probleme écran bleu avec message en blancRésolu/Fermé

Question

Bonjour,
j'ai un probleme depuis hier mon ordi affiche en fond d'écran un message "your computer has several fatal errors due to spyware activity" qui continu sur quelques ligne avec un fond d'écran bleu

voici mon rapport hijackthis

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 13:59:30, on 28/06/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\acs.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\WINDOWS\system32
vsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Wireless Console 2\wcourier.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\WINDOWS\Fonts\svchost.exe
C:\windows\system32wwnw64d.exe
C:\Documents and Settings\Utilisateur\lsass.exe
C:\WINDOWS\mrofinu1188.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Documents and Settings\Utilisateur\Local Settings\Application Data\Google\Update\1.1.25.0\GoogleUpdate.exe
C:\Program Files\mjc\mjc.exe
C:\Program Files\Sakora\Sakora.exe
C:\Documents and Settings\Utilisateur\Application Data\SpeedRunner\SpeedRunner.exe
C:\Documents and Settings\Utilisateur\Application Data\Microsoft\Windows\xtxhsv.exe
C:\Documents and Settings\Utilisateur\Mes documents\?dobe\l?gonui.exe
C:\Documents and Settings\Utilisateur\Local Settings\Application Data\YouTube\Uploader\youtubeuploader.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\ATK0100\ATKOSD.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Safari\Safari.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\Program Files\Lavasoft\Ad-Aware\Ad-Aware.exe
C:\WINDOWS\system32\msiexec.exe
C:\WINDOWS\explorer.exe
C:\Documents and Settings\Utilisateur\Bureau\HiJackThis.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,C:\WINDOWS\system32\iftuyszv.exe,
O3 - Toolbar: Veoh Browser Plug-in - {D0943516-5076-4020-A3B5-AEFAF26AB263} - C:\Program Files\Veoh Networks\Veoh\Pluginseg\VeohToolbar.dll (file missing)
O4 - HKLM\..\Run: [HControl] C:\WINDOWS\ATK0100\HControl.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [AS00_Gear511] C:\Program Files\NETGEAR\WG511SCU\Utility\Gear511.exe -hide
O4 - HKLM\..\Run: [ACU] "C:\Program Files\OLITEC\ACU.exe" -nogui
O4 - HKLM\..\Run: [Wireless Console 2] C:\Program Files\Wireless Console 2\wcourier.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [NBKeyScan] "C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [{34-4C-C5-5B-DW}] C:\windows\system32wwnw64d.exe DWram1FF
O4 - HKLM\..\Run: [LSA Shellu] C:\Documents and Settings\Utilisateur\lsass.exe
O4 - HKLM\..\Run: [e8c34cf4] rundll32.exe "C:\WINDOWS\system32\ewwipsbx.dll",b
O4 - HKLM\..\Run: [VirusKeeper] C:\Program Files\AxBx\VirusKeeper 2008 Pro Evaluation\VirusKeeper.exe
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [BMebf07f68] Rundll32.exe "C:\WINDOWS\system32\uwteqfbq.dll",s
O4 - HKLM\..\Run: [Host Process] C:\WINDOWS\Fonts\svchost.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Nero\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [Veoh] "C:\Program Files\Veoh Networks\Veoh\VeohClient.exe" /VeohHide
O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\Utilisateur\Local Settings\Application Data\Google\Update\1.1.25.0\GoogleUpdate.exe" /lang en
O4 - HKCU\..\Run: [mjc] C:\Program Files\mjc\mjc.exe
O4 - HKCU\..\Run: [Sakora] C:\Program Files\Sakora\Sakora.exe
O4 - HKCU\..\Run: [SpeedRunner] C:\Documents and Settings\Utilisateur\Application Data\SpeedRunner\SpeedRunner.exe
O4 - HKCU\..\Run: [SfKg6wIP] C:\Documents and Settings\Utilisateur\Application Data\Microsoft\Windows\xtxhsv.exe
O4 - HKCU\..\Run: [Acmw] "C:\WINDOWS\SMANTE~1\wuaclt.exe" -vt yazb
O4 - HKCU\..\Run: [Jcrawirr] "C:\Documents and Settings\Utilisateur\Mes documents\?dobe\l?gonui.exe"
O4 - Startup: YouTube Uploader.lnk = C:\Documents and Settings\Utilisateur\Local Settings\Application Data\YouTube\Uploader\youtubeuploader.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O14 - IERESET.INF: START_PAGE_URL=https://www.asus.com/fr/
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w2/pr02/resources/MSNPUpld.cab
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cab
O16 - DPF: {CF40ACC5-E1BB-4AFF-AC72-04C2F616BCA7} (get_atlcom Class) - http://www.adobe.com/products/acrobat/nos/gp.cab
O20 - AppInit_DLLs: C:\WINDOWS\system32\__c004784E.dat
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: Service de configuration OLITEC (ACS) - Unknown owner - C:\WINDOWS\system32\acs.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exe
O23 - Service: Service Messenger Sharing Folders USN Journal Reader (usnjsvc) - Unknown owner - C:\Program Files\Windows Live\Messenger\usnsvc.exe (file missing)
O23 - Service: VirusKeeper antivirus/antispyware (vkservice) - Unknown owner - C:\Program Files\AxBx\VirusKeeper 2008 Pro Evaluation\vk_service.exe (file missing)

g!rly · Answer

salut,

oui tu es tres infecté en effet...

commence par faire ceci :

Télécharge SDFix (créé par AndyManchesta) et sauvegarde le sur ton Bureau.
http://downloads.andymanchesta.com/RemovalTools/SDFix.exe
Double clique sur SDFix.exe et choisis Install pour l'extraire dans un dossier dédié sur le Bureau. Redémarre ton ordinateur en mode sans échec en suivant la procédure que voici :
• Redémarre ton ordinateur
• Après avoir entendu l'ordinateur biper lors du démarrage, mais avant que l'icône Windows apparaisse, tapote la touche F8 (une pression par seconde).
• A la place du chargement normal de Windows, un menu avec différentes options devrait apparaître.
• Choisis la première option, pour exécuter Windows en mode sans échec, puis appuie sur "Entrée".
• Choisis ton compte.
Déroule la liste des instructions ci-dessous :
• Ouvre le dossier SDFix qui vient d'être créé dans le répertoire C:\ et double clique sur RunThis.bat pour lancer le script.
• Appuie sur Y pour commencer le processus de nettoyage.
• Il va supprimer les services et les entrées du Registre de certains trojans trouvés puis te demandera d'appuyer sur une touche pour redémarrer.
• Appuie sur une touche pour redémarrer le PC.
• Ton système sera plus long pour redémarrer qu'à l'accoutumée car l'outil va continuer à s'exécuter et supprimer des fichiers.
• Après le chargement du Bureau, l'outil terminera son travail et affichera Finished.
• Appuie sur une touche pour finir l'exécution du script et charger les icônes de ton Bureau.
• Les icônes du Bureau affichées, le rapport SDFix s'ouvrira à l'écran et s'enregistrera aussi dans le dossier SDFix sous le nom Report.txt.
• Enfin, copie/colle le contenu du fichier Report.txt dans ta prochaine réponse sur le forum, avec un nouveau log Hijackthis ! 

@+

mari64 · Answer

voila le rapport sdfixRebooting


[b]Checking Files [/b]: 

Trojan Files Found:

C:\WINDOWS\system32\geBQgHWo.dll - Deleted



Folder C:\Documents and Settings\Utilisateur\Application Data\SpeedRunner - Removed
Folder C:\Program Files\AntispyStorm - Removed
Folder C:\Program Files\Sakora - Removed
Folder C:\Program Files\Temporary - Removed
Folder C:\Temp\1cb - Removed


Removing Temp Files

[b]ADS Check [/b]:
 


                                 [b]Final Check [/b]:

catchme 0.3.1361.2 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-06-28 14:32:30
Windows 5.1.2600 Service Pack 2 FAT NTAPI

scanning hidden processes ...

scanning hidden services ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden processes: 0
hidden services: 0
hidden files: 0


[b]Remaining Services [/b]:




Authorized Application Key Export:

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\eMule\emule.exe"="C:\Program Files\eMule\emule.exe:*:Enabled:eMule"
"C:\Program Files\Veoh Networks\Veoh\VeohClient.exe"="C:\Program Files\Veoh Networks\Veoh\VeohClient.exe:*:Enabled:Veoh Client"
"C:\Program Files\LimeWire\LimeWire.exe"="C:\Program Files\LimeWire\LimeWire.exe:*:Enabled:LimeWire"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Windows Live\Messenger\MSNMSGR.EXE"="C:\Program Files\Windows Live\Messenger\MSNMSGR.EXE:*:Enabled:Windows Live Messenger"
"C:\Program Files\Windows Live\Messenger\livecall.exe"="C:\Program Files\Windows Live\Messenger\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"
"C:\Program Files\iTunes\iTunes.exe"="C:\Program Files\iTunes\iTunes.exe:*:Enabled:iTunes"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Windows Live\Messenger\MSNMSGR.EXE"="C:\Program Files\Windows Live\Messenger\MSNMSGR.EXE:*:Enabled:Windows Live Messenger"
"C:\Program Files\Windows Live\Messenger\livecall.exe"="C:\Program Files\Windows Live\Messenger\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"

[b]Remaining Files [/b]:


File Backups: - C:\DOCUME~1\UTILIS~1\Bureau\SDFix\backups\backups.zip

[b]Files with Hidden Attributes [/b]:

Sun  4 Nov 2007       165,970 ..SH. --- "C:\WINDOWS\system32\ijllm.bak1"
Mon 12 Nov 2007       204,119 ..SH. --- "C:\WINDOWS\system32\ijllm.bak2"
Wed 28 Nov 2007           120 ..SH. --- "C:\WINDOWS\system32\wyadd.tmp"
Wed 12 Mar 2008       162,729 ..SH. --- "C:\WINDOWS\system32\wyadd.bak2"
Sat  9 Feb 2008       372,808 ..SH. --- "C:\WINDOWS\system32\wyadd.bak1"
Fri 27 Jun 2008        52,224 ..SH. --- "C:\Documents and Settings\Utilisateur\lsass.exe"
Mon 24 Sep 2007         4,348 A.SH. --- "C:\Documents and Settings\All Users\DRM\DRMv1.bak"
Thu  8 May 2008             0 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\24af2a69c06a4de03e35dc89d706475f\BITE.tmp"
Wed 17 Oct 2007             0 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\5c703fe0947475848e966b61999878d1\BIT2.tmp"
Wed 25 Jun 2008             0 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\585dc2612ebcefc90e7dee4c276ee95e\BIT16.tmp"
Sun 19 Aug 2007             0 A.SH. --- "C:\Documents and Settings\All Users\DRM\Cache\Indiv01.tmp"
Thu 29 May 2008       230,400 ..SHR --- "C:\Documents and Settings\Utilisateur\Mes documents\?dobe\l?gonui.exe"
Sat 23 Aug 2003         4,348 A..H. --- "C:\Documents and Settings\Utilisateur\Mes documents\Ma musique\Sauvegarde de la licence\drmv1key.bak"
Wed 26 Jan 2005           401 A..H. --- "C:\Documents and Settings\Utilisateur\Mes documents\Ma musique\Sauvegarde de la licence\drmv1lic.bak"
Wed 26 Jan 2005           400 A.SH. --- "C:\Documents and Settings\Utilisateur\Mes documents\Ma musique\Sauvegarde de la licence\drmv2key.bak"

[b]Finished![/b]


et le rapport hijackthisLogfile of Trend Micro HijackThis v2.0.2
Scan saved at 14:34:49, on 28/06/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\WINDOWS\system32\iftuyszv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\acs.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\WINDOWS\system32
vsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32
otepad.exe
C:\WINDOWS\ATK0100\HControl.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Wireless Console 2\wcourier.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\windows\system32wwnw64d.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Documents and Settings\Utilisateur\Local Settings\Application Data\Google\Update\1.1.25.0\GoogleUpdate.exe
C:\Documents and Settings\Utilisateur\Mes documents\?dobe\l?gonui.exe
C:\Documents and Settings\Utilisateur\Local Settings\Application Data\YouTube\Uploader\youtubeuploader.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\ATK0100\ATKOSD.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\SMANTE~1\wuaclt.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\WINDOWS\system32	cntaxdm.exe
C:\Program Files\Safari\Safari.exe
C:\Documents and Settings\Utilisateur\Bureau\HiJackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,C:\WINDOWS\system32\iftuyszv.exe,
O3 - Toolbar: Veoh Browser Plug-in - {D0943516-5076-4020-A3B5-AEFAF26AB263} - C:\Program Files\Veoh Networks\Veoh\Pluginseg\VeohToolbar.dll (file missing)
O4 - HKLM\..\Run: [HControl] C:\WINDOWS\ATK0100\HControl.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [AS00_Gear511] C:\Program Files\NETGEAR\WG511SCU\Utility\Gear511.exe -hide
O4 - HKLM\..\Run: [ACU] "C:\Program Files\OLITEC\ACU.exe" -nogui
O4 - HKLM\..\Run: [Wireless Console 2] C:\Program Files\Wireless Console 2\wcourier.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [NBKeyScan] "C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [{34-4C-C5-5B-DW}] C:\windows\system32wwnw64d.exe DWram1FF
O4 - HKLM\..\Run: [e8c34cf4] rundll32.exe "C:\WINDOWS\system32\ewwipsbx.dll",b
O4 - HKLM\..\Run: [VirusKeeper] C:\Program Files\AxBx\VirusKeeper 2008 Pro Evaluation\VirusKeeper.exe
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [BMebf07f68] Rundll32.exe "C:\WINDOWS\system32\uwteqfbq.dll",s
O4 - HKLM\..\Run: [ExploreUpdSched] C:\WINDOWS\system32	cntaxdm.exe DWram1FF
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Nero\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [Veoh] "C:\Program Files\Veoh Networks\Veoh\VeohClient.exe" /VeohHide
O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\Utilisateur\Local Settings\Application Data\Google\Update\1.1.25.0\GoogleUpdate.exe" /lang en
O4 - HKCU\..\Run: [Acmw] "C:\WINDOWS\SMANTE~1\wuaclt.exe" -vt ndrv
O4 - HKCU\..\Run: [Jcrawirr] "C:\Documents and Settings\Utilisateur\Mes documents\?dobe\l?gonui.exe"
O4 - Startup: YouTube Uploader.lnk = C:\Documents and Settings\Utilisateur\Local Settings\Application Data\YouTube\Uploader\youtubeuploader.exe
O4 - Startup: DW_Start.lnk = C:\WINDOWS\system32wwnw64d.exe
O4 - Startup: Deewoo.lnk = C:\WINDOWS\system32	cntaxdm.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O14 - IERESET.INF: START_PAGE_URL=https://www.asus.com/fr/
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w2/pr02/resources/MSNPUpld.cab
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cab
O16 - DPF: {CF40ACC5-E1BB-4AFF-AC72-04C2F616BCA7} (get_atlcom Class) - http://www.adobe.com/products/acrobat/nos/gp.cab
O20 - AppInit_DLLs: C:\WINDOWS\system32\__c004784E.dat
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: Service de configuration OLITEC (ACS) - Unknown owner - C:\WINDOWS\system32\acs.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exe
O23 - Service: Service Messenger Sharing Folders USN Journal Reader (usnjsvc) - Unknown owner - C:\Program Files\Windows Live\Messenger\usnsvc.exe (file missing)
O23 - Service: VirusKeeper antivirus/antispyware (vkservice) - Unknown owner - C:\Program Files\AxBx\VirusKeeper 2008 Pro Evaluation\vk_service.exe (file missing)

g!rly · Answer

ok

Télécharge combofix.exe (par sUBs) sur ton Bureau.

-> http://download.bleepingcomputer.com/sUBs/ComboFix.exe     

-> Double clique combofix.exe.
-> Tape sur la touche 1 (Yes) pour démarrer le scan.
-> Lorsque le scan sera complété, un rapport apparaîtra. Copie/colle ce rapport dans ta prochaine réponse. 

NOTE : Le rapport se trouve également ici : C:\Combofix.txt

Avant d'utiliser ComboFix :

-> Déconnecte toi d'internet et referme les fenêtres de tous les programmes en cours.

-> Désactive provisoirement et seulement le temps de l'utilisation de ComboFix, la protection en temps réel de ton Antivirus et de tes Antispywares, qui peuvent géner fortement la procédure de recherche et de nettoyage de l'outil.

Une fois fait, sur ton bureau double-clic sur Combofix.exe.

- Répond oui au message d'avertissement, pour que le programme commence à procéder à l'analyse du pc.

/!\ Pendant la durée de cette étape, ne te sert pas du pc et n'ouvre aucun programmes.

- En fin de scan il est possible que ComboFix ait besoin de redemarrer le pc pour finaliser la désinfection\recherche, laisses-le faire.

- Un rapport s'ouvrira ensuite dans le bloc notes, ce fichier rapport Combofix.txt, est automatiquement sauvegardé et rangé à C:\Combofix.txt)

-> Réactive la protection en temps réel de ton Antivirus et de tes Antispywares, avant de te reconnecter à internet.

-> Reviens sur le forum, et copie et colle la totalité du contenu de C:\Combofix.txt dans ton prochain message.

