Brontok sur Ipod...
Piopascontent
-
jlpjlp Messages postés 52399 Statut Contributeur sécurité -
jlpjlp Messages postés 52399 Statut Contributeur sécurité -
Bonjour,voila , j ai un petit probleme : JE viens de formater et , quand je re installe tout je prends mon IPOD pour toutes les données enregistré dessus. Mais , des que je fais quelque chose BOOM virus , si je vais sur le net et que je telecharger ca re demarre... Donc je viens de re formater (super! :p) comment je peux enlever ce virus de mon IPOD ?
Merci a vous :))
Merci a vous :))
Configuration: Windows XP Internet Explorer 6.0
18 réponses
-
slt
essaye ceci après avoir branché ton ipod sur l'ordi
1/ # Télécharge RavAntivirus d'Evosla :
http://ww25.evosla.com/compteur.php?soft=rav_antivirus
# Si tu as une clé USB, disque dur externe, etc, branche-les sans les ouvrir avant de lancer ce FIX
# Fais un clic droit sur le fichier .ZIP > Extraire sur > le Bureau
# Doucle-clique sur >> RAV.exe << afin de lancer l'outil.
# Une fois RAV ANTIVIRUS lancé, laisse-le réagir , il scanne automatiquement tout les lecteurs (disques fixes et amovibles)
# Si infection > un log s'établira, sinon le soft affichera (très rapide) ==>Votre Ordinateur est sain .
# Retire tes disques amovibles et redémarrez votre ordinateur.
# Poste le rapport, si infection!
2/ Télécharge sur le bureau Flash Disinfector (de SUBS) à cette adresse : http://www.techsupportforum.com/sectools/sUBs/Flash_Disinfector.exe
Double-clique sur l’icône.
Les icônes vont disparaître. C’est normal.
Si un rapport est généré en cas d'infection, sauvegarde-le sur le bureau, et poste le ensuite
Redémarre ensuite le PC. -
-
Donc il ne trouve pour l instant rien , mais j avais scan avec "Avira AntiVir" qui m a trouvé 200+ infections et les a mis en quarantaine. Ca ne pose pas de probleme ?
-
colle un rapport antivir
et
colle un rapport hijackthis
http://www.trendsecure.com/portal/en-US/tools/security_tools/hijackthis/download
manuel :
http://pagesperso-orange.fr/rginformatique/section%20virus/demohijack.htm
https://leblogdeclaude.blogspot.com/2006/10/informatique-section-hijackthis.html
Je conseille de renomer Hijackthis, pour contrer une éventuelle infection de Vundo.
ex:Renomme le fichier HijackThis.exe en eden.exe pour cela, fais un clic droit sur le fichier HijackThis.exe et choisis renommer dans la liste
Ensuite avec Explorer créer un dossier c:\hijackthis
Décompresser Hijackthis dans ce dossier.
C'est important pour les sauvegardes." -
Vous n’avez pas trouvé la réponse que vous recherchez ?
Posez votre question -
Attention les rapports sont TRES grand :(
Celui Avira :
Avira AntiVir Personal
Report file date: mercredi 11 juin 2008 16:11
Scanning for 1165085 virus strains and unwanted programs.
Licensed to: Avira AntiVir PersonalEdition Classic
Serial number: 0000149996-ADJIE-0001
Platform: Windows XP
Windows version: (Service Pack 1) [5.1.2600]
Boot mode: Save mode
Username: tg
Computer name: PROPRI-9ZE5EA3N
Version information:
BUILD.DAT : 8.1.00.295 16479 Bytes 09/04/2008 16:24:00
AVSCAN.EXE : 8.1.2.12 311553 Bytes 18/03/2008 09:02:58
AVSCAN.DLL : 8.1.1.0 53505 Bytes 07/02/2008 08:43:38
LUKE.DLL : 8.1.2.9 151809 Bytes 28/02/2008 08:41:24
LUKERES.DLL : 8.1.2.1 12033 Bytes 21/02/2008 08:28:42
ANTIVIR0.VDF : 6.40.0.0 11030528 Bytes 18/07/2007 10:33:34
ANTIVIR1.VDF : 7.0.3.2 5447168 Bytes 07/03/2008 13:08:58
ANTIVIR2.VDF : 7.0.3.62 337408 Bytes 21/03/2008 19:12:34
ANTIVIR3.VDF : 7.0.3.68 57856 Bytes 25/03/2008 08:27:50
Engineversion : 8.1.0.28
AEVDF.DLL : 8.1.0.5 102772 Bytes 25/02/2008 09:58:22
AESCRIPT.DLL : 8.1.0.19 229754 Bytes 07/04/2008 15:34:46
AESCN.DLL : 8.1.0.12 115060 Bytes 07/04/2008 15:34:46
AERDL.DLL : 8.1.0.19 418164 Bytes 07/04/2008 15:34:46
AEPACK.DLL : 8.1.1.0 364918 Bytes 18/03/2008 11:20:44
AEOFFICE.DLL : 8.1.0.15 192889 Bytes 07/04/2008 15:34:46
AEHEUR.DLL : 8.1.0.15 1147253 Bytes 07/04/2008 15:34:46
AEHELP.DLL : 8.1.0.11 115061 Bytes 07/04/2008 15:34:44
AEGEN.DLL : 8.1.0.15 299379 Bytes 07/04/2008 15:34:44
AEEMU.DLL : 8.1.0.5 430450 Bytes 07/04/2008 15:34:44
AECORE.DLL : 8.1.0.25 168309 Bytes 08/04/2008 09:58:34
AVWINLL.DLL : 1.0.0.7 14593 Bytes 23/01/2008 17:07:54
AVPREF.DLL : 8.0.0.1 25857 Bytes 18/02/2008 10:37:52
AVREP.DLL : 7.0.0.1 155688 Bytes 16/04/2007 13:26:48
AVREG.DLL : 8.0.0.0 30977 Bytes 23/01/2008 17:07:50
AVARKT.DLL : 1.0.0.23 307457 Bytes 12/02/2008 08:29:24
AVEVTLOG.DLL : 8.0.0.11 114945 Bytes 28/02/2008 08:31:32
SQLITE3.DLL : 3.3.17.1 339968 Bytes 22/01/2008 17:28:04
SMTPLIB.DLL : 1.2.0.19 28929 Bytes 23/01/2008 17:08:40
NETNT.DLL : 8.0.0.1 7937 Bytes 25/01/2008 12:05:12
RCIMAGE.DLL : 8.0.0.35 2371841 Bytes 10/03/2008 14:37:26
RCTEXT.DLL : 8.0.32.0 86273 Bytes 06/03/2008 12:02:12
Configuration settings for the scan:
Jobname..........................: ShlExt
Configuration file...............: C:\DOCUME~1\tg\LOCALS~1\Temp\db91cae0.avp
Logging..........................: low
Primary action...................: interactive
Secondary action.................: ignore
Scan master boot sector..........: on
Scan boot sector.................: on
Boot sectors.....................: K:,
Scan memory......................: on
Process scan.....................: off
Scan registry....................: off
Search for rootkits..............: off
Scan all files...................: Intelligent file selection
Scan archives....................: on
Recursion depth..................: 20
Smart extensions.................: on
Macro heuristic..................: on
File heuristic...................: medium
Start of the scan: mercredi 11 juin 2008 16:11
Starting the file scan:
Begin scan in 'K:\' <IPOD>
K:\iPod_Control\Music\F06\F06.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '4885dd3a.qua'!
K:\iPod_Control\Music\F07\F07.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '4886dd3d.qua'!
K:\iPod_Control\Music\F08\F08.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '4887dd3f.qua'!
K:\iPod_Control\Music\F09\F09.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '4888dd41.qua'!
K:\iPod_Control\Music\F10\F10.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '487fdd44.qua'!
K:\iPod_Control\Music\F11\F11.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '4880dd4a.qua'!
K:\iPod_Control\Music\F12\F12.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '4881dd4a.qua'!
K:\iPod_Control\Music\F13\F13.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '4882dd4b.qua'!
K:\iPod_Control\Music\F14\F14.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '4883dd4b.qua'!
K:\iPod_Control\Music\F15\F15.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '4884dd4c.qua'!
K:\iPod_Control\Music\F16\F16.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '4885dd4c.qua'!
K:\iPod_Control\Music\F17\F17.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '4886dd4c.qua'!
K:\iPod_Control\Music\F18\F18.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '4887dd4d.qua'!
K:\iPod_Control\Music\F19\F19.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '4888dd4d.qua'!
K:\iPod_Control\Music\F20\F20.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '487fdd4e.qua'!
K:\iPod_Control\Music\F21\F21.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '4880dd4f.qua'!
K:\iPod_Control\Music\F22\F22.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '4881dd4f.qua'!
K:\iPod_Control\Music\F23\F23.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '4882dd50.qua'!
K:\iPod_Control\Music\F24\F24.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '4883dd50.qua'!
