Worm.Rbot.AA
 
C:\cg.pif=>(RAR Sfx o)=>cult.exe
 Disinfection failed
 
C:\cg.pif=>(RAR Sfx o)=>cult.exe
 Deleted
 
C:\cg.pif=>(RAR Sfx o)
 Update failed
 
C:\cg.pif=>(RAR Sfx o)=>hd.exe
 Detected with: Application.HideWindow.B
 
C:\cg.pif=>(RAR Sfx o)=>hd.exe
 Disinfection failed
 
C:\cg.pif=>(RAR Sfx o)=>hd.exe
 Deleted
 
C:\cg.pif=>(RAR Sfx o)
 Update failed
 
C:\cg.pif=>(RAR Sfx o)=>kiss.exe
 Infected with: Win32.IRC.Kelebek
 
C:\cg.pif=>(RAR Sfx o)=>kiss.exe
 Disinfection failed
 
C:\cg.pif=>(RAR Sfx o)=>kiss.exe
 Deleted
 
C:\cg.pif=>(RAR Sfx o)
 Update failed
 
C:\cg.pif=>(RAR Sfx o)=>ksat.bat
 Infected with: Trojan.IRC.Gen
 
C:\cg.pif=>(RAR Sfx o)=>ksat.bat
 Disinfection failed
 
C:\cg.pif=>(RAR Sfx o)=>ksat.bat
 Deleted
 
C:\cg.pif=>(RAR Sfx o)
 Update failed
 
C:\cg.pif=>(RAR Sfx o)=>lovely.sys
 Infected with: Backdoor.Ircflood.B
 
C:\cg.pif=>(RAR Sfx o)=>lovely.sys
 Disinfection failed
 
C:\cg.pif=>(RAR Sfx o)=>lovely.sys
 Deleted
 
C:\cg.pif=>(RAR Sfx o)
 Update failed
 
C:\cg.pif=>(RAR Sfx o)=>orrl.exe
 Infected with: Win32.Worm.Rbot.AY
 
C:\cg.pif=>(RAR Sfx o)=>orrl.exe
 Disinfection failed
 
C:\cg.pif=>(RAR Sfx o)=>orrl.exe
 Deleted
 
C:\cg.pif=>(RAR Sfx o)
 Update failed
 
C:\cg.pif=>(RAR Sfx o)=>pingy.exe
 Infected with: Trojan.Downloader.Small.ZJ
 
C:\cg.pif=>(RAR Sfx o)=>pingy.exe
 Disinfection failed
 
C:\cg.pif=>(RAR Sfx o)=>pingy.exe
 Deleted
 
C:\cg.pif=>(RAR Sfx o)
 Update failed
 
C:\cg.pif=>(RAR Sfx o)=>ps2m.exe
 Detected with: Application.Passview.A
 
C:\cg.pif=>(RAR Sfx o)=>ps2m.exe
 Disinfection failed
 
C:\cg.pif=>(RAR Sfx o)=>ps2m.exe
 Deleted
 
C:\cg.pif=>(RAR Sfx o)
 Update failed
 
C:\cg.pif=>(RAR Sfx o)=>repcale.exe
 Infected with: GenPack:Virtool.HiddenRun.B
 
C:\cg.pif=>(RAR Sfx o)=>repcale.exe
 Disinfection failed
 
C:\cg.pif=>(RAR Sfx o)=>repcale.exe
 Deleted
 
C:\cg.pif=>(RAR Sfx o)
 Update failed
 
C:\dfsd.exe=>(CAB Sfx o)=>colfld.dll
 Infected with: Win32.Worm.Randon.AR
 
C:\dfsd.exe=>(CAB Sfx o)=>colfld.dll
 Disinfection failed
 
C:\dfsd.exe=>(CAB Sfx o)=>colfld.dll
 Deleted
 
C:\dfsd.exe=>(CAB Sfx o)
 Update failed
 
C:\dfsd.exe=>(CAB Sfx o)=>dbqp.fon
 Infected with: Trojan.Mirc.Flood.2HK
 
C:\dfsd.exe=>(CAB Sfx o)=>dbqp.fon
 Disinfection failed
 
C:\dfsd.exe=>(CAB Sfx o)=>dbqp.fon
 Deleted
 
C:\dfsd.exe=>(CAB Sfx o)
 Update failed
 
C:\dfsd.exe=>(CAB Sfx o)=>fvist.com.exe=>(CAB Sfx o)=>cl.dll
 Infected with: Trojan.Mirc.Flood.AE
 
C:\dfsd.exe=>(CAB Sfx o)=>fvist.com.exe=>(CAB Sfx o)=>cl.dll
 Disinfection failed
 
C:\dfsd.exe=>(CAB Sfx o)=>fvist.com.exe=>(CAB Sfx o)=>cl.dll
 Deleted
 
C:\dfsd.exe=>(CAB Sfx o)=>fvist.com.exe=>(CAB Sfx o)
 Update failed
 
C:\dfsd.exe=>(CAB Sfx o)=>fvist.com.exe=>(CAB Sfx o)=>colfld.dll
 Infected with: Win32.Worm.Randon.AR
 
C:\dfsd.exe=>(CAB Sfx o)=>fvist.com.exe=>(CAB Sfx o)=>colfld.dll
 Disinfection failed
 
C:\dfsd.exe=>(CAB Sfx o)=>fvist.com.exe=>(CAB Sfx o)=>colfld.dll
 Deleted
 
C:\dfsd.exe=>(CAB Sfx o)=>fvist.com.exe=>(CAB Sfx o)
 Update failed
 
C:\dfsd.exe=>(CAB Sfx o)=>fvist.com.exe=>(CAB Sfx o)=>dbqp.fon
 Infected with: Trojan.Mirc.Flood.2HK
 
C:\dfsd.exe=>(CAB Sfx o)=>fvist.com.exe=>(CAB Sfx o)=>dbqp.fon
 Disinfection failed
 
C:\dfsd.exe=>(CAB Sfx o)=>fvist.com.exe=>(CAB Sfx o)=>dbqp.fon
 Deleted
 
C:\dfsd.exe=>(CAB Sfx o)=>fvist.com.exe=>(CAB Sfx o)
 Update failed
 
C:\dfsd.exe=>(CAB Sfx o)=>fvist.com.exe=>(CAB Sfx o)=>dmans.dll
 Infected with: Backdoor.Irc.Lambot.G
 
C:\dfsd.exe=>(CAB Sfx o)=>fvist.com.exe=>(CAB Sfx o)=>dmans.dll
 Disinfection failed
 
C:\dfsd.exe=>(CAB Sfx o)=>fvist.com.exe=>(CAB Sfx o)=>dmans.dll
 Deleted
 
C:\dfsd.exe=>(CAB Sfx o)=>fvist.com.exe=>(CAB Sfx o)
 Update failed
 
C:\dfsd.exe=>(CAB Sfx o)=>fvist.com.exe=>(CAB Sfx o)=>fvist.com
 Infected with: Backdoor.IRC
 
C:\dfsd.exe=>(CAB Sfx o)=>fvist.com.exe=>(CAB Sfx o)=>fvist.com
 Disinfection failed
 
C:\dfsd.exe=>(CAB Sfx o)=>fvist.com.exe=>(CAB Sfx o)=>fvist.com
 Deleted
 
C:\dfsd.exe=>(CAB Sfx o)=>fvist.com.exe=>(CAB Sfx o)
 Update failed
 
C:\dfsd.exe=>(CAB Sfx o)=>fvist.com.exe=>(CAB Sfx o)=>k.exe
 Infected with: Generic.Sdbot.272C8EA7
 
C:\dfsd.exe=>(CAB Sfx o)=>fvist.com.exe=>(CAB Sfx o)=>k.exe
 Deleted
 
C:\dfsd.exe=>(CAB Sfx o)=>fvist.com.exe=>(CAB Sfx o)
 Update failed
 
C:\dfsd.exe=>(CAB Sfx o)=>fvist.com.exe=>(CAB Sfx o)=>mansor.exe
 Infected with: Virtool.HiddenRun.B
 
C:\dfsd.exe=>(CAB Sfx o)=>fvist.com.exe=>(CAB Sfx o)=>mansor.exe
 Disinfection failed
 
C:\dfsd.exe=>(CAB Sfx o)=>fvist.com.exe=>(CAB Sfx o)=>mansor.exe
 Deleted
 
C:\dfsd.exe=>(CAB Sfx o)=>fvist.com.exe=>(CAB Sfx o)
 Update failed
 
C:\dfsd.exe=>(CAB Sfx o)=>fvist.com.exe=>(CAB Sfx o)=>neiom.dll
 Infected with: Trojan.Mirc.Flood.AI
 
C:\dfsd.exe=>(CAB Sfx o)=>fvist.com.exe=>(CAB Sfx o)=>neiom.dll
 Disinfection failed
 
C:\dfsd.exe=>(CAB Sfx o)=>fvist.com.exe=>(CAB Sfx o)=>neiom.dll
 Deleted
 
C:\dfsd.exe=>(CAB Sfx o)=>fvist.com.exe=>(CAB Sfx o)
 Update failed
 
C:\dfsd.exe=>(CAB Sfx o)=>fvist.com.exe=>(CAB Sfx o)=>NITE.exe
 Infected with: Trojan.Patched.Gen
 
C:\dfsd.exe=>(CAB Sfx o)=>fvist.com.exe=>(CAB Sfx o)=>NITE.exe
 Disinfection failed
 
C:\dfsd.exe=>(CAB Sfx o)=>fvist.com.exe=>(CAB Sfx o)=>NITE.exe
 Deleted
 
C:\dfsd.exe=>(CAB Sfx o)=>fvist.com.exe=>(CAB Sfx o)
 Update failed
 
C:\dfsd.exe=>(CAB Sfx o)=>fvist.com.exe=>(CAB Sfx o)=>psme2.exe
 Detected with: Application.Passview.A
 
C:\dfsd.exe=>(CAB Sfx o)=>fvist.com.exe=>(CAB Sfx o)=>psme2.exe
 Disinfection failed
 
C:\dfsd.exe=>(CAB Sfx o)=>fvist.com.exe=>(CAB Sfx o)=>psme2.exe
 Deleted
 
C:\dfsd.exe=>(CAB Sfx o)=>fvist.com.exe=>(CAB Sfx o)
 Update failed
 
C:\dfsd.exe=>(CAB Sfx o)=>fvist.com.exe=>(CAB Sfx o)=>sohid.com
 Detected with: Application.HideWindow.B
 
C:\dfsd.exe=>(CAB Sfx o)=>fvist.com.exe=>(CAB Sfx o)=>sohid.com
 Disinfection failed
 
C:\dfsd.exe=>(CAB Sfx o)=>fvist.com.exe=>(CAB Sfx o)=>sohid.com
 Deleted
 
C:\dfsd.exe=>(CAB Sfx o)=>fvist.com.exe=>(CAB Sfx o)
 Update failed
 
C:\dfsd.exe=>(CAB Sfx o)=>fvist.com.exe=>(CAB Sfx o)=>xxx-spam.dll
 Infected with: Trojan.Mirc.Flood.BW
 
C:\dfsd.exe=>(CAB Sfx o)=>fvist.com.exe=>(CAB Sfx o)=>xxx-spam.dll
 Disinfection failed
 
C:\dfsd.exe=>(CAB Sfx o)=>fvist.com.exe=>(CAB Sfx o)=>xxx-spam.dll
 Deleted
 
C:\dfsd.exe=>(CAB Sfx o)=>fvist.com.exe=>(CAB Sfx o)
 Update failed
 
C:\dfsd.exe=>(CAB Sfx o)=>fvist.com.exe=>(CAB Sfx o)=>xxxx-inviter.dll
 Infected with: Trojan.Mirc.Flood.AJ
 
C:\dfsd.exe=>(CAB Sfx o)=>fvist.com.exe=>(CAB Sfx o)=>xxxx-inviter.dll
 Disinfection failed
 
C:\dfsd.exe=>(CAB Sfx o)=>fvist.com.exe=>(CAB Sfx o)=>xxxx-inviter.dll
 Deleted
 
C:\dfsd.exe=>(CAB Sfx o)=>fvist.com.exe=>(CAB Sfx o)
 Update failed
 
C:\dfsd.exe=>(CAB Sfx o)=>fvist.com.exe=>(CAB Sfx o)=>ybn1e.dll
 Infected with: Backdoor.IRC.Zapchast.AMK
 
C:\dfsd.exe=>(CAB Sfx o)=>fvist.com.exe=>(CAB Sfx o)=>ybn1e.dll
 Disinfection failed
 
C:\dfsd.exe=>(CAB Sfx o)=>fvist.com.exe=>(CAB Sfx o)=>ybn1e.dll
 Deleted
 
C:\dfsd.exe=>(CAB Sfx o)=>fvist.com.exe=>(CAB Sfx o)
 Update failed
 
C:\dfsd.exe=>(CAB Sfx o)=>fvist.com.exe=>(CAB Sfx o)=>ybn2e.dll
 Infected with: Backdoor.Ircflood.B
 
C:\dfsd.exe=>(CAB Sfx o)=>fvist.com.exe=>(CAB Sfx o)=>ybn2e.dll
 Disinfection failed
 
C:\dfsd.exe=>(CAB Sfx o)=>fvist.com.exe=>(CAB Sfx o)=>ybn2e.dll
 Deleted
 
C:\dfsd.exe=>(CAB Sfx o)=>fvist.com.exe=>(CAB Sfx o)
 Update failed
 
C:\dfsd.exe=>(CAB Sfx o)=>fvist.com.exe=>(CAB Sfx o)=>ybn3e.dll
 Infected with: Trojan.IRC.Flood.AB
 
C:\dfsd.exe=>(CAB Sfx o)=>fvist.com.exe=>(CAB Sfx o)=>ybn3e.dll
 Disinfection failed
 
C:\dfsd.exe=>(CAB Sfx o)=>fvist.com.exe=>(CAB Sfx o)=>ybn3e.dll
 Deleted
 
C:\dfsd.exe=>(CAB Sfx o)=>fvist.com.exe=>(CAB Sfx o)
 Update failed
 
C:\dfsd.exe=>(CAB Sfx o)=>neiom.dll
 Infected with: Trojan.Mirc.Flood.AI
 
C:\dfsd.exe=>(CAB Sfx o)=>neiom.dll
 Disinfection failed
 
C:\dfsd.exe=>(CAB Sfx o)=>neiom.dll
 Deleted
 
C:\dfsd.exe=>(CAB Sfx o)
 Update failed
 
C:\dfsd.exe=>(CAB Sfx o)=>xxx-spam.dll
 Infected with: Trojan.Mirc.Flood.BW
 
C:\dfsd.exe=>(CAB Sfx o)=>xxx-spam.dll
 Disinfection failed
 
C:\dfsd.exe=>(CAB Sfx o)=>xxx-spam.dll
 Deleted
 
C:\dfsd.exe=>(CAB Sfx o)
 Update failed
 
C:\dfsd.exe=>(CAB Sfx o)=>xxxx-inviter.dll
 Infected with: Trojan.Mirc.Flood.AJ
 
C:\dfsd.exe=>(CAB Sfx o)=>xxxx-inviter.dll
 Disinfection failed
 
C:\dfsd.exe=>(CAB Sfx o)=>xxxx-inviter.dll
 Deleted
 
C:\dfsd.exe=>(CAB Sfx o)
 Update failed
 
C:\dfsd.exe=>(CAB Sfx o)=>ybn1e.dll
 Infected with: Backdoor.IRC.Zapchast.AMK
 
C:\dfsd.exe=>(CAB Sfx o)=>ybn1e.dll
 Disinfection failed
 
C:\dfsd.exe=>(CAB Sfx o)=>ybn1e.dll
 Deleted
 
C:\dfsd.exe=>(CAB Sfx o)
 Update failed
 
C:\dfsd.exe=>(CAB Sfx o)=>ybn3e.dll
 Infected with: Trojan.IRC.Flood.AB
 
C:\dfsd.exe=>(CAB Sfx o)=>ybn3e.dll
 Disinfection failed
 
C:\dfsd.exe=>(CAB Sfx o)=>ybn3e.dll
 Deleted
 
C:\dfsd.exe=>(CAB Sfx o)
 Update failed
 
C:\gexa.exe=>(RAR Sfx o)=>cult.exe
 Infected with: Win32.Worm.Rbot.AA
 
C:\gexa.exe=>(RAR Sfx o)=>cult.exe
 Disinfection failed
 
C:\gexa.exe=>(RAR Sfx o)=>cult.exe
 Deleted
 
C:\gexa.exe=>(RAR Sfx o)
 Update failed
 
C:\gexa.exe=>(RAR Sfx o)=>hd.exe
 Detected with: Application.HideWindow.B
 
C:\gexa.exe=>(RAR Sfx o)=>hd.exe
 Disinfection failed
 
C:\gexa.exe=>(RAR Sfx o)=>hd.exe
 Deleted
 
C:\gexa.exe=>(RAR Sfx o)
 Update failed
 
C:\gexa.exe=>(RAR Sfx o)=>kiss.exe
 Infected with: Win32.IRC.Kelebek
 
C:\gexa.exe=>(RAR Sfx o)=>kiss.exe
 Disinfection failed
 
C:\gexa.exe=>(RAR Sfx o)=>kiss.exe
 Deleted
 
C:\gexa.exe=>(RAR Sfx o)
 Update failed
 
C:\gexa.exe=>(RAR Sfx o)=>ksat.bat
 Infected with: Trojan.IRC.Gen
 
C:\gexa.exe=>(RAR Sfx o)=>ksat.bat
 Disinfection failed
 
C:\gexa.exe=>(RAR Sfx o)=>ksat.bat
 Deleted
 
C:\gexa.exe=>(RAR Sfx o)
 Update failed
 
C:\gexa.exe=>(RAR Sfx o)=>lovely.sys
 Infected with: Backdoor.Ircflood.B
 
C:\gexa.exe=>(RAR Sfx o)=>lovely.sys
 Disinfection failed
 
C:\gexa.exe=>(RAR Sfx o)=>lovely.sys
 Deleted
 
C:\gexa.exe=>(RAR Sfx o)
 Update failed
 
C:\gexa.exe=>(RAR Sfx o)=>orrl.exe
 Infected with: Win32.Worm.Rbot.AY
 
C:\gexa.exe=>(RAR Sfx o)=>orrl.exe
 Disinfection failed
 
C:\gexa.exe=>(RAR Sfx o)=>orrl.exe
 Deleted
 
C:\gexa.exe=>(RAR Sfx o)
 Update failed
 
C:\gexa.exe=>(RAR Sfx o)=>pingy.exe
 Infected with: Trojan.Downloader.Small.ZJ
 
C:\gexa.exe=>(RAR Sfx o)=>pingy.exe
 Disinfection failed
 
C:\gexa.exe=>(RAR Sfx o)=>pingy.exe
 Deleted
 
C:\gexa.exe=>(RAR Sfx o)
 Update failed
 
C:\gexa.exe=>(RAR Sfx o)=>ps2m.exe
 Detected with: Application.Passview.A
 
C:\gexa.exe=>(RAR Sfx o)=>ps2m.exe
 Disinfection failed
 
C:\gexa.exe=>(RAR Sfx o)=>ps2m.exe
 Deleted
 
C:\gexa.exe=>(RAR Sfx o)
 Update failed
 
C:\gexa.exe=>(RAR Sfx o)=>repcale.exe
 Infected with: GenPack:Virtool.HiddenRun.B
 