-> Tutoriel https://www.bleepingcomputer.com/combofix/fr/comment-utiliser-combofix

Post également un nouveau rapport hijack this dans ta réponse stp

@+

mari64 · Answer

voici le scan combofixComboFix 08-06-20.4 - Utilisateur 2008-06-28 14:46:08.1 - [color=red][b]FAT32[/b][/color]x86 Microsoft Windows XP Édition familiale 5.1.2600.2.1252.1.1036.18.1610 [GMT 2:00] Endroit: C:\Documents and Settings\Utilisateur\Bureau\ComboFix.exe * Création d'un nouveau point de restauration [color=red][b]AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !![/b][/color] . (((((((((((((((((((((((((((((((((((( Autres suppressions )))))))))))))))))))))))))))))))))))))))))))))))) . C:\Documents and Settings\LocalService\Application Data\NetMon C:\Documents and Settings\LocalService\Application Data\NetMon\domains.txt C:\Documents and Settings\LocalService\Application Data\NetMon\log.txt C:\Documents and Settings\Utilisateur\Mes documents\DOBE~1 C:\Program Files\Spcron C:\Program Files\Spcron\Spc.dll C:\WINDOWS\accesss.exe C:\WINDOWS\astctl32.ocx C:\WINDOWS\avpcc.dll C:\WINDOWS\clrssn.exe C:\WINDOWS\cookies.ini C:\WINDOWS\cpan.dll C:\WINDOWS\ctfmon32.exe C:\WINDOWS\default.htm C:\WINDOWS\directx32.exe C:\WINDOWS\dnsrelay.dll C:\WINDOWS\Downloaded Program Files\setup.inf C:\WINDOWS\editpad.exe C:\WINDOWS\explore.exe C:\WINDOWS\explorer32.exe C:\WINDOWS\funniest.exe C:\WINDOWS\funny.exe C:\WINDOWS\gfmnaaa.dll C:\WINDOWS\helpcvs.exe C:\WINDOWS\iedll.exe C:\WINDOWS\iexplorer.exe C:\WINDOWS\inetinf.exe C:\WINDOWS\internet.exe C:\WINDOWS\loader.exe C:\WINDOWS\msconfd.dll C:\WINDOWS\msspi.dll C:\WINDOWS\mssys.exe C:\WINDOWS\msupdate.exe C:\WINDOWS\mswsc10.dll C:\WINDOWS\mswsc20.dll C:\WINDOWS\mtwirl32.dll C:\WINDOWS otepad32.exe C:\WINDOWS\olehelp.exe C:\WINDOWS\pskt.ini C:\WINDOWS\qttasks.exe C:\WINDOWS\quicken.exe C:\WINDOWS undll16.exe C:\WINDOWS undll32.vbe C:\WINDOWS\searchword.dll C:\WINDOWS\sistem.exe C:\WINDOWS\smante~1 C:\WINDOWS\smante~1\S?mantec\ C:\WINDOWS\smante~1\wuaclt.exe C:\WINDOWS\svchost32.exe C:\WINDOWS\svcinit.exe C:\WINDOWS\systeem.exe C:\WINDOWS\system32\aajdmybq.dll C:\WINDOWS\system32\acprqcev.dll C:\WINDOWS\system32\agffxxpx.ini C:\WINDOWS\system32\agmywbdk.dll C:\WINDOWS\system32\akpllotg.dll C:\WINDOWS\system32\aofubccu.dll C:\WINDOWS\system32\ashxoutx.ini C:\WINDOWS\system32\auwsqgbw.dll C:\WINDOWS\system32\avrxqkkb.dll C:\WINDOWS\system32\axlnhjxv.ini C:\WINDOWS\system32\bflhegke.dll C:\WINDOWS\system32\bfnxtenp.ini C:\WINDOWS\system32\bhxhaxoa.ini C:\WINDOWS\system32\bllyxbsg.dll C:\WINDOWS\system32\bmlwmuwq.ini C:\WINDOWS\system32\bokpvxtd.ini C:\WINDOWS\system32\bpsraqjv.ini C:\WINDOWS\system32\bqfuisnq.dll C:\WINDOWS\system32\buisdaxn.ini C:\WINDOWS\system32\bvxbnrfq.ini C:\WINDOWS\system32\bygchpdo.ini C:\WINDOWS\system32\bykwmfpx.dll C:\WINDOWS\system32\ccvxhytb.ini C:\WINDOWS\system32\ceexkwed.ini C:\WINDOWS\system32\cfivbuyh.ini C:\WINDOWS\system32\cfkyjjdm.dll C:\WINDOWS\system32\chejkhtg.dll C:\WINDOWS\system32\chspssbr.dll C:\WINDOWS\system32\cojdrirg.dll C:\WINDOWS\system32\coleduvj.dll C:\WINDOWS\system32\crgylayv.dll C:\WINDOWS\system32\crsrwrou.ini C:\WINDOWS\system32\csuiqrkx.dll C:\WINDOWS\system32\cvfgvcvb.dll C:\WINDOWS\system32\cxyuyajl.dll C:\WINDOWS\system32\davebrmr.dll C:\WINDOWS\system32\ddgcqjwb.ini C:\WINDOWS\system32\dhajufqu.dll C:\WINDOWS\system32\dhejwlii.dll C:\WINDOWS\system32\dihaiuxq.dll C:\WINDOWS\system32\djatynfk.dll C:\WINDOWS\system32\dtveoqgg.dll C:\WINDOWS\system32\dxjpdagr.ini C:\WINDOWS\system32\ednwhttv.ini C:\WINDOWS\system32\ejtaqcwb.dll C:\WINDOWS\system32\ejuljsnn.dll C:\WINDOWS\system32\elucably.dll C:\WINDOWS\system32\epkeqecu.ini C:\WINDOWS\system32\etbwigyl.dll C:\WINDOWS\system32\etqnlbcc.dll C:\WINDOWS\system32\euveleem.dll C:\WINDOWS\system32\evrotouj.dll C:\WINDOWS\system32\ewsanhpt.ini C:\WINDOWS\system32\ewuktoep.dll C:\WINDOWS\system32\ewxkijva.ini C:\WINDOWS\system32\fbchvijj.dll C:\WINDOWS\system32\fbervpso.ini C:\WINDOWS\system32\fdbwsqkg.ini C:\WINDOWS\system32\fekcuhxg.ini C:\WINDOWS\system32\fexlupwr.ini C:\WINDOWS\system32\fkjloacm.dll C:\WINDOWS\system32\ftetypvv.ini C:\WINDOWS\system32\ftiiowdr.ini C:\WINDOWS\system32\ftwmhfdl.ini C:\WINDOWS\system32\fugluntv.ini C:\WINDOWS\system32\fvfpjler.ini C:\WINDOWS\system32\fxfgrico.dll C:\WINDOWS\system32\gcfmiclx.ini C:\WINDOWS\system32\gdkwsuat.dll C:\WINDOWS\system32\gevolhkq.ini C:\WINDOWS\system32\gfqlejwr.ini C:\WINDOWS\system32\gjteucjc.ini C:\WINDOWS\system32\gtdjshmr.ini C:\WINDOWS\system32\gxklkupe.ini C:\WINDOWS\system32\hcueapgx.dll C:\WINDOWS\system32\hcvwigaq.ini C:\WINDOWS\system32\hdxkisvr.dll C:\WINDOWS\system32\hewftfdg.dll C:\WINDOWS\system32\hfhyfssj.ini C:\WINDOWS\system32\hljwugsf.bin C:\WINDOWS\system32\hqtjewxc.dll C:\WINDOWS\system32\hwxtsgmv.ini C:\WINDOWS\system32\icedcjpd.dll C:\WINDOWS\system32\idrtsvcq.dll C:\WINDOWS\system32\ifxcmqoq.dll C:\WINDOWS\system32\iiyosowf.dll C:\WINDOWS\system32\ijehktmn.ini C:\WINDOWS\system32\ijllm.bak1 C:\WINDOWS\system32\ijllm.bak2 C:\WINDOWS\system32\ijllm.ini C:\WINDOWS\system32\ilfohagd.ini C:\WINDOWS\system32\imjkbaad.ini C:\WINDOWS\system32\inficdhg.ini C:\WINDOWS\system32\iqlsamck.ini C:\WINDOWS\system32\ivcuqdiv.dll C:\WINDOWS\system32\ivopywao.ini C:\WINDOWS\system32\iyeuamxt.ini C:\WINDOWS\system32\iyvitijt.dll C:\WINDOWS\system32\jboygbei.dll C:\WINDOWS\system32\jioxobir.dll C:\WINDOWS\system32\jjivhcbf.ini C:\WINDOWS\system32\jjtsnmgi.dll C:\WINDOWS\system32\jolbgojs.dll C:\WINDOWS\system32\jsepcuyb.dll C:\WINDOWS\system32\jsvikdhq.dll C:\WINDOWS\system32\jvfuvvmp.ini C:\WINDOWS\system32\jviswqwb.dll C:\WINDOWS\system32\keqeobqu.ini C:\WINDOWS\system32\khfobomo.dll C:\WINDOWS\system32\kjgtbtgb.dll C:\WINDOWS\system32\kmscskvu.ini C:\WINDOWS\system32\knfaxvwp.dll C:\WINDOWS\system32\ksfilpfg.dll C:\WINDOWS\system32\lbgeound.dll C:\WINDOWS\system32\ldclfyyl.dll C:\WINDOWS\system32\ldfuuomn.dll C:\WINDOWS\system32\ldseucuc.dll C:\WINDOWS\system32\lgwdqlwf.ini C:\WINDOWS\system32\lhiwhsgu.dll C:\WINDOWS\system32\lhsohgfd.dll C:\WINDOWS\system32\lldmpake.dll C:\WINDOWS\system32\lqscunyu.dll C:\WINDOWS\system32\lspouabd.dll C:\WINDOWS\system32\lufwdtjr.ini C:\WINDOWS\system32\lukyaptw.dll C:\WINDOWS\system32\lwbyassq.ini C:\WINDOWS\system32\lxqkotju.dll C:\WINDOWS\system32\lydyjhxr.dll C:\WINDOWS\system32\lyppketc.dll C:\WINDOWS\system32\magbcsfc.dll C:\WINDOWS\system32\magjtuna.dll C:\WINDOWS\system32\mcqkrapr.dll C:\WINDOWS\system32\mcrh.tmp C:\WINDOWS\system32\meelevue.ini C:\WINDOWS\system32\mevckxgg.dll C:\WINDOWS\system32\mlkwipui.ini C:\WINDOWS\system32\moagcrju.dll C:\WINDOWS\system32\movjudln.dll C:\WINDOWS\system32\mprmisnw.ini C:\WINDOWS\system32\mrdohbdd.ini C:\WINDOWS\system32\MSINET.oca C:\WINDOWS\system32\msnav32.ax C:\WINDOWS\system32\msveevpe.ini C:\WINDOWS\system32\mwhoqulh.ini C:\WINDOWS\system32 fuudefi.ini C:\WINDOWS\system32 hvafnlu.dll C:\WINDOWS\system32 kyohqit.ini C:\WINDOWS\system32 rvenakk.ini C:\WINDOWS\system32 sbikliq.ini C:\WINDOWS\system32 thcvssw.ini C:\WINDOWS\system32 vhojwaj.dll C:\WINDOWS\system32\oaaamonl.dll C:\WINDOWS\system32\obgcpmjb.ini C:\WINDOWS\system32\odmxlgct.dll C:\WINDOWS\system32\oevbnbv.dll C:\WINDOWS\system32\ogujeijt.ini C:\WINDOWS\system32\omduwcjt.dll C:\WINDOWS\system32\oodwgwgk.ini C:\WINDOWS\system32\oohejvnx.dll C:\WINDOWS\system32\orvainll.ini C:\WINDOWS\system32\oundvfiw.ini C:\WINDOWS\system32\ouojugqk.ini C:\WINDOWS\system32\oxyqtdul.ini C:\WINDOWS\system32\pac.txt C:\WINDOWS\system32\peojiiyv.ini C:\WINDOWS\system32\pgfqifnf.ini C:\WINDOWS\system32\phctodju.dll C:\WINDOWS\system32\pinqgmtw.dll C:\WINDOWS\system32\piqkqnrn.ini C:\WINDOWS\system32\pkeqfjqh.dll C:\WINDOWS\system32\pkjlyhac.ini C:\WINDOWS\system32\pksxigce.dll C:\WINDOWS\system32\pmnoNfET.dll C:\WINDOWS\system32\pohxnilw.dll C:\WINDOWS\system32\ppxveful.dll C:\WINDOWS\system32\pqlcqjac.ini C:\WINDOWS\system32\pskmtkwc.dll C:\WINDOWS\system32\pvnjcqhg.dll C:\WINDOWS\system32\pvntsqyc.ini C:\WINDOWS\system32\pwfexrxk.ini C:\WINDOWS\system32\pwhfihyq.ini C:\WINDOWS\system32\pwvxafnk.ini C:\WINDOWS\system32\pydvswsr.dll C:\WINDOWS\system32\pyyguino.dll C:\WINDOWS\system32\qagiwvch.dll C:\WINDOWS\system32\qbluuwaa.dll C:\WINDOWS\system32\qdngooss.dll C:\WINDOWS\system32\qirxwtwp.dll C:\WINDOWS\system32\qljofsfn.dll C:\WINDOWS\system32\qmokaftf.ini C:\WINDOWS\system32\qmvbaiuu.ini C:\WINDOWS\system32\qojpsljy.ini C:\WINDOWS\system32\qpibptgg.ini C:\WINDOWS\system32\qppldfab.dll C:\WINDOWS\system32\qrllelkn.dll C:\WINDOWS\system32\qssaybwl.dll C:\WINDOWS\system32\qvofqqeu.ini C:\WINDOWS\system32 aywlldh.dll C:\WINDOWS\system32 bhvmqal.ini C:\WINDOWS\system32 ftuhjlp.ini C:\WINDOWS\system32 gdtduyy.dll C:\WINDOWS\system32 hdrvfow.dll C:\WINDOWS\system32 hhcnalv.ini C:\WINDOWS\system32 injulaq.ini C:\WINDOWS\system32 qkotntp.ini C:\WINDOWS\system32 rivdigg.dll C:\WINDOWS\system32 tmbnufm.dll C:\WINDOWS\system32 wwnw64d.exe C:\WINDOWS\system32 xcekanv.dll C:\WINDOWS\system32 yeegbbp.ini C:\WINDOWS\system32 yrrmype.dll C:\WINDOWS\system32\sekuysio.dll C:\WINDOWS\system32\serbnfio.dll C:\WINDOWS\system32\setwuwro.dll C:\WINDOWS\system32\seubdapv.ini C:\WINDOWS\system32\sfsowcqd.dll C:\WINDOWS\system32\smemhuvo.dll C:\WINDOWS\system32\snpbcmws.dll C:\WINDOWS\system32\spqvpniw.ini C:\WINDOWS\system32\sttnyywl.ini C:\WINDOWS\system32 cnoprbn.ini C:\WINDOWS\system32 cntaxdm.exe C:\WINDOWS\system32\TEfNonmp.ini C:\WINDOWS\system32\TEfNonmp.ini2 C:\WINDOWS\system32 emeucyv.ini C:\WINDOWS\system32 fjawwyy.dll C:\WINDOWS\system32 lmylhhg.dll C:\WINDOWS\system32 phwhscm.ini C:\WINDOWS\system32 reamfgs.ini C:\WINDOWS\system32 xxmafkc.dll C:\WINDOWS\system32 ydpbnoh.ini C:\WINDOWS\system32\udcfuwjf.ini C:\WINDOWS\system32\udodkjqq.dll C:\WINDOWS\system32\uebnpmcf.dll C:\WINDOWS\system32\ujwxlbbi.dll C:\WINDOWS\system32\ulkqlpsx.dll C:\WINDOWS\system32\umojuqop.dll C:\WINDOWS\system32\unvpmtbx.dll C:\WINDOWS\system32\uoxaywvd.dll C:\WINDOWS\system32\uqhqldwc.ini C:\WINDOWS\system32\urdemnqc.dll C:\WINDOWS\system32\uuhvxull.dll C:\WINDOWS\system32\uvakaxbi.ini C:\WINDOWS\system32\uvkwfuvg.dll C:\WINDOWS\system32\uvurvhey.dll C:\WINDOWS\system32\uwdnixmk.dll C:\WINDOWS\system32\uwfrrnkl.dll C:\WINDOWS\system32\uwrflhqq.dll C:\WINDOWS\system32\vbjbgdau.dll C:\WINDOWS\system32\vmncukhu.ini C:\WINDOWS\system32\vtthwnde.dll C:\WINDOWS\system32\vwrnjlmh.dll C:\WINDOWS\system32\vxpqevkw.ini C:\WINDOWS\system32\vymtonjj.dll C:\WINDOWS\system32\wabfmqoe.dll C:\WINDOWS\system32\wddyiqxm.dll C:\WINDOWS\system32\wfgdolte.dll C:\WINDOWS\system32\whvhbqyd.dll C:\WINDOWS\system32\winpfz33.sys C:\WINDOWS\system32\wkpggdxl.dll C:\WINDOWS\system32\wofvrdhr.ini C:\WINDOWS\system32\wvfkdndh.dll C:\WINDOWS\system32\wyadd.bak1 C:\WINDOWS\system32\wyadd.bak2 C:\WINDOWS\system32\wyadd.ini C:\WINDOWS\system32\wyadd.ini2 C:\WINDOWS\system32\wyadd.tmp C:\WINDOWS\system32\xbspiwwe.ini C:\WINDOWS\system32\xbspiwwe.ini2 C:\WINDOWS\system32\xddibcbi.ini C:\WINDOWS\system32\xdsjpewo.dll C:\WINDOWS\system32\xgyfyaaq.dll C:\WINDOWS\system32\xitqttew.ini C:\WINDOWS\system32\xjnailvq.dll C:\WINDOWS\system32\xkraxagq.dll C:\WINDOWS\system32\xrblkafx.ini C:\WINDOWS\system32\xskccytv.dll C:\WINDOWS\system32\xupyaknn.ini C:\WINDOWS\system32\xweubuky.ini C:\WINDOWS\system32\xwwvqfju.ini C:\WINDOWS\system32\yggduhph.ini C:\WINDOWS\system32\ykglhgnw.dll C:\WINDOWS\system32\ylgyownh.dll C:\WINDOWS\system32\yngphlts.ini C:\WINDOWS\system32\yofffrcw.dll C:\WINDOWS\system32\ypvdcfuy.ini C:\WINDOWS\system32\zxdnt3d.cfg C:\WINDOWS\systemcritical.exe C:\WINDOWS ime.exe C:\WINDOWS\users32.exe C:\WINDOWS\waol.exe C:\WINDOWS\win32e.exe C:\WINDOWS\win64.exe C:\WINDOWS\winajbm.dll C:\WINDOWS\window.exe C:\WINDOWS\winmgnt.exe C:\WINDOWS\x.exe C:\WINDOWS\xplugin.dll C:\WINDOWS\xxxvideo.hta C:\WINDOWS\y.exe C:\Documents and Settings\Utilisateur\Mes documents\DOBE~1\l?gonui.exe . . . . Echec de suppression . ((((((((((((((((((((((((((((((((((((((( Drivers/Services ))))))))))))))))))))))))))))))))))))))))))))))))) . -------\Legacy_CMDSERVICE -------\Legacy_NETWORK_MONITOR ((((((((((((((((((((((((((((( Fichiers cr‚‚s 2008-05-28 to 2008-06-28 )))))))))))))))))))))))))))))))))))) . 2008-06-28 14:22 . 2008-06-28 14:22 d-------- C:\WINDOWS\ERUNT 2008-06-28 13:00 . 2008-06-28 13:00 d-------- C:\Program Files\Lavasoft 2008-06-28 12:59 . 2008-06-28 12:59 d-------- C:\Program Files\Fichiers communs\Wise Installation Wizard 2008-06-28 10:26 . 2008-06-28 10:26 d-------- C:\Documents and Settings\All Users\Application Data\Lavasoft 2008-06-28 10:22 . 2004-08-05 14:00 3,555,328 --a------ C:\WINDOWS\system32\dllcache\moviemk.exe 2008-06-28 10:22 . 2004-08-05 14:00 60,416 --a------ C:\WINDOWS\system32\dllcache\msimn.exe 2008-06-28 10:20 . 2008-06-28 12:43 4,416 --a------ C:\WINDOWS\system32 mp.reg 2008-06-28 10:16 . 2008-06-28 10:16 d-------- C:\Program Files\Windows Defender 2008-06-28 09:57 . 2008-06-28 09:57 34,304 --a------ C:\WINDOWS\system32\khfFYRkJ.dll 2008-06-27 20:22 . 2008-06-27 20:22 230 --a------ C:\WINDOWS\system32\spupdsvc.inf 2008-06-27 19:39 . 2008-06-27 19:39 0 --a------ C:\WINDOWS\system32\ZoneAlarmIconUS.ico 2008-06-27 19:39 . 2008-06-27 19:39 0 --a------ C:\WINDOWS\system32\ZoneAlarmIconUK.ico 2008-06-27 19:39 . 2008-06-27 19:39 0 --a------ C:\WINDOWS\system32\TuneclubIconDE.ico 2008-06-27 19:39 . 2008-06-27 19:39 0 --a------ C:\WINDOWS\system32\Jamster.ico 2008-06-27 19:39 . 2008-06-27 19:39 0 --a------ C:\WINDOWS\system32\CelldoradoIconUK.ico 2008-06-27 19:39 . 2008-06-27 19:39 0 --a------ C:\WINDOWS\system32\BlinkoIconES.ico 2008-06-27 19:29 . 2008-06-27 19:29 13,502 --a------ C:\WINDOWS\system32\JambaIconFR.ico 2008-06-27 19:29 . 2008-06-27 19:29 9,662 --a------ C:\WINDOWS\system32\ZoneAlarmIconFR.ico 2008-06-27 19:23 . 2008-06-27 19:23 0 --a------ C:\WINDOWS\system32\everybodybets.32x32.4.ico 2008-06-27 19:04 . 2008-06-27 19:04 104,448 --a------ C:\WINDOWS\system32\vxnwvv.dll 2008-06-27 19:04 . 2008-06-27 19:04 104,448 --a------ C:\WINDOWS\system32\erbhfuvh.dll 2008-06-27 19:02 . 94,720 C:\WINDOWS\system32\uwteqfbq.dll 2008-06-27 19:02 . 87,040 C:\WINDOWS\system32\ewwipsbx.dll 2008-06-27 19:00 . 