K:\iPod_Control\Music\F25\F25.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '4884dd50.qua'!
K:\iPod_Control\Music\F26\F26.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '4885dd51.qua'!
K:\iPod_Control\Music\F27\F27.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '4886dd51.qua'!
K:\iPod_Control\Music\F28\F28.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '4887dd52.qua'!
K:\iPod_Control\Music\F29\F29.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '4888dd52.qua'!
K:\iPod_Control\Music\F30\F30.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '487fdd54.qua'!
K:\iPod_Control\Music\F31\F31.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '4880dd54.qua'!
K:\iPod_Control\Music\F32\F32.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '4881dd54.qua'!
K:\iPod_Control\Music\F33\F33.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '4882dd55.qua'!
K:\iPod_Control\Music\F34\F34.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '4883dd55.qua'!
K:\iPod_Control\Music\F35\F35.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '4884dd56.qua'!
K:\iPod_Control\Music\F36\F36.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '4885dd56.qua'!
K:\iPod_Control\Music\F37\F37.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '4886dd56.qua'!
K:\iPod_Control\Music\F38\F38.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '4887dd57.qua'!
K:\iPod_Control\Music\F39\F39.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '4888dd57.qua'!
K:\iPod_Control\Music\F41\F41.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '4880dd59.qua'!
K:\iPod_Control\Music\F42\F42.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '4881dd59.qua'!
K:\iPod_Control\Music\F43\F43.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '4882dd5a.qua'!
K:\iPod_Control\Music\F44\F44.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '4883dd5a.qua'!
K:\iPod_Control\Music\F45\F45.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '4884dd5b.qua'!
K:\iPod_Control\Music\F46\F46.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '4885dd5b.qua'!
K:\iPod_Control\Music\F47\F47.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '4886dd5c.qua'!
K:\iPod_Control\Music\F48\F48.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '4887dd5c.qua'!
K:\iPod_Control\Music\F49\F49.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '4888dd5d.qua'!
K:\iPod_Control\Artwork\Artwork.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48c3dd9b.qua'!
K:\Contacts\Contacts.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48bddd98.qua'!
K:\Notes\Notes.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48c3dd99.qua'!
K:\wow\Interface\AddOns\DBM_Karazhan\DBM_Karazhan.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '489cdd6c.qua'!
K:\wow\Interface\AddOns\DBM_Hyjal\DBM_Hyjal.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '49f06865.qua'!
K:\wow\Interface\AddOns\DBM_GUI\DBM_GUI.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '489cdd6d.qua'!
K:\wow\Interface\AddOns\DBM_BlackTemple\DBM_BlackTemple.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '49f06866.qua'!
K:\wow\Interface\AddOns\DBM_Battlegrounds\DBM_Battlegrounds.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '489cdd6e.qua'!
K:\wow\Interface\AddOns\DBM_API\DBM_API.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '49f06867.qua'!
K:\wow\Interface\AddOns\DBM_API\Textures\Textures.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48c7dd91.qua'!
K:\wow\Interface\AddOns\DBM_TheEye\DBM_TheEye.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '489cdd6f.qua'!
K:\wow\Interface\AddOns\DBM_Serpentshrine\DBM_Serpentshrine.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '49f06878.qua'!
K:\wow\Interface\AddOns\DBM_Other\DBM_Other.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '489cdd71.qua'!
K:\wow\Interface\AddOns\KLHThreatMeter\KLHThreatMeter.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '4897dd7a.qua'!
K:\wow\Interface\AddOns\KLHThreatMeter\Readme\Readme.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48b0dd93.qua'!
K:\wow\Interface\AddOns\KLHThreatMeter\Readme\Old Changelogs\Old Changelogs.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48b3dd9a.qua'!
K:\wow\Interface\AddOns\KLHThreatMeter\Code\Code.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48b3dd9e.qua'!
K:\wow\Interface\AddOns\KLHThreatMeter\Code\Services\Services.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48c1dd94.qua'!
K:\wow\Interface\AddOns\KLHThreatMeter\Code\NewGui\NewGui.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48c6dd95.qua'!
K:\wow\Interface\AddOns\KLHThreatMeter\Code\NewGui\MenuItems\MenuItems.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48bddd95.qua'!
K:\wow\Interface\AddOns\KLHThreatMeter\Code\Localisation\Localisation.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48b2dd9f.qua'!
K:\wow\Interface\AddOns\KLHThreatMeter\Code\Framework\Framework.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48b0dda3.qua'!
K:\wow\Interface\AddOns\KLHThreatMeter\Code\Bosses\Bosses.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48c2dda0.qua'!
K:\wow\Interface\AddOns\KLHThreatMeter\Code\Bosses\Wizard\Wizard.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48c9dd9a.qua'!
K:\wow\Interface\AddOns\KLHThreatMeter\Code\Abilities\Abilities.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48b8dd94.qua'!
K:\wow\Interface\AddOns\BonusScanner\BonusScanner.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48bddda1.qua'!
K:\wow\Interface\AddOns\TitanXP\TitanXP.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '49af6894.qua'!
K:\wow\Interface\AddOns\TitanRider\TitanRider.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48c3dd9c.qua'!
K:\wow\Interface\AddOns\TitanRepair\TitanRepair.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '49af6895.qua'!
K:\wow\Interface\AddOns\TitanRegen\TitanRegen.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48c3dd9e.qua'!
K:\wow\Interface\AddOns\TitanPerformance\TitanPerformance.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '49af6897.qua'!
K:\wow\Interface\AddOns\TitanMoney\TitanMoney.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48c3dd9d.qua'!
K:\wow\Interface\AddOns\TitanLootType\TitanLootType.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '49af6896.qua'!
K:\wow\Interface\AddOns\TitanItemBonuses\TitanItemBonuses.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48c3dd9f.qua'!
K:\wow\Interface\AddOns\TitanCoords\TitanCoords.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48c3dd90.qua'!
K:\wow\Interface\AddOns\TitanClock\TitanClock.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '49af6899.qua'!
K:\wow\Interface\AddOns\TitanBag\TitanBag.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48c3dd92.qua'!
K:\wow\Interface\AddOns\TitanAmmo\TitanAmmo.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '49af689b.qua'!
K:\wow\Interface\AddOns\Titan\Titan.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '49af68a8.qua'!
K:\wow\Interface\AddOns\Titan\TitanXP\TitanXP.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '49ae6098.qua'!
K:\wow\Interface\AddOns\Titan\TitanRider\TitanRider.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48c3dda0.qua'!
K:\wow\Interface\AddOns\Titan\TitanRepair\TitanRepair.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '49ae0931.qua'!
K:\wow\Interface\AddOns\Titan\TitanRegen\TitanRegen.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48c3dda2.qua'!
K:\wow\Interface\AddOns\Titan\TitanPerformance\TitanPerformance.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48c3dda1.qua'!
K:\wow\Interface\AddOns\Titan\TitanMoney\TitanMoney.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '49ae0932.qua'!
K:\wow\Interface\AddOns\Titan\TitanLootType\TitanLootType.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48c3dda3.qua'!
K:\wow\Interface\AddOns\Titan\TitanItemBonuses\TitanItemBonuses.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '49ae0933.qua'!
K:\wow\Interface\AddOns\Titan\TitanCoords\TitanCoords.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48c3dda4.qua'!
K:\wow\Interface\AddOns\Titan\TitanClock\TitanClock.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '49ae609b.qua'!
K:\wow\Interface\AddOns\Titan\TitanBag\TitanBag.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '49ae609d.qua'!
K:\wow\Interface\AddOns\Titan\TitanAmmo\TitanAmmo.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '49ae609c.qua'!
K:\wow\Interface\AddOns\Titan\Artwork\Artwork.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48c3ddac.qua'!
K:\wow\Interface\AddOns\MobInfo2\MobInfo2.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48b1ddaa.qua'!
K:\wow\Interface\AddOns\AtlasLoot\AtlasLoot.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48bbddaf.qua'!
K:\wow\Interface\AddOns\AtlasLoot\WorldBosses\WorldBosses.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48c1ddaa.qua'!
K:\wow\Interface\AddOns\AtlasLoot\TableRegister\TableRegister.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48b1dd9d.qua'!
K:\wow\Interface\AddOns\AtlasLoot\Sets\Sets.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '49ae609a.qua'!
K:\wow\Interface\AddOns\AtlasLoot\Reputation\Reputation.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48bfdda1.qua'!
K:\wow\Interface\AddOns\AtlasLoot\PvP\PvP.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '489fddb3.qua'!
K:\wow\Interface\AddOns\AtlasLoot\Libs\Tablet-2.0\Tablet-2.0`.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48b1dd9e.qua'!
K:\wow\Interface\AddOns\AtlasLoot\Libs\FuBarPlugin-2.0\FuBarPlugin-2.0`.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '4891ddb3.qua'!
K:\wow\Interface\AddOns\AtlasLoot\Libs\Dewdrop-2.0\Dewdrop-2.0`.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48c6dda3.qua'!