C:\gexa.exe=>(RAR Sfx o)=>repcale.exe
 Disinfection failed
 
C:\gexa.exe=>(RAR Sfx o)=>repcale.exe
 Deleted
 
C:\gexa.exe=>(RAR Sfx o)
 Update failed
 
C:\gexa.exe=>(RAR Sfx o)=>aliases.ini
 Infected with: Backdoor.IRC.Zapchast.JG
 
C:\gexa.exe=>(RAR Sfx o)=>aliases.ini
 Disinfection failed
 
C:\gexa.exe=>(RAR Sfx o)=>aliases.ini
 Deleted
 
C:\gexa.exe=>(RAR Sfx o)
 Update failed
 
C:\gezzxa.exe=>(RAR Sfx o)=>cult.exe
 Infected with: Win32.Worm.Rbot.AA
 
C:\gezzxa.exe=>(RAR Sfx o)=>cult.exe
 Disinfection failed
 
C:\gezzxa.exe=>(RAR Sfx o)=>cult.exe
 Deleted
 
C:\gezzxa.exe=>(RAR Sfx o)
 Update failed
 
C:\gezzxa.exe=>(RAR Sfx o)=>hd.exe
 Detected with: Application.HideWindow.B
 
C:\gezzxa.exe=>(RAR Sfx o)=>hd.exe
 Disinfection failed
 
C:\gezzxa.exe=>(RAR Sfx o)=>hd.exe
 Deleted
 
C:\gezzxa.exe=>(RAR Sfx o)
 Update failed
 
C:\gezzxa.exe=>(RAR Sfx o)=>kiss.exe
 Infected with: Win32.IRC.Kelebek
 
C:\gezzxa.exe=>(RAR Sfx o)=>kiss.exe
 Disinfection failed
 
C:\gezzxa.exe=>(RAR Sfx o)=>kiss.exe
 Deleted
 
C:\gezzxa.exe=>(RAR Sfx o)
 Update failed
 
C:\gezzxa.exe=>(RAR Sfx o)=>ksat.bat
 Infected with: Trojan.IRC.Gen
 
C:\gezzxa.exe=>(RAR Sfx o)=>ksat.bat
 Disinfection failed
 
C:\gezzxa.exe=>(RAR Sfx o)=>ksat.bat
 Deleted
 
C:\gezzxa.exe=>(RAR Sfx o)
 Update failed
 
C:\gezzxa.exe=>(RAR Sfx o)=>lovely.sys
 Infected with: Backdoor.Ircflood.B
 
C:\gezzxa.exe=>(RAR Sfx o)=>lovely.sys
 Disinfection failed
 
C:\gezzxa.exe=>(RAR Sfx o)=>lovely.sys
 Deleted
 
C:\gezzxa.exe=>(RAR Sfx o)
 Update failed
 
C:\gezzxa.exe=>(RAR Sfx o)=>orrl.exe
 Infected with: Win32.Worm.Rbot.AY
 
C:\gezzxa.exe=>(RAR Sfx o)=>orrl.exe
 Disinfection failed
 
C:\gezzxa.exe=>(RAR Sfx o)=>orrl.exe
 Deleted
 
C:\gezzxa.exe=>(RAR Sfx o)
 Update failed
 
C:\gezzxa.exe=>(RAR Sfx o)=>pingy.exe
 Infected with: Trojan.Downloader.Small.ZJ
 
C:\gezzxa.exe=>(RAR Sfx o)=>pingy.exe
 Disinfection failed
 
C:\gezzxa.exe=>(RAR Sfx o)=>pingy.exe
 Deleted
 
C:\gezzxa.exe=>(RAR Sfx o)
 Update failed
 
C:\gezzxa.exe=>(RAR Sfx o)=>ps2m.exe
 Detected with: Application.Passview.A
 
C:\gezzxa.exe=>(RAR Sfx o)=>ps2m.exe
 Disinfection failed
 
C:\gezzxa.exe=>(RAR Sfx o)=>ps2m.exe
 Deleted
 
C:\gezzxa.exe=>(RAR Sfx o)
 Update failed
 
C:\gezzxa.exe=>(RAR Sfx o)=>repcale.exe
 Infected with: GenPack:Virtool.HiddenRun.B
 
C:\gezzxa.exe=>(RAR Sfx o)=>repcale.exe
 Disinfection failed
 
C:\gezzxa.exe=>(RAR Sfx o)=>repcale.exe
 Deleted
 
C:\gezzxa.exe=>(RAR Sfx o)
 Update failed
 
C:\gezzxa.exe=>(RAR Sfx o)=>aliases.ini
 Infected with: Backdoor.IRC.Zapchast.JG
 
C:\gezzxa.exe=>(RAR Sfx o)=>aliases.ini
 Disinfection failed
 
C:\gezzxa.exe=>(RAR Sfx o)=>aliases.ini
 Deleted
 
C:\gezzxa.exe=>(RAR Sfx o)
 Update failed
 
C:\hp\bin\ProcessLogger.exe
 Infected with: DeepScan:Generic.Malware.P!.5F1AEB08
 
C:\hp\bin\ProcessLogger.exe
 Disinfection failed
 
C:\hp\bin\ProcessLogger.exe
 Deleted
 
C:\klertf.exe=>(CAB Sfx o)=>jinso.exe
 Infected with: Win32.IRC.Kelebek
 
C:\klertf.exe=>(CAB Sfx o)=>jinso.exe
 Disinfection failed
 
C:\klertf.exe=>(CAB Sfx o)=>jinso.exe
 Deleted
 
C:\klertf.exe=>(CAB Sfx o)
 Update failed
 
C:\lol1.exe=>(RAR Sfx o)=>Swfwin32.dll
 Infected with: Trojan.Flooder.I
 
C:\lol1.exe=>(RAR Sfx o)=>Swfwin32.dll
 Disinfection failed
 
C:\lol1.exe=>(RAR Sfx o)=>Swfwin32.dll
 Deleted
 
C:\lol1.exe=>(RAR Sfx o)
 Update failed
 
C:\lol1.exe=>(RAR Sfx o)=>window.com
 Infected with: Backdoor.Mirc.580999.A
 
C:\lol1.exe=>(RAR Sfx o)=>window.com
 Disinfection failed
 
C:\lol1.exe=>(RAR Sfx o)=>window.com
 Deleted
 
C:\lol1.exe=>(RAR Sfx o)
 Update failed
 
C:\Program Files\dfrerter\aliases.ini
 Infected with: Backdoor.IRC.Zapchast.JG
 
C:\Program Files\dfrerter\aliases.ini
 Disinfection failed
 
C:\Program Files\dfrerter\aliases.ini
 Deleted
 
C:\Program Files\dfrerter\cult.exe
 Infected with: Win32.Worm.Rbot.AA
 
C:\Program Files\dfrerter\cult.exe
 Disinfection failed
 
C:\Program Files\dfrerter\cult.exe
 Deleted
 
C:\Program Files\dfrerter\hd.exe
 Detected with: Application.HideWindow.B
 
C:\Program Files\dfrerter\hd.exe
 Disinfection failed
 
C:\Program Files\dfrerter\hd.exe
 Deleted
 
C:\Program Files\dfrerter\kiss.exe
 Infected with: Win32.IRC.Kelebek
 
C:\Program Files\dfrerter\kiss.exe
 Disinfection failed
 
C:\Program Files\dfrerter\kiss.exe
 Deleted
 
C:\Program Files\dfrerter\ksat.bat
 Infected with: Trojan.IRC.Gen
 
C:\Program Files\dfrerter\ksat.bat
 Disinfection failed
 
C:\Program Files\dfrerter\ksat.bat
 Deleted
 
C:\Program Files\dfrerter\lovely.sys
 Infected with: Backdoor.Ircflood.B
 
C:\Program Files\dfrerter\lovely.sys
 Disinfection failed
 
C:\Program Files\dfrerter\lovely.sys
 Deleted
 
C:\Program Files\dfrerter\orrl.exe
 Infected with: Win32.Worm.Rbot.AY
 
C:\Program Files\dfrerter\orrl.exe
 Disinfection failed
 
C:\Program Files\dfrerter\orrl.exe
 Deleted
 
C:\Program Files\dfrerter\pingy.exe
 Infected with: Trojan.Downloader.Small.ZJ
 
C:\Program Files\dfrerter\pingy.exe
 Disinfection failed
 
C:\Program Files\dfrerter\pingy.exe
 Deleted
 
C:\Program Files\dfrerter\ps2m.exe
 Detected with: Application.Passview.A
 
C:\Program Files\dfrerter\ps2m.exe
 Disinfection failed
 
C:\Program Files\dfrerter\ps2m.exe
 Deleted
 
C:\Program Files\dfrerterepcale.exe
 Infected with: GenPack:Virtool.HiddenRun.B
 
C:\Program Files\dfrerterepcale.exe
 Disinfection failed
 
C:\Program Files\dfrerterepcale.exe
 Deleted
 
C:\Program Files\killSh\aliases.ini
 Infected with: Backdoor.IRC.Zapchast.JG
 
C:\Program Files\killSh\aliases.ini
 Disinfection failed
 
C:\Program Files\killSh\aliases.ini
 Deleted
 
C:\Program Files\killSh\cult.exe
 Infected with: Win32.Worm.Rbot.AA
 
C:\Program Files\killSh\cult.exe
 Disinfection failed
 
C:\Program Files\killSh\cult.exe
 Deleted
 
C:\Program Files\killSh\ksat.bat
 Infected with: Trojan.IRC.Gen
 
C:\Program Files\killSh\ksat.bat
 Disinfection failed
 
C:\Program Files\killSh\ksat.bat
 Deleted
 
C:\Program Files\killSh\orrl.exe
 Infected with: Win32.Worm.Rbot.AY
 
C:\Program Files\killSh\orrl.exe
 Disinfection failed
 
C:\Program Files\killSh\orrl.exe
 Deleted
 
C:\Program Files\killSh\pingy.exe
 Infected with: Trojan.Downloader.Small.ZJ
 
C:\Program Files\killSh\pingy.exe
 Disinfection failed
 
C:\Program Files\killSh\pingy.exe
 Deleted
 
C:\sdsdfsdf.exe=>(CAB Sfx o)=>cult.exe
 Infected with: Win32.Worm.Rbot.AA
 
C:\sdsdfsdf.exe=>(CAB Sfx o)=>cult.exe
 Disinfection failed
 
C:\sdsdfsdf.exe=>(CAB Sfx o)=>cult.exe
 Deleted
 
C:\sdsdfsdf.exe=>(CAB Sfx o)
 Update failed
 
C:\sdsdfsdf.exe=>(CAB Sfx o)=>l.o.v.e.l.y.x
 Infected with: Backdoor.Ircflood.B
 
C:\sdsdfsdf.exe=>(CAB Sfx o)=>l.o.v.e.l.y.x
 Disinfection failed
 
C:\sdsdfsdf.exe=>(CAB Sfx o)=>l.o.v.e.l.y.x
 Deleted
 
C:\sdsdfsdf.exe=>(CAB Sfx o)
 Update failed
 
C:\sdsdfsdf.exe=>(CAB Sfx o)=>lovely.dll
 Infected with: Trojan.Generic.52576
 
C:\sdsdfsdf.exe=>(CAB Sfx o)=>lovely.dll
 Disinfection failed
 
C:\sdsdfsdf.exe=>(CAB Sfx o)=>lovely.dll
 Deleted
 
C:\sdsdfsdf.exe=>(CAB Sfx o)
 Update failed
 
C:\sdsdfsdf.exe=>(CAB Sfx o)=>ms04.exe
 Infected with: Trojan.Downloader.Small.ZJ
 
C:\sdsdfsdf.exe=>(CAB Sfx o)=>ms04.exe
 Disinfection failed
 
C:\sdsdfsdf.exe=>(CAB Sfx o)=>ms04.exe
 Deleted
 
C:\sdsdfsdf.exe=>(CAB Sfx o)
 Update failed
 
C:\sdsdfsdf.exe=>(CAB Sfx o)=>nass3r.exe
 Detected with: Application.HideWindow.B
 