2008-06-27 19:00 147,456 --a------ C:\WINDOWS\system32\vbzip10.dll 2008-06-27 18:59 . 2008-06-27 18:59 d-------- C:\Program Files\mjc 2008-06-27 18:56 . 2008-06-27 18:56 d--hs---- C:\WINDOWS\VXRpbGlzYXRldXI 2008-06-27 18:56 . 2008-06-27 18:56 d-------- C:\WINDOWS\system32\yrt 2008-06-27 18:56 . 2008-06-27 18:56 d-------- C:\WINDOWS\system32 ov 2008-06-27 18:56 . 2008-06-27 18:56 d-------- C:\WINDOWS\system32\pRI 2008-06-27 18:56 . 2008-06-27 18:56 d-------- C:\WINDOWS\system32\modtrux18 2008-06-27 18:56 . 2008-06-27 18:56 d-------- C: emp\syschk3 2008-06-27 18:56 . 2008-06-27 18:56 52,224 ---hs---- C:\Documents and Settings\Utilisateur\lsass.exe 2008-06-27 18:56 . 2008-06-27 18:56 41,984 --a------ C:\WINDOWS\mrofinu1188.exe.tmp 2008-06-27 18:56 . 2008-06-28 09:57 41,984 --a------ C:\WINDOWS\mrofinu1188.exe 2008-06-27 18:56 . 2008-06-27 18:56 41,984 --a------ C:\WINDOWS\mrofinu1000106.exe 2008-06-27 18:52 . 2008-06-27 18:52 d-------- C:\Program Files\BoontyGames 2008-06-27 18:52 . 2008-06-27 18:52 d-------- C:\Program Files\Boonty 2008-06-25 17:47 . 41,984 C:\WINDOWS\b156.exe 2008-06-24 20:26 . 2008-06-24 20:26 d-------- C:\Documents and Settings\Utilisateur\Application Data\PowerChallenge 2008-06-24 13:33 . 2008-06-24 13:33 d-------- C:\Program Files\Red Kawa 2008-06-24 13:33 . 2008-06-24 13:33 d-------- C:\Program Files\AviSynth 2.5 2008-06-21 20:11 . 2007-05-02 11:12 109,704 --a------ C:\WINDOWS\system32\drivers\ssm_mdm.sys 2008-06-21 20:11 . 2007-05-02 11:12 83,592 --a------ C:\WINDOWS\system32\drivers\ssm_bus.sys 2008-06-21 20:11 . 2007-05-02 11:12 15,112 --a------ C:\WINDOWS\system32\drivers\ssm_mdfl.sys 2008-06-21 20:11 . 2007-05-02 11:12 12,424 --a------ C:\WINDOWS\system32\drivers\ssm_whnt.sys 2008-06-21 20:11 . 2007-05-02 11:12 12,424 --a------ C:\WINDOWS\system32\drivers\ssm_wh.sys 2008-06-21 20:11 . 2007-05-02 11:12 12,424 --a------ C:\WINDOWS\system32\drivers\ssm_cmnt.sys 2008-06-21 20:11 . 2007-05-02 11:12 12,424 --a------ C:\WINDOWS\system32\drivers\ssm_cm.sys 2008-06-20 21:12 . 2008-06-20 21:12 d-------- C:\WINDOWS\system32\Adobe 2008-06-20 05:40 . 2008-06-20 05:40 90,073 --a------ C:\WINDOWS\system32\iftuyszv.exe 2008-06-13 16:05 . 2008-06-13 13:05 95,232 --a------ C:\WINDOWS\b152.exe 2008-06-11 09:46 . 2008-06-14 19:59 272,768 --------- C:\WINDOWS\system32\drivers\bthport.sys 2008-06-11 09:46 . 2008-06-14 19:59 272,768 --------- C:\WINDOWS\system32\dllcache\bthport.sys 2008-06-01 20:30 . 2008-06-01 20:30 d-------- C:\Documents and Settings\Utilisateur\Application Data\Teleca 2008-06-01 20:29 . 2008-06-01 20:29 d-------- C:\Program Files\Fichiers communs\Teleca Shared 2008-06-01 20:28 . 2008-06-01 20:28 6,144 --a------ C:\WINDOWS\system32\drivers\k750cm.sys 2008-06-01 20:28 . 2008-06-01 20:28 5,744 --a------ C:\WINDOWS\system32\drivers\k750wh.sys 2008-06-01 20:26 . 2008-06-01 20:26 d-------- C:\WINDOWS\system32\URTTemp . (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M )))))))))))))))))))))))))))))))))))))))))))))))) . 2008-06-24 11:32 3,192 ----a-w C:\WINDOWS\system32\PerfStringBackup.TMP 2008-05-16 09:58 12,632 ----a-w C:\WINDOWS\system32\lsdelete.exe 2008-05-15 05:17 --------- d-----w C:\Program Files\Apple Software Update 2008-05-14 11:13 --------- d-----w C:\Program Files\QuickTime 2008-05-10 10:52 --------- d-----w C:\Documents and Settings\Utilisateur\Application Data\GetRightToGo 2008-05-10 08:50 --------- d-----w C:\Documents and Settings\Utilisateur\Application Data\Samsung 2008-05-10 08:49 --------- d-----w C:\Program Files\Samsung 2008-05-08 12:28 202,752 ----a-w C:\WINDOWS\system32\drivers\RMCast.sys 2008-05-08 12:28 202,752 ----a-w C:\WINDOWS\system32\dllcache mcast.sys 2008-05-07 05:15 1,293,824 ----a-w C:\WINDOWS\system32\quartz.dll 2008-05-07 05:15 1,293,824 ----a-w C:\WINDOWS\system32\dllcache\quartz.dll 2008-04-29 09:20 15,648 ----a-w C:\WINDOWS\system32\drivers\NSDriver.sys 2008-04-29 09:19 15,648 ----a-w C:\WINDOWS\system32\drivers\Awrtrd.sys 2008-04-29 09:19 12,960 ----a-w C:\WINDOWS\system32\drivers\Awrtpd.sys 2008-04-23 04:16 63,488 ------w C:\WINDOWS\system32\dllcache\icardie.dll 2008-04-23 04:16 6,066,176 ------w C:\WINDOWS\system32\dllcache\ieframe.dll 2008-04-23 04:16 52,224 ------w C:\WINDOWS\system32\dllcache\msfeedsbs.dll 2008-04-23 04:16 459,264 ------w C:\WINDOWS\system32\dllcache\msfeeds.dll 2008-04-23 04:16 383,488 ------w C:\WINDOWS\system32\dllcache\ieapfltr.dll 2008-04-23 04:16 267,776 ------w C:\WINDOWS\system32\dllcache\iertutil.dll 2008-04-22 07:39 13,824 ------w C:\WINDOWS\system32\dllcache\ieudinit.exe 2007-08-10 10:44 278,528 ----a-w C:\Program Files\Fichiers communs\FDEUnInstaller.exe 2007-01-13 17:52 0 ----a-w C:\Documents and Settings\Utilisateur\Application Data\wklnhst.dat . ((((((((((((((((((((((((((((((((( Point de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))) . . REGEDIT4 *Note* les ‚l‚ments vides & les ‚l‚ments initiaux l‚gitimes ne sont pas list‚s [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{840c58fb-b914-4404-bbbe-c9c141b232b1}] 2008-06-27 19:04 104448 --a------ C:\WINDOWS\system32\vxnwvv.dll [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{9572FB08-BD9F-4A7D-A3F7-863639BCC4D7}] C:\WINDOWS\system32\ddayw.dll [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "MsnMsgr"="C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" [ ] "BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="C:\Program Files\Fichiers communs\Nero\Lib\NMBgMonitor.exe" [ ] "Veoh"="C:\Program Files\Veoh Networks\Veoh\VeohClient.exe" [ ] "Google Update"="C:\Documents and Settings\Utilisateur\Local Settings\Application Data\Google\Update\1.1.25.0\GoogleUpdate.exe" [2008-05-11 16:03 51184] "Acmw"="C:\WINDOWS\SMANTE~1\wuaclt.exe" [ ] "Jcrawirr"="C:\Documents and Settings\Utilisateur\Mes documents\?dobe\l?gonui.exe" [ ] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "HControl"="C:\WINDOWS\ATK0100\HControl.exe" [2006-04-17 02:24 110592] "NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2006-04-27 09:47 7573504] "nwiz"="nwiz.exe" [2006-04-27 09:47 1519616 C:\WINDOWS\system32 wiz.exe] "NvMediaCenter"="C:\WINDOWS\system32\NvMcTray.dll" [2006-04-27 09:47 86016] "AS00_Gear511"="C:\Program Files\NETGEAR\WG511SCU\Utility\Gear511.exe" [ ] "ACU"="C:\Program Files\OLITEC\ACU.exe" [ ] "Wireless Console 2"="C:\Program Files\Wireless Console 2\wcourier.exe" [2005-10-17 17:09 987136] "SynTPEnh"="C:\Program Files\Synaptics\SynTP\SynTPEnh.exe" [2005-10-21 08:26 761945] "RTHDCPL"="RTHDCPL.EXE" [2005-12-19 08:52 15797248 C:\WINDOWS\RTHDCPL.EXE] "SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" [2007-09-25 01:11 132496] "Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [ ] "NBKeyScan"="C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe" [ ] "iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [ ] "QuickTime Task"="C:\Program Files\QuickTime\QTTask.exe" [ ] "{34-4C-C5-5B-DW}"="C:\windows\system32 wwnw64d.exe" [ ] "e8c34cf4"="C:\WINDOWS\system32\ewwipsbx.dll" [ ] "VirusKeeper"="C:\Program Files\AxBx\VirusKeeper 2008 Pro Evaluation\VirusKeeper.exe" [ ] "BMebf07f68"="C:\WINDOWS\system32\uwteqfbq.dll" [ ] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32] "VIDC.YV12"= yv12vfw.dll [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\system32\sessmgr.exe"= "%windir%\Network Diagnostic\xpnetdiag.exe"= R3 ASNDIS5;ASNDIS5 Protocol Driver;C:\WINDOWS\system32\ASNDIS5.SYS [2002-09-09 19:54] R3 SynMini;USB2.0 1.3M Web Cam;C:\WINDOWS\system32\Drivers\SynMini.sys [2005-10-03 10:26] R3 SynScan;USB2.0 1.3M Web Cam Still Image;C:\WINDOWS\system32\Drivers\SynScan.sys [2005-10-03 10:26] S2 vkservice;VirusKeeper antivirus/antispyware;C:\Program Files\AxBx\VirusKeeper 2008 Pro Evaluation\vk_service.exe [] S3 AR5523;OLITEC USB Wireless Network Adapter Service;C:\WINDOWS\system32\DRIVERS\ar5523.sys [2005-07-27 21:11] S3 AWINDIS5;AWINDIS5 Protocol Driver;C:\WINDOWS\system32\AWINDIS5.SYS [2002-04-11 17:43] S3 Boonty Games;Boonty Games;"C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe" [2008-04-23 13:46] S3 NETGEAR_WG511_SERVICE;NETGEAR WG511T Wireless Adapter Service;C:\WINDOWS\system32\DRIVERS\wg511nd5.sys [2003-06-20 13:47] . Contenu du dossier 'Scheduled Tasks/Tƒches planifi‚es' "2008-06-26 17:15:02 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job" - C:\Program Files\Apple Software Update\SoftwareUpdate.exe "2008-06-28 12:34:52 C:\WINDOWS\Tasks\MP Scheduled Scan.job" - C:\Program Files\Windows Defender\MpCmdRun.exe . ************************************************************************** catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2008-06-28 14:51:06 Windows 5.1.2600 Service Pack 2 FAT NTAPI Balayage processus cach‚s ... Balayage cach‚ autostart entries ... Balayage des fichiers cach‚s ... Scan termin‚ avec succŠs Les fichiers cach‚s: 0 ************************************************************************** . ------------------------ Other Running Processes ------------------------ . C:\PROGRAM FILES\WINDOWS DEFENDER\MSMPENG.EXE C:\PROGRAM FILES\LAVASOFT\AD-AWARE\AAWSERVICE.EXE C:\WINDOWS\SYSTEM32\ACS.EXE C:\PROGRAM FILES\FICHIERS COMMUNS\APPLE\MOBILE DEVICE SUPPORT\BIN\APPLEMOBILEDEVICESERVICE.EXE C:\WINDOWS\SYSTEM32\NVSVC32.EXE C:\WINDOWS\SYSTEM32\RUNDLL32.EXE C:\DOCUMENTS AND SETTINGS\UTILISATEUR\LOCAL SETTINGS\APPLICATION DATA\YOUTUBE\UPLOADER\YOUTUBEUPLOADER.EXE C:\WINDOWS\ATK0100\ATKOSD.EXE . ************************************************************************** . Temps d'accomplissement: 2008-06-28 14:52:37 - machine was rebooted ComboFix-quarantined-files.txt 2008-06-28 12:52:34 Pre-Run: 37,693,456,384 octets libres Post-Run: 38,851,051,520 octets libres 536 --- E O F --- 2008-06-20 19:41:35 et celui de hijack Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 14:54:25, on 28/06/2008 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Windows Defender\MsMpEng.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\system32\acs.exe C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe C:\WINDOWS\system32 vsvc32.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\ATK0100\HControl.exe C:\WINDOWS\system32\RUNDLL32.EXE C:\Program Files\Wireless Console 2\wcourier.exe C:\Program Files\Synaptics\SynTP\SynTPEnh.exe C:\WINDOWS\RTHDCPL.EXE C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe C:\Documents and Settings\Utilisateur\Local Settings\Application Data\Google\Update\1.1.25.0\GoogleUpdate.exe C:\WINDOWS\System32\svchost.exe C:\Documents and Settings\Utilisateur\Local Settings\Application Data\YouTube\Uploader\youtubeuploader.exe C:\WINDOWS\ATK0100\ATKOSD.exe C:\WINDOWS\system32\wuauclt.exe C:\WINDOWS\explorer.exe C:\WINDOWS\system32\msiexec.exe C:\WINDOWS\system32 otepad.exe C:\Program Files\Safari\Safari.exe C:\WINDOWS\system32\wuauclt.exe C:\WINDOWS\SoftwareDistribution\Download\f87cb57ed37cb5f3831498e6979bb3d0\update\update.exe C:\Documents and Settings\Utilisateur\Bureau\HiJackThis.exe R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O2 - BHO: {1b232b14-1c9c-ebbb-4044-419bbf85c048} - {840c58fb-b914-4404-bbbe-c9c141b232b1} - C:\WINDOWS\system32\vxnwvv.dll O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: (no name) - {9572FB08-BD9F-4A7D-A3F7-863639BCC4D7} - C:\WINDOWS\system32\ddayw.dll (file missing) O3 - Toolbar: Veoh Browser Plug-in - {D0943516-5076-4020-A3B5-AEFAF26AB263} - C:\Program Files\Veoh Networks\Veoh\Plugins eg\VeohToolbar.dll (file missing) O4 - HKLM\..\Run: [HControl] C:\WINDOWS\ATK0100\HControl.exe O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [AS00_Gear511] C:\Program Files\NETGEAR\WG511SCU\Utility\Gear511.exe -hide O4 - HKLM\..\Run: [ACU] "C:\Program Files\OLITEC\ACU.exe" -nogui O4 - HKLM\..\Run: [Wireless Console 2] C:\Program Files\Wireless Console 2\wcourier.exe O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [NBKeyScan] "C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe" O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe" O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime O4 - HKLM\..\Run: [{34-4C-C5-5B-DW}] C:\windows\system32 wwnw64d.exe DWram1FF O4 - HKLM\..\Run: [e8c34cf4] rundll32.exe "C:\WINDOWS\system32\ewwipsbx.dll",b O4 - HKLM\..\Run: [VirusKeeper] C:\Program Files\AxBx\VirusKeeper 2008 Pro Evaluation\VirusKeeper.exe O4 - HKLM\..\Run: [BMebf07f68] Rundll32.exe "C:\WINDOWS\system32\uwteqfbq.dll",s O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Nero\Lib\NMBgMonitor.exe" O4 - HKCU\..\Run: [Veoh] "C:\Program Files\Veoh Networks\Veoh\VeohClient.exe" /VeohHide O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\Utilisateur\Local Settings\Application Data\Google\Update\1.1.25.0\GoogleUpdate.exe" /lang en O4 - HKCU\..\Run: [Acmw] "C:\WINDOWS\SMANTE~1\wuaclt.exe" -vt ndrv O4 - HKCU\..\Run: [Jcrawirr] "C:\Documents and Settings\Utilisateur\Mes documents\?dobe\l?gonui.exe" O4 - Startup: YouTube Uploader.lnk = C:\Documents and Settings\Utilisateur\Local Settings\Application Data\YouTube\Uploader\youtubeuploader.exe O4 - Startup: DW_Start.lnk = C:\WINDOWS\system32 wwnw64d.exe O4 - Startup: Deewoo.lnk = C:\WINDOWS\system32 cntaxdm.exe O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing) O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing) O14 - IERESET.INF: START_PAGE_URL=https://www.asus.com/fr/ O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w2/pr02/resources/MSNPUpld.cab O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cab O16 - DPF: {CF40ACC5-E1BB-4AFF-AC72-04C2F616BCA7} (get_atlcom Class) - http://www.adobe.com/products/acrobat/nos/gp.cab O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe O23 - Service: Service de configuration OLITEC (ACS) - Unknown owner - C:\WINDOWS\system32\acs.exe O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32 vsvc32.exe O23 - Service: Service Messenger Sharing Folders USN Journal Reader (usnjsvc) - Unknown owner - C:\Program Files\Windows Live\Messenger\usnsvc.exe (file missing) O23 - Service: VirusKeeper antivirus/antispyware (vkservice) - Unknown owner - C:\Program Files\AxBx\VirusKeeper 2008 Pro Evaluation\vk_service.exe (file missing)