K:\wow\Interface\AddOns\AtlasLoot\Libs\Babble-Zone-2.2\Babble-Zone-2.2`.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48b1dd9f.qua'!
K:\wow\Interface\AddOns\AtlasLoot\Libs\Babble-Tradeskill-2.2\Babble-Tradeskill-2.2`.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '49df1948.qua'!
K:\wow\Interface\AddOns\AtlasLoot\Libs\Babble-Inventory-2.2\Babble-Inventory-2.2`.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48b1dda0.qua'!
K:\wow\Interface\AddOns\AtlasLoot\Libs\Babble-Faction-2.2\Babble-Faction-2.2`.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '49df01e1.qua'!
K:\wow\Interface\AddOns\AtlasLoot\Libs\Babble-Class-2.2\Babble-Class-2.2`.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48b1dda2.qua'!
K:\wow\Interface\AddOns\AtlasLoot\Libs\Babble-Boss-2.2\Babble-Boss-2.2`.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48b1dda1.qua'!
K:\wow\Interface\AddOns\AtlasLoot\Libs\AceOO-2.0\AceOO-2.0`.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48b4dda3.qua'!
K:\wow\Interface\AddOns\AtlasLoot\Libs\AceLocale-2.2\AceLocale-2.2`.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '49da01e4.qua'!
K:\wow\Interface\AddOns\AtlasLoot\Libs\AceLibrary\AceLibrary.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48b4dda4.qua'!
K:\wow\Interface\AddOns\AtlasLoot\Libs\AceEvent-2.0\AceEvent-2.0`.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '49da01e5.qua'!
K:\wow\Interface\AddOns\AtlasLoot\Libs\AceDB-2.0\AceDB-2.0`.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48b4dda6.qua'!
K:\wow\Interface\AddOns\AtlasLoot\Libs\AceAddon-2.0\AceAddon-2.0`.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48b4dda5.qua'!
K:\wow\Interface\AddOns\AtlasLoot\Instances\Instances.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48c2ddb0.qua'!
K:\wow\Interface\AddOns\AtlasLoot\Images\Images.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48b0ddaf.qua'!
K:\wow\Interface\AddOns\AtlasLoot\Documentation\Documentation.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48b2ddb2.qua'!
K:\wow\Interface\AddOns\AtlasLoot\DefaultFrame\DefaultFrame.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48b5dda8.qua'!
K:\wow\Interface\AddOns\AtlasLoot\Core\Core.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48c1ddb3.qua'!
K:\wow\Interface\AddOns\AtlasLoot\Constants\Constants.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48bdddb3.qua'!
K:\wow\Interface\AddOns\AtlasLoot\Bossnames\Bossnames.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48c2ddb3.qua'!
K:\wow\Interface\AddOns\AtlasLoot\Add_Ons\Add_Ons.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48b3dda9.qua'!
K:\wow\Interface\AddOns\DamageMeters\DamageMeters.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48bcdda6.qua'!
K:\wow\Interface\AddOns\DamageMeters\TitanDamageMeters\TitanDamageMeters.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48c3ddae.qua'!
K:\wow\Interface\AddOns\DamageMeters\TitanDamageMeters\Skin\Skin.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48b8ddb1.qua'!
K:\wow\Interface\AddOns\DamageMeters\ChatThrottleLib\ChatThrottleLib.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48b0ddae.qua'!
K:\wow\Interface\AddOns\GuildEventManager2\GuildEventManager2.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48b8ddbc.qua'!
K:\wow\Interface\AddOns\GuildEventManager2\images\fr\fr.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '487dddb9.qua'!
K:\wow\Interface\AddOns\GuildEventManager2\images\en\en.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '487dddb5.qua'!
K:\wow\Interface\AddOns\Blizzard_TrainerUI\Blizzard_TrainerUI.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48b8ddb4.qua'!
K:\wow\Interface\AddOns\Blizzard_TradeSkillUI\Blizzard_TradeSkillUI.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '49d411d5.qua'!
K:\wow\Interface\AddOns\Blizzard_TalentUI\Blizzard_TalentUI.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48b8ddb6.qua'!
K:\wow\Interface\AddOns\Blizzard_RaidUI\Blizzard_RaidUI.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48b8ddb5.qua'!
K:\wow\Interface\AddOns\Blizzard_MacroUI\Blizzard_MacroUI.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '49d411d6.qua'!
K:\wow\Interface\AddOns\Blizzard_ItemSocketingUI\Blizzard_ItemSocketingUI.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48b8ddb7.qua'!
K:\wow\Interface\AddOns\Blizzard_InspectUI\Blizzard_InspectUI.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '49d411d8.qua'!
K:\wow\Interface\AddOns\Blizzard_GMSurveyUI\Blizzard_GMSurveyUI.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '49d411d7.qua'!
K:\wow\Interface\AddOns\Blizzard_CraftUI\Blizzard_CraftUI.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48b8ddb8.qua'!
K:\wow\Interface\AddOns\Blizzard_CombatText\Blizzard_CombatText.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48b8ddb9.qua'!
K:\wow\Interface\AddOns\Blizzard_BindingUI\Blizzard_BindingUI.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '49d411da.qua'!
K:\wow\Interface\AddOns\Blizzard_BattlefieldMinimap\Blizzard_BattlefieldMinimap.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48b8ddbb.qua'!
K:\wow\Interface\AddOns\Blizzard_AuctionUI\Blizzard_AuctionUI.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '49d411d9.qua'!
K:\wow\wow\frFR\frFR.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '4895ddbf.qua'!
K:\wow\wow\frFR\WTF\WTF.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '4895dda1.qua'!
K:\wow\wow\frFR\Documentation\Documentation.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48b2ddbc.qua'!
K:\wow\wow\frFR\Documentation\Troubleshooting\Troubleshooting.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48beddc0.qua'!
K:\wow\wow\frFR\Documentation\Support\Support.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48bfddc3.qua'!
K:\wow\wow\frFR\Documentation\ReadMe\ReadMe.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48b0ddb4.qua'!
K:\wow\wow\frFR\Documentation\Layout\Layout.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48c8ddb0.qua'!
K:\wow\wow\frFR\Documentation\Images\Images.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48b0ddbd.qua'!
K:\wow\wow\frFR\Documentation\Images\titles\titles.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48c3ddba.qua'!
K:\wow\wow\frFR\Documentation\Images\buttons\buttons.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48c3ddc6.qua'!
K:\wow\wow\frFR\Interface\Cinematics\Cinematics.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48bdddbb.qua'!
K:\wow\WoW-BurningCrusade-frFR-Slim-Installer\WoW-BurningCrusade-frFR-Slim-Installer.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48a6ddc2.qua'!
K:\wow\Screenshots\Screenshots.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48c1ddb8.qua'!
K:\wow\Patches\WoW-2.1.3-to-2.2.0-frFR-Win-patch\WoW-2.1.3-to-2.2.0-frFR-Win-patch`.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48a6ddc5.qua'!
K:\wow\Patches\WoW-2.0.12-to-2.1.0-frFR-Win-patch\WoW-2.0.12-to-2.1.0-frFR-Win-patch`.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '49cec90e.qua'!
K:\wow\Patches\WoW-2.0.0-to-2.0.3-frFR-Win-patch\WoW-2.0.0-to-2.0.3-frFR-Win-patch`.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48a6ddc6.qua'!
K:\Photos\Thumbs\Thumbs.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48c4ddbf.qua'!
K:\nana\Musiques\The Trinity_By_Paco\The Trinity_By_Paco.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48b4ddc7.qua'!
K:\nana\OpenOffice.org 2.1 Installation Files\java\java.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48c5df9c.qua'!
K:\nana\OpenOffice.org 2.1 Installation Files\readmes\readmes.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48b0dfa1.qua'!
K:\nana\OpenOffice.org 2.1 Installation Files\licenses\licenses.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48b2dfa5.qua'!
K:\nana\WoW-2.0.0-frFR-Installer\WoW-2.0.0-frFR-Installer`.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48a6dfac.qua'!
K:\nana\autres\autres.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48c3dfb9.qua'!
K:\nana\photo\mouss\mouss.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48c4dfbf.qua'!
K:\nana\photo\ballade\ballade.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48bbdfbd.qua'!
K:\nana\photo\corse\corse.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48c1e00d.qua'!
K:\nana\photo\corse\corse a imprimer\corse a imprimer.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48c1e022.qua'!
K:\nana\photo\irlande\irlande.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48bbe02f.qua'!
K:\nana\photo\autres\autres.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48c3e034.qua'!
K:\nana\photo\autres\maman\maman.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48bce025.qua'!
K:\nana\photo\autres\toulouse\toulouse.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48c4e037.qua'!
K:\nana\photo\autres\ant\ant.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48c3e039.qua'!
K:\nana\instal word\WINDOWS\WINDOWS.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '489de0ad.qua'!
K:\nana\instal word\WINDOWS\SHELLNEW\SHELLNEW.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '4894e0ae.qua'!