C:\sdsdfsdf.exe=>(CAB Sfx o)=>nass3r.exe
 Disinfection failed
 
C:\sdsdfsdf.exe=>(CAB Sfx o)=>nass3r.exe
 Deleted
 
C:\sdsdfsdf.exe=>(CAB Sfx o)
 Update failed
 
C:\sdsdfsdf.exe=>(CAB Sfx o)=>orrl.exe
 Infected with: Win32.Worm.Rbot.AY
 
C:\sdsdfsdf.exe=>(CAB Sfx o)=>orrl.exe
 Disinfection failed
 
C:\sdsdfsdf.exe=>(CAB Sfx o)=>orrl.exe
 Deleted
 
C:\sdsdfsdf.exe=>(CAB Sfx o)
 Update failed
 
C:\sdsdfsdf.exe=>(CAB Sfx o)=>ps2m.exe
 Detected with: Application.Passview.A
 
C:\sdsdfsdf.exe=>(CAB Sfx o)=>ps2m.exe
 Disinfection failed
 
C:\sdsdfsdf.exe=>(CAB Sfx o)=>ps2m.exe
 Deleted
 
C:\sdsdfsdf.exe=>(CAB Sfx o)
 Update failed
 
C:\sdsdfsdf.exe=>(CAB Sfx o)=>virgin.exe
 Infected with: Win32.IRC.Kelebek
 
C:\sdsdfsdf.exe=>(CAB Sfx o)=>virgin.exe
 Disinfection failed
 
C:\sdsdfsdf.exe=>(CAB Sfx o)=>virgin.exe
 Deleted
 
C:\sdsdfsdf.exe=>(CAB Sfx o)
 Update failed
 
C:\Sh.exe=>(RAR Sfx o)=>aliases.ini
 Infected with: Backdoor.IRC.Zapchast.JG
 
C:\Sh.exe=>(RAR Sfx o)=>aliases.ini
 Disinfection failed
 
C:\Sh.exe=>(RAR Sfx o)=>aliases.ini
 Deleted
 
C:\Sh.exe=>(RAR Sfx o)
 Update failed
 
C:\Sh.exe=>(RAR Sfx o)=>cult.exe
 Infected with: Win32.Worm.Rbot.AA
 
C:\Sh.exe=>(RAR Sfx o)=>cult.exe
 Disinfection failed
 
C:\Sh.exe=>(RAR Sfx o)=>cult.exe
 Deleted
 
C:\Sh.exe=>(RAR Sfx o)
 Update failed
 
C:\Sh.exe=>(RAR Sfx o)=>hd.exe
 Detected with: Application.HideWindow.B
 
C:\Sh.exe=>(RAR Sfx o)=>hd.exe
 Disinfection failed
 
C:\Sh.exe=>(RAR Sfx o)=>hd.exe
 Deleted
 
C:\Sh.exe=>(RAR Sfx o)
 Update failed
 
C:\Sh.exe=>(RAR Sfx o)=>kiss.exe
 Infected with: Win32.IRC.Kelebek
 
C:\Sh.exe=>(RAR Sfx o)=>kiss.exe
 Disinfection failed
 
C:\Sh.exe=>(RAR Sfx o)=>kiss.exe
 Deleted
 
C:\Sh.exe=>(RAR Sfx o)
 Update failed
 
C:\Sh.exe=>(RAR Sfx o)=>ksat.bat
 Infected with: Trojan.IRC.Gen
 
C:\Sh.exe=>(RAR Sfx o)=>ksat.bat
 Disinfection failed
 
C:\Sh.exe=>(RAR Sfx o)=>ksat.bat
 Deleted
 
C:\Sh.exe=>(RAR Sfx o)
 Update failed
 
C:\Sh.exe=>(RAR Sfx o)=>lovely.sys
 Infected with: Backdoor.Ircflood.B
 
C:\Sh.exe=>(RAR Sfx o)=>lovely.sys
 Disinfection failed
 
C:\Sh.exe=>(RAR Sfx o)=>lovely.sys
 Deleted
 
C:\Sh.exe=>(RAR Sfx o)
 Update failed
 
C:\Sh.exe=>(RAR Sfx o)=>orrl.exe
 Infected with: Win32.Worm.Rbot.AY
 
C:\Sh.exe=>(RAR Sfx o)=>orrl.exe
 Disinfection failed
 
C:\Sh.exe=>(RAR Sfx o)=>orrl.exe
 Deleted
 
C:\Sh.exe=>(RAR Sfx o)
 Update failed
 
C:\Sh.exe=>(RAR Sfx o)=>pingy.exe
 Infected with: Trojan.Downloader.Small.ZJ
 
C:\Sh.exe=>(RAR Sfx o)=>pingy.exe
 Disinfection failed
 
C:\Sh.exe=>(RAR Sfx o)=>pingy.exe
 Deleted
 
C:\Sh.exe=>(RAR Sfx o)
 Update failed
 
C:\Sh.exe=>(RAR Sfx o)=>ps2m.exe
 Detected with: Application.Passview.A
 
C:\Sh.exe=>(RAR Sfx o)=>ps2m.exe
 Disinfection failed
 
C:\Sh.exe=>(RAR Sfx o)=>ps2m.exe
 Deleted
 
C:\Sh.exe=>(RAR Sfx o)
 Update failed
 
C:\Sh.exe=>(RAR Sfx o)=>repcale.exe
 Infected with: GenPack:Virtool.HiddenRun.B
 
C:\Sh.exe=>(RAR Sfx o)=>repcale.exe
 Disinfection failed
 
C:\Sh.exe=>(RAR Sfx o)=>repcale.exe
 Deleted
 
C:\Sh.exe=>(RAR Sfx o)
 Update failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP184\A0098871.exe=>(RAR Sfx o)=>Swfwin32.dll
 Infected with: Trojan.Flooder.I
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP184\A0098871.exe=>(RAR Sfx o)=>Swfwin32.dll
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP184\A0098871.exe=>(RAR Sfx o)=>Swfwin32.dll
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP184\A0098871.exe=>(RAR Sfx o)
 Update failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP184\A0098871.exe=>(RAR Sfx o)=>window.com
 Infected with: Backdoor.Mirc.580999.A
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP184\A0098871.exe=>(RAR Sfx o)=>window.com
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP184\A0098871.exe=>(RAR Sfx o)=>window.com
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP184\A0098871.exe=>(RAR Sfx o)
 Update failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP184\A0098871.exe=>(RAR Sfx o)=>timer.txt
 Infected with: Backdoor.Ircflood.B
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP184\A0098871.exe=>(RAR Sfx o)=>timer.txt
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP184\A0098871.exe=>(RAR Sfx o)=>timer.txt
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP184\A0098871.exe=>(RAR Sfx o)
 Update failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP184\A0098871.exe=>(RAR Sfx o)=>timer2.txt
 Infected with: Backdoor.Ircflood.B
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP184\A0098871.exe=>(RAR Sfx o)=>timer2.txt
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP184\A0098871.exe=>(RAR Sfx o)=>timer2.txt
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP184\A0098871.exe=>(RAR Sfx o)
 Update failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP184\A0098872.exe=>(RAR Sfx o)=>aliases.ini
 Infected with: Backdoor.IRC.Zapchast.JG
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP184\A0098872.exe=>(RAR Sfx o)=>aliases.ini
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP184\A0098872.exe=>(RAR Sfx o)=>aliases.ini
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP184\A0098872.exe=>(RAR Sfx o)
 Update failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP184\A0098872.exe=>(RAR Sfx o)=>cult.exe
 Infected with: Win32.Worm.Rbot.AA
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP184\A0098872.exe=>(RAR Sfx o)=>cult.exe
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP184\A0098872.exe=>(RAR Sfx o)=>cult.exe
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP184\A0098872.exe=>(RAR Sfx o)
 Update failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP184\A0098872.exe=>(RAR Sfx o)=>hd.exe
 Detected with: Application.HideWindow.B
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP184\A0098872.exe=>(RAR Sfx o)=>hd.exe
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP184\A0098872.exe=>(RAR Sfx o)=>hd.exe
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP184\A0098872.exe=>(RAR Sfx o)
 Update failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP184\A0098872.exe=>(RAR Sfx o)=>kiss.exe
 Infected with: Win32.IRC.Kelebek
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP184\A0098872.exe=>(RAR Sfx o)=>kiss.exe
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP184\A0098872.exe=>(RAR Sfx o)=>kiss.exe
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP184\A0098872.exe=>(RAR Sfx o)
 Update failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP184\A0098872.exe=>(RAR Sfx o)=>ksat.bat
 Infected with: Trojan.IRC.Gen
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP184\A0098872.exe=>(RAR Sfx o)=>ksat.bat
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP184\A0098872.exe=>(RAR Sfx o)=>ksat.bat
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP184\A0098872.exe=>(RAR Sfx o)
 Update failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP184\A0098872.exe=>(RAR Sfx o)=>lovely.sys
 Infected with: Backdoor.Ircflood.B
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP184\A0098872.exe=>(RAR Sfx o)=>lovely.sys
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP184\A0098872.exe=>(RAR Sfx o)=>lovely.sys
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP184\A0098872.exe=>(RAR Sfx o)
 Update failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP184\A0098872.exe=>(RAR Sfx o)=>orrl.exe
 Infected with: Win32.Worm.Rbot.AY
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP184\A0098872.exe=>(RAR Sfx o)=>orrl.exe
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP184\A0098872.exe=>(RAR Sfx o)=>orrl.exe
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP184\A0098872.exe=>(RAR Sfx o)
 Update failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP184\A0098872.exe=>(RAR Sfx o)=>pingy.exe
 Infected with: Trojan.Downloader.Small.ZJ
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP184\A0098872.exe=>(RAR Sfx o)=>pingy.exe
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP184\A0098872.exe=>(RAR Sfx o)=>pingy.exe
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP184\A0098872.exe=>(RAR Sfx o)
 Update failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP184\A0098872.exe=>(RAR Sfx o)=>ps2m.exe
 Detected with: Application.Passview.A
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP184\A0098872.exe=>(RAR Sfx o)=>ps2m.exe
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP184\A0098872.exe=>(RAR Sfx o)=>ps2m.exe
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP184\A0098872.exe=>(RAR Sfx o)
 Update failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP184\A0098872.exe=>(RAR Sfx o)=>repcale.exe
 Infected with: GenPack:Virtool.HiddenRun.B
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP184\A0098872.exe=>(RAR Sfx o)=>repcale.exe
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP184\A0098872.exe=>(RAR Sfx o)=>repcale.exe
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP184\A0098872.exe=>(RAR Sfx o)
 Update failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP184\A0099884.sys
 Infected with: Backdoor.Ircflood.B
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP184\A0099884.sys
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP184\A0099884.sys
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP184\A0099885.exe
 Detected with: Application.Passview.A
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP184\A0099885.exe
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP184\A0099885.exe
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP184\A0099886.EXE
 Infected with: GenPack:Virtool.HiddenRun.B
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP184\A0099886.EXE
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP184\A0099886.EXE
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0102932.pif=>(RAR Sfx o)=>aliases.ini
 Infected with: Backdoor.IRC.Zapchast.JG
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0102932.pif=>(RAR Sfx o)=>aliases.ini
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0102932.pif=>(RAR Sfx o)=>aliases.ini
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0102932.pif=>(RAR Sfx o)
 Update failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0102932.pif=>(RAR Sfx o)=>cult.exe
 Infected with: Win32.Worm.Rbot.AA
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0102932.pif=>(RAR Sfx o)=>cult.exe
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0102932.pif=>(RAR Sfx o)=>cult.exe
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0102932.pif=>(RAR Sfx o)
 Update failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0102932.pif=>(RAR Sfx o)=>hd.exe
 Detected with: Application.HideWindow.B
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0102932.pif=>(RAR Sfx o)=>hd.exe
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0102932.pif=>(RAR Sfx o)=>hd.exe
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0102932.pif=>(RAR Sfx o)
 Update failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0102932.pif=>(RAR Sfx o)=>kiss.exe
 Infected with: Win32.IRC.Kelebek
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0102932.pif=>(RAR Sfx o)=>kiss.exe
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0102932.pif=>(RAR Sfx o)=>kiss.exe
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0102932.pif=>(RAR Sfx o)
 Update failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0102932.pif=>(RAR Sfx o)=>ksat.bat
 Infected with: Trojan.IRC.Gen
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0102932.pif=>(RAR Sfx o)=>ksat.bat
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0102932.pif=>(RAR Sfx o)=>ksat.bat
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0102932.pif=>(RAR Sfx o)
 Update failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0102932.pif=>(RAR Sfx o)=>lovely.sys
 Infected with: Backdoor.Ircflood.B
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0102932.pif=>(RAR Sfx o)=>lovely.sys
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0102932.pif=>(RAR Sfx o)=>lovely.sys
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0102932.pif=>(RAR Sfx o)
 Update failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0102932.pif=>(RAR Sfx o)=>orrl.exe
 Infected with: Win32.Worm.Rbot.AY
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0102932.pif=>(RAR Sfx o)=>orrl.exe
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0102932.pif=>(RAR Sfx o)=>orrl.exe
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0102932.pif=>(RAR Sfx o)
 Update failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0102932.pif=>(RAR Sfx o)=>pingy.exe
 Infected with: Trojan.Downloader.Small.ZJ
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0102932.pif=>(RAR Sfx o)=>pingy.exe
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0102932.pif=>(RAR Sfx o)=>pingy.exe
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0102932.pif=>(RAR Sfx o)
 Update failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0102932.pif=>(RAR Sfx o)=>ps2m.exe
 Detected with: Application.Passview.A
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0102932.pif=>(RAR Sfx o)=>ps2m.exe
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0102932.pif=>(RAR Sfx o)=>ps2m.exe
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0102932.pif=>(RAR Sfx o)
 Update failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0102932.pif=>(RAR Sfx o)=>repcale.exe
 Infected with: GenPack:Virtool.HiddenRun.B
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0102932.pif=>(RAR Sfx o)=>repcale.exe
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0102932.pif=>(RAR Sfx o)=>repcale.exe
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0102932.pif=>(RAR Sfx o)
 Update failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0104933.exe
 Infected with: DeepScan:Generic.Malware.P!.5F1AEB08
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0104933.exe
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0104933.exe
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0104935.ini
 Infected with: Backdoor.IRC.Zapchast.JG
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0104935.ini
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0104935.ini
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0104937.exe
 Infected with: Win32.Worm.Rbot.AA
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0104937.exe
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0104937.exe
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0104939.exe
 Detected with: Application.HideWindow.B
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0104939.exe
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0104939.exe
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0104941.exe
 Infected with: Win32.IRC.Kelebek
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0104941.exe
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0104941.exe
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0104943.bat
 Infected with: Trojan.IRC.Gen
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0104943.bat
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0104943.bat
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0104945.sys
 Infected with: Backdoor.Ircflood.B
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0104945.sys
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0104945.sys
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0104947.exe
 Infected with: Win32.Worm.Rbot.AY
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0104947.exe
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0104947.exe
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0104949.exe
 Infected with: Trojan.Downloader.Small.ZJ
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0104949.exe
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0104949.exe
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0104951.exe
 Detected with: Application.Passview.A
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0104951.exe
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0104951.exe
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0104953.exe
 Infected with: GenPack:Virtool.HiddenRun.B
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0104953.exe
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0104953.exe
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0104955.ini
 Infected with: Backdoor.IRC.Zapchast.JG
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0104955.ini
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0104955.ini
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0104957.exe
 Infected with: Win32.Worm.Rbot.AA
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0104957.exe
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0104957.exe
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0104959.bat
 Infected with: Trojan.IRC.Gen
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0104959.bat
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0104959.bat
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0104961.exe
 Infected with: Win32.Worm.Rbot.AY
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0104961.exe
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0104961.exe
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0104963.exe
 Infected with: Trojan.Downloader.Small.ZJ
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0104963.exe
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP185\A0104963.exe
 Deleted
 
C:\WINDOWS\system.1	imer.txt
 Infected with: Backdoor.Ircflood.B
 
C:\WINDOWS\system.1	imer.txt
 Disinfection failed
 
C:\WINDOWS\system.1	imer.txt
 Deleted
 
C:\WINDOWS\system.1	imer2.txt
 Infected with: Backdoor.Ircflood.B
 
C:\WINDOWS\system.1	imer2.txt
 Disinfection failed
 
C:\WINDOWS\system.1	imer2.txt
 Deleted
 
C:\WINDOWS\system.1\window.com
 Infected with: Backdoor.Mirc.580999.A
 
C:\WINDOWS\system.1\window.com
 Disinfection failed
 
C:\WINDOWS\system.1\window.com
 Deleted
 
C:\WINDOWS\SYSTEM32\-r=>(CAB Sfx o)=>th7ya.exe
 Infected with: Win32.IRC.Kelebek
 
C:\WINDOWS\SYSTEM32\-r=>(CAB Sfx o)=>th7ya.exe
 Disinfection failed
 
C:\WINDOWS\SYSTEM32\-r=>(CAB Sfx o)=>th7ya.exe
 Deleted
 
C:\WINDOWS\SYSTEM32\-r=>(CAB Sfx o)
 Update failed
 
C:\WINDOWS\SYSTEM32\antivirusv1.exe=>(CAB Sfx o)=>d4rk.exe
 Infected with: Win32.Parite.B
 
C:\WINDOWS\SYSTEM32\antivirusv1.exe=>(CAB Sfx o)=>d4rk.exe
 Disinfected
 
C:\WINDOWS\SYSTEM32\antivirusv1.exe=>(CAB Sfx o)
 Update failed
 
C:\WINDOWS\SYSTEM32\antivirusv1.exe=>(CAB Sfx o)=>d4rky.exe
 Detected with: Application.HideWindow.B
 
C:\WINDOWS\SYSTEM32\antivirusv1.exe=>(CAB Sfx o)=>d4rky.exe
 Disinfection failed
 
C:\WINDOWS\SYSTEM32\antivirusv1.exe=>(CAB Sfx o)=>d4rky.exe
 Deleted
 
C:\WINDOWS\SYSTEM32\antivirusv1.exe=>(CAB Sfx o)
 Update failed
 
C:\WINDOWS\SYSTEM32\antivirusv1.exe=>(CAB Sfx o)=>d4rky[2]
 Infected with: Backdoor.Ircflood.B
 
C:\WINDOWS\SYSTEM32\antivirusv1.exe=>(CAB Sfx o)=>d4rky[2]
 Disinfection failed
 
C:\WINDOWS\SYSTEM32\antivirusv1.exe=>(CAB Sfx o)=>d4rky[2]
 Deleted
 
C:\WINDOWS\SYSTEM32\antivirusv1.exe=>(CAB Sfx o)
 Update failed
 
C:\WINDOWS\SYSTEM32\antivirusv1.exe=>(CAB Sfx o)=>d4rky[3]
 Infected with: Win32.IRC.Kelebek
 
C:\WINDOWS\SYSTEM32\antivirusv1.exe=>(CAB Sfx o)=>d4rky[3]
 Disinfection failed
 
C:\WINDOWS\SYSTEM32\antivirusv1.exe=>(CAB Sfx o)=>d4rky[3]
 Deleted
 
C:\WINDOWS\SYSTEM32\antivirusv1.exe=>(CAB Sfx o)
 Update failed
 
C:\WINDOWS\SYSTEM32\antivirusv1.exe=>(CAB Sfx o)=>d4rky[4]
 Infected with: Backdoor.Ircflood.B
 
C:\WINDOWS\SYSTEM32\antivirusv1.exe=>(CAB Sfx o)=>d4rky[4]
 Disinfection failed
 
C:\WINDOWS\SYSTEM32\antivirusv1.exe=>(CAB Sfx o)=>d4rky[4]
 Deleted
 
C:\WINDOWS\SYSTEM32\antivirusv1.exe=>(CAB Sfx o)
 Update failed
 
C:\WINDOWS\SYSTEM32\antivirusv1.exe=>(CAB Sfx o)=>d4rky[5]
 Infected with: Backdoor.Ircflood.B
 
C:\WINDOWS\SYSTEM32\antivirusv1.exe=>(CAB Sfx o)=>d4rky[5]
 Disinfection failed
 
C:\WINDOWS\SYSTEM32\antivirusv1.exe=>(CAB Sfx o)=>d4rky[5]
 Deleted
 
C:\WINDOWS\SYSTEM32\antivirusv1.exe=>(CAB Sfx o)
 Update failed
 
C:\WINDOWS\SYSTEM32\antivirusv1.exe=>(CAB Sfx o)=>d4rky[6]
 Infected with: Backdoor.Ircflood.B
 
C:\WINDOWS\SYSTEM32\antivirusv1.exe=>(CAB Sfx o)=>d4rky[6]
 Disinfection failed
 
C:\WINDOWS\SYSTEM32\antivirusv1.exe=>(CAB Sfx o)=>d4rky[6]
 Deleted
 
C:\WINDOWS\SYSTEM32\antivirusv1.exe=>(CAB Sfx o)
 Update failed
 
C:\WINDOWS\SYSTEM32\antivirusv1.exe=>(CAB Sfx o)=>d4rky[7]
 Infected with: Backdoor.Ircflood.B
 
C:\WINDOWS\SYSTEM32\antivirusv1.exe=>(CAB Sfx o)=>d4rky[7]
 Disinfection failed
 
C:\WINDOWS\SYSTEM32\antivirusv1.exe=>(CAB Sfx o)=>d4rky[7]
 Deleted
 
C:\WINDOWS\SYSTEM32\antivirusv1.exe=>(CAB Sfx o)
 Update failed
 
C:\WINDOWS\SYSTEM32\cg.pif=>(RAR Sfx o)=>aliases.ini
 Infected with: Backdoor.IRC.Zapchast.JG
 
C:\WINDOWS\SYSTEM32\cg.pif=>(RAR Sfx o)=>aliases.ini
 Disinfection failed
 
C:\WINDOWS\SYSTEM32\cg.pif=>(RAR Sfx o)=>aliases.ini
 Deleted
 
C:\WINDOWS\SYSTEM32\cg.pif=>(RAR Sfx o)
 Update failed
 
C:\WINDOWS\SYSTEM32\cg.pif=>(RAR Sfx o)=>cult.exe
 Infected with: Win32.Worm.Rbot.AA
 
C:\WINDOWS\SYSTEM32\cg.pif=>(RAR Sfx o)=>cult.exe
 Disinfection failed
 
C:\WINDOWS\SYSTEM32\cg.pif=>(RAR Sfx o)=>cult.exe
 Deleted
 
C:\WINDOWS\SYSTEM32\cg.pif=>(RAR Sfx o)
 Update failed
 
C:\WINDOWS\SYSTEM32\cg.pif=>(RAR Sfx o)=>hd.exe
 Detected with: Application.HideWindow.B
 
C:\WINDOWS\SYSTEM32\cg.pif=>(RAR Sfx o)=>hd.exe
 Disinfection failed
 
C:\WINDOWS\SYSTEM32\cg.pif=>(RAR Sfx o)=>hd.exe
 Deleted
 
C:\WINDOWS\SYSTEM32\cg.pif=>(RAR Sfx o)
 Update failed
 
C:\WINDOWS\SYSTEM32\cg.pif=>(RAR Sfx o)=>kiss.exe
 Infected with: Win32.IRC.Kelebek
 
C:\WINDOWS\SYSTEM32\cg.pif=>(RAR Sfx o)=>kiss.exe
 Disinfection failed
 
C:\WINDOWS\SYSTEM32\cg.pif=>(RAR Sfx o)=>kiss.exe
 Deleted
 
C:\WINDOWS\SYSTEM32\cg.pif=>(RAR Sfx o)
 Update failed
 
C:\WINDOWS\SYSTEM32\cg.pif=>(RAR Sfx o)=>ksat.bat
 Infected with: Trojan.IRC.Gen
 
C:\WINDOWS\SYSTEM32\cg.pif=>(RAR Sfx o)=>ksat.bat
 Disinfection failed
 
C:\WINDOWS\SYSTEM32\cg.pif=>(RAR Sfx o)=>ksat.bat
 Deleted
 
C:\WINDOWS\SYSTEM32\cg.pif=>(RAR Sfx o)
 Update failed
 
C:\WINDOWS\SYSTEM32\cg.pif=>(RAR Sfx o)=>lovely.sys
 Infected with: Backdoor.Ircflood.B
 
C:\WINDOWS\SYSTEM32\cg.pif=>(RAR Sfx o)=>lovely.sys
 Disinfection failed
 
C:\WINDOWS\SYSTEM32\cg.pif=>(RAR Sfx o)=>lovely.sys
 Deleted
 
C:\WINDOWS\SYSTEM32\cg.pif=>(RAR Sfx o)
 Update failed
 
C:\WINDOWS\SYSTEM32\cg.pif=>(RAR Sfx o)=>orrl.exe
 Infected with: Win32.Worm.Rbot.AY
 
C:\WINDOWS\SYSTEM32\cg.pif=>(RAR Sfx o)=>orrl.exe
 Disinfection failed
 
C:\WINDOWS\SYSTEM32\cg.pif=>(RAR Sfx o)=>orrl.exe
 Deleted
 
C:\WINDOWS\SYSTEM32\cg.pif=>(RAR Sfx o)
 Update failed
 
C:\WINDOWS\SYSTEM32\cg.pif=>(RAR Sfx o)=>pingy.exe
 Infected with: Trojan.Downloader.Small.ZJ
 
C:\WINDOWS\SYSTEM32\cg.pif=>(RAR Sfx o)=>pingy.exe
 Disinfection failed
 
C:\WINDOWS\SYSTEM32\cg.pif=>(RAR Sfx o)=>pingy.exe
 Deleted
 
C:\WINDOWS\SYSTEM32\cg.pif=>(RAR Sfx o)
 Update failed
 
C:\WINDOWS\SYSTEM32\cg.pif=>(RAR Sfx o)=>ps2m.exe
 Detected with: Application.Passview.A
 
C:\WINDOWS\SYSTEM32\cg.pif=>(RAR Sfx o)=>ps2m.exe
 Disinfection failed
 
C:\WINDOWS\SYSTEM32\cg.pif=>(RAR Sfx o)=>ps2m.exe
 Deleted
 
C:\WINDOWS\SYSTEM32\cg.pif=>(RAR Sfx o)
 Update failed
 
C:\WINDOWS\SYSTEM32\cg.pif=>(RAR Sfx o)=>repcale.exe
 Infected with: GenPack:Virtool.HiddenRun.B
 
C:\WINDOWS\SYSTEM32\cg.pif=>(RAR Sfx o)=>repcale.exe
 Disinfection failed
 
C:\WINDOWS\SYSTEM32\cg.pif=>(RAR Sfx o)=>repcale.exe
 Deleted
 
C:\WINDOWS\SYSTEM32\cg.pif=>(RAR Sfx o)
 Update failed
 
C:\WINDOWS\SYSTEM32\darkworlk.exe=>(CAB Sfx o)=>d4rk.exe
 Infected with: Win32.Parite.B
 
C:\WINDOWS\SYSTEM32\darkworlk.exe=>(CAB Sfx o)=>d4rk.exe
 Disinfected
 
C:\WINDOWS\SYSTEM32\darkworlk.exe=>(CAB Sfx o)
 Update failed
 
C:\WINDOWS\SYSTEM32\darkworlk.exe=>(CAB Sfx o)=>d4rky.exe
 Detected with: Application.HideWindow.B
 