g!rly · Answer

ok

de toute urgence :

tu surf avec internet explorer 6.0 = failles de securitées importantes

alors fais les mises a jour windows : tu veux la version 7.0 

https://support.microsoft.com/en-US/topic/internet-explorer-downloads-d49e1f0d-571c-9a7b-d97e-be248806ca70

puis

Telecharge et instales l'antivirus Antivir Personal Edition Classic :

->https://www.malekal.com/avira-free-security-antivirus-gratuit/

https://www.avira.com/en/prime

reglages :

une fois antivir ouvert click surconfiguration et coche la case "expert mode" puis sur l´onglet scanner dans la fenetre du dessous tu va voir : rootkit search click sur le petit + pour deployer et coche la case a coté de ton disk dur
ceux qui ne voie pas root kit search : clcik sur le parapluie dans ta barre des tache > dans la fenetre d´antivir click sur local protection click en suite sur scanner
dans la fenetre de droite : tu a rootkit search vers le bas > tu developpe en appuyant sur le petit +
et coche tes disques...
puis click sur configuration en haut a droite; dans la nouvelle fenetre a gauche >scanner > coche "scan all files" et en dessous >scanner priority = High
coche : allow stopping the scanner, comme cela tu peux faire une pause pendant le scan si tu le desir.
puis sur la droite coche les case suivantes : 
scan boot sectors of selected drives
scan master boot sectors
scan memory
search foe rootkit before scan
decoche :
ignore off line files
toujours a gauche > scan > deploie > heuristique > macrovirus heuristic = coché et en dessous > win32 heuristic la case coché et high detection level

et

Copie le texte ci-dessous :

File::
C:\WINDOWS\system32	mp.reg
C:\WINDOWS\system32\khfFYRkJ.dll
C:\WINDOWS\system32\uwteqfbq.dll
C:\WINDOWS\system32\ewwipsbx.dll
C:\windows\system32wwnw64d.exe
C:\Documents and Settings\Utilisateur\Mes documents\?dobe\l?gonui.exe
C:\WINDOWS\SMANTE~1\wuaclt.exe
C:\WINDOWS\system32\vxnwvv.dll
C:\WINDOWS\system32\ddayw.dll
C:\WINDOWS\system32\vxnwvv.dll
C:\WINDOWS\system32\erbhfuvh.dll
C:\WINDOWS\system32\uwteqfbq.dll
C:\WINDOWS\system32\ewwipsbx.dll
C:\WINDOWS\system32\vbzip10.dll
C:\WINDOWS\mrofinu1188.exe.tmp
C:\WINDOWS\mrofinu1188.exe
C:\WINDOWS\mrofinu1000106.exe
C:\WINDOWS\b156.exe
C:\WINDOWS\system32\iftuyszv.exe
C:\WINDOWS\b152.exe 
C:\WINDOWS\system32\ijllm.bak1
C:\WINDOWS\system32\ijllm.bak2
C:\WINDOWS\system32\wyadd.tmp
C:\WINDOWS\system32\wyadd.bak2
C:\WINDOWS\system32\wyadd.bak1

Folder::
C:\Program Files\Fichiers communs\BOONTY Shared
C:\WINDOWS\system32\URTTemp
C:\Program Files\BoontyGames
C:\Program Files\Boonty
C:\WINDOWS\system32\yrt
C:\WINDOWS\system32ov
C:\WINDOWS\system32\pRI
C:\WINDOWS\system32\modtrux18
C:	emp\syschk3 
C:\WINDOWS\VXRpbGlzYXRldXI
C:\Program Files\AxBx
C:\Documents and Settings\Utilisateur\Mes documents\?dobe

Registry::
[-HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{840c58fb-b914-4404-bbbe-c9c141b232b1}]
[-HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{9572FB08-BD9F-4A7D-A3F7-863639BCC4D7}]
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Acmw"=-
"Jcrawirr"=-
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"{34-4C-C5-5B-DW}"=-
"e8c34cf4"=-
"VirusKeeper"=-
"BMebf07f68"=-

Driver::
vkservice
Boonty Games

Ouvre le Bloc-Notes puis colle le texte copié.
(Démarrer\Tous les programmes\Accessoires\Bloc notes.)
Sauvegarde ce fichier sous le nom de CFScript.txt.

Glisse maintenant le fichier CFScript.txt dans Combofix.exe comme ci-dessous :

http://sd-1.archive-host.com/membres/up/1366464061/CFScript.gif

Cela va relancer Combofix, 

Une fenêtre bleue va apparaître: au message qui apparaît ( Type 1 to continue, or 2 to abort) , tape 1 puis valide.

Patiente le temps du scan.Le bureau va disparaître à plusieurs reprises: c'est normal!

Ne touche à rien tant que le scan n'est pas terminé.

Après redémarrage, poste le contenu du rapport Combofix.txt accompagné d'un rapport Hijackthis.

S'il n'y a pas de rédémarrage, poste quand même les rapports.