K:\nana\instal word\WINDOWS\MSAGENT\MSAGENT.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '4890e0ba.qua'!
K:\nana\instal word\WINDOWS\MSAGENT\INTL\INTL.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48a3e0b5.qua'!
K:\nana\instal word\WINDOWS\MEDIA\OFFICE2K\OFFICE2K.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '4895e0af.qua'!
K:\nana\instal word\WINDOWS\INF\INF.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '4895e0b8.qua'!
K:\nana\instal word\WINDOWS\HELP\HELP.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '489be0b0.qua'!
K:\nana\instal word\WINDOWS\FONTS\FONTS.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '489de0bb.qua'!
K:\nana\instal word\SYSTEMNT\SYSTEMNT.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48a2e0c5.qua'!
K:\nana\instal word\SYSTEMNT\WINFAX\WINFAX.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '489de0b6.qua'!
K:\nana\instal word\SYSTEMNT\VIEWERS\VIEWERS.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '4894e0b8.qua'!
K:\nana\instal word\SYSTEM95\SYSTEM95.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48a2e0c9.qua'!
K:\nana\instal word\SYSTEM95\VIEWERS\VIEWERS.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '4894e0bb.qua'!
K:\nana\instal word\SYSTEM\SYSTEM.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48a2e0e2.qua'!
K:\nana\instal word\SQL\X86\SYSTEM\SYSTEM.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48a2e0e4.qua'!
K:\nana\instal word\SQL\X86\SYSTEM\WINNT\WINNT.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '489de0d5.qua'!
K:\nana\instal word\SQL\X86\SYSTEM\WIN9X\WIN9X.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '489de0d6.qua'!
K:\nana\instal word\SQL\X86\SETUP\SETUP.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48a3e0d5.qua'!
K:\nana\instal word\SQL\X86\OTHER\OTHER.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '4897e0e6.qua'!
K:\nana\instal word\SQL\X86\DATA\DATA.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48a3e0d4.qua'!
K:\WoW-1.12.x-to-2.0.1-frFR-patch\Updater.app\Contents\Contents.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48bde107.qua'!
K:\WoW-1.12.x-to-2.0.1-frFR-patch\Updater.app\Contents\Resources\Resources.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48c2e0fe.qua'!
K:\WoW-1.12.x-to-2.0.1-frFR-patch\Updater.app\Contents\Resources\zh_TW.lproj\zh_TW.lproj`.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48aee102.qua'!
K:\WoW-1.12.x-to-2.0.1-frFR-patch\Updater.app\Contents\Resources\zh_CN.lproj\zh_CN.lproj`.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48aee103.qua'!
K:\WoW-1.12.x-to-2.0.1-frFR-patch\Updater.app\Contents\Resources\Korean.lproj\Korean.lproj`.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48c1e10a.qua'!
K:\WoW-1.12.x-to-2.0.1-frFR-patch\Updater.app\Contents\Resources\German.lproj\German.lproj`.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48c1e101.qua'!
K:\WoW-1.12.x-to-2.0.1-frFR-patch\Updater.app\Contents\Resources\French.lproj\French.lproj`.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48b4e10e.qua'!
K:\WoW-1.12.x-to-2.0.1-frFR-patch\Updater.app\Contents\Resources\English.lproj\English.lproj`.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48b6e10b.qua'!
K:\WoW-1.12.x-to-2.0.1-frFR-patch\Updater.app\Contents\MacOSClassic\MacOSClassic.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48b2e0ff.qua'!
K:\nana pharma\nana pharma.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48bde0ff.qua'!
K:\nana pharma\nana pharma\nana pharma.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48bde100.qua'!
K:\nana pharma\nana pharma\glaucome\glaucome.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48b0e10c.qua'!
End of the scan: mercredi 11 juin 2008 16:26
Used time: 15:50 min
The scan has been done completely.
243 Scanning directories
47377 Files were scanned
209 viruses and/or unwanted programs were found
0 Files were classified as suspicious:
0 files were deleted
0 files were repaired
209 files were moved to quarantine
0 files were renamed
0 Files cannot be scanned
47168 Files not concerned
445 Archives were scanned
0 Warnings
209 Notes
Celui Hijackthis
Logfile of HijackThis v1.99.1
Scan saved at 17:13:00, on 11/06/2008
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\MsPMSPSv.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\System32\RUNDLL32.EXE
C:\Program Files\Roxio\Easy CD Creator 6\AudioCentral\RxMon.exe
C:\PROGRA~1\WANADOO\CnxMon.exe
C:\PROGRA~1\WANADOO\TaskbarIcon.exe
C:\WINDOWS\System32\ctfmon.exe
C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
C:\Program Files\Roxio\Easy CD Creator 6\AudioCentral\Playlist.exe
C:\WINDOWS\System32\wuauclt.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\WINDOWS\system32\ZONELABS\vsmon.exe
C:\Program Files\Teamspeak2_RC2\TeamSpeak.exe
C:\DOCUME~1\tg\LOCALS~1\Temp\Blizzard Installer Bootstrap - 0008cffb\Installer.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\System32\wuauclt.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avcenter.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\System32\imapi.exe
C:\Documents and Settings\tg\Local Settings\Temp\Répertoire temporaire 2 pour hijackthis_199.zip\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.update.microsoft.com/windowsupdate/v6/default.aspx
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\WANADOO\SEARCH~1.DLL
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [Windows Update] C:\WINDOWS\System32\lvdlsa.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [RoxioEngineUtility] "C:\Program Files\Fichiers communs\Roxio Shared\System\EngUtil.exe"
O4 - HKLM\..\Run: [RoxioAudioCentral] "C:\Program Files\Roxio\Easy CD Creator 6\AudioCentral\RxMon.exe"
O4 - HKLM\..\Run: [WooCnxMon] C:\PROGRA~1\WANADOO\CnxMon.exe
O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\WANADOO\Watch.exe
O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\WANADOO\TaskbarIcon.exe
O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [DXDllRegExe] C:\WINDOWS\System32\dxdllreg.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe
O4 - Global Startup: DSLMON.lnk = C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra button: Wanadoo - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - https://www.orange.fr/portail (file missing) (HKCU)
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v5consumer/V5Controls/en/x86/client/wuweb_site.cab?1100635444078
O17 - HKLM\System\CCS\Services\Tcpip\..\{BB7FB27A-9077-433F-A975-7EC2814AFAA8}: NameServer = 80.10.246.130 81.253.149.10
O23 - Service: Avira AntiVir Personal – Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal – Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZONELABS\vsmon.exe -
Attention les rapports sont long ^^ !
Avira :
Avira AntiVir Personal
Report file date: mercredi 11 juin 2008 16:11
Scanning for 1165085 virus strains and unwanted programs.
Licensed to: Avira AntiVir PersonalEdition Classic
Serial number: 0000149996-ADJIE-0001
Platform: Windows XP
Windows version: (Service Pack 1) [5.1.2600]
Boot mode: Save mode
Username: tg
Computer name: PROPRI-9ZE5EA3N
Version information:
BUILD.DAT : 8.1.00.295 16479 Bytes 09/04/2008 16:24:00
AVSCAN.EXE : 8.1.2.12 311553 Bytes 18/03/2008 09:02:58
AVSCAN.DLL : 8.1.1.0 53505 Bytes 07/02/2008 08:43:38
LUKE.DLL : 8.1.2.9 151809 Bytes 28/02/2008 08:41:24
LUKERES.DLL : 8.1.2.1 12033 Bytes 21/02/2008 08:28:42
ANTIVIR0.VDF : 6.40.0.0 11030528 Bytes 18/07/2007 10:33:34
ANTIVIR1.VDF : 7.0.3.2 5447168 Bytes 07/03/2008 13:08:58
ANTIVIR2.VDF : 7.0.3.62 337408 Bytes 21/03/2008 19:12:34
ANTIVIR3.VDF : 7.0.3.68 57856 Bytes 25/03/2008 08:27:50
Engineversion : 8.1.0.28
AEVDF.DLL : 8.1.0.5 102772 Bytes 25/02/2008 09:58:22
AESCRIPT.DLL : 8.1.0.19 229754 Bytes 07/04/2008 15:34:46
AESCN.DLL : 8.1.0.12 115060 Bytes 07/04/2008 15:34:46
AERDL.DLL : 8.1.0.19 418164 Bytes 07/04/2008 15:34:46
AEPACK.DLL : 8.1.1.0 364918 Bytes 18/03/2008 11:20:44
AEOFFICE.DLL : 8.1.0.15 192889 Bytes 07/04/2008 15:34:46
AEHEUR.DLL : 8.1.0.15 1147253 Bytes 07/04/2008 15:34:46
AEHELP.DLL : 8.1.0.11 115061 Bytes 07/04/2008 15:34:44
AEGEN.DLL : 8.1.0.15 299379 Bytes 07/04/2008 15:34:44
AEEMU.DLL : 8.1.0.5 430450 Bytes 07/04/2008 15:34:44
AECORE.DLL : 8.1.0.25 168309 Bytes 08/04/2008 09:58:34
AVWINLL.DLL : 1.0.0.7 14593 Bytes 23/01/2008 17:07:54
AVPREF.DLL : 8.0.0.1 25857 Bytes 18/02/2008 10:37:52
AVREP.DLL : 7.0.0.1 155688 Bytes 16/04/2007 13:26:48
AVREG.DLL : 8.0.0.0 30977 Bytes 23/01/2008 17:07:50
AVARKT.DLL : 1.0.0.23 307457 Bytes 12/02/2008 08:29:24
AVEVTLOG.DLL : 8.0.0.11 114945 Bytes 28/02/2008 08:31:32
SQLITE3.DLL : 3.3.17.1 339968 Bytes 22/01/2008 17:28:04
SMTPLIB.DLL : 1.2.0.19 28929 Bytes 23/01/2008 17:08:40
NETNT.DLL : 8.0.0.1 7937 Bytes 25/01/2008 12:05:12
RCIMAGE.DLL : 8.0.0.35 2371841 Bytes 10/03/2008 14:37:26
RCTEXT.DLL : 8.0.32.0 86273 Bytes 06/03/2008 12:02:12
Configuration settings for the scan:
Jobname..........................: ShlExt
Configuration file...............: C:\DOCUME~1\tg\LOCALS~1\Temp\db91cae0.avp
Logging..........................: low
Primary action...................: interactive
Secondary action.................: ignore
Scan master boot sector..........: on
Scan boot sector.................: on
Boot sectors.....................: K:,
Scan memory......................: on
Process scan.....................: off
Scan registry....................: off
Search for rootkits..............: off
Scan all files...................: Intelligent file selection
Scan archives....................: on
Recursion depth..................: 20
Smart extensions.................: on
Macro heuristic..................: on
File heuristic...................: medium
Start of the scan: mercredi 11 juin 2008 16:11
Starting the file scan:
Begin scan in 'K:\' <IPOD>
K:\iPod_Control\Music\F06\F06.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '4885dd3a.qua'!