C:\WINDOWS\SYSTEM32\darkworlk.exe=>(CAB Sfx o)=>d4rky.exe
 Disinfection failed
 
C:\WINDOWS\SYSTEM32\darkworlk.exe=>(CAB Sfx o)=>d4rky.exe
 Deleted
 
C:\WINDOWS\SYSTEM32\darkworlk.exe=>(CAB Sfx o)
 Update failed
 
C:\WINDOWS\SYSTEM32\darkworlk.exe=>(CAB Sfx o)=>d4rky[2]
 Infected with: Backdoor.Ircflood.B
 
C:\WINDOWS\SYSTEM32\darkworlk.exe=>(CAB Sfx o)=>d4rky[2]
 Disinfection failed
 
C:\WINDOWS\SYSTEM32\darkworlk.exe=>(CAB Sfx o)=>d4rky[2]
 Deleted
 
C:\WINDOWS\SYSTEM32\darkworlk.exe=>(CAB Sfx o)
 Update failed
 
C:\WINDOWS\SYSTEM32\darkworlk.exe=>(CAB Sfx o)=>d4rky[3]
 Infected with: Win32.IRC.Kelebek
 
C:\WINDOWS\SYSTEM32\darkworlk.exe=>(CAB Sfx o)=>d4rky[3]
 Disinfection failed
 
C:\WINDOWS\SYSTEM32\darkworlk.exe=>(CAB Sfx o)=>d4rky[3]
 Deleted
 
C:\WINDOWS\SYSTEM32\darkworlk.exe=>(CAB Sfx o)
 Update failed
 
C:\WINDOWS\SYSTEM32\darkworlk.exe=>(CAB Sfx o)=>d4rky[4]
 Infected with: Backdoor.Ircflood.B
 
C:\WINDOWS\SYSTEM32\darkworlk.exe=>(CAB Sfx o)=>d4rky[4]
 Disinfection failed
 
C:\WINDOWS\SYSTEM32\darkworlk.exe=>(CAB Sfx o)=>d4rky[4]
 Deleted
 
C:\WINDOWS\SYSTEM32\darkworlk.exe=>(CAB Sfx o)
 Update failed
 
C:\WINDOWS\SYSTEM32\darkworlk.exe=>(CAB Sfx o)=>d4rky[5]
 Infected with: Backdoor.Ircflood.B
 
C:\WINDOWS\SYSTEM32\darkworlk.exe=>(CAB Sfx o)=>d4rky[5]
 Disinfection failed
 
C:\WINDOWS\SYSTEM32\darkworlk.exe=>(CAB Sfx o)=>d4rky[5]
 Deleted
 
C:\WINDOWS\SYSTEM32\darkworlk.exe=>(CAB Sfx o)
 Update failed
 
C:\WINDOWS\SYSTEM32\darkworlk.exe=>(CAB Sfx o)=>d4rky[6]
 Infected with: Backdoor.Ircflood.B
 
C:\WINDOWS\SYSTEM32\darkworlk.exe=>(CAB Sfx o)=>d4rky[6]
 Disinfection failed
 
C:\WINDOWS\SYSTEM32\darkworlk.exe=>(CAB Sfx o)=>d4rky[6]
 Deleted
 
C:\WINDOWS\SYSTEM32\darkworlk.exe=>(CAB Sfx o)
 Update failed
 
C:\WINDOWS\SYSTEM32\darkworlk.exe=>(CAB Sfx o)=>d4rky[7]
 Infected with: Backdoor.Ircflood.B
 
C:\WINDOWS\SYSTEM32\darkworlk.exe=>(CAB Sfx o)=>d4rky[7]
 Disinfection failed
 
C:\WINDOWS\SYSTEM32\darkworlk.exe=>(CAB Sfx o)=>d4rky[7]
 Deleted
 
C:\WINDOWS\SYSTEM32\darkworlk.exe=>(CAB Sfx o)
 Update failed
 
C:\WINDOWS\SYSTEM32\dfgsdfcxvxs.exe=>(RAR Sfx o)=>orrl.exe
 Infected with: Win32.Worm.Rbot.AY
 
C:\WINDOWS\SYSTEM32\dfgsdfcxvxs.exe=>(RAR Sfx o)=>orrl.exe
 Disinfection failed
 
C:\WINDOWS\SYSTEM32\dfgsdfcxvxs.exe=>(RAR Sfx o)=>orrl.exe
 Deleted
 
C:\WINDOWS\SYSTEM32\dfgsdfcxvxs.exe=>(RAR Sfx o)
 Update failed
 
C:\WINDOWS\SYSTEM32\dfgsdfcxvxs.exe=>(RAR Sfx o)=>pingy.exe
 Infected with: Trojan.Downloader.Small.ZJ
 
C:\WINDOWS\SYSTEM32\dfgsdfcxvxs.exe=>(RAR Sfx o)=>pingy.exe
 Disinfection failed
 
C:\WINDOWS\SYSTEM32\dfgsdfcxvxs.exe=>(RAR Sfx o)=>pingy.exe
 Deleted
 
C:\WINDOWS\SYSTEM32\dfgsdfcxvxs.exe=>(RAR Sfx o)
 Update failed
 
C:\WINDOWS\SYSTEM32\dfgsdfcxvxs.exe=>(RAR Sfx o)=>ps2m.exe
 Detected with: Application.Passview.A
 
C:\WINDOWS\SYSTEM32\dfgsdfcxvxs.exe=>(RAR Sfx o)=>ps2m.exe
 Disinfection failed
 
C:\WINDOWS\SYSTEM32\dfgsdfcxvxs.exe=>(RAR Sfx o)=>ps2m.exe
 Deleted
 
C:\WINDOWS\SYSTEM32\dfgsdfcxvxs.exe=>(RAR Sfx o)
 Update failed
 
C:\WINDOWS\SYSTEM32\dfgsdfcxvxs.exe=>(RAR Sfx o)=>repcale.exe
 Infected with: GenPack:Virtool.HiddenRun.B
 
C:\WINDOWS\SYSTEM32\dfgsdfcxvxs.exe=>(RAR Sfx o)=>repcale.exe
 Disinfection failed
 
C:\WINDOWS\SYSTEM32\dfgsdfcxvxs.exe=>(RAR Sfx o)=>repcale.exe
 Deleted
 
C:\WINDOWS\SYSTEM32\dfgsdfcxvxs.exe=>(RAR Sfx o)
 Update failed
 
C:\WINDOWS\SYSTEM32\dfgsdfcxvxs.exe=>(RAR Sfx o)=>aliases.ini
 Infected with: Backdoor.IRC.Zapchast.JG
 
C:\WINDOWS\SYSTEM32\dfgsdfcxvxs.exe=>(RAR Sfx o)=>aliases.ini
 Disinfection failed
 
C:\WINDOWS\SYSTEM32\dfgsdfcxvxs.exe=>(RAR Sfx o)=>aliases.ini
 Deleted
 
C:\WINDOWS\SYSTEM32\dfgsdfcxvxs.exe=>(RAR Sfx o)

Lyonnais92 · Answer

Bonsoir,

puis je avoir le rapport de SuspectFiles (post 44) ? Merci.

scoubidou78 · Answer

ok

Lyonnais92 · Answer

Bonjour

quelles nouvelles ?

scoubidou78 · Answer

bonjour,

je tout reformate au faite.

Je t envoi mon rapport hijackthis

a plus

scoubidou78 · Answer

le voici

qu en penses tu?

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:09:52, on 24/12/2007
Platform: Windows XP  (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\Explorer.EXE
C:\windows\system\hpsysdrv.exe
C:\HP\KBD\KBD.EXE
C:\WINDOWS\System32\hkcmd.exe
C:\WINDOWS\System32\pctspk.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\hp center\137903\Program\BackWeb-137903.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\WINDOWS\System32
vsvc32.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://srch-fr3.hpwis.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://srch-fr3.hpwis.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://neufportail.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.hpe.com/h41271/404D.aspx?cc=us&ll=en&url=http://domainredirects.ext.hpe.com/fr3.hpwis.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://srch-fr3.hpwis.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://srch-fr3.hpwis.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://srch-fr3.hpwis.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.hpe.com/h41271/404D.aspx?cc=us&ll=en&url=http://domainredirects.ext.hpe.com/fr3.hpwis.com/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE NvQTwk,NvCplDaemon initialize
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
O4 - HKLM\..\Run: [Microsoft Works Portfolio] C:\Program Files\Microsoft Works\WksSb.exe /AllUsers
O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Microsoft Works\WkDetect.exe
O4 - HKLM\..\Run: [PCTVOICE] pctspk.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: hp center.lnk = C:\Program Files\hp center\137903\Program\BackWeb-137903.exe
O9 - Extra button: Organise-notes - {9455301C-CF6B-11D3-A266-00C04F689C50} - C:\Program Files\Fichiers communs\Microsoft Shared\Reference 2001\EROProj.dll
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\webelated.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\webelated.htm
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/...
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/...
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32
vsvc32.exe
O23 - Service: Sunbelt Personal Firewall 4 (SPF4) - Sunbelt Software - C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe

Lyonnais92 · Answer

Bonjour,

l'urgent est de mettre à jour Windows :

démarrer, aide et support, maintenez votre ordinateur à jour avec Windows update.

Ne prends que les mises à jour essentielles;

à la fin, tu dois avoir le SP2 d'installé

scoubidou78 · Answer

RE,

j ai deja fait les mises a jour de windows normalement?

c est obliger d installer le sp2 meme s il me reste que 31.75 mo de memoire physique?


MERCI DE TON AIDE ENCORE UNE FOIS DE PLUS

Lyonnais92 · Answer

Re,

ton ordi est etrêmement vulnérable sans le SP2.

Installer le SP2 ne change pasn la mémoire mais occupe de l'espace sur le disque dur.

scoubidou78 · Answer

voila j ai telecharger le sp2 

tu vois des virus ou autres dans mon hijackthis stp???

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:38:04, on 24/12/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\fxssvc.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\windows\system\hpsysdrv.exe
C:\HP\KBD\KBD.EXE
C:\WINDOWS\System32\hkcmd.exe
C:\WINDOWS\system32\pctspk.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\hp center\137903\Program\BackWeb-137903.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://srch-fr3.hpwis.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://srch-fr3.hpwis.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://neufportail.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.hpe.com/h41271/404D.aspx?cc=us&ll=en&url=http://domainredirects.ext.hpe.com/fr3.hpwis.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://srch-fr3.hpwis.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://srch-fr3.hpwis.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://srch-fr3.hpwis.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.hpe.com/h41271/404D.aspx?cc=us&ll=en&url=http://domainredirects.ext.hpe.com/fr3.hpwis.com/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
O4 - HKLM\..\Run: [Microsoft Works Portfolio] C:\Program Files\Microsoft Works\WksSb.exe /AllUsers
O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Microsoft Works\WkDetect.exe
O4 - HKLM\..\Run: [PCTVOICE] pctspk.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: hp center.lnk = C:\Program Files\hp center\137903\Program\BackWeb-137903.exe
O9 - Extra button: Organise-notes - {9455301C-CF6B-11D3-A266-00C04F689C50} - C:\Program Files\Fichiers communs\Microsoft Shared\Reference 2001\EROProj.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/...
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/...
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Sunbelt Personal Firewall 4 (SPF4) - Sunbelt Software - C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe

Lyonnais92 · Answer

Re,

le seul truc un peu douteux est  
	
O4 - Global Startup: hp center.lnk = C:\Program Files\hp center\137903\Program\BackWeb-137903.exe

AVG est une version payante ?

Fais un scan minutieux avec Avast et avec AVG. Publie les rapports dans ta réponse.

scoubidou78 · Answer

Re,

ok je vais faire un scan

pour avg j ai la version gratuite et pour avast aussi .

justement j ai installer hier soir le pare feu kerio et tout a l heure lorsque j ai telecharger le sp2 il y a eu une fenetre qui m avait demender si je devais bloquer le pare feu et sa parlait aussi de backweb...

normalement si j ai installer le pare feu kerio celui de windows sp2 ne devrait pas marcher comment le savoir?
merci de ton aide je suis trop nul ..

au faite je te souhaite de bonnes fetes de fin d année

merci bocoup de ton aide

Lyonnais92 · Answer

Bonjour,

bonnes fêtes à toi aussi.

Pour le parefeu Windows :

démarrer, panneau de configuration, parefeu Windows et tu auras la réponse.

La garde résidente de AVG antispy ne va pas durer.

 

@+
N'acceptez jamais une désinfection par mp.

scoubidou78 · Answer

ok

Lyonnais92 · Answer

Bonjour,

tout est OK ?

scoubidou78 · Answer

bonjour lyonnais92,

Apparemment jai encore des virus

---------------------------------------------------------
AVG Anti-Spyware - Rapport d'analyse
---------------------------------------------------------

 + Créé à:	20:50:14 25/12/2007

 + Résultat de l'analyse:	



C:\WINDOWS\SYSTEM32\d4rky[x] -> Backdoor.Flood : Nettoyé.
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP3\A0000313.exe/colfld.dll -> Backdoor.Mox.a : Nettoyé.
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP3\A0000314.exe/colfld.dll -> Backdoor.Mox.a : Nettoyé.
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP3\A0000315.exe/colfld.dll -> Backdoor.Mox.a : Nettoyé.
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP3\A0000316.exe/colfld.dll -> Backdoor.Mox.a : Nettoyé.
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP3\A0000317.exe/colfld.dll -> Backdoor.Mox.a : Nettoyé.
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP3\A0000318.exe -> Backdoor.Rbot.ebp : Nettoyé.
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP4\A0000335.exe -> Backdoor.Rbot.ebp : Nettoyé.
C:\WINDOWS\SYSTEM32\SADASDA.exe -> Backdoor.Rbot.eix : Nettoyé.
C:\WINDOWS\SYSTEM32\Gothic.exe -> Backdoor.Rbot.esx : Nettoyé.
C:\WINDOWS\system.1	imer.txt -> Backdoor.Sliv.a : Nettoyé.
C:\WINDOWS\ime\bear.txt -> Backdoor.Small.i : Nettoyé.
C:\Program Files\killSh\aliases.ini -> Backdoor.Zapchast : Nettoyé.
C:\Sh.exe/aliases.ini -> Backdoor.Zapchast : Nettoyé.
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP2\A0000172.pif/aliases.ini -> Backdoor.Zapchast : Nettoyé.
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP36\A0002144.EXE/aliases.ini -> Backdoor.Zapchast : Nettoyé.
C:\WINDOWS\SYSTEM32\Sh.exe/aliases.ini -> Backdoor.Zapchast : Nettoyé.
C:\WINDOWS\SYSTEM32\cg.pif/aliases.ini -> Backdoor.Zapchast : Nettoyé.
C:\WINDOWS\SYSTEM32\guygay.exe/aliases.ini -> Backdoor.Zapchast : Nettoyé.
C:\WINDOWS\SYSTEM32\sex.exe/aliases.ini -> Backdoor.Zapchast : Nettoyé.
C:\WINDOWS\SYSTEM32	estooo.exe/aliases.ini -> Backdoor.Zapchast : Nettoyé.
C:\WINDOWS\system.1	imer2.txt -> Backdoor.Zapchast : Nettoyé.
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP3\A0000313.exe/cl.dll -> Dropper.LowJones : Nettoyé.
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP3\A0000314.exe/cl.dll -> Dropper.LowJones : Nettoyé.
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP3\A0000315.exe/cl.dll -> Dropper.LowJones : Nettoyé.
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP3\A0000316.exe/cl.dll -> Dropper.LowJones : Nettoyé.
C:\Documents and Settings\Default User\Cookies\propriétaire@2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.
C:\Documents and Settings\Propriétaire\Cookies\propriétaire@aolfr.122.2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.
C:\WINDOWS\SYSTEM32\config\systemprofile\Cookies\propriétaire@2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.
C:\Documents and Settings\Propriétaire\Cookies\propriétaire@adtech[1].txt -> TrackingCookie.Adtech : Nettoyé.
C:\Documents and Settings\Default User\Cookies\propriétaire@advertising[1].txt -> TrackingCookie.Advertising : Nettoyé.
C:\Documents and Settings\Propriétaire\Cookies\propriétaire@advertising[2].txt -> TrackingCookie.Advertising : Nettoyé.
C:\WINDOWS\SYSTEM32\config\systemprofile\Cookies\propriétaire@advertising[1].txt -> TrackingCookie.Advertising : Nettoyé.
C:\Documents and Settings\Default User\Cookies\propriétaire@atdmt[2].txt -> TrackingCookie.Atdmt : Nettoyé.
C:\WINDOWS\SYSTEM32\config\systemprofile\Cookies\propriétaire@atdmt[2].txt -> TrackingCookie.Atdmt : Nettoyé.
C:\Documents and Settings\Default User\Cookies\propriétaire@bluestreak[1].txt -> TrackingCookie.Bluestreak : Nettoyé.
C:\Documents and Settings\Propriétaire\Cookies\propriétaire@bluestreak[2].txt -> TrackingCookie.Bluestreak : Nettoyé.
C:\WINDOWS\SYSTEM32\config\systemprofile\Cookies\propriétaire@bluestreak[1].txt -> TrackingCookie.Bluestreak : Nettoyé.
C:\Documents and Settings\Default User\Cookies\propriétaire@doubleclick[1].txt -> TrackingCookie.Doubleclick : Nettoyé.
C:\Documents and Settings\Propriétaire\Cookies\propriétaire@doubleclick[1].txt -> TrackingCookie.Doubleclick : Nettoyé.
C:\WINDOWS\SYSTEM32\config\systemprofile\Cookies\propriétaire@doubleclick[1].txt -> TrackingCookie.Doubleclick : Nettoyé.
C:\Documents and Settings\Propriétaire\Cookies\propriétaire@estat[1].txt -> TrackingCookie.Estat : Nettoyé.
C:\Documents and Settings\Default User\Cookies\propriétaire@mediaplex[1].txt -> TrackingCookie.Mediaplex : Nettoyé.
C:\Documents and Settings\Propriétaire\Cookies\propriétaire@mediaplex[1].txt -> TrackingCookie.Mediaplex : Nettoyé.
C:\WINDOWS\SYSTEM32\config\systemprofile\Cookies\propriétaire@mediaplex[1].txt -> TrackingCookie.Mediaplex : Nettoyé.
C:\Documents and Settings\Default User\Cookies\propriétaire@ssl-hints.netflame[2].txt -> TrackingCookie.Netflame : Nettoyé.
C:\WINDOWS\SYSTEM32\config\systemprofile\Cookies\propriétaire@ssl-hints.netflame[2].txt -> TrackingCookie.Netflame : Nettoyé.
C:\Documents and Settings\Default User\Cookies\propriétaire@ads.planetactive[1].txt -> TrackingCookie.Planetactive : Nettoyé.
C:\WINDOWS\SYSTEM32\config\systemprofile\Cookies\propriétaire@ads.planetactive[1].txt -> TrackingCookie.Planetactive : Nettoyé.
C:\Documents and Settings\Default User\Cookies\propriétaire@smartadserver[2].txt -> TrackingCookie.Smartadserver : Nettoyé.
C:\Documents and Settings\Propriétaire\Cookies\propriétaire@smartadserver[2].txt -> TrackingCookie.Smartadserver : Nettoyé.
C:\WINDOWS\SYSTEM32\config\systemprofile\Cookies\propriétaire@smartadserver[2].txt -> TrackingCookie.Smartadserver : Nettoyé.
C:\Documents and Settings\Propriétaire\Cookies\propriétaire@tradedoubler[1].txt -> TrackingCookie.Tradedoubler : Nettoyé.
C:\Documents and Settings\Default User\Cookies\propriétaire@weborama[2].txt -> TrackingCookie.Weborama : Nettoyé.
C:\Documents and Settings\Propriétaire\Cookies\propriétaire@weborama[1].txt -> TrackingCookie.Weborama : Nettoyé.
C:\WINDOWS\SYSTEM32\config\systemprofile\Cookies\propriétaire@weborama[2].txt -> TrackingCookie.Weborama : Nettoyé.
C:\Documents and Settings\Propriétaire\Cookies\propriétaire@m.webtrends[2].txt -> TrackingCookie.Webtrends : Nettoyé.
C:\WINDOWS\SYSTEM32
dafs\v1rg1n -> Trojan.Cloner.ba : Nettoyé.
C:\WINDOWS\system.1\Swfwin32.dll -> Trojan.Flood : Nettoyé.
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP3\A0000310.bat -> Trojan.Small : Nettoyé.
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP3\A0000311.pif/ksat.bat -> Trojan.Small : Nettoyé.
C:\WINDOWS\SYSTEM32\kuki.bat -> Trojan.Starter.o : Nettoyé.
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP3\A0000312.dll -> Worm.Randon.ao : Nettoyé.
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP3\A0000313.exe/cnick.dll -> Worm.Randon.ao : Nettoyé.
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP3\A0000314.exe/cnick.dll -> Worm.Randon.ao : Nettoyé.
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP3\A0000315.exe/cnick.dll -> Worm.Randon.ao : Nettoyé.
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP3\A0000316.exe/cnick.dll -> Worm.Randon.ao : Nettoyé.
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP3\A0000317.exe/cnick.dll -> Worm.Randon.ao : Nettoyé.