@+

mari64 · Answer

voiela le rapport comboComboFix 08-06-20.4 - Utilisateur 2008-06-28 15:34:49.2 - [color=red][b]FAT32[/b][/color]x86 Microsoft Windows XP Édition familiale 5.1.2600.2.1252.1.1036.18.1532 [GMT 2:00] Endroit: C:\Documents and Settings\Utilisateur\Bureau\ComboFix.exe Command switches used :: C:\Documents and Settings\Utilisateur\Bureau\CFScript.txt * Création d'un nouveau point de restauration [color=red][b]AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !![/b][/color] FILE :: C:\WINDOWS\b152.exe C:\WINDOWS\b156.exe C:\WINDOWS\mrofinu1000106.exe C:\WINDOWS\mrofinu1188.exe C:\WINDOWS\mrofinu1188.exe.tmp C:\WINDOWS\SMANTE~1\wuaclt.exe C:\WINDOWS\system32\ddayw.dll C:\WINDOWS\system32\erbhfuvh.dll C:\WINDOWS\system32\ewwipsbx.dll C:\WINDOWS\system32\iftuyszv.exe C:\WINDOWS\system32\ijllm.bak1 C:\WINDOWS\system32\ijllm.bak2 C:\WINDOWS\system32\khfFYRkJ.dll C:\windows\system32 wwnw64d.exe C:\WINDOWS\system32 mp.reg C:\WINDOWS\system32\uwteqfbq.dll C:\WINDOWS\system32\vbzip10.dll C:\WINDOWS\system32\vxnwvv.dll C:\WINDOWS\system32\wyadd.bak1 C:\WINDOWS\system32\wyadd.bak2 C:\WINDOWS\system32\wyadd.tmp . (((((((((((((((((((((((((((((((((((( Autres suppressions )))))))))))))))))))))))))))))))))))))))))))))))) . C:\Program Files\AxBx C:\Program Files\Boonty C:\Program Files\Boonty\Components\Singles_Telecharger(fr_215){5759}.exe C:\Program Files\BoontyGames C:\Program Files\Fichiers communs\BOONTY Shared C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe C: emp\syschk3 C: emp\syschk3 dirp5.log C:\WINDOWS\b152.exe C:\WINDOWS\b156.exe C:\WINDOWS\mrofinu1000106.exe C:\WINDOWS\mrofinu1188.exe C:\WINDOWS\mrofinu1188.exe.tmp C:\WINDOWS\system32\erbhfuvh.dll C:\WINDOWS\system32\ewwipsbx.dll C:\WINDOWS\system32\iftuyszv.exe C:\WINDOWS\system32\khfFYRkJ.dll C:\WINDOWS\system32\modtrux18 C:\WINDOWS\system32\modtrux18\modtrux182328.exe C:\WINDOWS\system32\pRI C:\WINDOWS\system32\pRI\kscomdll3.exe C:\WINDOWS\system32 ov C:\WINDOWS\system32 ov\dragGLL1.exe C:\WINDOWS\system32 mp.reg C:\WINDOWS\system32\URTTemp C:\WINDOWS\system32\URTTemp\fusion.dll C:\WINDOWS\system32\URTTemp\mscoree.dll C:\WINDOWS\system32\URTTemp\mscoree.dll.local C:\WINDOWS\system32\URTTemp\mscorsn.dll C:\WINDOWS\system32\URTTemp\mscorwks.dll C:\WINDOWS\system32\URTTemp\msvcr71.dll C:\WINDOWS\system32\URTTemp egtlib.exe C:\WINDOWS\system32\uwteqfbq.dll C:\WINDOWS\system32\vbzip10.dll C:\WINDOWS\system32\vxnwvv.dll C:\WINDOWS\system32\yrt C:\WINDOWS\VXRpbGlzYXRldXI . ((((((((((((((((((((((((((((((((((((((( Drivers/Services ))))))))))))))))))))))))))))))))))))))))))))))))) . -------\Legacy_BOONTY_GAMES -------\Legacy_VKSERVICE -------\Service_Boonty Games -------\Service_vkservice ((((((((((((((((((((((((((((( Fichiers cr‚‚s 2008-05-28 to 2008-06-28 )))))))))))))))))))))))))))))))))))) . 2008-06-28 15:26 . 2008-06-28 15:26 d-------- C:\Program Files\Avira 2008-06-28 15:26 . 2008-06-28 15:26 d-------- C:\Documents and Settings\All Users\Application Data\Avira 2008-06-28 14:22 . 2008-06-28 14:22 d-------- C:\WINDOWS\ERUNT 2008-06-28 13:00 . 2008-06-28 13:00 d-------- C:\Program Files\Lavasoft 2008-06-28 12:59 . 2008-06-28 12:59 d-------- C:\Program Files\Fichiers communs\Wise Installation Wizard 2008-06-28 10:26 . 2008-06-28 10:26 d-------- C:\Documents and Settings\All Users\Application Data\Lavasoft 2008-06-28 10:22 . 2004-08-05 14:00 3,555,328 --a------ C:\WINDOWS\system32\dllcache\moviemk.exe 2008-06-28 10:22 . 2004-08-05 14:00 60,416 --a------ C:\WINDOWS\system32\dllcache\msimn.exe 2008-06-28 10:16 . 2008-06-28 10:16 d-------- C:\Program Files\Windows Defender 2008-06-27 20:22 . 2008-06-27 20:22 230 --a------ C:\WINDOWS\system32\spupdsvc.inf 2008-06-27 19:39 . 2008-06-27 19:39 0 --a------ C:\WINDOWS\system32\ZoneAlarmIconUS.ico 2008-06-27 19:39 . 2008-06-27 19:39 0 --a------ C:\WINDOWS\system32\ZoneAlarmIconUK.ico 2008-06-27 19:39 . 2008-06-27 19:39 0 --a------ C:\WINDOWS\system32\TuneclubIconDE.ico 2008-06-27 19:39 . 2008-06-27 19:39 0 --a------ C:\WINDOWS\system32\Jamster.ico 2008-06-27 19:39 . 2008-06-27 19:39 0 --a------ C:\WINDOWS\system32\CelldoradoIconUK.ico 2008-06-27 19:39 . 2008-06-27 19:39 0 --a------ C:\WINDOWS\system32\BlinkoIconES.ico 2008-06-27 19:29 . 2008-06-27 19:29 13,502 --a------ C:\WINDOWS\system32\JambaIconFR.ico 2008-06-27 19:29 . 2008-06-27 19:29 9,662 --a------ C:\WINDOWS\system32\ZoneAlarmIconFR.ico 2008-06-27 19:23 . 2008-06-27 19:23 0 --a------ C:\WINDOWS\system32\everybodybets.32x32.4.ico 2008-06-27 18:59 . 2008-06-27 18:59 d-------- C:\Program Files\mjc 2008-06-27 18:56 . 2008-06-27 18:56 52,224 ---hs---- C:\Documents and Settings\Utilisateur\lsass.exe 2008-06-24 20:26 . 2008-06-24 20:26 d-------- C:\Documents and Settings\Utilisateur\Application Data\PowerChallenge 2008-06-24 13:33 . 2008-06-24 13:33 d-------- C:\Program Files\Red Kawa 2008-06-24 13:33 . 2008-06-24 13:33 d-------- C:\Program Files\AviSynth 2.5 2008-06-21 20:11 . 2007-05-02 11:12 109,704 --a------ C:\WINDOWS\system32\drivers\ssm_mdm.sys 2008-06-21 20:11 . 2007-05-02 11:12 83,592 --a------ C:\WINDOWS\system32\drivers\ssm_bus.sys 2008-06-21 20:11 . 2007-05-02 11:12 15,112 --a------ C:\WINDOWS\system32\drivers\ssm_mdfl.sys 2008-06-21 20:11 . 2007-05-02 11:12 12,424 --a------ C:\WINDOWS\system32\drivers\ssm_whnt.sys 2008-06-21 20:11 . 2007-05-02 11:12 12,424 --a------ C:\WINDOWS\system32\drivers\ssm_wh.sys 2008-06-21 20:11 . 2007-05-02 11:12 12,424 --a------ C:\WINDOWS\system32\drivers\ssm_cmnt.sys 2008-06-21 20:11 . 2007-05-02 11:12 12,424 --a------ C:\WINDOWS\system32\drivers\ssm_cm.sys 2008-06-20 21:12 . 2008-06-20 21:12 d-------- C:\WINDOWS\system32\Adobe 2008-06-11 09:46 . 2008-06-14 19:59 272,768 --------- C:\WINDOWS\system32\drivers\bthport.sys 2008-06-11 09:46 . 2008-06-14 19:59 272,768 --------- C:\WINDOWS\system32\dllcache\bthport.sys 2008-06-01 20:30 . 2008-06-01 20:30 d-------- C:\Documents and Settings\Utilisateur\Application Data\Teleca 2008-06-01 20:29 . 2008-06-01 20:29 d-------- C:\Program Files\Fichiers communs\Teleca Shared 2008-06-01 20:28 . 2008-06-01 20:28 6,144 --a------ C:\WINDOWS\system32\drivers\k750cm.sys 2008-06-01 20:28 . 2008-06-01 20:28 5,744 --a------ C:\WINDOWS\system32\drivers\k750wh.sys . (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M )))))))))))))))))))))))))))))))))))))))))))))))) . 2008-06-24 11:32 3,192 ----a-w C:\WINDOWS\system32\PerfStringBackup.TMP 2008-05-16 09:58 12,632 ----a-w C:\WINDOWS\system32\lsdelete.exe 2008-05-15 05:17 --------- d-----w C:\Program Files\Apple Software Update 2008-05-14 11:13 --------- d-----w C:\Program Files\QuickTime 2008-05-10 10:52 --------- d-----w C:\Documents and Settings\Utilisateur\Application Data\GetRightToGo 2008-05-10 08:50 --------- d-----w C:\Documents and Settings\Utilisateur\Application Data\Samsung 2008-05-10 08:49 --------- d-----w C:\Program Files\Samsung 2008-05-08 12:28 202,752 ----a-w C:\WINDOWS\system32\drivers\RMCast.sys 2008-05-08 12:28 202,752 ----a-w C:\WINDOWS\system32\dllcache mcast.sys 2008-05-07 05:15 1,293,824 ----a-w C:\WINDOWS\system32\quartz.dll 2008-05-07 05:15 1,293,824 ----a-w C:\WINDOWS\system32\dllcache\quartz.dll 2008-04-29 09:20 15,648 ----a-w C:\WINDOWS\system32\drivers\NSDriver.sys 2008-04-29 09:19 15,648 ----a-w C:\WINDOWS\system32\drivers\Awrtrd.sys 2008-04-29 09:19 12,960 ----a-w C:\WINDOWS\system32\drivers\Awrtpd.sys 2008-04-23 04:16 63,488 ------w C:\WINDOWS\system32\dllcache\icardie.dll 2008-04-23 04:16 6,066,176 ------w C:\WINDOWS\system32\dllcache\ieframe.dll 2008-04-23 04:16 52,224 ------w C:\WINDOWS\system32\dllcache\msfeedsbs.dll 2008-04-23 04:16 459,264 ------w C:\WINDOWS\system32\dllcache\msfeeds.dll 2008-04-23 04:16 383,488 ------w C:\WINDOWS\system32\dllcache\ieapfltr.dll 2008-04-23 04:16 267,776 ------w C:\WINDOWS\system32\dllcache\iertutil.dll 2008-04-22 07:39 13,824 ------w C:\WINDOWS\system32\dllcache\ieudinit.exe 2007-08-10 10:44 278,528 ----a-w C:\Program Files\Fichiers communs\FDEUnInstaller.exe 2007-01-13 17:52 0 ----a-w C:\Documents and Settings\Utilisateur\Application Data\wklnhst.dat . ((((((((((((((((((((((((((((( snapshot@2008-06-28_14.52.17.42 ))))))))))))))))))))))))))))))))))))))))) . - 2005-10-12 22:12:26 14,048 ------w C:\WINDOWS\$hf_mig$\KB915865\spmsg.dll + 2005-10-12 23:12:26 14,048 ------w C:\WINDOWS\$hf_mig$\KB915865\spmsg.dll - 2005-10-12 22:12:26 213,216 ------w C:\WINDOWS\$hf_mig$\KB915865\spuninst.exe + 2005-10-12 23:12:26 213,216 ------w C:\WINDOWS\$hf_mig$\KB915865\spuninst.exe - 2005-10-12 22:12:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB915865\update\spcustom.dll + 2005-10-12 23:12:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB915865\update\spcustom.dll - 2005-10-12 22:12:28 716,000 ------w C:\WINDOWS\$hf_mig$\KB915865\update\update.exe + 2005-10-12 23:12:28 716,000 ------w C:\WINDOWS\$hf_mig$\KB915865\update\update.exe - 2005-10-12 22:12:34 371,424 ------w C:\WINDOWS\$hf_mig$\KB915865\update\updspapi.dll + 2005-10-12 23:12:34 371,424 ------w C:\WINDOWS\$hf_mig$\KB915865\update\updspapi.dll - 2008-06-28 12:50:32 2,048 --s-a-w C:\WINDOWS\bootstat.dat + 2008-06-28 13:37:46 2,048 --s-a-w C:\WINDOWS\bootstat.dat + 2008-01-21 16:12:58 41,792 ----a-w C:\WINDOWS\system32\drivers\avgntdd.sys + 2008-01-21 16:11:30 22,336 ----a-w C:\WINDOWS\system32\drivers\avgntmgr.sys + 2008-03-04 11:28:54 79,424 ----a-w C:\WINDOWS\system32\drivers\avipbb.sys + 2007-03-01 08:34:22 28,352 ----a-w C:\WINDOWS\system32\drivers\ssmdrv.sys - 2008-04-22 07:39:58 13,824 ----a-w C:\WINDOWS\system32\ieudinit.exe + 2007-08-13 16:39:10 13,312 ----a-w C:\WINDOWS\system32\ieudinit.exe + 2003-06-23 00:44:36 1,415,680 ----a-w C:\WINDOWS\system32\wmv9vcm.dll . ((((((((((((((((((((((((((((((((( Point de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))) . . REGEDIT4 *Note* les ‚l‚ments vides & les ‚l‚ments initiaux l‚gitimes ne sont pas list‚s [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "MsnMsgr"="C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" [ ] "BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="C:\Program Files\Fichiers communs\Nero\Lib\NMBgMonitor.exe" [ ] "Veoh"="C:\Program Files\Veoh Networks\Veoh\VeohClient.exe" [ ] "Google Update"="C:\Documents and Settings\Utilisateur\Local Settings\Application Data\Google\Update\1.1.25.0\GoogleUpdate.exe" [2008-05-11 16:03 51184] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "HControl"="C:\WINDOWS\ATK0100\HControl.exe" [2006-04-17 02:24 110592] "NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2006-04-27 09:47 7573504] "nwiz"="nwiz.exe" [2006-04-27 09:47 1519616 C:\WINDOWS\system32 wiz.exe] "NvMediaCenter"="C:\WINDOWS\system32\NvMcTray.dll" [2006-04-27 09:47 86016] "AS00_Gear511"="C:\Program Files\NETGEAR\WG511SCU\Utility\Gear511.exe" [ ] "ACU"="C:\Program Files\OLITEC\ACU.exe" [ ] "Wireless Console 2"="C:\Program Files\Wireless Console 2\wcourier.exe" [2005-10-17 17:09 987136] "SynTPEnh"="C:\Program Files\Synaptics\SynTP\SynTPEnh.exe" [2005-10-21 08:26 761945] "RTHDCPL"="RTHDCPL.EXE" [2005-12-19 08:52 15797248 C:\WINDOWS\RTHDCPL.EXE] "SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" [2007-09-25 01:11 132496] "Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [ ] "NBKeyScan"="C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe" [ ] "iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [ ] "QuickTime Task"="C:\Program Files\QuickTime\QTTask.exe" [ ] "avgnt"="C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" [2008-02-12 10:06 262401] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32] "VIDC.YV12"= yv12vfw.dll [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\system32\sessmgr.exe"= "%windir%\Network Diagnostic\xpnetdiag.exe"= R3 ASNDIS5;ASNDIS5 Protocol Driver;C:\WINDOWS\system32\ASNDIS5.SYS [2002-09-09 19:54] R3 SynMini;USB2.0 1.3M Web Cam;C:\WINDOWS\system32\Drivers\SynMini.sys [2005-10-03 10:26] R3 SynScan;USB2.0 1.3M Web Cam Still Image;C:\WINDOWS\system32\Drivers\SynScan.sys [2005-10-03 10:26] S3 AR5523;OLITEC USB Wireless Network Adapter Service;C:\WINDOWS\system32\DRIVERS\ar5523.sys [2005-07-27 21:11] S3 AWINDIS5;AWINDIS5 Protocol Driver;C:\WINDOWS\system32\AWINDIS5.SYS [2002-04-11 17:43] S3 NETGEAR_WG511_SERVICE;NETGEAR WG511T Wireless Adapter Service;C:\WINDOWS\system32\DRIVERS\wg511nd5.sys [2003-06-20 13:47] *Newly Created Service* - SSMDRV . Contenu du dossier 'Scheduled Tasks/Tƒches planifi‚es' "2008-06-26 17:15:02 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job" - C:\Program Files\Apple Software Update\SoftwareUpdate.exe "2008-06-28 13:24:48 C:\WINDOWS\Tasks\MP Scheduled Scan.job" - C:\Program Files\Windows Defender\MpCmdRun.exe . ************************************************************************** catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2008-06-28 15:38:14 Windows 5.1.2600 Service Pack 2 FAT NTAPI Balayage processus cach‚s ... Balayage cach‚ autostart entries ... Balayage des fichiers cach‚s ... Scan termin‚ avec succŠs Les fichiers cach‚s: 0 ************************************************************************** . ------------------------ Other Running Processes ------------------------ . C:\PROGRAM FILES\WINDOWS DEFENDER\MSMPENG.EXE C:\PROGRAM FILES\LAVASOFT\AD-AWARE\AAWSERVICE.EXE C:\WINDOWS\SYSTEM32\ACS.EXE C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe C:\PROGRAM FILES\FICHIERS COMMUNS\APPLE\MOBILE DEVICE SUPPORT\BIN\APPLEMOBILEDEVICESERVICE.EXE C:\WINDOWS\SYSTEM32\NVSVC32.EXE C:\WINDOWS\SYSTEM32\RUNDLL32.EXE C:\WINDOWS\ATK0100\ATKOSD.EXE C:\DOCUMENTS AND SETTINGS\UTILISATEUR\LOCAL SETTINGS\APPLICATION DATA\YOUTUBE\UPLOADER\YOUTUBEUPLOADER.EXE . ************************************************************************** . Temps d'accomplissement: 2008-06-28 15:39:52 - machine was rebooted ComboFix-quarantined-files.txt 2008-06-28 13:39:50 ComboFix2.txt 2008-06-28 12:52:40 Pre-Run: 39,597,342,720 octets libres Post-Run: 39,577,485,312 octets libres 240 --- E O F --- 2008-06-28 13:00:27 puis le rapport hijackLogfile of Trend Micro HijackThis v2.0.2 Scan saved at 15:41:35, on 28/06/2008 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Windows Defender\MsMpEng.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\system32\acs.exe C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe C:\WINDOWS\system32 vsvc32.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\ATK0100\HControl.exe C:\WINDOWS\system32\RUNDLL32.EXE C:\Program Files\Wireless Console 2\wcourier.exe C:\Program Files\Synaptics\SynTP\SynTPEnh.exe C:\WINDOWS\RTHDCPL.EXE C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe C:\Documents and Settings\Utilisateur\Local Settings\Application Data\Google\Update\1.1.25.0\GoogleUpdate.exe C:\WINDOWS\ATK0100\ATKOSD.exe C:\Documents and Settings\Utilisateur\Local Settings\Application Data\YouTube\Uploader\youtubeuploader.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\wuauclt.exe C:\WINDOWS\system32\wuauclt.exe C:\WINDOWS\explorer.exe C:\WINDOWS\system32\msiexec.exe C:\WINDOWS\system32 otepad.exe C:\Program Files\Safari\Safari.exe C:\Documents and Settings\Utilisateur\Bureau\HiJackThis.exe R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O3 - Toolbar: Veoh Browser Plug-in - {D0943516-5076-4020-A3B5-AEFAF26AB263} - C:\Program Files\Veoh Networks\Veoh\Plugins eg\VeohToolbar.dll (file missing) O4 - HKLM\..\Run: [HControl] C:\WINDOWS\ATK0100\HControl.exe O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [AS00_Gear511] C:\Program Files\NETGEAR\WG511SCU\Utility\Gear511.exe -hide O4 - HKLM\..\Run: [ACU] "C:\Program Files\OLITEC\ACU.exe" -nogui O4 - HKLM\..\Run: [Wireless Console 2] C:\Program Files\Wireless Console 2\wcourier.exe O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [NBKeyScan] "C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe" O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe" O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Nero\Lib\NMBgMonitor.exe" O4 - HKCU\..\Run: [Veoh] "C:\Program Files\Veoh Networks\Veoh\VeohClient.exe" /VeohHide O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\Utilisateur\Local Settings\Application Data\Google\Update\1.1.25.0\GoogleUpdate.exe" /lang en O4 - Startup: YouTube Uploader.lnk = C:\Documents and Settings\Utilisateur\Local Settings\Application Data\YouTube\Uploader\youtubeuploader.exe O4 - Startup: DW_Start.lnk = C:\WINDOWS\system32 wwnw64d.exe O4 - Startup: Deewoo.lnk = C:\WINDOWS\system32 cntaxdm.exe O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing) O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing) O14 - IERESET.INF: START_PAGE_URL=https://www.asus.com/fr/ O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w2/pr02/resources/MSNPUpld.cab O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cab O16 - DPF: {CF40ACC5-E1BB-4AFF-AC72-04C2F616BCA7} (get_atlcom Class) - http://www.adobe.com/products/acrobat/nos/gp.cab O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe O23 - Service: Service de configuration OLITEC (ACS) - Unknown owner - C:\WINDOWS\system32\acs.exe O23 - Service: Avira AntiVir Personal – Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe O23 - Service: Avira AntiVir Personal – Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32 vsvc32.exe O23 - Service: Service Messenger Sharing Folders USN Journal Reader (usnjsvc) - Unknown owner - C:\Program Files\Windows Live\Messenger\usnsvc.exe (file missing)

mari64 · Answer

Un grand merci aparement tout est revenu dans l'ordre.Une derniere questioen est-ce que maintenant je peut désinstaller tout les programmes comme Combofix par exemple?

mari64 · Answer

oups je rectifie je recoit toujours des messages d'alerte lors des chargement des page web. ^^ mais sinon j'ai pu remettre mon fond d'écran.

g!rly · Answer

a deamin

mari64 · Answer

bonjour g!rly je suis de retour pour en finir avec cette infection ^^

g!rly · Answer

salut mari64,

désolé pour le délais...

Fais un scan avec cet antispyware :

Telecharge malwarebytes + tutoriel :

-> https://www.malekal.com/tutoriel-malwarebyte-anti-malware/

Tu l´instale; le programme va se mettre automatiquement a jour.

Une fois a jour, le programme va se lancer; click sur l´onglet parametre, et coche la case : "Arreter internet explorer pendant la suppression".

Click maintenant sur l´onglet recherche et coche la case : "executer un examun complet".

Puis click sur "rechercher".

Laisse le scanner le pc... 