K:\iPod_Control\Music\F07\F07.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '4886dd3d.qua'!
K:\iPod_Control\Music\F08\F08.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '4887dd3f.qua'!
K:\iPod_Control\Music\F09\F09.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '4888dd41.qua'!
K:\iPod_Control\Music\F10\F10.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '487fdd44.qua'!
K:\iPod_Control\Music\F11\F11.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '4880dd4a.qua'!
K:\iPod_Control\Music\F12\F12.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '4881dd4a.qua'!
K:\iPod_Control\Music\F13\F13.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '4882dd4b.qua'!
K:\iPod_Control\Music\F14\F14.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '4883dd4b.qua'!
K:\iPod_Control\Music\F15\F15.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '4884dd4c.qua'!
K:\iPod_Control\Music\F16\F16.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '4885dd4c.qua'!
K:\iPod_Control\Music\F17\F17.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '4886dd4c.qua'!
K:\iPod_Control\Music\F18\F18.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '4887dd4d.qua'!
K:\iPod_Control\Music\F19\F19.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '4888dd4d.qua'!
K:\iPod_Control\Music\F20\F20.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '487fdd4e.qua'!
K:\iPod_Control\Music\F21\F21.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '4880dd4f.qua'!
K:\iPod_Control\Music\F22\F22.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '4881dd4f.qua'!
K:\iPod_Control\Music\F23\F23.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '4882dd50.qua'!
K:\iPod_Control\Music\F24\F24.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '4883dd50.qua'!
K:\iPod_Control\Music\F25\F25.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '4884dd50.qua'!
K:\iPod_Control\Music\F26\F26.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '4885dd51.qua'!
K:\iPod_Control\Music\F27\F27.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '4886dd51.qua'!
K:\iPod_Control\Music\F28\F28.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '4887dd52.qua'!
K:\iPod_Control\Music\F29\F29.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '4888dd52.qua'!
K:\iPod_Control\Music\F30\F30.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '487fdd54.qua'!
K:\iPod_Control\Music\F31\F31.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '4880dd54.qua'!
K:\iPod_Control\Music\F32\F32.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '4881dd54.qua'!
K:\iPod_Control\Music\F33\F33.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '4882dd55.qua'!
K:\iPod_Control\Music\F34\F34.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '4883dd55.qua'!
K:\iPod_Control\Music\F35\F35.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '4884dd56.qua'!
K:\iPod_Control\Music\F36\F36.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '4885dd56.qua'!
K:\iPod_Control\Music\F37\F37.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '4886dd56.qua'!
K:\iPod_Control\Music\F38\F38.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '4887dd57.qua'!
K:\iPod_Control\Music\F39\F39.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '4888dd57.qua'!
K:\iPod_Control\Music\F41\F41.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '4880dd59.qua'!
K:\iPod_Control\Music\F42\F42.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '4881dd59.qua'!
K:\iPod_Control\Music\F43\F43.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '4882dd5a.qua'!
K:\iPod_Control\Music\F44\F44.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '4883dd5a.qua'!
K:\iPod_Control\Music\F45\F45.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '4884dd5b.qua'!
K:\iPod_Control\Music\F46\F46.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '4885dd5b.qua'!
K:\iPod_Control\Music\F47\F47.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '4886dd5c.qua'!
K:\iPod_Control\Music\F48\F48.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '4887dd5c.qua'!
K:\iPod_Control\Music\F49\F49.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '4888dd5d.qua'!
K:\iPod_Control\Artwork\Artwork.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48c3dd9b.qua'!
K:\Contacts\Contacts.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48bddd98.qua'!
K:\Notes\Notes.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48c3dd99.qua'!
K:\wow\Interface\AddOns\DBM_Karazhan\DBM_Karazhan.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '489cdd6c.qua'!
K:\wow\Interface\AddOns\DBM_Hyjal\DBM_Hyjal.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '49f06865.qua'!
K:\wow\Interface\AddOns\DBM_GUI\DBM_GUI.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '489cdd6d.qua'!
K:\wow\Interface\AddOns\DBM_BlackTemple\DBM_BlackTemple.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '49f06866.qua'!
K:\wow\Interface\AddOns\DBM_Battlegrounds\DBM_Battlegrounds.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '489cdd6e.qua'!
K:\wow\Interface\AddOns\DBM_API\DBM_API.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '49f06867.qua'!
K:\wow\Interface\AddOns\DBM_API\Textures\Textures.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48c7dd91.qua'!
K:\wow\Interface\AddOns\DBM_TheEye\DBM_TheEye.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '489cdd6f.qua'!
K:\wow\Interface\AddOns\DBM_Serpentshrine\DBM_Serpentshrine.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '49f06878.qua'!
K:\wow\Interface\AddOns\DBM_Other\DBM_Other.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '489cdd71.qua'!
K:\wow\Interface\AddOns\KLHThreatMeter\KLHThreatMeter.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '4897dd7a.qua'!
K:\wow\Interface\AddOns\KLHThreatMeter\Readme\Readme.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48b0dd93.qua'!
K:\wow\Interface\AddOns\KLHThreatMeter\Readme\Old Changelogs\Old Changelogs.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48b3dd9a.qua'!
K:\wow\Interface\AddOns\KLHThreatMeter\Code\Code.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48b3dd9e.qua'!
K:\wow\Interface\AddOns\KLHThreatMeter\Code\Services\Services.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48c1dd94.qua'!
K:\wow\Interface\AddOns\KLHThreatMeter\Code\NewGui\NewGui.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48c6dd95.qua'!
K:\wow\Interface\AddOns\KLHThreatMeter\Code\NewGui\MenuItems\MenuItems.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48bddd95.qua'!
K:\wow\Interface\AddOns\KLHThreatMeter\Code\Localisation\Localisation.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48b2dd9f.qua'!
K:\wow\Interface\AddOns\KLHThreatMeter\Code\Framework\Framework.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48b0dda3.qua'!
K:\wow\Interface\AddOns\KLHThreatMeter\Code\Bosses\Bosses.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48c2dda0.qua'!
K:\wow\Interface\AddOns\KLHThreatMeter\Code\Bosses\Wizard\Wizard.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48c9dd9a.qua'!
K:\wow\Interface\AddOns\KLHThreatMeter\Code\Abilities\Abilities.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48b8dd94.qua'!
K:\wow\Interface\AddOns\BonusScanner\BonusScanner.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48bddda1.qua'!
K:\wow\Interface\AddOns\TitanXP\TitanXP.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '49af6894.qua'!
K:\wow\Interface\AddOns\TitanRider\TitanRider.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48c3dd9c.qua'!
K:\wow\Interface\AddOns\TitanRepair\TitanRepair.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '49af6895.qua'!
K:\wow\Interface\AddOns\TitanRegen\TitanRegen.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48c3dd9e.qua'!
K:\wow\Interface\AddOns\TitanPerformance\TitanPerformance.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '49af6897.qua'!