Fin du rapport


je tenvoi le scan avast que j ai fait mercredi
a plus tard

Lyonnais92 · Answer

Bonjour,

après le rapport de avast, remets un rapport Hijackthis.

c'est quand même incroyable, tu surfes sur quel type de sites ?

scoubidou78 · Answer

bonjour,

je vais dans les sites du genre doctissimo je regarde des films en ligne en streaming...
mon fils va beaucoup dans les sites de jeux ( tfou, habbo,msn,jeux.fr...

mais pas de sites pornos !

que dois je faire sa me soule mon micro recommence a ralentir

dois je les supprimer ou les mettre en quarantaine??? 

voici le rapport avast


26/12/2007 00:16:57	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\yes.exe\Swfwin32.dll" file.  
26/12/2007 00:15:23	Propriétaire	3000	Sign of "Win32:Generic-W [Wrm]" has been found in "C:\WINDOWS\SYSTEM32\Sxfgfd.exe\lovely.sys" file.  
26/12/2007 00:15:23	Propriétaire	3000	Sign of "Win32:HideWindows-B [Tool]" has been found in "C:\WINDOWS\SYSTEM32\Sxfgfd.exe\repcale.exe\[MoleBox]" file.  
26/12/2007 00:15:23	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\WINDOWS\SYSTEM32\Sxfgfd.exe\repcale.exe\[Embedded#0f338]" file.  
26/12/2007 00:15:23	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\WINDOWS\SYSTEM32\Sxfgfd.exe\kiss.exe" file.  
26/12/2007 00:15:23	Propriétaire	3000	Sign of "Win32:Generic-V [Wrm]" has been found in "C:\WINDOWS\SYSTEM32\Sxfgfd.exe\aliases.ini" file.  
26/12/2007 00:15:23	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\WINDOWS\SYSTEM32\Sxfgfd.exe\orrl.exe\[Embedded#13738]" file.  
26/12/2007 00:15:23	Propriétaire	3000	Sign of "Win32:Adware-gen [Adw]" has been found in "C:\WINDOWS\SYSTEM32\Sxfgfd.exe\ps2m.exe" file.  
26/12/2007 00:15:23	Propriétaire	3000	Sign of "Win32:HideWindows-I [Tool]" has been found in "C:\WINDOWS\SYSTEM32\Sxfgfd.exe\repcale.exe" file.  
26/12/2007 00:15:21	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\WINDOWS\SYSTEM32\Sxfgfd.exe\cult.exe\[Embedded#10d38]" file.  
26/12/2007 00:15:21	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\WINDOWS\SYSTEM32\Sxfgfd.exe\hd.exe" file.  
26/12/2007 00:15:18	Propriétaire	3000	Sign of "Win32:Generic-W [Wrm]" has been found in "C:\WINDOWS\SYSTEM32\Sx.exe\lovely.sys" file.  
26/12/2007 00:15:18	Propriétaire	3000	Sign of "Win32:Adware-gen [Adw]" has been found in "C:\WINDOWS\SYSTEM32\Sx.exe\ps2m.exe" file.  
26/12/2007 00:15:18	Propriétaire	3000	Sign of "Win32:HideWindows-B [Tool]" has been found in "C:\WINDOWS\SYSTEM32\Sx.exe\repcale.exe\[MoleBox]" file.  
26/12/2007 00:15:18	Propriétaire	3000	Sign of "Win32:HideWindows-I [Tool]" has been found in "C:\WINDOWS\SYSTEM32\Sx.exe\repcale.exe" file.  
26/12/2007 00:15:18	Propriétaire	3000	Sign of "Win32:Generic-V [Wrm]" has been found in "C:\WINDOWS\SYSTEM32\Sx.exe\aliases.ini" file.  
26/12/2007 00:15:18	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\WINDOWS\SYSTEM32\Sx.exe\kiss.exe" file.  
26/12/2007 00:15:18	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\WINDOWS\SYSTEM32\Sx.exe\orrl.exe\[Embedded#13738]" file.  
26/12/2007 00:15:18	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\WINDOWS\SYSTEM32\Sx.exe\repcale.exe\[Embedded#0f338]" file.  
26/12/2007 00:15:16	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\WINDOWS\SYSTEM32\Sx.exe\cult.exe\[Embedded#10d38]" file.  
26/12/2007 00:15:16	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\WINDOWS\SYSTEM32\Sx.exe\hd.exe" file.  
26/12/2007 00:11:00	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\WINDOWS\SYSTEM32\eg.exe\repcale.exe\[Embedded#0f338]" file.  
26/12/2007 00:11:00	Propriétaire	3000	Sign of "Win32:Generic-V [Wrm]" has been found in "C:\WINDOWS\SYSTEM32\eg.exe\aliases.ini" file.  
26/12/2007 00:11:00	Propriétaire	3000	Sign of "Win32:HideWindows-B [Tool]" has been found in "C:\WINDOWS\SYSTEM32\eg.exe\repcale.exe\[MoleBox]" file.  
26/12/2007 00:11:00	Propriétaire	3000	Sign of "Win32:HideWindows-I [Tool]" has been found in "C:\WINDOWS\SYSTEM32\eg.exe\repcale.exe" file.  
26/12/2007 00:10:59	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\WINDOWS\SYSTEM32\eg.exe\kiss.exe" file.  
26/12/2007 00:10:59	Propriétaire	3000	Sign of "Win32:Generic-W [Wrm]" has been found in "C:\WINDOWS\SYSTEM32\eg.exe\lovely.sys" file.  
26/12/2007 00:10:59	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\WINDOWS\SYSTEM32\eg.exe\orrl.exe\[Embedded#13738]" file.  
26/12/2007 00:10:59	Propriétaire	3000	Sign of "Win32:Adware-gen [Adw]" has been found in "C:\WINDOWS\SYSTEM32\eg.exe\ps2m.exe" file.  
26/12/2007 00:10:58	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\WINDOWS\SYSTEM32\eg.exe\hd.exe" file.  
26/12/2007 00:10:57	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\WINDOWS\SYSTEM32\eg.exe\cult.exe\[Embedded#10d38]" file.  
26/12/2007 00:10:48	Propriétaire	3000	Sign of "Win32:Generic-W [Wrm]" has been found in "C:\WINDOWS\SYSTEM32\dsgsf.exe\murdEr.sys" file.  
26/12/2007 00:10:48	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\WINDOWS\SYSTEM32\dsgsf.exe\orrl.exe\[Embedded#13738]" file.  
26/12/2007 00:10:48	Propriétaire	3000	Sign of "Win32:Adware-gen [Adw]" has been found in "C:\WINDOWS\SYSTEM32\dsgsf.exe\ps2m.exe" file.  
26/12/2007 00:10:48	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\WINDOWS\SYSTEM32\dsgsf.exe\repcale.exe\[Embedded#0f338]" file.  
26/12/2007 00:10:48	Propriétaire	3000	Sign of "Win32:HideWindows-I [Tool]" has been found in "C:\WINDOWS\SYSTEM32\dsgsf.exe\repcale.exe" file.  
26/12/2007 00:10:48	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\WINDOWS\SYSTEM32\dsgsf.exe\kiss.exe" file.  
26/12/2007 00:10:48	Propriétaire	3000	Sign of "Win32:HideWindows-B [Tool]" has been found in "C:\WINDOWS\SYSTEM32\dsgsf.exe\repcale.exe\[MoleBox]" file.  
26/12/2007 00:10:48	Propriétaire	3000	Sign of "Win32:Generic-V [Wrm]" has been found in "C:\WINDOWS\SYSTEM32\dsgsf.exe\aliases.ini" file.  
26/12/2007 00:10:47	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\WINDOWS\SYSTEM32\dsgsf.exe\hd.exe" file.  
26/12/2007 00:10:47	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\WINDOWS\SYSTEM32\dsgsf.exe\cult.exe\[Embedded#10d38]" file.  
26/12/2007 00:10:44	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\WINDOWS\SYSTEM32\dsfsdfscx.exe\hd.exe" file.  
26/12/2007 00:10:44	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\WINDOWS\SYSTEM32\dsfsdfscx.exe\cult.exe\[Embedded#10d38]" file.  
26/12/2007 00:10:41	Propriétaire	3000	Sign of "Win32:Generic-V [Wrm]" has been found in "C:\WINDOWS\SYSTEM32\dsfds.pif\aliases.ini" file.  
26/12/2007 00:10:41	Propriétaire	3000	Sign of "Win32:HideWindows-I [Tool]" has been found in "C:\WINDOWS\SYSTEM32\dsfds.pif\repcale.exe" file.  
26/12/2007 00:10:41	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\WINDOWS\SYSTEM32\dsfds.pif\repcale.exe\[Embedded#0f338]" file.  
26/12/2007 00:10:41	Propriétaire	3000	Sign of "Win32:HideWindows-B [Tool]" has been found in "C:\WINDOWS\SYSTEM32\dsfds.pif\repcale.exe\[MoleBox]" file.  
26/12/2007 00:10:41	Propriétaire	3000	Sign of "Win32:Adware-gen [Adw]" has been found in "C:\WINDOWS\SYSTEM32\dsfds.pif\ps2m.exe" file.  
26/12/2007 00:10:41	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\WINDOWS\SYSTEM32\dsfds.pif\orrl.exe\[Embedded#13738]" file.  
26/12/2007 00:10:40	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\WINDOWS\SYSTEM32\dsfds.pif\kiss.exe" file.  
26/12/2007 00:10:40	Propriétaire	3000	Sign of "Win32:Generic-W [Wrm]" has been found in "C:\WINDOWS\SYSTEM32\dsfds.pif\lovely.sys" file.  
26/12/2007 00:10:39	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\WINDOWS\SYSTEM32\dsfds.pif\hd.exe" file.  
26/12/2007 00:10:38	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\WINDOWS\SYSTEM32\dsfds.pif\cult.exe\[Embedded#10d38]" file.  
26/12/2007 00:08:16	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\WINDOWS\SYSTEM32\dfgsdfs.exe\kiss.exe" file.  
26/12/2007 00:08:16	Propriétaire	3000	Sign of "Win32:Generic-W [Wrm]" has been found in "C:\WINDOWS\SYSTEM32\dfgsdfs.exe\murdEr.sys" file.  
26/12/2007 00:08:15	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\WINDOWS\SYSTEM32\dfgsdfs.exe\hd.exe" file.  
26/12/2007 00:08:14	Propriétaire	3000	Sign of "Win32:HideWindows-I [Tool]" has been found in "C:\WINDOWS\SYSTEM32\dfgsdfs.exe\repcale.exe" file.  
26/12/2007 00:08:14	Propriétaire	3000	Sign of "Win32:Generic-V [Wrm]" has been found in "C:\WINDOWS\SYSTEM32\dfgsdfs.exe\aliases.ini" file.  
26/12/2007 00:08:14	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\WINDOWS\SYSTEM32\dfgsdfs.exe\cult.exe\[Embedded#10d38]" file.  
26/12/2007 00:08:14	Propriétaire	3000	Sign of "Win32:HideWindows-B [Tool]" has been found in "C:\WINDOWS\SYSTEM32\dfgsdfs.exe\repcale.exe\[MoleBox]" file.  
26/12/2007 00:08:14	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\WINDOWS\SYSTEM32\dfgsdfs.exe\orrl.exe\[Embedded#13738]" file.  
26/12/2007 00:08:14	Propriétaire	3000	Sign of "Win32:Adware-gen [Adw]" has been found in "C:\WINDOWS\SYSTEM32\dfgsdfs.exe\ps2m.exe" file.  
26/12/2007 00:08:14	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\WINDOWS\SYSTEM32\dfgsdfs.exe\repcale.exe\[Embedded#0f338]" file.  
26/12/2007 00:08:10	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\WINDOWS\SYSTEM32\dfgsdfcxvxs.exe\kiss.exe" file.  
26/12/2007 00:08:10	Propriétaire	3000	Sign of "Win32:Generic-W [Wrm]" has been found in "C:\WINDOWS\SYSTEM32\dfgsdfcxvxs.exe\murdEr.sys" file.  
26/12/2007 00:08:09	Propriétaire	3000	Sign of "Win32:HideWindows-B [Tool]" has been found in "C:\WINDOWS\SYSTEM32\dfgsdfcxvxs.exe\repcale.exe\[MoleBox]" file.  
26/12/2007 00:08:09	Propriétaire	3000	Sign of "Win32:Adware-gen [Adw]" has been found in "C:\WINDOWS\SYSTEM32\dfgsdfcxvxs.exe\ps2m.exe" file.  
26/12/2007 00:08:09	Propriétaire	3000	Sign of "Win32:HideWindows-I [Tool]" has been found in "C:\WINDOWS\SYSTEM32\dfgsdfcxvxs.exe\repcale.exe" file.  
26/12/2007 00:08:09	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\WINDOWS\SYSTEM32\dfgsdfcxvxs.exe\hd.exe" file.  
26/12/2007 00:08:09	Propriétaire	3000	Sign of "Win32:Generic-V [Wrm]" has been found in "C:\WINDOWS\SYSTEM32\dfgsdfcxvxs.exe\aliases.ini" file.  
26/12/2007 00:08:09	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\WINDOWS\SYSTEM32\dfgsdfcxvxs.exe\repcale.exe\[Embedded#0f338]" file.  
26/12/2007 00:08:09	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\WINDOWS\SYSTEM32\dfgsdfcxvxs.exe\cult.exe\[Embedded#10d38]" file.  
26/12/2007 00:08:08	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\WINDOWS\SYSTEM32\dfgsdfcxvxs.exe\orrl.exe\[Embedded#13738]" file.  
26/12/2007 00:08:02	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\WINDOWS\SYSTEM32\darkworlk.exe\d4rky.exe" file.  
26/12/2007 00:08:02	Propriétaire	3000	Sign of "Win32:Generic-W [Wrm]" has been found in "C:\WINDOWS\SYSTEM32\darkworlk.exe\d4rky[x]" file.  
26/12/2007 00:08:02	Propriétaire	3000	Sign of "Win32:Generic-V [Wrm]" has been found in "C:\WINDOWS\SYSTEM32\darkworlk.exe\d4rky[2]" file.  
26/12/2007 00:08:02	Propriétaire	3000	Sign of "Win32:Parite" has been found in "C:\WINDOWS\SYSTEM32\darkworlk.exe\d4rk.exe" file.  
26/12/2007 00:08:02	Propriétaire	3000	Sign of "IRC:LowJones [Trj]" has been found in "C:\WINDOWS\SYSTEM32\darkworlk.exe\d4rky[6]" file.  
26/12/2007 00:07:54	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\WINDOWS\SYSTEM32\d4rk.exe" file.  
26/12/2007 00:01:12	Propriétaire	3000	Sign of "Win32:Parite" has been found in "C:\WINDOWS\SYSTEM32\antivirusv1.exe\d4rk.exe" file.  
26/12/2007 00:01:12	Propriétaire	3000	Sign of "IRC:LowJones [Trj]" has been found in "C:\WINDOWS\SYSTEM32\antivirusv1.exe\d4rky[6]" file.  
26/12/2007 00:01:12	Propriétaire	3000	Sign of "Win32:Generic-V [Wrm]" has been found in "C:\WINDOWS\SYSTEM32\antivirusv1.exe\d4rky[2]" file.  
26/12/2007 00:01:12	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\WINDOWS\SYSTEM32\antivirusv1.exe\d4rky.exe" file.  
26/12/2007 00:01:12	Propriétaire	3000	Sign of "Win32:Generic-W [Wrm]" has been found in "C:\WINDOWS\SYSTEM32\antivirusv1.exe\d4rky[x]" file.  
26/12/2007 00:00:57	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\WINDOWS\SYSTEM32\-r" file.  
26/12/2007 00:00:56	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\WINDOWS\SYSTEM32\-r\th7ya.exe" file.  
25/12/2007 22:41:26	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006396.exe\virgin.exe" file.  
25/12/2007 22:41:25	Propriétaire	3000	Sign of "Win32:Adware-gen [Adw]" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006396.exe\ps2m.exe" file.  
25/12/2007 22:41:25	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006396.exe\orrl.exe\[Embedded#13738]" file.  
25/12/2007 22:41:24	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006396.exe\cult.exe\[Embedded#10d38]" file.  
25/12/2007 22:41:24	Propriétaire	3000	Sign of "Win32:Trojan-gen {UPX}" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006396.exe\ms04.exe" file.  
25/12/2007 22:41:24	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006396.exe\nass3r.exe" file.  
25/12/2007 22:41:23	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006394.exe" file.  
25/12/2007 22:41:23	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006395.exe\[Embedded#13738]" file.  
25/12/2007 22:41:23	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006393.exe\[Embedded#10d38]" file.  
25/12/2007 22:41:19	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006392.exe\Swfwin32.dll" file.  
25/12/2007 22:41:17	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006391.exe\jinso.exe" file.  
25/12/2007 22:41:14	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006390.exe\jinso.exe" file.  
25/12/2007 22:41:11	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006389.pif\th7yax.exe" file.  
25/12/2007 22:41:06	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006388.exe\kiss.exe" file.  
25/12/2007 22:41:06	Propriétaire	3000	Sign of "Win32:Generic-V [Wrm]" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006388.exe\aliases.ini" file.  
25/12/2007 22:41:06	Propriétaire	3000	Sign of "Win32:HideWindows-I [Tool]" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006388.exe\repcale.exe" file.  
25/12/2007 22:41:06	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006388.exe\repcale.exe\[Embedded#0f338]" file.  
25/12/2007 22:41:06	Propriétaire	3000	Sign of "Win32:HideWindows-B [Tool]" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006388.exe\repcale.exe\[MoleBox]" file.  
25/12/2007 22:41:06	Propriétaire	3000	Sign of "Win32:Adware-gen [Adw]" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006388.exe\ps2m.exe" file.  
25/12/2007 22:41:06	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006388.exe\orrl.exe\[Embedded#13738]" file.  
25/12/2007 22:41:06	Propriétaire	3000	Sign of "Win32:Generic-W [Wrm]" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006388.exe\lovely.sys" file.  
25/12/2007 22:41:05	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006388.exe\hd.exe" file.  
25/12/2007 22:41:05	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006388.exe\cult.exe\[Embedded#10d38]" file.  
25/12/2007 22:41:02	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006387.exe\repcale.exe\[Embedded#0f338]" file.  
25/12/2007 22:41:02	Propriétaire	3000	Sign of "Win32:HideWindows-I [Tool]" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006387.exe\repcale.exe" file.  
25/12/2007 22:41:02	Propriétaire	3000	Sign of "Win32:Generic-V [Wrm]" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006387.exe\aliases.ini" file.  
25/12/2007 22:41:02	Propriétaire	3000	Sign of "Win32:HideWindows-B [Tool]" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006387.exe\repcale.exe\[MoleBox]" file.  
25/12/2007 22:41:01	Propriétaire	3000	Sign of "Win32:Adware-gen [Adw]" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006387.exe\ps2m.exe" file.  
25/12/2007 22:41:01	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006387.exe\orrl.exe\[Embedded#13738]" file.  
25/12/2007 22:41:01	Propriétaire	3000	Sign of "Win32:Generic-W [Wrm]" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006387.exe\lovely.sys" file.  
25/12/2007 22:41:01	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006387.exe\kiss.exe" file.  
25/12/2007 22:41:00	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006387.exe\hd.exe" file.  
25/12/2007 22:41:00	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006387.exe\cult.exe\[Embedded#10d38]" file.  
25/12/2007 22:40:59	Propriétaire	3000	Sign of "Win32:Rbot-FGP [Trj]" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006385.exe" file.  
25/12/2007 22:40:59	Propriétaire	3000	Sign of "IRC:Flood-B [Trj]" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006386.exe\nick.txt" file.  
25/12/2007 22:40:58	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006382.dll" file.  
25/12/2007 22:40:53	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006381.exe\ms02.exe" file.  
25/12/2007 22:40:53	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006381.exe\orrl.exe\[Embedded#13738]" file.  
25/12/2007 22:40:53	Propriétaire	3000	Sign of "Win32:Adware-gen [Adw]" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006381.exe\ps2m.exe" file.  
25/12/2007 22:40:53	Propriétaire	3000	Sign of "Win32:HideWindows-B [Tool]" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006381.exe\repcale.exe\[MoleBox]" file.  
25/12/2007 22:40:53	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006381.exe\repcale.exe\[Embedded#0f338]" file.  
25/12/2007 22:40:53	Propriétaire	3000	Sign of "Win32:HideWindows-I [Tool]" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006381.exe\repcale.exe" file.  
25/12/2007 22:40:52	Propriétaire	3000	Sign of "Win32:Trojan-gen {UPX}" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006381.exe\F1NTXXXK.exe" file.  
25/12/2007 22:40:52	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006381.exe\cult.exe\[Embedded#10d38]" file.  
25/12/2007 22:40:52	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006381.exe\hd.exe" file.  
25/12/2007 22:40:52	Propriétaire	3000	Sign of "Win32:Generic-W [Wrm]" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006381.exe\lovelyx.sys" file.  
25/12/2007 22:40:51	Propriétaire	3000	Sign of "Win32:Generic-V [Wrm]" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006381.exe\aliases.ini" file.  
25/12/2007 22:40:50	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006380.exe\kiss.exe" file.  
25/12/2007 22:40:49	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006380.exe\hd.exe" file.  
25/12/2007 22:40:49	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006380.exe\cult.exe\[Embedded#10d38]" file.  
25/12/2007 22:40:48	Propriétaire	3000	Sign of "Win32:Generic-V [Wrm]" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006380.exe\aliases.ini" file.  
25/12/2007 22:40:44	Propriétaire	3000	Sign of "Win32:HideWindows-B [Tool]" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006379.exe\repcale.exe\[MoleBox]" file.  
25/12/2007 22:40:44	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006379.exe\q8guys.exe" file.  
25/12/2007 22:40:44	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006379.exe\repcale.exe\[Embedded#0f338]" file.  
25/12/2007 22:40:44	Propriétaire	3000	Sign of "Win32:HideWindows-I [Tool]" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006379.exe\repcale.exe" file.  
25/12/2007 22:40:43	Propriétaire	3000	Sign of "Win32:Adware-gen [Adw]" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006379.exe\ps2m.exe" file.  
25/12/2007 22:40:42	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006379.exe\orrl.exe\[Embedded#13738]" file.  
25/12/2007 22:40:42	Propriétaire	3000	Sign of "Win32:Trojan-gen {UPX}" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006379.exe\ms04.exe" file.  
25/12/2007 22:40:42	Propriétaire	3000	Sign of "Win32:Generic-W [Wrm]" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006379.exe\lovelyx.sys" file.  
25/12/2007 22:40:42	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006379.exe\hd.exe" file.  
25/12/2007 22:40:42	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006379.exe\cult.exe\[Embedded#10d38]" file.  
25/12/2007 22:40:42	Propriétaire	3000	Sign of "Win32:Generic-V [Wrm]" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006379.exe\aliases.ini" file.  
25/12/2007 22:40:39	Propriétaire	3000	Sign of "Win32:Adware-gen [Adw]" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006378.pif\ps2m.exe" file.  
25/12/2007 22:40:39	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006378.pif\orrl.exe\[Embedded#13738]" file.  
25/12/2007 22:40:39	Propriétaire	3000	Sign of "Win32:HideWindows-B [Tool]" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006378.pif\repcale.exe\[MoleBox]" file.  
25/12/2007 22:40:39	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006378.pif\repcale.exe\[Embedded#0f338]" file.  
25/12/2007 22:40:39	Propriétaire	3000	Sign of "Win32:HideWindows-I [Tool]" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006378.pif\repcale.exe" file.  
25/12/2007 22:40:39	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006378.pif\kiss.exe" file.  
25/12/2007 22:40:39	Propriétaire	3000	Sign of "Win32:Generic-W [Wrm]" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006378.pif\lovely.sys" file.  
25/12/2007 22:40:37	Propriétaire	3000	Sign of "Win32:Generic-V [Wrm]" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006378.pif\aliases.ini" file.  
25/12/2007 22:40:37	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006378.pif\cult.exe\[Embedded#10d38]" file.  
25/12/2007 22:40:37	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006378.pif\hd.exe" file.  
25/12/2007 22:40:34	Propriétaire	3000	Sign of "Win32:HideWindows-I [Tool]" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006377.exe\repcale.exe" file.  
25/12/2007 22:40:34	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006377.exe\repcale.exe\[Embedded#0f338]" file.  
25/12/2007 22:40:33	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006377.exe\orrl.exe\[Embedded#13738]" file.  
25/12/2007 22:40:33	Propriétaire	3000	Sign of "Win32:Adware-gen [Adw]" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006377.exe\ps2m.exe" file.  
25/12/2007 22:40:33	Propriétaire	3000	Sign of "Win32:HideWindows-B [Tool]" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006377.exe\repcale.exe\[MoleBox]" file.  
25/12/2007 22:40:33	Propriétaire	3000	Sign of "Win32:Generic-W [Wrm]" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006377.exe\lovely.sys" file.  
25/12/2007 22:40:33	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006377.exe\kiss.exe" file.  
25/12/2007 22:40:31	Propriétaire	3000	Sign of "Win32:Generic-V [Wrm]" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006377.exe\aliases.ini" file.  
25/12/2007 22:40:31	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006377.exe\cult.exe\[Embedded#10d38]" file.  
25/12/2007 22:40:31	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006377.exe\hd.exe" file.  
25/12/2007 22:40:28	Propriétaire	3000	Sign of "Win32:Generic-W [Wrm]" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006376.exe\lovely.sys" file.  
25/12/2007 22:40:28	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006376.exe\kiss.exe" file.  
25/12/2007 22:40:28	Propriétaire	3000	Sign of "Win32:Adware-gen [Adw]" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006376.exe\ps2m.exe" file.  
25/12/2007 22:40:28	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006376.exe\repcale.exe\[Embedded#0f338]" file.  
25/12/2007 22:40:28	Propriétaire	3000	Sign of "Win32:HideWindows-I [Tool]" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006376.exe\repcale.exe" file.  
25/12/2007 22:40:28	Propriétaire	3000	Sign of "Win32:HideWindows-B [Tool]" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006376.exe\repcale.exe\[MoleBox]" file.  
25/12/2007 22:40:28	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006376.exe\orrl.exe\[Embedded#13738]" file.  
25/12/2007 22:40:26	Propriétaire	3000	Sign of "Win32:Generic-V [Wrm]" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006376.exe\aliases.ini" file.  
25/12/2007 22:40:26	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006376.exe\cult.exe\[Embedded#10d38]" file.  
25/12/2007 22:40:26	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006376.exe\hd.exe" file.  
25/12/2007 22:40:22	Propriétaire	3000	Sign of "Win32:Generic-V [Wrm]" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006375.ini" file.  
25/12/2007 22:10:52	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\sdsdfsdf.exe\virgin.exe" file.  
25/12/2007 22:10:50	Propriétaire	3000	Sign of "Win32:Trojan-gen {UPX}" has been found in "C:\sdsdfsdf.exe\ms04.exe" file.  
25/12/2007 22:10:50	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\sdsdfsdf.exe\nass3r.exe" file.  
25/12/2007 22:10:50	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\sdsdfsdf.exe\orrl.exe\[Embedded#13738]" file.  
25/12/2007 22:10:50	Propriétaire	3000	Sign of "Win32:Adware-gen [Adw]" has been found in "C:\sdsdfsdf.exe\ps2m.exe" file.  
25/12/2007 22:10:49	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\sdsdfsdf.exe\cult.exe\[Embedded#10d38]" file.  
25/12/2007 22:00:04	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\Program Files\killSh\orrl.exe\[Embedded#13738]" file.  
25/12/2007 22:00:04	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\Program Files\killSh\hd.exe" file.  
25/12/2007 21:59:58	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\Program Files\killSh\cult.exe\[Embedded#10d38]" file.  
25/12/2007 21:50:32	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\lol1.exe\Swfwin32.dll" file.  
25/12/2007 21:50:30	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\klertf.exe\jinso.exe" file.  
25/12/2007 21:22:03	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\hjuing.exe\jinso.exe" file.  
25/12/2007 21:21:59	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\hidfdfdffdz.pif\th7yax.exe" file.  
25/12/2007 21:21:54	Propriétaire	3000	Sign of "Win32:Adware-gen [Adw]" has been found in "C:\gezzxa.exe\ps2m.exe" file.  
25/12/2007 21:21:54	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\gezzxa.exe\orrl.exe\[Embedded#13738]" file.  
25/12/2007 21:21:54	Propriétaire	3000	Sign of "Win32:Generic-W [Wrm]" has been found in "C:\gezzxa.exe\lovely.sys" file.  
25/12/2007 21:21:54	Propriétaire	3000	Sign of "Win32:Generic-V [Wrm]" has been found in "C:\gezzxa.exe\aliases.ini" file.  
25/12/2007 21:21:54	Propriétaire	3000	Sign of "Win32:HideWindows-I [Tool]" has been found in "C:\gezzxa.exe\repcale.exe" file.  
25/12/2007 21:21:54	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\gezzxa.exe\repcale.exe\[Embedded#0f338]" file.  
25/12/2007 21:21:54	Propriétaire	3000	Sign of "Win32:HideWindows-B [Tool]" has been found in "C:\gezzxa.exe\repcale.exe\[MoleBox]" file.  
25/12/2007 21:21:53	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\gezzxa.exe\kiss.exe" file.  
25/12/2007 21:21:52	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\gezzxa.exe\hd.exe" file.  
25/12/2007 21:21:52	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\gezzxa.exe\cult.exe\[Embedded#10d38]" file.  
25/12/2007 21:21:49	Propriétaire	3000	Sign of "Win32:Generic-V [Wrm]" has been found in "C:\gexa.exe\aliases.ini" file.  
25/12/2007 21:21:49	Propriétaire	3000	Sign of "Win32:Adware-gen [Adw]" has been found in "C:\gexa.exe\ps2m.exe" file.  
25/12/2007 21:21:49	Propriétaire	3000	Sign of "Win32:HideWindows-B [Tool]" has been found in "C:\gexa.exe\repcale.exe\[MoleBox]" file.  
25/12/2007 21:21:49	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\gexa.exe\repcale.exe\[Embedded#0f338]" file.  
25/12/2007 21:21:49	Propriétaire	3000	Sign of "Win32:HideWindows-I [Tool]" has been found in "C:\gexa.exe\repcale.exe" file.  
25/12/2007 21:21:48	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\gexa.exe\kiss.exe" file.  
25/12/2007 21:21:48	Propriétaire	3000	Sign of "Win32:Generic-W [Wrm]" has been found in "C:\gexa.exe\lovely.sys" file.  
25/12/2007 21:21:48	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\gexa.exe\orrl.exe\[Embedded#13738]" file.  
25/12/2007 21:21:47	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\gexa.exe\hd.exe" file.  
25/12/2007 21:21:46	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\gexa.exe\cult.exe\[Embedded#10d38]" file.  
25/12/2007 21:21:06	Propriétaire	3000	Sign of "IRC:Flood-B [Trj]" has been found in "C:\essd.exe\nick.txt" file.