Si des elements on ete trouvés > click sur supprimer la selection.

si il t´es demandé de redemarrer > click sur "yes".

A la fin un rapport va s´ouvrir; sauvegarde le de maniere a le retrouver en vu de le poster sur le forum.

Copie et colle le rapport stp.

@+

mari64 · Answer

Bonjour g!rly voila le rapport 

Malwarebytes' Anti-Malware 1.19
Version de la base de données: 899
Windows 5.1.2600 Service Pack 2

10:23:07 01/07/2008
mbam-log-7-1-2008 (10-23-07).txt

Type de recherche: Examen complet (C:\|D:\|H:\|)
Eléments examinés: 90469
Temps écoulé: 45 minute(s), 15 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 3
Valeur(s) du Registre infectée(s): 2
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 2
Fichier(s) infecté(s): 11

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
HKEY_CURRENT_USER\SOFTWARE\Microsoft\affri (Malware.Trace) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\affri (Malware.Trace) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MS Juan (Malware.Trace) -> Quarantined and deleted successfully.

Valeur(s) du Registre infectée(s):
HKEY_CURRENT_USER\SOFTWARE\Mozilla\Firefox\Extensions\{59a40ac9-e67d-4155-b31d-4b7330fcd2d6} (Adware.PurityScan) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Toolbar\ShellBrowser\{07aa283a-43d7-4cbe-a064-32a21112d94d} (Adware.Zango) -> Quarantined and deleted successfully.

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
C:\WINDOWS\Fonts\' (Trojan.Agent) -> Delete on reboot.
C:\Program Files\mjc (Trojan.Agent) -> Quarantined and deleted successfully.

Fichier(s) infecté(s):
C:\Program Files\mjc\mjc.exe (Adware.MJC) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{14DF0968-15F3-4742-ACCF-E6309D357036}\RP345\A0102792.dll (Adware.ClickSpring) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{14DF0968-15F3-4742-ACCF-E6309D357036}\RP345\A0102810.dll (Adware.SurfAccuracy) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{14DF0968-15F3-4742-ACCF-E6309D357036}\RP345\A0102813.exe (Adware.SurfAccuracy) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{14DF0968-15F3-4742-ACCF-E6309D357036}\RP345\A0102817.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{14DF0968-15F3-4742-ACCF-E6309D357036}\RP348\A0105203.dll (Adware.SurfAccuracy) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{14DF0968-15F3-4742-ACCF-E6309D357036}\RP349\A0106740.dll (Adware.ClickSpring) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{14DF0968-15F3-4742-ACCF-E6309D357036}\RP349\A0106943.dll (AdWare.CommAd) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{14DF0968-15F3-4742-ACCF-E6309D357036}\RP349\A0107978.exe (Adware.SurfAccuracy) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{14DF0968-15F3-4742-ACCF-E6309D357036}\RP350\A0107994.dll (Adware.Agent) -> Quarantined and deleted successfully.
C:\QooBox\Quarantine\C\Program Files\Spcron\Spc.dll.vir (Adware.Agent) -> Quarantined and deleted successfully.

blood-lands · Answer

par ce que tu es arrété plusieur foi votre pc directement ,il faut reinstaller le xp

g!rly · Answer

salut marie64,

ok pour malwarebytes...

passe ceci maintenant :

Télécharge Clean:

-> http://www.malekal.com/download/clean.zip

-> Dézippe tout le contenu dans un dossier que tu auras cré au préalable (sur ton bureau par exemple). Double clic sur clean ou clean.cmd choisie l'option 1.
   
   Un rapport va s'ouvrir, copie et colle le contenu sur le forum.

-> pour ceux ou celles qui auraient un doute sur comment deziper un fichier :

   http://www.tutopat.com/viewtopic.php?t=933&sid=34215b238376bfb22ef9e8eca9995914

ps : si il te demande d´envoyer un fichier sur un site n´en tiens pas compte, contenete toi de suivre les indications dans la fenetre noire (cmd) pour obtenir le rapport...

@+

mari64 · Answer

merci pour ton aide je vais faire ce que tu m'as di dessuite mais mon ordi depuis que j'ai fais le traitement avec malwarebytes ne fait que s'eteindre il a effacé tout ce qu'il y avait sur mon bureau sauf quelques raccourcits et des fichiers on aussi disparu  je ne sais pas s'il y a un  rapport qu'en pense tu?
a+

g!rly · Answer

re,

quand tu dis > il a effacé tout ce qu´il y avait sur mon bureau > il y avait quoi ?

il doit rester des infection vu que le pc s´etteind ;(

passe antivir, on va voir...

@+

mari64 · Answer

01/07/2008 a 21:08:14,60 
 
*** Recherche des fichiers dans C: 
 
*** Recherche des fichiers dans C:\WINDOWS\ 
 
*** Recherche des fichiers dans C:\WINDOWS\system32 
 
*** Recherche des fichiers dans C:\Program Files 
"C:\Program Files\GamesBar\" FOUND 
*** Fin du rapport ! 


voila le rapport.

mari64 · Answer

c'est a dire tout les raccourcits et le fond d'écran et l'orsque je lance le scan d'antivir l'ordinateur s'éteint maisje vais reessayer je te tiens au courant

g!rly · Answer

att, 

je me suis trompé de topik...

je ne t´avais pas demandé de passer antivir...

pour les raccourcis tu pourras toujours les recréer ainsi que de remettre ton fond d´écran...

on va procéder comme ceci :

réglages :

une fois antivir ouvert click surconfiguration et coche la case "expert mode" puis sur l´onglet scanner dans la fenetre du dessous tu va voir : rootkit search click sur le petit + pour deployer et coche la case a coté de ton disk dur
ceux qui ne voie pas root kit search : clcik sur le parapluie dans ta barre des tache > dans la fenetre d´antivir click sur local protection click en suite sur scanner
dans la fenetre de droite : tu a rootkit search vers le bas > tu developpe en appuyant sur le petit +
et coche tes disques...
puis click sur configuration en haut a droite; dans la nouvelle fenetre a gauche >scanner > coche "scan all files" et en dessous >scanner priority = High
coche : allow stopping the scanner, comme cela tu peux faire une pause pendant le scan si tu le desir.
puis sur la droite coche les case suivantes : 
scan boot sectors of selected drives
scan master boot sectors
scan memory
search foe rootkit before scan
decoche :
ignore off line files
toujours a gauche > scan > deploie > heuristique > macrovirus heuristic = coché et en dessous > win32 heuristic la case coché et high detection level

Je te dis tous ca car j´aimerais que tu performes un scan entier de ta machine a l´aide d´antivir avec les reglages stipulés ci dessus et que tu post le rapport généré ici stp

ps : fais le scan d´antivir en mode sans echec :

Comment redémarrer en mode sans echec? 

   Tu redemarre le pc et tapote la touche F8 des le début de l allumage sans t´arrêter.
   Une fenêtre sur fond noir va s’ouvrir, tu te déplaces avec les flèches du clavier sur démarrer en mode sans échec puis tape entrée.
   Une fois sur le bureau si il n y a pas toutes les couleurs et autres c´est normal!
   Ps : si F8 ne marche pas utilise la touche F5.

profites en également pour passer l´option 2 de clean option deux une fois en mode sans echec

puis post le rapport de clean et celui d´antivir stp

@+

mari64 · Answer

je ne peut pas faire de scan l'ordi s'éteint avant. 

A demain

g!rly · Answer

mince...

tu as bien essayé de le passer en mode sans echec ?

post un nouveau rapport hijack this stp

@+

mari64 · Answer

bonjour 

oui c'est en mode sans echec que je l'ai passé ile s'est quand meme éteint. 

voila le rapport hijack

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:54:06, on 02/07/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\ATK0100\HControl.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Wireless Console 2\wcourier.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\WinZip\WZQKPICK.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\acs.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\WINDOWS\system32
vsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\ATK0100\ATKOSD.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Utilisateur.TIPIETCHE\Bureau\HiJackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.asus.com/fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://www.asus.com/fr/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O3 - Toolbar: Veoh Browser Plug-in - {D0943516-5076-4020-A3B5-AEFAF26AB263} - C:\Program Files\Veoh Networks\Veoh\Pluginseg\VeohToolbar.dll (file missing)
O4 - HKLM\..\Run: [HControl] C:\WINDOWS\ATK0100\HControl.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [AS00_Gear511] C:\Program Files\NETGEAR\WG511SCU\Utility\Gear511.exe -hide
O4 - HKLM\..\Run: [ACU] "C:\Program Files\OLITEC\ACU.exe" -nogui
O4 - HKLM\..\Run: [Wireless Console 2] C:\Program Files\Wireless Console 2\wcourier.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [NBKeyScan] "C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O14 - IERESET.INF: START_PAGE_URL=https://www.asus.com/fr/
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w2/pr02/resources/MSNPUpld.cab
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cab
O16 - DPF: {CF40ACC5-E1BB-4AFF-AC72-04C2F616BCA7} (get_atlcom Class) - http://www.adobe.com/products/acrobat/nos/gp.cab
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: Service de configuration OLITEC (ACS) - Unknown owner - C:\WINDOWS\system32\acs.exe
O23 - Service: Avira AntiVir Personal – Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal – Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exe

g!rly · Answer

salut marie,

le rapport hijack this est propre...

je t´avais demandé de mettre ton explorateur a jour...

peux tu le faire :

tu surf avec internet explorer 6.0 = failles de securitées importantes

alors fais les mises a jour windows : tu veux la version 7.0

https://support.microsoft.com/en-US/topic/internet-explorer-downloads-d49e1f0d-571c-9a7b-d97e-be248806ca70

puis essaie de passer ce scan en ligne :

Fais un scan en ligne Kaspersky avec Internet Explorer :
https://www.kaspersky.fr/?domain=webscanner.kaspersky.fr
-> Click sur Démarrer Online-Scanner
-> Click maintenant sur J'accepte.
-> Valide l'installation d'un ou de plusieurs ActiveX si c'est nécessaire.
-> Patiente pendant l'installation des Mises à jour.
-> Choisis par la suite l'analyse du Poste de travail.
-> Sauvegarde puis colle le rapport généré en fin d'analyse.

@+

mari64 · Answer

voila le rapport plutot long de kaspersky

Wednesday, July 02, 2008 5:37:23 PM
Système d'exploitation : Microsoft Windows XP Home Edition, Service Pack 2 (Build 2600)
Kaspersky On-line Scanner version : 5.0.83.0
Dernière mise à jour de la base antivirus Kaspersky : 2/07/2008
Enregistrements dans la base antivirus Kaspersky : 806857
Paramètres d'analyse
Analyser avec la base antivirus suivante 	standard
Analyser les archives 	vrai
Analyser les bases de messagerie 	vrai
Cible de l'analyse 	Poste de travail
C:\
D:\
E:\
Statistiques de l'analyse
Total d'objets analysés 	61132
Nombre de virus trouvés 	11
Nombre d'objets infectés 	4701 / 0
Nombre d'objets suspects 	0
Durée de l'analyse 	01:28:37