K:\wow\Interface\AddOns\TitanMoney\TitanMoney.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48c3dd9d.qua'!
K:\wow\Interface\AddOns\TitanLootType\TitanLootType.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '49af6896.qua'!
K:\wow\Interface\AddOns\TitanItemBonuses\TitanItemBonuses.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48c3dd9f.qua'!
K:\wow\Interface\AddOns\TitanCoords\TitanCoords.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48c3dd90.qua'!
K:\wow\Interface\AddOns\TitanClock\TitanClock.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '49af6899.qua'!
K:\wow\Interface\AddOns\TitanBag\TitanBag.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48c3dd92.qua'!
K:\wow\Interface\AddOns\TitanAmmo\TitanAmmo.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '49af689b.qua'!
K:\wow\Interface\AddOns\Titan\Titan.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '49af68a8.qua'!
K:\wow\Interface\AddOns\Titan\TitanXP\TitanXP.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '49ae6098.qua'!
K:\wow\Interface\AddOns\Titan\TitanRider\TitanRider.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48c3dda0.qua'!
K:\wow\Interface\AddOns\Titan\TitanRepair\TitanRepair.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '49ae0931.qua'!
K:\wow\Interface\AddOns\Titan\TitanRegen\TitanRegen.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48c3dda2.qua'!
K:\wow\Interface\AddOns\Titan\TitanPerformance\TitanPerformance.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48c3dda1.qua'!
K:\wow\Interface\AddOns\Titan\TitanMoney\TitanMoney.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '49ae0932.qua'!
K:\wow\Interface\AddOns\Titan\TitanLootType\TitanLootType.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48c3dda3.qua'!
K:\wow\Interface\AddOns\Titan\TitanItemBonuses\TitanItemBonuses.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '49ae0933.qua'!
K:\wow\Interface\AddOns\Titan\TitanCoords\TitanCoords.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48c3dda4.qua'!
K:\wow\Interface\AddOns\Titan\TitanClock\TitanClock.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '49ae609b.qua'!
K:\wow\Interface\AddOns\Titan\TitanBag\TitanBag.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '49ae609d.qua'!
K:\wow\Interface\AddOns\Titan\TitanAmmo\TitanAmmo.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '49ae609c.qua'!
K:\wow\Interface\AddOns\Titan\Artwork\Artwork.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48c3ddac.qua'!
K:\wow\Interface\AddOns\MobInfo2\MobInfo2.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48b1ddaa.qua'!
K:\wow\Interface\AddOns\AtlasLoot\AtlasLoot.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48bbddaf.qua'!
K:\wow\Interface\AddOns\AtlasLoot\WorldBosses\WorldBosses.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48c1ddaa.qua'!
K:\wow\Interface\AddOns\AtlasLoot\TableRegister\TableRegister.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48b1dd9d.qua'!
K:\wow\Interface\AddOns\AtlasLoot\Sets\Sets.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '49ae609a.qua'!
K:\wow\Interface\AddOns\AtlasLoot\Reputation\Reputation.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48bfdda1.qua'!
K:\wow\Interface\AddOns\AtlasLoot\PvP\PvP.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '489fddb3.qua'!
K:\wow\Interface\AddOns\AtlasLoot\Libs\Tablet-2.0\Tablet-2.0`.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48b1dd9e.qua'!
K:\wow\Interface\AddOns\AtlasLoot\Libs\FuBarPlugin-2.0\FuBarPlugin-2.0`.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '4891ddb3.qua'!
K:\wow\Interface\AddOns\AtlasLoot\Libs\Dewdrop-2.0\Dewdrop-2.0`.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48c6dda3.qua'!
K:\wow\Interface\AddOns\AtlasLoot\Libs\Babble-Zone-2.2\Babble-Zone-2.2`.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48b1dd9f.qua'!
K:\wow\Interface\AddOns\AtlasLoot\Libs\Babble-Tradeskill-2.2\Babble-Tradeskill-2.2`.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '49df1948.qua'!
K:\wow\Interface\AddOns\AtlasLoot\Libs\Babble-Inventory-2.2\Babble-Inventory-2.2`.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48b1dda0.qua'!
K:\wow\Interface\AddOns\AtlasLoot\Libs\Babble-Faction-2.2\Babble-Faction-2.2`.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '49df01e1.qua'!
K:\wow\Interface\AddOns\AtlasLoot\Libs\Babble-Class-2.2\Babble-Class-2.2`.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48b1dda2.qua'!
K:\wow\Interface\AddOns\AtlasLoot\Libs\Babble-Boss-2.2\Babble-Boss-2.2`.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48b1dda1.qua'!
K:\wow\Interface\AddOns\AtlasLoot\Libs\AceOO-2.0\AceOO-2.0`.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48b4dda3.qua'!
K:\wow\Interface\AddOns\AtlasLoot\Libs\AceLocale-2.2\AceLocale-2.2`.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '49da01e4.qua'!
K:\wow\Interface\AddOns\AtlasLoot\Libs\AceLibrary\AceLibrary.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48b4dda4.qua'!
K:\wow\Interface\AddOns\AtlasLoot\Libs\AceEvent-2.0\AceEvent-2.0`.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '49da01e5.qua'!
K:\wow\Interface\AddOns\AtlasLoot\Libs\AceDB-2.0\AceDB-2.0`.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48b4dda6.qua'!
K:\wow\Interface\AddOns\AtlasLoot\Libs\AceAddon-2.0\AceAddon-2.0`.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48b4dda5.qua'!
K:\wow\Interface\AddOns\AtlasLoot\Instances\Instances.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48c2ddb0.qua'!
K:\wow\Interface\AddOns\AtlasLoot\Images\Images.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48b0ddaf.qua'!
K:\wow\Interface\AddOns\AtlasLoot\Documentation\Documentation.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48b2ddb2.qua'!
K:\wow\Interface\AddOns\AtlasLoot\DefaultFrame\DefaultFrame.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48b5dda8.qua'!
K:\wow\Interface\AddOns\AtlasLoot\Core\Core.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48c1ddb3.qua'!
K:\wow\Interface\AddOns\AtlasLoot\Constants\Constants.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48bdddb3.qua'!
K:\wow\Interface\AddOns\AtlasLoot\Bossnames\Bossnames.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48c2ddb3.qua'!
K:\wow\Interface\AddOns\AtlasLoot\Add_Ons\Add_Ons.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48b3dda9.qua'!
K:\wow\Interface\AddOns\DamageMeters\DamageMeters.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48bcdda6.qua'!
K:\wow\Interface\AddOns\DamageMeters\TitanDamageMeters\TitanDamageMeters.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48c3ddae.qua'!
K:\wow\Interface\AddOns\DamageMeters\TitanDamageMeters\Skin\Skin.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48b8ddb1.qua'!
K:\wow\Interface\AddOns\DamageMeters\ChatThrottleLib\ChatThrottleLib.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48b0ddae.qua'!
K:\wow\Interface\AddOns\GuildEventManager2\GuildEventManager2.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48b8ddbc.qua'!
K:\wow\Interface\AddOns\GuildEventManager2\images\fr\fr.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '487dddb9.qua'!
K:\wow\Interface\AddOns\GuildEventManager2\images\en\en.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '487dddb5.qua'!
K:\wow\Interface\AddOns\Blizzard_TrainerUI\Blizzard_TrainerUI.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48b8ddb4.qua'!
K:\wow\Interface\AddOns\Blizzard_TradeSkillUI\Blizzard_TradeSkillUI.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '49d411d5.qua'!
K:\wow\Interface\AddOns\Blizzard_TalentUI\Blizzard_TalentUI.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48b8ddb6.qua'!
K:\wow\Interface\AddOns\Blizzard_RaidUI\Blizzard_RaidUI.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48b8ddb5.qua'!
K:\wow\Interface\AddOns\Blizzard_MacroUI\Blizzard_MacroUI.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '49d411d6.qua'!
K:\wow\Interface\AddOns\Blizzard_ItemSocketingUI\Blizzard_ItemSocketingUI.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48b8ddb7.qua'!
K:\wow\Interface\AddOns\Blizzard_InspectUI\Blizzard_InspectUI.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '49d411d8.qua'!
K:\wow\Interface\AddOns\Blizzard_GMSurveyUI\Blizzard_GMSurveyUI.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '49d411d7.qua'!
K:\wow\Interface\AddOns\Blizzard_CraftUI\Blizzard_CraftUI.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48b8ddb8.qua'!
K:\wow\Interface\AddOns\Blizzard_CombatText\Blizzard_CombatText.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48b8ddb9.qua'!
K:\wow\Interface\AddOns\Blizzard_BindingUI\Blizzard_BindingUI.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '49d411da.qua'!
K:\wow\Interface\AddOns\Blizzard_BattlefieldMinimap\Blizzard_BattlefieldMinimap.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48b8ddbb.qua'!
K:\wow\Interface\AddOns\Blizzard_AuctionUI\Blizzard_AuctionUI.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '49d411d9.qua'!