scoubidou78 · Answer

et ossi le rapport hijackthis

tu as vu au dessu mon rapport avast???

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 17:44:46, on 29/12/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\windows\system\hpsysdrv.exe
C:\HP\KBD\KBD.EXE
C:\WINDOWS\System32\hkcmd.exe
C:\WINDOWS\system32\pctspk.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\Windows Live\Contrôle parental\fssui.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\hp center\137903\Program\BackWeb-137903.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Windows Live Toolbar\msn_sl.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://neufportail.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.hpe.com/h41271/404D.aspx?cc=us&ll=en&url=http://domainredirects.ext.hpe.com/fr3.hpwis.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://srch-fr3.hpwis.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://srch-fr3.hpwis.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://srch-fr3.hpwis.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.hpe.com/h41271/404D.aspx?cc=us&ll=en&url=http://domainredirects.ext.hpe.com/fr3.hpwis.com/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: Windows Live OneCare Family Safety Browser Helper - {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - C:\Program Files\Windows Live\Contrôle parental\fssbho.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
O4 - HKLM\..\Run: [Microsoft Works Portfolio] C:\Program Files\Microsoft Works\WksSb.exe /AllUsers
O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Microsoft Works\WkDetect.exe
O4 - HKLM\..\Run: [PCTVOICE] pctspk.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [fssui] "C:\Program Files\Windows Live\Contrôle parental\fssui.exe" -autorun
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: hp center.lnk = C:\Program Files\hp center\137903\Program\BackWeb-137903.exe
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Organise-notes - {9455301C-CF6B-11D3-A266-00C04F689C50} - C:\Program Files\Fichiers communs\Microsoft Shared\Reference 2001\EROProj.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/...
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/...
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Sunbelt Personal Firewall 4 (SPF4) - Sunbelt Software - C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe

Lyonnais92 · Answer

Bonjour,

oui, j'ai vu. On va voir si un autre AV confirme.

Scanne ensuite ton PC avec BitDefender en ligne (uniquement sous Internet Explorer).

ouvre ce lien :



www.bitdefender.com/scan8/ie.html

Utilisation :
Cliquer sur "J'accepte" puis accepter également l'ActiveX bloqué par la barre anti-popup du SP2 qui clignotera en haut et l'installer.
Ensuite, cliquer sur "Cliquez ici pour scanner".
Patienter jusqu'à la fin du scan qui peut durer assez longtemps...

Copier/coller le rapport entier sur le forum.

Tutoriel en images ici : http://pageperso.aol.fr/rginformatique/mapage/defender.htm (merci à Balltrap34 pour cette réalisation) 

Ensuite, il faut que tu surfes avec Firefox  et non IE, sauf pour les MAJ de Windows.

Ouvre ce lien pour télécharger le logiciel.

http://www.commentcamarche.net/telecharger/logiciels firefox?search2_x=16&search2_y=13

scoubidou78 · Answer

ok,

j ai dja firefoxgoogle je crois

je telecharge quand meme?

o faite sa sert a quoi firefox??? 

desole je m y connais pas du tout.

merci

Lyonnais92 · Answer

Re,

fais les choses dans l'ordre demandé.

Scan puis téléchargement.

scoubidou78 · Answer

re,

ok je t envoie le scan a toute

scoubidou78 · Answer

re,

BitDefender Online Scanner
  
  
 
Scan report generated at: Sun, Dec 30, 2007 - 19:48:23
 
 
  
  
 
Scan path: A:\;C:\;D:\;
  
  
 
 
  
  
 
Statistics
 
Time
 10:07:49
 
Files
 169354
 
Folders
 4277
 
Boot Sectors
 3
 
Archives
 15974
 
Packed Files
 9834
 
  
  
 
Results
 
Identified Viruses 
 19
 
Infected Files 
 160
 
Suspect Files 
 0
 
Warnings
 0
 
Disinfected
 2
 
Deleted Files
 158
 
  
  
 
Engines Info
 
Virus Definitions
 884755
 
Engine build
 AVCORE v1.0 (build 2422) (i386) (Sep 25 2007 08:26:36)
 
Scan plugins
 14
 
Archive plugins
 38
 
Unpack plugins
 7
 
E-mail plugins
 6
 
System plugins
 1
 
  
  
 
Scan Settings
 
First Action
 Disinfect
 
Second Action
 Delete
 
Heuristics
 Yes
 
Enable Warnings
 Yes
 
Scanned Extensions
 *;
 
Exclude Extensions
  
 
Scan Emails
 Yes
 
Scan Archives
 Yes
 
Scan Packed
 Yes
 
Scan Files
 Yes
 
Scan Boot
 Yes
 
  
  