Nom de l'objet infecté 	Nom du virus 	Dernière action
C:\WINDOWS\system32\config\system.LOG 	L'objet est verrouillé 	ignoré
C:\WINDOWS\system32\config\software.LOG 	L'objet est verrouillé 	ignoré
C:\WINDOWS\system32\config\default.LOG 	L'objet est verrouillé 	ignoré
C:\WINDOWS\system32\config\SECURITY.LOG 	L'objet est verrouillé 	ignoré
C:\WINDOWS\system32\config\SAM.LOG 	L'objet est verrouillé 	ignoré
C:\WINDOWS\system32\config\SysEvent.Evt 	L'objet est verrouillé 	ignoré
C:\WINDOWS\system32\config\AppEvent.Evt 	L'objet est verrouillé 	ignoré
C:\WINDOWS\system32\config\SecEvent.Evt 	L'objet est verrouillé 	ignoré
C:\WINDOWS\system32\config\Internet.evt 	L'objet est verrouillé 	ignoré
C:\WINDOWS\system32\config\DEFAULT 	L'objet est verrouillé 	ignoré
C:\WINDOWS\system32\config\SECURITY 	L'objet est verrouillé 	ignoré
C:\WINDOWS\system32\config\SOFTWARE 	L'objet est verrouillé 	ignoré
C:\WINDOWS\system32\config\SYSTEM 	L'objet est verrouillé 	ignoré
C:\WINDOWS\system32\config\SAM 	L'objet est verrouillé 	ignoré
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MAP 	L'objet est verrouillé 	ignoré
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MAP 	L'objet est verrouillé 	ignoré
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER 	L'objet est verrouillé 	ignoré
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP 	L'objet est verrouillé 	ignoré
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP 	L'objet est verrouillé 	ignoré
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA 	L'objet est verrouillé 	ignoré
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR 	L'objet est verrouillé 	ignoré
C:\WINDOWS\system32\CatRoot2	mp.edb 	L'objet est verrouillé 	ignoré
C:\WINDOWS\system32\CatRoot2\edb.log 	L'objet est verrouillé 	ignoré
C:\WINDOWS\system32\h323log.txt 	L'objet est verrouillé 	ignoré
C:\WINDOWS\system32\jadldoke.dll 	Infecté : Trojan.Win32.Monder.gen 	ignoré
C:\WINDOWS\Fonts\'\Alone In The Dark 2008 Multi iSO.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Alone In The Dark 2008 Multi iSO.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Mass Effect ViTALiTY iSO.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Mass Effect ViTALiTY iSO.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Fritz Chess 11 iSO.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Fritz Chess 11 iSO.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Supreme Ruler 2020 iSO.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Supreme Ruler 2020 iSO.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Sniper Art of Victory iSO.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Sniper Art of Victory iSO.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Gene Troopers iSO.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Gene Troopers iSO.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Two Worlds2007 iSO.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Two Worlds2007 iSO.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Anno 1701 Razor 1911 iSO.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Anno 1701 Razor 1911 iSO.zip 
C:\WINDOWS\Fonts\'\Turok 2008Razor 1911 iSO.zip/Setup.exe  	Infecté : Trojan-Downloader.Win32.VB.dck  	ignoré
C:\WINDOWS\Fonts\'\Turok 2008Razor 1911 iSO.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Sudden Strike 3 Arms for Victory iSO.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Sudden Strike 3 Arms for Victory iSO.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Championship Manager 2008 iSO.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Championship Manager 2008 iSO.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Vietcong iSO.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Vietcong iSO.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\World In Conflict iSO.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\World In Conflict iSO.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\GothiciSO.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\GothiciSO.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Missing On Lost Island iSO.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Missing On Lost Island iSO.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Grand Theft Auto Vice CityiSO.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Grand Theft Auto Vice CityiSO.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Company of Heroes DVDiSO.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Company of Heroes DVDiSO.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Sudden Strike Forever iSO.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Sudden Strike Forever iSO.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Civilization IV iSO.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Civilization IV iSO.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Line of Sight Vietnam iSO.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Line of Sight Vietnam iSO.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Batman Forever 1995 DVDRip XviD.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Batman Forever 1995 DVDRip XviD.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Enchanted 2007 DvD Rip XviD.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Enchanted 2007 DvD Rip XviD.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Death Sentence 2007 Unrated DvDRip XviD.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Death Sentence 2007 Unrated DvDRip XviD.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Sky Captain and the World of Tomorrow 2004 DVDRip XviD.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Sky Captain and the World of Tomorrow 2004 DVDRip XviD.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\The Day After Tomorrow 2004 HDrip XviD.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\The Day After Tomorrow 2004 HDrip XviD.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Journey to the Center of the Earth2008 DVDRip XviD.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Journey to the Center of the Earth2008 DVDRip XviD.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Star Wars Episode III - Revenge of the Sith 2005 DVDRip XviD.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Star Wars Episode III - Revenge of the Sith 2005 DVDRip XviD.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Scent of a Woman 1992 DVDRip XviD.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Scent of a Woman 1992 DVDRip XviD.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Regin of Fire 2002 DVDRip XviD.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Regin of Fire 2002 DVDRip XviD.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Sleepers 1996 DVDRip XviD.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Sleepers 1996 DVDRip XviD.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\SWAT 2003 DVDRip XviD.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\SWAT 2003 DVDRip XviD.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Way of the Gun 2000 DvdRip XviD.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Way of the Gun 2000 DvdRip XviD.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\The Planet 2006 DVDRip XviD.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\The Planet 2006 DVDRip XviD.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\War Of The Worlds 2 The Next Wave 2008 DVDRiP XviD.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\War Of The Worlds 2 The Next Wave 2008 DVDRiP XviD.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Shaft 1971 DVDRip XviD.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Shaft 1971 DVDRip XviD.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Mars Attacks 1996 DVDRip XviD.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Mars Attacks 1996 DVDRip XviD.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\The Sixth Sense 1999 DVDRip XviD.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\The Sixth Sense 1999 DVDRip XviD.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\The Butterfly Effect 2004 DVDRip XviD.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\The Butterfly Effect 2004 DVDRip XviD.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Cars 2006 DvDrip XviD.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Cars 2006 DvDrip XviD.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Jetico Personal Firewall v2.0.2.3.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Jetico Personal Firewall v2.0.2.3.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Blumentals WeBuilder 2008 v9.0.0.97.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Blumentals WeBuilder 2008 v9.0.0.97.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Blumentals HTMLPad 2008 Pro v9.0.0.97.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Blumentals HTMLPad 2008 Pro v9.0.0.97.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Blumentals Rapid PHP 2008 v9.0.0.97.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Blumentals Rapid PHP 2008 v9.0.0.97.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Blumentals Rapid CSS 2008 v9.0.0.97.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Blumentals Rapid CSS 2008 v9.0.0.97.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\WMV Movie Converter v1.1.54.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\WMV Movie Converter v1.1.54.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\VB Decompiler Pro v5.0.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\VB Decompiler Pro v5.0.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Power Notes 3.32.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Power Notes 3.32.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\LEDSET Software Cam Wizard v8.01.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\LEDSET Software Cam Wizard v8.01.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Zards Cleanse Uninstaller Pro 2008 v4.59.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Zards Cleanse Uninstaller Pro 2008 v4.59.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Tracks Eraser Pro 7.2.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Tracks Eraser Pro 7.2.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\SIP Workbench v1.0.0.3970.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\SIP Workbench v1.0.0.3970.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\DeskShare Security Monitor Pro v2.41.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\DeskShare Security Monitor Pro v2.41.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\EffeTech ICQ Sniffer v1.2.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\EffeTech ICQ Sniffer v1.2.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Jetico BCWipe v3.11.4.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Jetico BCWipe v3.11.4.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Jetico BestCrypt v8.05.1.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Jetico BestCrypt v8.05.1.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\DeskShare WebCam Monitor v5.02.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\DeskShare WebCam Monitor v5.02.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\instantGet v2.05.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\instantGet v2.05.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Altova XMLSpy Enterprise v2008.2.1.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Altova XMLSpy Enterprise v2008.2.1.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Altova SchemaAgent 2008.2.1.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Altova SchemaAgent 2008.2.1.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Anfibia Deskman v8.0.4.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Anfibia Deskman v8.0.4.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Se7en 1995 DVDRip XviD.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Se7en 1995 DVDRip XviD.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\The Tuxedo 2002 DvdRip XviD.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\The Tuxedo 2002 DvdRip XviD.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Step Up 2 - The Streets DvdRip XviD.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Step Up 2 - The Streets DvdRip XviD.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\The Man in the Moon 1991 DvdRip DivX.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\The Man in the Moon 1991 DvdRip DivX.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Icharus Broken 2007 DvdRip XviD.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Icharus Broken 2007 DvdRip XviD.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Fear and Loathing in Las Vegas 1998 DvdRip Xvid.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Fear and Loathing in Las Vegas 1998 DvdRip Xvid.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Doomsday 2008 DVDRip XViD.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Doomsday 2008 DVDRip XViD.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Dazed and Confused 1993 DvdRip XviD.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Dazed and Confused 1993 DvdRip XviD.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Lars And The Real Girl 2007 DvdRip XviD.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Lars And The Real Girl 2007 DvdRip XviD.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Trapped 2002 DvdRip XviD.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Trapped 2002 DvdRip XviD.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\The Warlords 2007 DvdRip Xvid.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\The Warlords 2007 DvdRip Xvid.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Teeth 2007 DvdRip XviD.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Teeth 2007 DvdRip XviD.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\I Spit On Your Grave 1978 DvdRip XviD.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\I Spit On Your Grave 1978 DvdRip XviD.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\The Weekend 2007 DVDRip XviD.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\The Weekend 2007 DVDRip XviD.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Blue Streak 1999 DvdRip XviD.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Blue Streak 1999 DvdRip XviD.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\National Treasure 2004 DvDrip Eng XviD.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\National Treasure 2004 DvDrip Eng XviD.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\The Last King of Scotland 2006 DVDRip XviD.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\The Last King of Scotland 2006 DVDRip XviD.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Fast Track No Limits 2008 DvdRip Xvid.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Fast Track No Limits 2008 DvdRip Xvid.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\The Shawshank Redemption DvdRip XviD.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\The Shawshank Redemption DvdRip XviD.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Cougar Club 2007 DvdRip XviD.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Cougar Club 2007 DvdRip XviD.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Hitler The Last Ten Days 973 DVDRip XviD.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Hitler The Last Ten Days 973 DVDRip XviD.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\I Robot 2004 DVDRip XviD.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\I Robot 2004 DVDRip XviD.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\The Air I Breathe 2007 DvdRip XviD.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\The Air I Breathe 2007 DvdRip XviD.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Grindstone Road 2008 DvDRip XviD.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Grindstone Road 2008 DvDRip XviD.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Chaos Theory 2007 DvDrip XviD.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Chaos Theory 2007 DvDrip XviD.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Over Her Dead Body 2008 DvDrip XviD.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Over Her Dead Body 2008 DvDrip XviD.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Another 48 Hrs. 1990 DVDRip XViD.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Another 48 Hrs. 1990 DVDRip XViD.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\The Animal 2001 DVDRip XViD.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\The Animal 2001 DVDRip XViD.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\My Moms New Boyfriend DVDRip XviD.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\My Moms New Boyfriend DVDRip XviD.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Mission Impossible III 2006 DVDRip XviD.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Mission Impossible III 2006 DVDRip XviD.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Sniper Art of Victory SKIDROW iSO.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Sniper Art of Victory SKIDROW iSO.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Overspeed High Performance Street Racing SKIDROW iSO.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Overspeed High Performance Street Racing SKIDROW iSO.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Supreme Ruler 2020 SKIDROW iSO.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Supreme Ruler 2020 SKIDROW iSO.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Imperium Romanum SKIDROW iSO.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Imperium Romanum SKIDROW iSO.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Terrorist Takedown 2 US Navy Seals SKIDROW iSO.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Terrorist Takedown 2 US Navy Seals SKIDROW iSO.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Limbo of The Lost SKIDROW iSO.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Limbo of The Lost SKIDROW iSO.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Toy Golf Extreme SKIDROW iSO.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Toy Golf Extreme SKIDROW iSO.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Model Train 3D SKiDROW iSO.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Model Train 3D SKiDROW iSO.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\911 First Responders SKIDROW iSO.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\911 First Responders SKIDROW iSO.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Burn - SKiDROW iSO.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Burn - SKiDROW iSO.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\The School of Rock 2003 DVDRip Xvid.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\The School of Rock 2003 DVDRip Xvid.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Finding Neverland 2004 m-HD x264 XViD.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Finding Neverland 2004 m-HD x264 XViD.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Hellboy 2004 DVDRip XviD.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré 
C:\WINDOWS\Fonts\'\Hellboy 2004 DVDRip XviD.zip  	ZIP: infecté - 1  	ignoré
C:\WINDOWS\Fonts\'\Eagle Vs. Shark LiMiTED DVDRip XviD.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Eagle Vs. Shark LiMiTED DVDRip XviD.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Thank You For Smoking 2005 LiMiTED DVDRip XviD.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Thank You For Smoking 2005 LiMiTED DVDRip XviD.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\The Chronicles of Narnia Prince Caspian 2008 TS DVDRipXViD.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\The Chronicles of Narnia Prince Caspian 2008 TS DVDRipXViD.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\The Forbidden Kingdom2008 DvdRip XViD.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\The Forbidden Kingdom2008 DvdRip XViD.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Magicians 2007 DvDrip XViD.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Magicians 2007 DvDrip XViD.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Death At A Funeral LiMiTED DVDRip XviD.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Death At A Funeral LiMiTED DVDRip XviD.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Zathura A Space Adventure 2005 DVDRip XViD.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Zathura A Space Adventure 2005 DVDRip XViD.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\10,000 BC.PROPER DVDRip XviD.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\10,000 BC.PROPER DVDRip XviD.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Nims Island 2008 DVDRip XViD.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Nims Island 2008 DVDRip XViD.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Thirteenth Floor 1999 DVDRip XviD.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Thirteenth Floor 1999 DVDRip XviD.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Titanic 1997 m-HD x264 Xvid.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Titanic 1997 m-HD x264 Xvid.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Andre The Butcher 2005 WS DVDRip XviD.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Andre The Butcher 2005 WS DVDRip XviD.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\When Love Begins 2008 DVDrip XviD.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\When Love Begins 2008 DVDrip XviD.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Police Academy 1984 WS Proper DVDRip XviD.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Police Academy 1984 WS Proper DVDRip XviD.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Planet of the Apes 2001 m-HD x264 XVid.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Planet of the Apes 2001 m-HD x264 XVid.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Theres Something About Mary 1998 DVDRip XViD.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Theres Something About Mary 1998 DVDRip XViD.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Knight Rider 2008 DVDRip XViD.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Knight Rider 2008 DVDRip XViD.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Revolver 2005 REAL RETAIL DVDRip XviD AC3 SUBMERGE.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Revolver 2005 REAL RETAIL DVDRip XviD AC3 SUBMERGE.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\You Dont Mess With The Zohan CAM King Ben.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\You Dont Mess With The Zohan CAM King Ben.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Jarhead 2005 m-HD x264 uSk.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Jarhead 2005 m-HD x264 uSk.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\The Mummy 1999 m-HD x264 uSk.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\The Mummy 1999 m-HD x264 uSk.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Master and Commander 2003 m-HD x264 uSk.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Master and Commander 2003 m-HD x264 uSk.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Walk Hard The Dewey Cox Story 2007 DVDRip XviD DiAMOND.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Walk Hard The Dewey Cox Story 2007 DVDRip XviD DiAMOND.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\The Flock 2007 DvDrip aXXo.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\The Flock 2007 DvDrip aXXo.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\The Sitter 2007 STV DVDRip XviD DOMiNO.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\The Sitter 2007 STV DVDRip XviD DOMiNO.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Gone Baby Gone DVDRip XviD DiAMOND.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Gone Baby Gone DVDRip XviD DiAMOND.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Rambo 2008 DVDrip XviD MP3 Eng aXXo.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Rambo 2008 DVDrip XviD MP3 Eng aXXo.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Red Eye 2005 DVDRip XviD.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Red Eye 2005 DVDRip XviD.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\What Happens In Vegas PROPER R5 XviD iAPULA.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\What Happens In Vegas PROPER R5 XviD iAPULA.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\The Lookout 2007 DVDRip XviD DIAMOND.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\The Lookout 2007 DVDRip XviD DIAMOND.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Good Luck Chuck 2007 UNRATED DVDRip DiAMOND.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Good Luck Chuck 2007 UNRATED DVDRip DiAMOND.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Ronin 1998 DVDRip XviD.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Ronin 1998 DVDRip XviD.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\The Bucket List 2007 x264 m-HD vaLk.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\The Bucket List 2007 x264 m-HD vaLk.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\The Eye DVDRip ENG.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\The Eye DVDRip ENG.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Die Hard 2 1990 m-HD x264 AsCo.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Die Hard 2 1990 m-HD x264 AsCo.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Apocalypto 2006 x264 m-HD vaLk.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Apocalypto 2006 x264 m-HD vaLk.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\The Machine Girl 2008 DvDrip Eng aXXo.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\The Machine Girl 2008 DvDrip Eng aXXo.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Bullitt 1968 DVDRip DiVX.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Bullitt 1968 DVDRip DiVX.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Strange Wilderness 2008 DvDrip aXXo.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Strange Wilderness 2008 DvDrip aXXo.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Teeth 2007 DvDrip Eng aXXo.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Teeth 2007 DvDrip Eng aXXo.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\30 Days Of Night 2007 DvDrip Eng aXXo.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\30 Days Of Night 2007 DvDrip Eng aXXo.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Impulse 2008 DvDrip Eng aXXo.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Impulse 2008 DvDrip Eng aXXo.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\The Orphanage 2007 DvDrip Eng Hard Subs aXXo.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\The Orphanage 2007 DvDrip Eng Hard Subs aXXo.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Resurrecting The Champ 2007 DvDrip Eng aXXo.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Resurrecting The Champ 2007 DvDrip Eng aXXo.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Afro Samurai 2007 Directors Cut DvDrip Eng aXXo.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Afro Samurai 2007 Directors Cut DvDrip Eng aXXo.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Sharpshooter 2007 DvDrip AC3 Eng aXXo.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Sharpshooter 2007 DvDrip AC3 Eng aXXo.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\My Moms New Boyfriend DVDRip XviD BeStDivX.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\My Moms New Boyfriend DVDRip XviD BeStDivX.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Iron Man PROPER TS XViD nDn.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Iron Man PROPER TS XViD nDn.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Halloween 2007 UNRATED DVDRip XviD KiLT.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Halloween 2007 UNRATED DVDRip XviD KiLT.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Gone in Sixty Seconds 2000 DVDRip XViD.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Gone in Sixty Seconds 2000 DVDRip XViD.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Indiana Jones and the Last Crusade 1989 DVDRip.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Indiana Jones and the Last Crusade 1989 DVDRip.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Indiana Jones and the Temple of Doom 1984 DVDRip.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Indiana Jones and the Temple of Doom 1984 DVDRip.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Indiana Jones and Raiders of the Lost Ark 1981 DVDRip.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Indiana Jones and Raiders of the Lost Ark 1981 DVDRip.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\American History X 1998 DVDRip XviD UnSeeN.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\American History X 1998 DVDRip XviD UnSeeN.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\The Bank Job 2008 DVDRip.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\The Bank Job 2008 DVDRip.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\The Lord of the Rings 1978 DVDRip DivX MP3.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\The Lord of the Rings 1978 DVDRip DivX MP3.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Apocalypse Now Redux 1979 DVDRip XviD ToRN.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Apocalypse Now Redux 1979 DVDRip XviD ToRN.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\An Empress and The Warriors 2008 CN DVDRip XviD PMCG.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\An Empress and The Warriors 2008 CN DVDRip XviD PMCG.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\EffeTech MSN Sniffer v2.1.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\EffeTech MSN Sniffer v2.1.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Hexprobe Hex Editor 4.3.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Hexprobe Hex Editor 4.3.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Acon Digital Media Acoustica v4.1.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Acon Digital Media Acoustica v4.1.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\CommView v6.0.590.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\CommView v6.0.590.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Axure RP Pro v5.0.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Axure RP Pro v5.0.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\NotesHolder v1.7.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\NotesHolder v1.7.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\AptEdit Pro 4.6.2.314.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\AptEdit Pro 4.6.2.314.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\BoXiKoN v1.66.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\BoXiKoN v1.66.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\CoCsoft StreamDown v6.41.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\CoCsoft StreamDown v6.41.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Comfort Keys v3.1.3.0.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Comfort Keys v3.1.3.0.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Helium Music Manager 2008.0.0.6106.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Helium Music Manager 2008.0.0.6106.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Kristanix Software ImageBadger Deluxe v4.89.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Kristanix Software ImageBadger Deluxe v4.89.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Password Generator Professional 2007 v5.30.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Password Generator Professional 2007 v5.30.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Nofeel FTP Server Enterprise v3.6.3526.0.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Nofeel FTP Server Enterprise v3.6.3526.0.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\OrgScheduler 1plus1 5.9.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\OrgScheduler 1plus1 5.9.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Privacy Shield v3.0.76.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Privacy Shield v3.0.76.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\SlySoft CloneCD v5.3.1.3.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\SlySoft CloneCD v5.3.1.3.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\FileRescue Professional v2.9.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\FileRescue Professional v2.9.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Nitro PDF Professional v5.3.3.6.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Nitro PDF Professional v5.3.3.6.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\IncrediMail 5.70 Build 3647.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\IncrediMail 5.70 Build 3647.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\The Sims Castaway Stories RELOADED iSO.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\The Sims Castaway Stories RELOADED iSO.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Bioshock iSO w Pixelshader 2.0 patch.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Bioshock iSO w Pixelshader 2.0 patch.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Evil Dead Regeneration RELOADED iSO.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Evil Dead Regeneration RELOADED iSO.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Crusaders Thy Kingdom Come RELOADED iSO.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Crusaders Thy Kingdom Come RELOADED iSO.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Tom Clancys Splinter Cell Chaos Theory RELOADED iSO.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Tom Clancys Splinter Cell Chaos Theory RELOADED iSO.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\TimeShift 2007 Reloaded iSO.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\TimeShift 2007 Reloaded iSO.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Tycoon City New York - RELOADED iSO.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Tycoon City New York - RELOADED iSO.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Vietcong 2 RELOADED iSO.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Vietcong 2 RELOADED iSO.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Dungeon Siege II iSO.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Dungeon Siege II iSO.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Blade Runner iSO.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Blade Runner iSO.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Titan Quest Immortal Throne iSO.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Titan Quest Immortal Throne iSO.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Overlord Raising Hell HATRED iSO.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Overlord Raising Hell HATRED iSO.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Supreme Commander Forged Alliance Reloaded iSO.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Supreme Commander Forged Alliance Reloaded iSO.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Brian Lara International Cricket 2007 RELOADED iSO.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Brian Lara International Cricket 2007 RELOADED iSO.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Crimes Of War - RELOADED iSO.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Crimes Of War - RELOADED iSO.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Stronghold Crusader Extreme - RELOADED iSO.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Stronghold Crusader Extreme - RELOADED iSO.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\SBK 08 Superbike World Championship RELOADED iSO.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\SBK 08 Superbike World Championship RELOADED iSO.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Juiced 2 Hot Import Nights RELOADED iSO.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Juiced 2 Hot Import Nights RELOADED iSO.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\MagicCamera 3.3.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\MagicCamera 3.3.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Portable LinkCollector 1.0.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Portable LinkCollector 1.0.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Recover Keys v2.0.0.21.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Recover Keys v2.0.0.21.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\KingConvert For WAVv3.0.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\KingConvert For WAVv3.0.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\MiniServX 6.23.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\MiniServX 6.23.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\CoCsoft StreamDown v6.4.1.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\CoCsoft StreamDown v6.4.1.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\AudioLava 1.0.0 b355.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\AudioLava 1.0.0 b355.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Angel PSP Video Converter 1.7.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Angel PSP Video Converter 1.7.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\KingConvert For OGGv3.0.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\KingConvert For OGGv3.0.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Axure RP Pro v5.0.0.1529.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Axure RP Pro v5.0.0.1529.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\3Q DVD Ripper Platinum 2.1.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\3Q DVD Ripper Platinum 2.1.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Advanced Vista Optimizer 2008.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Advanced Vista Optimizer 2008.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\AAMS Auto Audio Mastering System v2.2 Rev 002.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\AAMS Auto Audio Mastering System v2.2 Rev 002.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\DVD Studio Pack v1.1.57.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\DVD Studio Pack v1.1.57.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\BenVista PhotoZoom Pro v2.3.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\BenVista PhotoZoom Pro v2.3.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\3Q 3GP Video Converter 2.1.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\3Q 3GP Video Converter 2.1.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Acon Digital Media Acoustica Premium v4.1.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Acon Digital Media Acoustica Premium v4.1.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\AVG Internet Security 8.0.125a1325.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\AVG Internet Security 8.0.125a1325.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Advanced System Optimizer 2.2.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Advanced System Optimizer 2.2.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Abexo Registry Cleaner 5.3.1.0.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Abexo Registry Cleaner 5.3.1.0.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Iron Maiden - Live After Death and Extras DVDRip Xvid.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Iron Maiden - Live After Death and Extras DVDRip Xvid.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Resident Evil 2 Apocalypse DVDRip Xvid.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Resident Evil 2 Apocalypse DVDRip Xvid.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\The Evil Dead 1981 DVDRip Xvid.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\The Evil Dead 1981 DVDRip Xvid.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\The Spiderwick Chronicles 2008 DVDrip Xvid-aXXo.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\The Spiderwick Chronicles 2008 DVDrip Xvid-aXXo.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Lejdis 2008 DVDScr Xvid.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Lejdis 2008 DVDScr Xvid.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Alvin And The Chipmunks 2007 DVDRip Xvid-aXXo.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Alvin And The Chipmunks 2007 DVDRip Xvid-aXXo.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Casablanca 1942 REMASTERED DVDRip Xvid.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Casablanca 1942 REMASTERED DVDRip Xvid.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\The Ruins SCREENER XviD-NEPTUNE.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\The Ruins SCREENER XviD-NEPTUNE.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Otis 2008 STV UNRATED DVDRip XviD-TheWretched.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Otis 2008 STV UNRATED DVDRip XviD-TheWretched.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Breach 2007 DVDRip Xvid-aXXo.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Breach 2007 DVDRip Xvid-aXXo.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Fools Gold 2008 DVDRip Xvid.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Fools Gold 2008 DVDRip Xvid.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Transporter II 2005 HDrip x264.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Transporter II 2005 HDrip x264.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Blood and Wine 1996 DVDRip Xvid.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Blood and Wine 1996 DVDRip Xvid.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\How To Rob A Bank 2007 LiMiTED DVDRip XviD-ARiSCO.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\How To Rob A Bank 2007 LiMiTED DVDRip XviD-ARiSCO.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Vantage Point 2008 m-HD x264.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Vantage Point 2008 m-HD x264.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\10,000 BC 2008 m-HD x264.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\10,000 BC 2008 m-HD x264.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Evil Dead 3 Army of Darkness 1992 DVDRip Xvid.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Evil Dead 3 Army of Darkness 1992 DVDRip Xvid.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Shutter R5 LiNE XViD-PUKKA.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Shutter R5 LiNE XViD-PUKKA.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Kung-fu Panda 2008 TS Xvid.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Kung-fu Panda 2008 TS Xvid.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Definitely, Maybe 2008 DvdRip.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Definitely, Maybe 2008 DvdRip.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Street Kings 2008 DVDRip.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Street Kings 2008 DVDRip.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Kung Fu Dunk 2008 DVDRip.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Kung Fu Dunk 2008 DVDRip.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Welcome Home, Roscoe Jenkins 2008 DVRip.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Welcome Home, Roscoe Jenkins 2008 DVRip.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Witless Protection 2008 DVDRip.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Witless Protection 2008 DVDRip.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\In Bruges 2008 DVDRip.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\In Bruges 2008 DVDRip.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Things We Lost in the Fire 2007 DVDRip.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Things We Lost in the Fire 2007 DVDRip.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Fools Gold 2008 DVDRip.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Fools Gold 2008 DVDRip.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\The Oxford Murders 2008 DVDrip.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\The Oxford Murders 2008 DVDrip.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Date Movie 2006 DVDRip.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Date Movie 2006 DVDRip.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\The Spiderwick Chronicles 2008 DvdRip.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\The Spiderwick Chronicles 2008 DvdRip.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Balls of Fury 2007 DVDRip.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Balls of Fury 2007 DVDRip.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\The Forbidden Kingdom 2008 DvdRip.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré 
C:\WINDOWS\Fonts\'\The Forbidden Kingdom 2008 DvdRip.zip  	ZIP: infecté - 1  	ignoré
C:\WINDOWS\Fonts\'\The Assassination of Jesse James 2007 DvdRip.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\The Assassination of Jesse James 2007 DvdRip.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Enemy at the Gates (2008) DVDRip.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Enemy at the Gates (2008) DVDRip.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\The Other Boleyn Girl (2008) DVDRip.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\The Other Boleyn Girl (2008) DVDRip.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Snow Buddies (2008) DVDRip.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Snow Buddies (2008) DVDRip.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Hero Wanted (2008) DvdRip.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Hero Wanted (2008) DvdRip.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Hulk (2003) DVDRip.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Hulk (2003) DVDRip.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\The Reaping (2007) DVDRip.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\The Reaping (2007) DVDRip.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Sound Normalizer 2.5.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Sound Normalizer 2.5.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Synchredible v2.1.1.4.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Synchredible v2.1.1.4.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\VeryPDF.com VeryPDF PDF Stamp v2.3.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\VeryPDF.com VeryPDF PDF Stamp v2.3.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Net Meter v3.6 Build 417.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Net Meter v3.6 Build 417.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Spyware Process Detector 3.12.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Spyware Process Detector 3.12.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\FunPhotor v10.11.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\FunPhotor v10.11.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Global Network Inventory v2.3.0.4.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Global Network Inventory v2.3.0.4.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\DefenseWall HIPS v2.43.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\DefenseWall HIPS v2.43.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Advanced Visual FoxPro To PDF Table Converter v1.3.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Advanced Visual FoxPro To PDF Table Converter v1.3.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Advanced SQL To PDF Table Converter v1.3.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Advanced SQL To PDF Table Converter v1.3.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Advanced Bulk PDF Watermark Creator v1.4.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Advanced Bulk PDF Watermark Creator v1.4.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Advanced PDF Merger v1.4.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Advanced PDF Merger v1.4.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Advanced Excel To PDF Table Converter v1.3.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Advanced Excel To PDF Table Converter v1.3.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Advanced PDF Page Extractor v1.5.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Advanced PDF Page Extractor v1.5.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Advanced Bulk PDF Image Extractor v1.3.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Advanced Bulk PDF Image Extractor v1.3.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Advanced Image To PDF Converter v1.4.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Advanced Image To PDF Converter v1.4.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Advanced 2 Pages Per Sheet PDF Merger v1.5.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Advanced 2 Pages Per Sheet PDF Merger v1.5.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Advanced PDF Concatenator v1.4.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Advanced PDF Concatenator v1.4.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Advanced File Indexer v1.4.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Advanced File Indexer v1.4.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Beowulf - The Game iSO.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Beowulf - The Game iSO.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Greyhawk The Temple of Elemental Evil iSO.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Greyhawk The Temple of Elemental Evil iSO.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Hunting Unlimited 2008 iSO.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Hunting Unlimited 2008 iSO.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Little Britain The Video Game iSO.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Little Britain The Video Game iSO.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Lost Via Domus iSO.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Lost Via Domus iSO.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Painkiller iSO.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Painkiller iSO.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Prey iSO.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Prey iSO.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Prisoner of War iSO.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Prisoner of War iSO.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Project Snowblind iSO.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Project Snowblind iSO.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Psychonauts iSO.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Psychonauts iSO.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Scarface The World Is Yours iSO.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Scarface The World Is Yours iSO.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Second Sight iSO.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Second Sight iSO.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\S.T.A.L.K.E.R. Shadow of Chernobyl iSO.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\S.T.A.L.K.E.R. Shadow of Chernobyl iSO.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Tactical Ops Assault on Terror iSO.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Tactical Ops Assault on Terror iSO.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Tom Clancys Rainbow Six Lockdown iSO.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Tom Clancys Rainbow Six Lockdown iSO.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Tom Clancys Rainbow Six Vegas 2 iSO.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Tom Clancys Rainbow Six Vegas 2 iSO.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Tom Clancys Splinter Cell Pandora Tomorrow iSO.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Tom Clancys Splinter Cell Pandora Tomorrow iSO.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Tom Clancys Splinter Cell Chaos Theory iSO.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Tom Clancys Splinter Cell Chaos Theory iSO.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\Error Repair Professional v3.8.3.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\Error Repair Professional v3.8.3.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\RecentX v2.0.zip/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\WINDOWS\Fonts\'\RecentX v2.0.zip 	ZIP: infecté - 1 	ignoré
C:\WINDOWS\Fonts\'\URSoft Startup Faster v3.0.6.zip/Setup.exe 	Infecté : Trojan-Downlo