K:\wow\wow\frFR\frFR.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '4895ddbf.qua'!
K:\wow\wow\frFR\WTF\WTF.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '4895dda1.qua'!
K:\wow\wow\frFR\Documentation\Documentation.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48b2ddbc.qua'!
K:\wow\wow\frFR\Documentation\Troubleshooting\Troubleshooting.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48beddc0.qua'!
K:\wow\wow\frFR\Documentation\Support\Support.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48bfddc3.qua'!
K:\wow\wow\frFR\Documentation\ReadMe\ReadMe.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48b0ddb4.qua'!
K:\wow\wow\frFR\Documentation\Layout\Layout.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48c8ddb0.qua'!
K:\wow\wow\frFR\Documentation\Images\Images.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48b0ddbd.qua'!
K:\wow\wow\frFR\Documentation\Images\titles\titles.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48c3ddba.qua'!
K:\wow\wow\frFR\Documentation\Images\buttons\buttons.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48c3ddc6.qua'!
K:\wow\wow\frFR\Interface\Cinematics\Cinematics.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48bdddbb.qua'!
K:\wow\WoW-BurningCrusade-frFR-Slim-Installer\WoW-BurningCrusade-frFR-Slim-Installer.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48a6ddc2.qua'!
K:\wow\Screenshots\Screenshots.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48c1ddb8.qua'!
K:\wow\Patches\WoW-2.1.3-to-2.2.0-frFR-Win-patch\WoW-2.1.3-to-2.2.0-frFR-Win-patch`.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48a6ddc5.qua'!
K:\wow\Patches\WoW-2.0.12-to-2.1.0-frFR-Win-patch\WoW-2.0.12-to-2.1.0-frFR-Win-patch`.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '49cec90e.qua'!
K:\wow\Patches\WoW-2.0.0-to-2.0.3-frFR-Win-patch\WoW-2.0.0-to-2.0.3-frFR-Win-patch`.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48a6ddc6.qua'!
K:\Photos\Thumbs\Thumbs.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48c4ddbf.qua'!
K:\nana\Musiques\The Trinity_By_Paco\The Trinity_By_Paco.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48b4ddc7.qua'!
K:\nana\OpenOffice.org 2.1 Installation Files\java\java.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48c5df9c.qua'!
K:\nana\OpenOffice.org 2.1 Installation Files\readmes\readmes.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48b0dfa1.qua'!
K:\nana\OpenOffice.org 2.1 Installation Files\licenses\licenses.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48b2dfa5.qua'!
K:\nana\WoW-2.0.0-frFR-Installer\WoW-2.0.0-frFR-Installer`.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48a6dfac.qua'!
K:\nana\autres\autres.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48c3dfb9.qua'!
K:\nana\photo\mouss\mouss.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48c4dfbf.qua'!
K:\nana\photo\ballade\ballade.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48bbdfbd.qua'!
K:\nana\photo\corse\corse.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48c1e00d.qua'!
K:\nana\photo\corse\corse a imprimer\corse a imprimer.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48c1e022.qua'!
K:\nana\photo\irlande\irlande.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48bbe02f.qua'!
K:\nana\photo\autres\autres.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48c3e034.qua'!
K:\nana\photo\autres\maman\maman.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48bce025.qua'!
K:\nana\photo\autres\toulouse\toulouse.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48c4e037.qua'!
K:\nana\photo\autres\ant\ant.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48c3e039.qua'!
K:\nana\instal word\WINDOWS\WINDOWS.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '489de0ad.qua'!
K:\nana\instal word\WINDOWS\SHELLNEW\SHELLNEW.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '4894e0ae.qua'!
K:\nana\instal word\WINDOWS\MSAGENT\MSAGENT.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '4890e0ba.qua'!
K:\nana\instal word\WINDOWS\MSAGENT\INTL\INTL.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48a3e0b5.qua'!
K:\nana\instal word\WINDOWS\MEDIA\OFFICE2K\OFFICE2K.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '4895e0af.qua'!
K:\nana\instal word\WINDOWS\INF\INF.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '4895e0b8.qua'!
K:\nana\instal word\WINDOWS\HELP\HELP.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '489be0b0.qua'!
K:\nana\instal word\WINDOWS\FONTS\FONTS.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '489de0bb.qua'!
K:\nana\instal word\SYSTEMNT\SYSTEMNT.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48a2e0c5.qua'!
K:\nana\instal word\SYSTEMNT\WINFAX\WINFAX.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '489de0b6.qua'!
K:\nana\instal word\SYSTEMNT\VIEWERS\VIEWERS.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '4894e0b8.qua'!
K:\nana\instal word\SYSTEM95\SYSTEM95.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48a2e0c9.qua'!
K:\nana\instal word\SYSTEM95\VIEWERS\VIEWERS.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '4894e0bb.qua'!
K:\nana\instal word\SYSTEM\SYSTEM.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48a2e0e2.qua'!
K:\nana\instal word\SQL\X86\SYSTEM\SYSTEM.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48a2e0e4.qua'!
K:\nana\instal word\SQL\X86\SYSTEM\WINNT\WINNT.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '489de0d5.qua'!
K:\nana\instal word\SQL\X86\SYSTEM\WIN9X\WIN9X.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '489de0d6.qua'!
K:\nana\instal word\SQL\X86\SETUP\SETUP.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48a3e0d5.qua'!
K:\nana\instal word\SQL\X86\OTHER\OTHER.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '4897e0e6.qua'!
K:\nana\instal word\SQL\X86\DATA\DATA.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48a3e0d4.qua'!
K:\WoW-1.12.x-to-2.0.1-frFR-patch\Updater.app\Contents\Contents.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48bde107.qua'!
K:\WoW-1.12.x-to-2.0.1-frFR-patch\Updater.app\Contents\Resources\Resources.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48c2e0fe.qua'!
K:\WoW-1.12.x-to-2.0.1-frFR-patch\Updater.app\Contents\Resources\zh_TW.lproj\zh_TW.lproj`.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48aee102.qua'!
K:\WoW-1.12.x-to-2.0.1-frFR-patch\Updater.app\Contents\Resources\zh_CN.lproj\zh_CN.lproj`.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48aee103.qua'!
K:\WoW-1.12.x-to-2.0.1-frFR-patch\Updater.app\Contents\Resources\Korean.lproj\Korean.lproj`.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48c1e10a.qua'!
K:\WoW-1.12.x-to-2.0.1-frFR-patch\Updater.app\Contents\Resources\German.lproj\German.lproj`.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48c1e101.qua'!
K:\WoW-1.12.x-to-2.0.1-frFR-patch\Updater.app\Contents\Resources\French.lproj\French.lproj`.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48b4e10e.qua'!
K:\WoW-1.12.x-to-2.0.1-frFR-patch\Updater.app\Contents\Resources\English.lproj\English.lproj`.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48b6e10b.qua'!
K:\WoW-1.12.x-to-2.0.1-frFR-patch\Updater.app\Contents\MacOSClassic\MacOSClassic.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48b2e0ff.qua'!
K:\nana pharma\nana pharma.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48bde0ff.qua'!
K:\nana pharma\nana pharma\nana pharma.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48bde100.qua'!
K:\nana pharma\nana pharma\glaucome\glaucome.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48b0e10c.qua'!
End of the scan: mercredi 11 juin 2008 16:26
Used time: 15:50 min
The scan has been done completely.
243 Scanning directories
47377 Files were scanned
209 viruses and/or unwanted programs were found
0 Files were classified as suspicious:
0 files were deleted
0 files were repaired
209 files were moved to quarantine
0 files were renamed
0 Files cannot be scanned
47168 Files not concerned
445 Archives were scanned
0 Warnings
209 Notes -
Désolé la premiere fois ca avez pas marché... Désolé je ne sais pas comment effacer :x
-
pourquoi ton windows n'est pas a jour?
________________
analyse ce fichier sur virus total et colle le rapport: https://www.virustotal.com/gui/
C:\WINDOWS\System32\lvdlsa.exe
___________________
scan avec
MalwareByte's Anti-Malware et vire ce qui est trouvé et colle le rapport
https://www.malekal.com/tutoriel-malwarebyte-anti-malware/
___________________
vire ce qui est en quarantaine dans antivir et recolle un rapport avec -
Re , alors : C:\WINDOWS\System32\lvdlsa.exe il n y est pas.
https://www.malekal.com/tutoriel-malwarebyte-anti-malware/ me fait planter Internet.
Je fini mon scan et je te link :) -
ok a la place de malwarebytes:
fais avg antispyware, vire tout ce qui est trouvé et colle le rapport
https://www.01net.com/telecharger/ -
Voila le rapport Avira , me semble clean
Avira AntiVir Personal
Report file date: mercredi 11 juin 2008 17:27
Scanning for 1325593 virus strains and unwanted programs.