 
  Scanned File
  Status
 
C:\esd.exe=>(ZIP Sfx o)=>Mirc.ini
 Infected with: Backdoor.Zapchast.F
 
C:\esd.exe=>(ZIP Sfx o)=>Mirc.ini
 Disinfection failed
 
C:\esd.exe=>(ZIP Sfx o)=>Mirc.ini
 Deleted
 
C:\esd.exe=>(ZIP Sfx o)
 Updated
 
C:\esd.exe
 Update failed
 
C:\essd.exe=>(ZIP Sfx o)=>Mirc.ini
 Infected with: Backdoor.Zapchast.F
 
C:\essd.exe=>(ZIP Sfx o)=>Mirc.ini
 Disinfection failed
 
C:\essd.exe=>(ZIP Sfx o)=>Mirc.ini
 Deleted
 
C:\essd.exe=>(ZIP Sfx o)
 Updated
 
C:\essd.exe
 Update failed
 
C:\gexa.exe=>(RAR Sfx o)=>ksat.bat
 Infected with: Trojan.IRC.Gen
 
C:\gexa.exe=>(RAR Sfx o)=>ksat.bat
 Disinfection failed
 
C:\gexa.exe=>(RAR Sfx o)=>ksat.bat
 Deleted
 
C:\gexa.exe=>(RAR Sfx o)
 Update failed
 
C:\gexa.exe=>(RAR Sfx o)=>pingy.exe
 Infected with: Trojan.Downloader.Small.ZJ
 
C:\gexa.exe=>(RAR Sfx o)=>pingy.exe
 Disinfection failed
 
C:\gexa.exe=>(RAR Sfx o)=>pingy.exe
 Deleted
 
C:\gexa.exe=>(RAR Sfx o)
 Update failed
 
C:\gezzxa.exe=>(RAR Sfx o)=>ksat.bat
 Infected with: Trojan.IRC.Gen
 
C:\gezzxa.exe=>(RAR Sfx o)=>ksat.bat
 Disinfection failed
 
C:\gezzxa.exe=>(RAR Sfx o)=>ksat.bat
 Deleted
 
C:\gezzxa.exe=>(RAR Sfx o)
 Update failed
 
C:\gezzxa.exe=>(RAR Sfx o)=>pingy.exe
 Infected with: Trojan.Downloader.Small.ZJ
 
C:\gezzxa.exe=>(RAR Sfx o)=>pingy.exe
 Disinfection failed
 
C:\gezzxa.exe=>(RAR Sfx o)=>pingy.exe
 Deleted
 
C:\gezzxa.exe=>(RAR Sfx o)
 Update failed
 
C:\hp\bin\ProcessLogger.exe
 Infected with: DeepScan:Generic.Malware.P!.5F1AEB08
 
C:\hp\bin\ProcessLogger.exe
 Disinfection failed
 
C:\hp\bin\ProcessLogger.exe
 Deleted
 
C:\lol1.exe=>(RAR Sfx o)=>window.com
 Infected with: Backdoor.Mirc.580999.A
 
C:\lol1.exe=>(RAR Sfx o)=>window.com
 Disinfection failed
 
C:\lol1.exe=>(RAR Sfx o)=>window.com
 Deleted
 
C:\lol1.exe=>(RAR Sfx o)
 Update failed
 
C:\Program Files\killSh\cult.exe
 Infected with: Win32.Worm.Rbot.AA
 
C:\Program Files\killSh\cult.exe
 Disinfection failed
 
C:\Program Files\killSh\cult.exe
 Deleted
 
C:\Program Files\killSh\hd.exe
 Detected with: Application.HideWindow.B
 
C:\Program Files\killSh\hd.exe
 Disinfection failed
 
C:\Program Files\killSh\hd.exe
 Deleted
 
C:\Program Files\killSh\orrl.exe
 Infected with: Win32.Worm.Rbot.AY
 
C:\Program Files\killSh\orrl.exe
 Disinfection failed
 
C:\Program Files\killSh\orrl.exe
 Deleted
 
C:\Program Files\killSh\pingy.exe
 Infected with: Trojan.Downloader.Small.ZJ
 
C:\Program Files\killSh\pingy.exe
 Disinfection failed
 
C:\Program Files\killSh\pingy.exe
 Deleted
 
C:\sdsdfsdf.exe=>(CAB Sfx o)=>l.o.v.e.l.y.x
 Infected with: Backdoor.Ircflood.B
 
C:\sdsdfsdf.exe=>(CAB Sfx o)=>l.o.v.e.l.y.x
 Disinfection failed
 
C:\sdsdfsdf.exe=>(CAB Sfx o)=>l.o.v.e.l.y.x
 Deleted
 
C:\sdsdfsdf.exe=>(CAB Sfx o)
 Update failed
 
C:\sdsdfsdf.exe=>(CAB Sfx o)=>lovely.dll
 Infected with: Trojan.Generic.52576
 
C:\sdsdfsdf.exe=>(CAB Sfx o)=>lovely.dll
 Disinfection failed
 
C:\sdsdfsdf.exe=>(CAB Sfx o)=>lovely.dll
 Deleted
 
C:\sdsdfsdf.exe=>(CAB Sfx o)
 Update failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006375.ini
 Infected with: Backdoor.IRC.Zapchast.JG
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006375.ini
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006375.ini
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006376.exe=>(RAR Sfx o)=>ksat.bat
 Infected with: Trojan.IRC.Gen
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006376.exe=>(RAR Sfx o)=>ksat.bat
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006376.exe=>(RAR Sfx o)=>ksat.bat
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006376.exe=>(RAR Sfx o)
 Update failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006376.exe=>(RAR Sfx o)=>pingy.exe
 Infected with: Trojan.Downloader.Small.ZJ
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006376.exe=>(RAR Sfx o)=>pingy.exe
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006376.exe=>(RAR Sfx o)=>pingy.exe
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006376.exe=>(RAR Sfx o)
 Update failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006377.exe=>(RAR Sfx o)=>ksat.bat
 Infected with: Trojan.IRC.Gen
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006377.exe=>(RAR Sfx o)=>ksat.bat
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006377.exe=>(RAR Sfx o)=>ksat.bat
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006377.exe=>(RAR Sfx o)
 Update failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006377.exe=>(RAR Sfx o)=>pingy.exe
 Infected with: Trojan.Downloader.Small.ZJ
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006377.exe=>(RAR Sfx o)=>pingy.exe
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006377.exe=>(RAR Sfx o)=>pingy.exe
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006377.exe=>(RAR Sfx o)
 Update failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006378.pif=>(RAR Sfx o)=>ksat.bat
 Infected with: Trojan.IRC.Gen
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006378.pif=>(RAR Sfx o)=>ksat.bat
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006378.pif=>(RAR Sfx o)=>ksat.bat
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006378.pif=>(RAR Sfx o)
 Update failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006378.pif=>(RAR Sfx o)=>pingy.exe
 Infected with: Trojan.Downloader.Small.ZJ
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006378.pif=>(RAR Sfx o)=>pingy.exe
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006378.pif=>(RAR Sfx o)=>pingy.exe
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006378.pif=>(RAR Sfx o)
 Update failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006379.exe=>(CAB Sfx o)=>ksat.bat
 Infected with: Trojan.IRC.Gen
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006379.exe=>(CAB Sfx o)=>ksat.bat
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006379.exe=>(CAB Sfx o)=>ksat.bat
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006379.exe=>(CAB Sfx o)
 Update failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006381.exe=>(CAB Sfx o)=>ksat.bat
 Infected with: Trojan.IRC.Gen
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006381.exe=>(CAB Sfx o)=>ksat.bat
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006381.exe=>(CAB Sfx o)=>ksat.bat
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006381.exe=>(CAB Sfx o)
 Update failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006386.exe=>(ZIP Sfx o)=>Mirc.ini
 Infected with: Backdoor.Zapchast.F
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006386.exe=>(ZIP Sfx o)=>Mirc.ini
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006386.exe=>(ZIP Sfx o)=>Mirc.ini
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006386.exe=>(ZIP Sfx o)
 Updated
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006386.exe
 Update failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006387.exe=>(RAR Sfx o)=>ksat.bat
 Infected with: Trojan.IRC.Gen
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006387.exe=>(RAR Sfx o)=>ksat.bat
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006387.exe=>(RAR Sfx o)=>ksat.bat
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006387.exe=>(RAR Sfx o)
 Update failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006387.exe=>(RAR Sfx o)=>pingy.exe
 Infected with: Trojan.Downloader.Small.ZJ
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006387.exe=>(RAR Sfx o)=>pingy.exe
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006387.exe=>(RAR Sfx o)=>pingy.exe
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006387.exe=>(RAR Sfx o)
 Update failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006388.exe=>(RAR Sfx o)=>ksat.bat
 Infected with: Trojan.IRC.Gen
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006388.exe=>(RAR Sfx o)=>ksat.bat
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006388.exe=>(RAR Sfx o)=>ksat.bat
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006388.exe=>(RAR Sfx o)
 Update failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006388.exe=>(RAR Sfx o)=>pingy.exe
 Infected with: Trojan.Downloader.Small.ZJ
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006388.exe=>(RAR Sfx o)=>pingy.exe
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006388.exe=>(RAR Sfx o)=>pingy.exe
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006388.exe=>(RAR Sfx o)
 Update failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006392.exe=>(RAR Sfx o)=>window.com
 Infected with: Backdoor.Mirc.580999.A
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006392.exe=>(RAR Sfx o)=>window.com
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006392.exe=>(RAR Sfx o)=>window.com
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006392.exe=>(RAR Sfx o)
 Update failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006393.exe
 Infected with: Win32.Worm.Rbot.AA
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006393.exe
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006393.exe
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006394.exe
 Detected with: Application.HideWindow.B
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006394.exe
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006394.exe
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006395.exe
 Infected with: Win32.Worm.Rbot.AY
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006395.exe
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006395.exe
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006396.exe=>(CAB Sfx o)=>l.o.v.e.l.y.x
 Infected with: Backdoor.Ircflood.B
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006396.exe=>(CAB Sfx o)=>l.o.v.e.l.y.x
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006396.exe=>(CAB Sfx o)=>l.o.v.e.l.y.x
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006396.exe=>(CAB Sfx o)
 Update failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006396.exe=>(CAB Sfx o)=>lovely.dll
 Infected with: Trojan.Generic.52576
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006396.exe=>(CAB Sfx o)=>lovely.dll
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006396.exe=>(CAB Sfx o)=>lovely.dll
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006396.exe=>(CAB Sfx o)
 Update failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006397.exe=>(CAB Sfx o)=>d4rk.exe
 Infected with: Win32.Parite.B
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006397.exe=>(CAB Sfx o)=>d4rk.exe
 Disinfected
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006397.exe=>(CAB Sfx o)
 Update failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006397.exe=>(CAB Sfx o)=>d4rky.exe
 Detected with: Application.HideWindow.B
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006397.exe=>(CAB Sfx o)=>d4rky.exe
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006397.exe=>(CAB Sfx o)=>d4rky.exe
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006397.exe=>(CAB Sfx o)
 Update failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006397.exe=>(CAB Sfx o)=>d4rky[2]
 Infected with: Backdoor.Ircflood.B
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006397.exe=>(CAB Sfx o)=>d4rky[2]
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006397.exe=>(CAB Sfx o)=>d4rky[2]
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006397.exe=>(CAB Sfx o)
 Update failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006397.exe=>(CAB Sfx o)=>d4rky[3]
 Infected with: Win32.IRC.Kelebek
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006397.exe=>(CAB Sfx o)=>d4rky[3]
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006397.exe=>(CAB Sfx o)=>d4rky[3]
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006397.exe=>(CAB Sfx o)
 Update failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006397.exe=>(CAB Sfx o)=>d4rky[4]
 Infected with: Backdoor.Ircflood.B
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006397.exe=>(CAB Sfx o)=>d4rky[4]
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006397.exe=>(CAB Sfx o)=>d4rky[4]
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006397.exe=>(CAB Sfx o)
 Update failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006397.exe=>(CAB Sfx o)=>d4rky[5]
 Infected with: Backdoor.Ircflood.B
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006397.exe=>(CAB Sfx o)=>d4rky[5]
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006397.exe=>(CAB Sfx o)=>d4rky[5]
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006397.exe=>(CAB Sfx o)
 Update failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006397.exe=>(CAB Sfx o)=>d4rky[6]
 Infected with: Backdoor.Ircflood.B
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006397.exe=>(CAB Sfx o)=>d4rky[6]
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006397.exe=>(CAB Sfx o)=>d4rky[6]
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006397.exe=>(CAB Sfx o)
 Update failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006397.exe=>(CAB Sfx o)=>d4rky[7]
 Infected with: Backdoor.Ircflood.B
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006397.exe=>(CAB Sfx o)=>d4rky[7]
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006397.exe=>(CAB Sfx o)=>d4rky[7]
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006397.exe=>(CAB Sfx o)
 Update failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006399.exe=>(CAB Sfx o)=>d4rk.exe
 Infected with: Win32.Parite.B
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006399.exe=>(CAB Sfx o)=>d4rk.exe
 Disinfected
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006399.exe=>(CAB Sfx o)
 Update failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006399.exe=>(CAB Sfx o)=>d4rky.exe
 Detected with: Application.HideWindow.B
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006399.exe=>(CAB Sfx o)=>d4rky.exe
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006399.exe=>(CAB Sfx o)=>d4rky.exe
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006399.exe=>(CAB Sfx o)
 Update failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006399.exe=>(CAB Sfx o)=>d4rky[2]
 Infected with: Backdoor.Ircflood.B
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006399.exe=>(CAB Sfx o)=>d4rky[2]
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006399.exe=>(CAB Sfx o)=>d4rky[2]
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006399.exe=>(CAB Sfx o)
 Update failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006399.exe=>(CAB Sfx o)=>d4rky[3]
 Infected with: Win32.IRC.Kelebek
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006399.exe=>(CAB Sfx o)=>d4rky[3]
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006399.exe=>(CAB Sfx o)=>d4rky[3]
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006399.exe=>(CAB Sfx o)
 Update failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006399.exe=>(CAB Sfx o)=>d4rky[4]
 Infected with: Backdoor.Ircflood.B
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006399.exe=>(CAB Sfx o)=>d4rky[4]
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006399.exe=>(CAB Sfx o)=>d4rky[4]
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006399.exe=>(CAB Sfx o)
 Update failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006399.exe=>(CAB Sfx o)=>d4rky[5]
 Infected with: Backdoor.Ircflood.B
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006399.exe=>(CAB Sfx o)=>d4rky[5]
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006399.exe=>(CAB Sfx o)=>d4rky[5]
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006399.exe=>(CAB Sfx o)
 Update failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006399.exe=>(CAB Sfx o)=>d4rky[6]
 Infected with: Backdoor.Ircflood.B
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006399.exe=>(CAB Sfx o)=>d4rky[6]
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006399.exe=>(CAB Sfx o)=>d4rky[6]
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006399.exe=>(CAB Sfx o)
 Update failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006399.exe=>(CAB Sfx o)=>d4rky[7]
 Infected with: Backdoor.Ircflood.B
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006399.exe=>(CAB Sfx o)=>d4rky[7]
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006399.exe=>(CAB Sfx o)=>d4rky[7]
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006399.exe=>(CAB Sfx o)
 Update failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006400.exe=>(RAR Sfx o)=>orrl.exe
 Infected with: Win32.Worm.Rbot.AY
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006400.exe=>(RAR Sfx o)=>orrl.exe
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006400.exe=>(RAR Sfx o)=>orrl.exe
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006400.exe=>(RAR Sfx o)
 Update failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006400.exe=>(RAR Sfx o)=>pingy.exe
 Infected with: Trojan.Downloader.Small.ZJ
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006400.exe=>(RAR Sfx o)=>pingy.exe
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006400.exe=>(RAR Sfx o)=>pingy.exe
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006400.exe=>(RAR Sfx o)
 Update failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006400.exe=>(RAR Sfx o)=>ps2m.exe
 Detected with: Application.Passview.A
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006400.exe=>(RAR Sfx o)=>ps2m.exe
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006400.exe=>(RAR Sfx o)=>ps2m.exe
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006400.exe=>(RAR Sfx o)
 Update failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006400.exe=>(RAR Sfx o)=>repcale.exe
 Infected with: GenPack:Virtool.HiddenRun.B
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006400.exe=>(RAR Sfx o)=>repcale.exe
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006400.exe=>(RAR Sfx o)=>repcale.exe
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006400.exe=>(RAR Sfx o)
 Update failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006400.exe=>(RAR Sfx o)=>aliases.ini
 Infected with: Backdoor.IRC.Zapchast.JG
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006400.exe=>(RAR Sfx o)=>aliases.ini
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006400.exe=>(RAR Sfx o)=>aliases.ini
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006400.exe=>(RAR Sfx o)
 Update failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006400.exe=>(RAR Sfx o)=>cult.exe
 Infected with: Win32.Worm.Rbot.AA
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006400.exe=>(RAR Sfx o)=>cult.exe
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006400.exe=>(RAR Sfx o)=>cult.exe
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006400.exe=>(RAR Sfx o)
 Update failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006400.exe=>(RAR Sfx o)=>hd.exe
 Detected with: Application.HideWindow.B
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006400.exe=>(RAR Sfx o)=>hd.exe
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006400.exe=>(RAR Sfx o)=>hd.exe
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006400.exe=>(RAR Sfx o)
 Update failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006400.exe=>(RAR Sfx o)=>kiss.exe
 Infected with: Win32.IRC.Kelebek
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006400.exe=>(RAR Sfx o)=>kiss.exe
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006400.exe=>(RAR Sfx o)=>kiss.exe
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006400.exe=>(RAR Sfx o)
 Update failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006400.exe=>(RAR Sfx o)=>ksat.bat
 Infected with: Trojan.IRC.Gen
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006400.exe=>(RAR Sfx o)=>ksat.bat
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006400.exe=>(RAR Sfx o)=>ksat.bat
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006400.exe=>(RAR Sfx o)
 Update failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006400.exe=>(RAR Sfx o)=>murdEr.sys
 Infected with: Backdoor.Ircflood.B
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006400.exe=>(RAR Sfx o)=>murdEr.sys
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006400.exe=>(RAR Sfx o)=>murdEr.sys
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006400.exe=>(RAR Sfx o)
 Update failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006401.exe=>(RAR Sfx o)=>orrl.exe
 Infected with: Win32.Worm.Rbot.AY
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006401.exe=>(RAR Sfx o)=>orrl.exe
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006401.exe=>(RAR Sfx o)=>orrl.exe
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006401.exe=>(RAR Sfx o)
 Update failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006401.exe=>(RAR Sfx o)=>pingy.exe
 Infected with: Trojan.Downloader.Small.ZJ
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006401.exe=>(RAR Sfx o)=>pingy.exe
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006401.exe=>(RAR Sfx o)=>pingy.exe
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006401.exe=>(RAR Sfx o)
 Update failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006401.exe=>(RAR Sfx o)=>ps2m.exe
 Detected with: Application.Passview.A
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006401.exe=>(RAR Sfx o)=>ps2m.exe
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006401.exe=>(RAR Sfx o)=>ps2m.exe
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006401.exe=>(RAR Sfx o)
 Update failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006401.exe=>(RAR Sfx o)=>repcale.exe
 Infected with: GenPack:Virtool.HiddenRun.B
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006401.exe=>(RAR Sfx o)=>repcale.exe
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006401.exe=>(RAR Sfx o)=>repcale.exe
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006401.exe=>(RAR Sfx o)
 Update failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006401.exe=>(RAR Sfx o)=>aliases.ini
 Infected with: Backdoor.IRC.Zapchast.JG
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006401.exe=>(RAR Sfx o)=>aliases.ini
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006401.exe=>(RAR Sfx o)=>aliases.ini
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006401.exe=>(RAR Sfx o)
 Update failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006401.exe=>(RAR Sfx o)=>cult.exe
 Infected with: Win32.Worm.Rbot.AA
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006401.exe=>(RAR Sfx o)=>cult.exe
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006401.exe=>(RAR Sfx o)=>cult.exe
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006401.exe=>(RAR Sfx o)
 Update failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006401.exe=>(RAR Sfx o)=>hd.exe
 Detected with: Application.HideWindow.B
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006401.exe=>(RAR Sfx o)=>hd.exe
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006401.exe=>(RAR Sfx o)=>hd.exe
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006401.exe=>(RAR Sfx o)
 Update failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006401.exe=>(RAR Sfx o)=>kiss.exe
 Infected with: Win32.IRC.Kelebek
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006401.exe=>(RAR Sfx o)=>kiss.exe
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006401.exe=>(RAR Sfx o)=>kiss.exe
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006401.exe=>(RAR Sfx o)
 Update failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006401.exe=>(RAR Sfx o)=>ksat.bat
 Infected with: Trojan.IRC.Gen
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006401.exe=>(RAR Sfx o)=>ksat.bat
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006401.exe=>(RAR Sfx o)=>ksat.bat
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006401.exe=>(RAR Sfx o)
 Update failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006401.exe=>(RAR Sfx o)=>murdEr.sys
 Infected with: Backdoor.Ircflood.B
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006401.exe=>(RAR Sfx o)=>murdEr.sys
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006401.exe=>(RAR Sfx o)=>murdEr.sys
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006401.exe=>(RAR Sfx o)
 Update failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006402.pif=>(RAR Sfx o)=>cult.exe
 Infected with: Win32.Worm.Rbot.AA
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006402.pif=>(RAR Sfx o)=>cult.exe
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006402.pif=>(RAR Sfx o)=>cult.exe
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006402.pif=>(RAR Sfx o)
 Update failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006402.pif=>(RAR Sfx o)=>hd.exe
 Detected with: Application.HideWindow.B
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006402.pif=>(RAR Sfx o)=>hd.exe
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006402.pif=>(RAR Sfx o)=>hd.exe
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006402.pif=>(RAR Sfx o)
 Update failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006402.pif=>(RAR Sfx o)=>kiss.exe
 Infected with: Win32.IRC.Kelebek
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006402.pif=>(RAR Sfx o)=>kiss.exe
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006402.pif=>(RAR Sfx o)=>kiss.exe
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006402.pif=>(RAR Sfx o)
 Update failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006402.pif=>(RAR Sfx o)=>ksat.bat
 Infected with: Trojan.IRC.Gen
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006402.pif=>(RAR Sfx o)=>ksat.bat
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006402.pif=>(RAR Sfx o)=>ksat.bat
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006402.pif=>(RAR Sfx o)
 Update failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006402.pif=>(RAR Sfx o)=>lovely.sys
 Infected with: Backdoor.Ircflood.B
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006402.pif=>(RAR Sfx o)=>lovely.sys
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006402.pif=>(RAR Sfx o)=>lovely.sys
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006402.pif=>(RAR Sfx o)
 Update failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006402.pif=>(RAR Sfx o)=>orrl.exe
 Infected with: Win32.Worm.Rbot.AY
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006402.pif=>(RAR Sfx o)=>orrl.exe
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006402.pif=>(RAR Sfx o)=>orrl.exe
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006402.pif=>(RAR Sfx o)
 Update failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006402.pif=>(RAR Sfx o)=>pingy.exe
 Infected with: Trojan.Downloader.Small.ZJ
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006402.pif=>(RAR Sfx o)=>pingy.exe
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006402.pif=>(RAR Sfx o)=>pingy.exe
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006402.pif=>(RAR Sfx o)
 Update failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006402.pif=>(RAR Sfx o)=>ps2m.exe
 Detected with: Application.Passview.A
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006402.pif=>(RAR Sfx o)=>ps2m.exe
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006402.pif=>(RAR Sfx o)=>ps2m.exe
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006402.pif=>(RAR Sfx o)
 Update failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006402.pif=>(RAR Sfx o)=>repcale.exe
 Infected with: GenPack:Virtool.HiddenRun.B
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006402.pif=>(RAR Sfx o)=>repcale.exe
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006402.pif=>(RAR Sfx o)=>repcale.exe
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006402.pif=>(RAR Sfx o)
 Update failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006402.pif=>(RAR Sfx o)=>aliases.ini
 Infected with: Backdoor.IRC.Zapchast.JG
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006402.pif=>(RAR Sfx o)=>aliases.ini
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006402.pif=>(RAR Sfx o)=>aliases.ini
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006402.pif=>(RAR Sfx o)
 Update failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006403.exe=>(RAR Sfx o)=>cult.exe
 Infected with: Win32.Worm.Rbot.AA
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006403.exe=>(RAR Sfx o)=>cult.exe
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006403.exe=>(RAR Sfx o)=>cult.exe
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006403.exe=>(RAR Sfx o)
 Update failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006403.exe=>(RAR Sfx o)=>hd.exe
 Detected with: Application.HideWindow.B
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006403.exe=>(RAR Sfx o)=>hd.exe
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006403.exe=>(RAR Sfx o)=>hd.exe
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006403.exe=>(RAR Sfx o)
 Update failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006404.exe=>(RAR Sfx o)=>cult.exe
 Infected with: Win32.Worm.Rbot.AA
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006404.exe=>(RAR Sfx o)=>cult.exe
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006404.exe=>(RAR Sfx o)=>cult.exe
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006404.exe=>(RAR Sfx o)
 Update failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006404.exe=>(RAR Sfx o)=>hd.exe
 Detected with: Application.HideWindow.B
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006404.exe=>(RAR Sfx o)=>hd.exe
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006404.exe=>(RAR Sfx o)=>hd.exe
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006404.exe=>(RAR Sfx o)
 Update failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006404.exe=>(RAR Sfx o)=>kiss.exe
 Infected with: Win32.IRC.Kelebek
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006404.exe=>(RAR Sfx o)=>kiss.exe
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006404.exe=>(RAR Sfx o)=>kiss.exe
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006404.exe=>(RAR Sfx o)
 Update failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006404.exe=>(RAR Sfx o)=>ksat.bat
 Infected with: Trojan.IRC.Gen
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006404.exe=>(RAR Sfx o)=>ksat.bat
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006404.exe=>(RAR Sfx o)=>ksat.bat
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006404.exe=>(RAR Sfx o)
 Update failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006404.exe=>(RAR Sfx o)=>murdEr.sys
 Infected with: Backdoor.Ircflood.B
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006404.exe=>(RAR Sfx o)=>murdEr.sys
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006404.exe=>(RAR Sfx o)=>murdEr.sys
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006404.exe=>(RAR Sfx o)
 Update failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006404.exe=>(RAR Sfx o)=>orrl.exe
 Infected with: Win32.Worm.Rbot.AY
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006404.exe=>(RAR Sfx o)=>orrl.exe
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006404.exe=>(RAR Sfx o)=>orrl.exe
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006404.exe=>(RAR Sfx o)
 Update failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006404.exe=>(RAR Sfx o)=>pingy.exe
 Infected with: Trojan.Downloader.Small.ZJ
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006404.exe=>(RAR Sfx o)=>pingy.exe
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006404.exe=>(RAR Sfx o)=>pingy.exe
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006404.exe=>(RAR Sfx o)
 Update failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006404.exe=>(RAR Sfx o)=>ps2m.exe
 Detected with: Application.Passview.A
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006404.exe=>(RAR Sfx o)=>ps2m.exe
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006404.exe=>(RAR Sfx o)=>ps2m.exe
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006404.exe=>(RAR Sfx o)
 Update failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006404.exe=>(RAR Sfx o)=>repcale.exe
 Infected with: GenPack:Virtool.HiddenRun.B
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006404.exe=>(RAR Sfx o)=>repcale.exe
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006404.exe=>(RAR Sfx o)=>repcale.exe
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006404.exe=>(RAR Sfx o)
 Update failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006404.exe=>(RAR Sfx o)=>aliases.ini
 Infected with: Backdoor.IRC.Zapchast.JG
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006404.exe=>(RAR Sfx o)=>aliases.ini
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006404.exe=>(RAR Sfx o)=>aliases.ini
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006404.exe=>(RAR Sfx o)
 Update failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006405.exe=>(RAR Sfx o)=>cult.exe
 Infected with: Win32.Worm.Rbot.AA
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006405.exe=>(RAR Sfx o)=>cult.exe
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006405.exe=>(RAR Sfx o)=>cult.exe
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006405.exe=>(RAR Sfx o)
 Update failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006405.exe=>(RAR Sfx o)=>hd.exe
 Detected with: Application.HideWindow.B
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006405.exe=>(RAR Sfx o)=>hd.exe
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006405.exe=>(RAR Sfx o)=>hd.exe
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006405.exe=>(RAR Sfx o)
 Update failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006405.exe=>(RAR Sfx o)=>kiss.exe
 Infected with: Win32.IRC.Kelebek
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006405.exe=>(RAR Sfx o)=>kiss.exe
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006405.exe=>(RAR Sfx o)=>kiss.exe
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006405.exe=>(RAR Sfx o)
 Update failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006405.exe=>(RAR Sfx o)=>ksat.bat
 Infected with: Trojan.IRC.Gen
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006405.exe=>(RAR Sfx o)=>ksat.bat
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006405.exe=>(RAR Sfx o)=>ksat.bat
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006405.exe=>(RAR Sfx o)
 Update failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006405.exe=>(RAR Sfx o)=>lovely.sys
 Infected with: Backdoor.Ircflood.B
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006405.exe=>(RAR Sfx o)=>lovely.sys
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006405.exe=>(RAR Sfx o)=>lovely.sys
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006405.exe=>(RAR Sfx o)
 Update failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006405.exe=>(RAR Sfx o)=>orrl.exe
 Infected with: Win32.Worm.Rbot.AY
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006405.exe=>(RAR Sfx o)=>orrl.exe
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006405.exe=>(RAR Sfx o)=>orrl.exe
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006405.exe=>(RAR Sfx o)
 Update failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006405.exe=>(RAR Sfx o)=>pingy.exe
 Infected with: Trojan.Downloader.Small.ZJ
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006405.exe=>(RAR Sfx o)=>pingy.exe
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006405.exe=>(RAR Sfx o)=>pingy.exe
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006405.exe=>(RAR Sfx o)
 Update failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006405.exe=>(RAR Sfx o)=>ps2m.exe
 Detected with: Application.Passview.A
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006405.exe=>(RAR Sfx o)=>ps2m.exe
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006405.exe=>(RAR Sfx o)=>ps2m.exe
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006405.exe=>(RAR Sfx o)
 Update failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006405.exe=>(RAR Sfx o)=>repcale.exe
 Infected with: GenPack:Virtool.HiddenRun.B
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006405.exe=>(RAR Sfx o)=>repcale.exe
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006405.exe=>(RAR Sfx o)=>repcale.exe
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006405.exe=>(RAR Sfx o)
 Update failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006405.exe=>(RAR Sfx o)=>aliases.ini
 Infected with: Backdoor.IRC.Zapchast.JG
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006405.exe=>(RAR Sfx o)=>aliases.ini
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006405.exe=>(RAR Sfx o)=>aliases.ini
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006405.exe=>(RAR Sfx o)
 Update failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006406.exe=>(RAR Sfx o)=>cult.exe
 Infected with: Win32.Worm.Rbot.AA
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006406.exe=>(RAR Sfx o)=>cult.exe
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006406.exe=>(RAR Sfx o)=>cult.exe
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006406.exe=>(RAR Sfx o)
 Update failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006406.exe=>(RAR Sfx o)=>hd.exe
 Detected with: Application.HideWindow.B
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006406.exe=>(RAR Sfx o)=>hd.exe
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006406.exe=>(RAR Sfx o)=>hd.exe
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006406.exe=>(RAR Sfx o)
 Update failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006406.exe=>(RAR Sfx o)=>kiss.exe
 Infected with: Win32.IRC.Kelebek
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006406.exe=>(RAR Sfx o)=>kiss.exe
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006406.exe=>(RAR Sfx o)=>kiss.exe
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006406.exe=>(RAR Sfx o)
 Update failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006406.exe=>(RAR Sfx o)=>ksat.bat
 Infected with: Trojan.IRC.Gen
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006406.exe=>(RAR Sfx o)=>ksat.bat
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006406.exe=>(RAR Sfx o)=>ksat.bat
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006406.exe=>(RAR Sfx o)
 Update failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006406.exe=>(RAR Sfx o)=>lovely.sys
 Infected with: Backdoor.Ircflood.B
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006406.exe=>(RAR Sfx o)=>lovely.sys
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006406.exe=>(RAR Sfx o)=>lovely.sys
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006406.exe=>(RAR Sfx o)
 Update failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006406.exe=>(RAR Sfx o)=>orrl.exe
 Infected with: Win32.Worm.Rbot.AY
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006406.exe=>(RAR Sfx o)=>orrl.exe
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006406.exe=>(RAR Sfx o)=>orrl.exe
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006406.exe=>(RAR Sfx o)
 Update failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006406.exe=>(RAR Sfx o)=>pingy.exe
 Infected with: Trojan.Downloader.Small.ZJ
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006406.exe=>(RAR Sfx o)=>pingy.exe
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006406.exe=>(RAR Sfx o)=>pingy.exe
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006406.exe=>(RAR Sfx o)
 Update failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006406.exe=>(RAR Sfx o)=>ps2m.exe
 Detected with: Application.Passview.A
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006406.exe=>(RAR Sfx o)=>ps2m.exe
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006406.exe=>(RAR Sfx o)=>ps2m.exe
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006406.exe=>(RAR Sfx o)
 Update failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006406.exe=>(RAR Sfx o)=>repcale.exe
 Infected with: GenPack:Virtool.HiddenRun.B
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006406.exe=>(RAR Sfx o)=>repcale.exe
 Disinfection failed
 