Licensed to: Avira AntiVir PersonalEdition Classic
Serial number: 0000149996-ADJIE-0001
Platform: Windows XP
Windows version: (Service Pack 1) [5.1.2600]
Boot mode: Normally booted
Username: tg
Computer name: PROPRI-9ZE5EA3N
Version information:
BUILD.DAT : 8.1.00.295 16479 Bytes 09/04/2008 16:24:00
AVSCAN.EXE : 8.1.2.12 311553 Bytes 18/03/2008 09:02:58
AVSCAN.DLL : 8.1.1.0 53505 Bytes 07/02/2008 08:43:38
LUKE.DLL : 8.1.2.9 151809 Bytes 28/02/2008 08:41:24
LUKERES.DLL : 8.1.2.1 12033 Bytes 21/02/2008 08:28:42
ANTIVIR0.VDF : 6.40.0.0 11030528 Bytes 18/07/2007 10:33:34
ANTIVIR1.VDF : 7.0.3.2 5447168 Bytes 07/03/2008 13:08:58
ANTIVIR2.VDF : 7.0.4.120 2206720 Bytes 01/06/2008 14:32:32
ANTIVIR3.VDF : 7.0.4.177 305152 Bytes 11/06/2008 14:32:38
Engineversion : 8.1.0.55
AEVDF.DLL : 8.1.0.5 102772 Bytes 25/02/2008 09:58:22
AESCRIPT.DLL : 8.1.0.40 266618 Bytes 11/06/2008 14:33:06
AESCN.DLL : 8.1.0.21 119156 Bytes 11/06/2008 14:33:04
AERDL.DLL : 8.1.0.20 418165 Bytes 11/06/2008 14:33:04
AEPACK.DLL : 8.1.1.5 364918 Bytes 11/06/2008 14:33:00
AEOFFICE.DLL : 8.1.0.18 192890 Bytes 11/06/2008 14:32:56
AEHEUR.DLL : 8.1.0.30 1253750 Bytes 11/06/2008 14:32:54
AEHELP.DLL : 8.1.0.15 115063 Bytes 11/06/2008 14:32:46
AEGEN.DLL : 8.1.0.28 307572 Bytes 11/06/2008 14:32:44
AEEMU.DLL : 8.1.0.6 430451 Bytes 11/06/2008 14:32:42
AECORE.DLL : 8.1.0.31 168310 Bytes 11/06/2008 14:32:38
AVWINLL.DLL : 1.0.0.7 14593 Bytes 23/01/2008 17:07:54
AVPREF.DLL : 8.0.0.1 25857 Bytes 18/02/2008 10:37:52
AVREP.DLL : 7.0.0.1 155688 Bytes 16/04/2007 13:26:48
AVREG.DLL : 8.0.0.0 30977 Bytes 23/01/2008 17:07:50
AVARKT.DLL : 1.0.0.23 307457 Bytes 12/02/2008 08:29:24
AVEVTLOG.DLL : 8.0.0.11 114945 Bytes 28/02/2008 08:31:32
SQLITE3.DLL : 3.3.17.1 339968 Bytes 22/01/2008 17:28:04
SMTPLIB.DLL : 1.2.0.19 28929 Bytes 23/01/2008 17:08:40
NETNT.DLL : 8.0.0.1 7937 Bytes 25/01/2008 12:05:12
RCIMAGE.DLL : 8.0.0.35 2371841 Bytes 10/03/2008 14:37:26
RCTEXT.DLL : 8.0.32.0 86273 Bytes 06/03/2008 12:02:12
Configuration settings for the scan:
Jobname..........................: ShlExt
Configuration file...............: C:\DOCUME~1\tg\LOCALS~1\Temp\5d7ad72e.avp
Logging..........................: low
Primary action...................: interactive
Secondary action.................: ignore
Scan master boot sector..........: on
Scan boot sector.................: on
Boot sectors.....................: K:,
Scan memory......................: on
Process scan.....................: off
Scan registry....................: off
Search for rootkits..............: off
Scan all files...................: Intelligent file selection
Scan archives....................: on
Recursion depth..................: 20
Smart extensions.................: on
Macro heuristic..................: on
File heuristic...................: medium
Start of the scan: mercredi 11 juin 2008 17:27
Starting the file scan:
Begin scan in 'K:\' <IPOD>
End of the scan: mercredi 11 juin 2008 17:32
Used time: 04:23 min
The scan has been done completely.
244 Scanning directories
47169 Files were scanned
0 viruses and/or unwanted programs were found
0 Files were classified as suspicious:
0 files were deleted
0 files were repaired
0 files were moved to quarantine
0 files were renamed
0 Files cannot be scanned
47169 Files not concerned
445 Archives were scanned
0 Warnings
0 Notes -
-
-
-
LE rapport AVG -->
---------------------------------------------------------
AVG Anti-Spyware - Rapport d'analyse
---------------------------------------------------------
+ Créé à: 18:18:23 11/06/2008
+ Résultat de l'analyse:
HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{c95fe080-8f5d-11d2-a20b-00aa003c157a} -> Adware.Generic : Ignoré.
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Extensions\CmdMapping\\{c95fe080-8f5d-11d2-a20b-00aa003c157a} -> Adware.Generic : Ignoré.
HKU\S-1-5-18\Software\Microsoft\Internet Explorer\Extensions\CmdMapping\\{c95fe080-8f5d-11d2-a20b-00aa003c157a} -> Adware.Generic : Ignoré.
HKU\S-1-5-21-2248803489-410083452-674428321-1005\Software\Microsoft\Internet Explorer\Extensions\CmdMapping\\{c95fe080-8f5d-11d2-a20b-00aa003c157a} -> Adware.Generic : Ignoré.
C:\Documents and Settings\tg\Cookies\tg@msnportal.112.2o7[1].txt -> TrackingCookie.2o7 : Ignoré.
C:\Documents and Settings\tg\Cookies\tg@adrevolver[2].txt -> TrackingCookie.Adrevolver : Ignoré.
C:\Documents and Settings\tg\Cookies\tg@media.adrevolver[2].txt -> TrackingCookie.Adrevolver : Ignoré.
C:\Documents and Settings\tg\Cookies\tg@advertising[1].txt -> TrackingCookie.Advertising : Ignoré.
C:\Documents and Settings\tg\Cookies\tg@atdmt[2].txt -> TrackingCookie.Atdmt : Ignoré.
C:\Documents and Settings\tg\Cookies\tg@bluestreak[1].txt -> TrackingCookie.Bluestreak : Ignoré.
C:\Documents and Settings\tg\Cookies\tg@mediaplex[1].txt -> TrackingCookie.Mediaplex : Ignoré.
C:\Documents and Settings\tg\Cookies\tg@ssl-hints.netflame[1].txt -> TrackingCookie.Netflame : Ignoré.
C:\Documents and Settings\tg\Cookies\tg@bs.serving-sys[1].txt -> TrackingCookie.Serving-sys : Ignoré.
C:\Documents and Settings\tg\Cookies\tg@serving-sys[1].txt -> TrackingCookie.Serving-sys : Ignoré.
C:\Documents and Settings\tg\Cookies\tg@smartadserver[2].txt -> TrackingCookie.Smartadserver : Ignoré.
C:\Documents and Settings\tg\Cookies\tg@tradedoubler[2].txt -> TrackingCookie.Tradedoubler : Ignoré.
C:\Documents and Settings\tg\Cookies\tg@boursoramabanque.solution.weborama[2].txt -> TrackingCookie.Weborama : Ignoré.
C:\Documents and Settings\tg\Cookies\tg@weborama[1].txt -> TrackingCookie.Weborama : Ignoré.
Fin du rapport -
il faut virer tout ce qui a été trouvé!!
encore des problemes? -
Mummm Merci beaucoup.
Je peux utiliser mon Ipod maintenant ? :d mais ca m a l'air clean x)
Gros merci a toi! -
oui
pour protéger gratos ton ordi
https://www.commentcamarche.net/telecharger/ 4 securite
mettre un antivirus
AVAST en français ou ANTIVIR (en anglais mais très efficace)
https://www.malekal.com/avira-free-security-antivirus-gratuit/ (merci Malekal)
-------------
des anti-espions :
avg antispyware gratuit + SPYBOT
+
SPYWAREBLASTER pour immuniser le système contre vundo notamment mais en anglais (mais facile d'utilisation : il suffit de faire "update" pour mettre à jour tous les mois et ensuite" enable all protection" pour immuniser)...
Rq : spybot et ad-aware on sorti de nouvelles versions cette année vérifiez que vous avez la dernière version
--------
un pare feu :
celui de Windows ou mieux KERIO ou JETICO ou ZONE ALARM (mettre que le parefeu gratuit)
https://www.clubic.com/telecharger-fiche11071-sunbelt-personal-firewall-ex-kerio.html
https://manuelsdaide.com/contact/
http://www.open-files.com/forum/index.php?showtopic=29277
https://www.commentcamarche.net/telecharger/ 157 zonealarm
-----------
CCLEANER pour effacer les traces de surf