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006406.exe=>(RAR Sfx o)=>repcale.exe
 Deleted
 
C:\System Volume Information\_restore{845A621C-47AF-4FF

Lyonnais92 · Answer

Bonjour,

télécharge OTMoveIt http://download.bleepingcomputer.com/oldtimer/OTMoveIt.exe (de Old_Timer) sur ton Bureau.
double-clique sur OTMoveIt.exe pour le lancer.
copie la liste qui se trouve en citation ci-dessous,
et colle-la dans le cadre de gauche de OTMoveIt :Paste List of Files/Folders to be moved.

C:\esd.exe 
C:\essd.exe 
C:\gexa.exe
C:\gezzxa.exe
C:\lol1.exe
C:\sdsdfsdf.exe



clique sur MoveIt! pour lancer la suppression.
le résultat apparaitra dans le cadre "Results".
clique sur Exit pour fermer.
poste le rapport situé dans C:\_OTMoveIt\MovedFiles.

il te sera peut-être demander de redémarrer le pc pour achever la suppression.si c'est le cas accepte par Yes.

Si OTMoveIt ne l'a pas demandé, redémarre l'ordi ;

remets un rapport HIJACKTHIS;

scoubidou78 · Answer

bonjour 

voici le rapport otmoveit

C:\esd.exe moved successfully.
C:\essd.exe moved successfully.
C:\gexa.exe moved successfully.
C:\gezzxa.exe moved successfully.
C:\lol1.exe moved successfully.
C:\sdsdfsdf.exe moved successfully.
 
Created on 12/31/2007 09:31:29

je tenvoie un hijacthis de suite

a +

scoubidou78 · Answer

as tu vu le rapport otmoveit juste au dessus?

voici maintenant hijacthis

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 09:46:14, on 31/12/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\windows\system\hpsysdrv.exe
C:\HP\KBD\KBD.EXE
C:\WINDOWS\System32\hkcmd.exe
C:\WINDOWS\system32\pctspk.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\Windows Live\Contrôle parental\fssui.exe
C:\Program Files\hp center\137903\Program\BackWeb-137903.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\Windows Live Toolbar\msn_sl.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://neufportail.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://fr3.hpwis.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://srch-fr3.hpwis.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://srch-fr3.hpwis.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://srch-fr3.hpwis.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.hpe.com/h41271/404D.aspx?cc=us&ll=en&url=http://domainredirects.ext.hpe.com/fr3.hpwis.com/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: Windows Live OneCare Family Safety Browser Helper - {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - C:\Program Files\Windows Live\Contrôle parental\fssbho.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
O4 - HKLM\..\Run: [Microsoft Works Portfolio] C:\Program Files\Microsoft Works\WksSb.exe /AllUsers
O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Microsoft Works\WkDetect.exe
O4 - HKLM\..\Run: [PCTVOICE] pctspk.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [fssui] "C:\Program Files\Windows Live\Contrôle parental\fssui.exe" -autorun
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: hp center.lnk = C:\Program Files\hp center\137903\Program\BackWeb-137903.exe
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: Organise-notes - {9455301C-CF6B-11D3-A266-00C04F689C50} - C:\Program Files\Fichiers communs\Microsoft Shared\Reference 2001\EROProj.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/...
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/...
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Sunbelt Personal Firewall 4 (SPF4) - Sunbelt Software - C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe

Lyonnais92 · Answer

Bonjour,

coté rapport Hijackthis, ça va bien, un ou 2 truc mineurs

Je te conseillerai 'éliminer BackWeb-137903.exe :

 "With the My HP Center, consumers have access directly from the desktop to Internet sites featuring special offers for HP customers ranging from personal finance and shopping to digital imaging and music"

Avec My HP Center, les consommateurs ont accès depuis le Bureau à des sites Internet proposant des ofrres spéciales aux propriétaires d'un HP, allant de la gestion financière à la musique et dessin (traduction libre)

Fais un scan minutieux avec avast de ton Poste d etarvail ainsi qu'un scan aavec AVG AS.

Poste les 2 rapports.

scoubidou78 · Answer

je vais faire le scan avast avg

mais comment 'éliminer BackWeb-137903.exe  ?

MERCI

Lyonnais92 · Answer

Re,

fais les 2 scans, poste les rapports.

Pour backweb, je te dirai comment faire. Je voulais juste avoir ton accord.

scoubidou78 · Answer

bonjour et bonne annee,


VG Anti-Spyware - Rapport d'analyse
---------------------------------------------------------

 + Créé à:	13:28:04 31/12/2007

 + Résultat de l'analyse:	



C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006385.exe -> Backdoor.Rbot.eix : Nettoyé.
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006383.exe -> Backdoor.Rbot.esx : Nettoyé.
C:\Documents and Settings\Propriétaire\Cookies\propriétaire@atdmt[2].txt -> TrackingCookie.Atdmt : Nettoyé.
C:\Documents and Settings\Propriétaire\Cookies\propriétaire@bluestreak[2].txt -> TrackingCookie.Bluestreak : Nettoyé.
C:\Documents and Settings\Propriétaire\Cookies\propriétaire@doubleclick[1].txt -> TrackingCookie.Doubleclick : Nettoyé.
C:\Documents and Settings\Propriétaire\Cookies\propriétaire@mediaplex[1].txt -> TrackingCookie.Mediaplex : Nettoyé.
C:\Documents and Settings\Propriétaire\Cookies\propriétaire@smartadserver[1].txt -> TrackingCookie.Smartadserver : Nettoyé.
C:\Documents and Settings\Propriétaire\Cookies\propriétaire@tradedoubler[2].txt -> TrackingCookie.Tradedoubler : Nettoyé.
C:\Documents and Settings\Propriétaire\Cookies\propriétaire@weborama[1].txt -> TrackingCookie.Weborama : Nettoyé.
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006382.dll -> Trojan.Flood : Nettoyé.
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006376.exe/ksat.bat -> Trojan.Small : Nettoyé.
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006377.exe/ksat.bat -> Trojan.Small : Nettoyé.
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006378.pif/ksat.bat -> Trojan.Small : Nettoyé.
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006387.exe/ksat.bat -> Trojan.Small : Nettoyé.
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006388.exe/ksat.bat -> Trojan.Small : Nettoyé.
C:\WINDOWS\SYSTEM32\Sx.exe/ksat.bat -> Trojan.Small : Nettoyé.
C:\WINDOWS\SYSTEM32\Sxfgfd.exe/ksat.bat -> Trojan.Small : Nettoyé.
C:\WINDOWS\SYSTEM32\dfgsdfcxvxs.exe/ksat.bat -> Trojan.Small : Nettoyé.
C:\WINDOWS\SYSTEM32\dfgsdfs.exe/ksat.bat -> Trojan.Small : Nettoyé.
C:\WINDOWS\SYSTEM32\dsfds.pif/ksat.bat -> Trojan.Small : Nettoyé.
C:\WINDOWS\SYSTEM32\dsgsf.exe/ksat.bat -> Trojan.Small : Nettoyé.
C:\WINDOWS\SYSTEM32\eg.exe/ksat.bat -> Trojan.Small : Nettoyé.
C:\_OTMoveIt\MovedFiles\gexa.exe/ksat.bat -> Trojan.Small : Nettoyé.
C:\_OTMoveIt\MovedFiles\gezzxa.exe/ksat.bat -> Trojan.Small : Nettoyé.
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006384.bat -> Trojan.Starter.o : Nettoyé.


Fin du rapport

Help, je suis envahi de virus/vers W32 merci

75 réponses

Votre réponse

Discussions similaires

Newsletters