g!rly · Answer

marie64,

ok bien joué...

* Télécharge OTMoveIt2 (de Old_Timer) sur ton bureau : http://download.bleepingcomputer.com/oldtimer/OTMoveIt2.exe
* Double-clique sur OTMoveIt.exe pour lancer le programme,
* Copie la liste de fichiers ou de dossiers ci-dessous et colle-la dans la fenêtre du programme "Paste Custom List of Files/Folders to Move" :

C:\WINDOWS\Fonts\'
C:\WINDOWS\system32\jadldoke.dll

* Clique sur MoveIt! pour lancer la suppression,
* Le résultat appraraîtra dans le cadre Results.
* Clique sur Exit pour fermer le programme.
* Poste le rapport qui est situé ici : C:\\_OTMoveIt\MovedFiles
* Il te sera peut-être demandé de redémarrer ton PC. Dans ce cas, clique sur Yes.

@+

mari64 · Answer

je viens de m'apercevoier que le rapport n'était pas complet il est tres long il y a de nombreux autres dossiers comme:
C:\WINDOWS\Debug\PASSWD.LOG  	L'objet est verrouillé  	ignoré
C:\WINDOWS\Sti_Trace.log 	L'objet est verrouillé 	ignoré
C:\WINDOWS\wiaservc.log 	L'objet est verrouillé 	ignoré
C:\WINDOWS\wiadebug.log 	L'objet est verrouillé 	ignoré
C:\WINDOWS\WindowsUpdate.log 	L'objet est verrouillé 	ignoré
C:\WINDOWS\SchedLgU.Txt 	L'objet est verrouillé 	ignoré
C:\WINDOWS\SoftwareDistribution\ReportingEvents.log 	L'objet est verrouillé 	ignoré
C:\WINDOWS\SoftwareDistribution\EventCache\{DAD25477-07AB-4DF8-AD91-B920AA63F8BA}.bin 	L'objet est verrouillé 	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat 	L'objet est verrouillé 	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat 	L'objet est verrouillé 	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Windows Defender\Support\MPLog-06282008-101616.log 	L'objet est verrouillé 	ignoré
C:\Documents and Settings\NetworkService\Local Settings\Historique\History.IE5\index.dat 	L'objet est verrouillé 	ignoré
C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\index.dat 	L'objet est verrouillé 	ignoré
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG 	L'objet est verrouillé 	ignoré
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat 	L'objet est verrouillé 	ignoré
C:\Documents and Settings\NetworkService\Cookies\index.dat 	L'objet est verrouillé 	ignoré
C:\Documents and Settings\NetworkService
tuser.dat.LOG 	L'objet est verrouillé 	ignoré
C:\Documents and Settings\NetworkService
tuser.dat 	L'objet est verrouillé 	ignoré
C:\Documents and Settings\LocalService\Local Settings\Historique\History.IE5\index.dat 	L'objet est verrouillé 	ignoré
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat 	L'objet est verrouillé 	ignoré
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG 	L'objet est verrouillé 	ignoré
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat 	L'objet est verrouillé 	ignoré
C:\Documents and Settings\LocalService\Cookies\index.dat 	L'objet est verrouillé 	ignoré
C:\Documents and Settings\LocalService
tuser.dat.LOG 	L'objet est verrouillé 	ignoré
C:\Documents and Settings\LocalService
tuser.dat 	L'objet est verrouillé 	ignoré
C:\Documents and Settings\Utilisateur.TIPIETCHE\NTUSER.DAT 	L'objet est verrouillé 	ignoré
C:\Documents and Settings\Utilisateur.TIPIETCHE
tuser.dat.LOG 	L'objet est verrouillé 	ignoré
C:\Documents and Settings\Utilisateur.TIPIETCHE\Local Settings\Historique\History.IE5\index.dat 	L'objet est verrouillé 	ignoré
C:\Documents and Settings\Utilisateur.TIPIETCHE\Local Settings\Historique\History.IE5\MSHist012008070220080703\index.dat 	L'objet est verrouillé 	ignoré
C:\Documents and Settings\Utilisateur.TIPIETCHE\Local Settings\Temporary Internet Files\Content.IE5\index.dat 	L'objet est verrouillé 	ignoré
C:\Documents and Settings\Utilisateur.TIPIETCHE\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG 
C:\System Volume Information\_restore{14DF0968-15F3-4742-ACCF-E6309D357036}\RP366\A0122121.exe  	L'objet est verrouillé  	ignoré
C:\System Volume Information\_restore{14DF0968-15F3-4742-ACCF-E6309D357036}\RP371\change.log 	L'objet est verrouillé 	ignoré
C:\QooBox\Quarantine\C\WINDOWS\system32\acprqcev.dll.vir 	Infecté : Trojan.Win32.Monder.gen 	ignoré
C:\QooBox\Quarantine\C\WINDOWS\system32\aofubccu.dll.vir 	Infecté : Trojan.Win32.Monder.bu 	ignoré
C:\QooBox\Quarantine\C\WINDOWS\system32\auwsqgbw.dll.vir 	Infecté : Trojan.Win32.Monder.gen 	ignoré
C:\QooBox\Quarantine\C\WINDOWS\system32\bykwmfpx.dll.vir 	Infecté : Trojan.Win32.Monder.u 	ignoré
C:\QooBox\Quarantine\C\WINDOWS\system32\dhejwlii.dll.vir 
C:\FOUND.006\FILE0902.CHK/Setup.exe  	Infecté : Trojan-Downloader.Win32.VB.dck  	ignoré
C:\FOUND.006\FILE0902.CHK 	ZIP: infecté - 1 	ignoré
C:\FOUND.006\FILE0903.CHK/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\FOUND.006\FILE0903.CHK 	ZIP: infecté - 1 	ignoré
C:\FOUND.006\FILE0904.CHK/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\FOUND.006\FILE0904.CHK 	ZIP: infecté - 1 	ignoré
C:\FOUND.006\FILE0905.CHK/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\FOUND.006\FILE0905.CHK 	ZIP: infecté - 1 	ignoré
C:\FOUND.006\FILE0906.CHK/Setup.exe 	Infecté : Trojan-Downloader.Win32.VB.dck 	ignoré
C:\FOUND.006\FILE0906.CHK 	ZIP: infecté - 1 	ignoré
C:\FOUND.006\FILE0907.CHK/Setup.exe 


la liste devait etre trop longue pour rentrer dans le message ses dossier sont quelques exemples de la liste qu'ile y a dans le rapport tout les autres ont le meme "début".

a+

g!rly · Answer

marie,

aie...

rajoute ceci dans la liste a supprimer de ot_move it 

C:\FOUND.006

donc ca donne :

* Télécharge OTMoveIt2 (de Old_Timer) sur ton bureau : http://download.bleepingcomputer.com/oldtimer/OTMoveIt2.exe
* Double-clique sur OTMoveIt.exe pour lancer le programme,
* Copie la liste de fichiers ou de dossiers ci-dessous et colle-la dans la fenêtre du programme "Paste Custom List of Files/Folders to Move" :

C:\WINDOWS\Fonts\'
C:\WINDOWS\system32\jadldoke.dll
C:\FOUND.006

* Clique sur MoveIt! pour lancer la suppression,
* Le résultat appraraîtra dans le cadre Results.
* Clique sur Exit pour fermer le programme.
* Poste le rapport qui est situé ici : C:\\_OTMoveIt\MovedFiles
* Il te sera peut-être demandé de redémarrer ton PC. Dans ce cas, clique sur Yes.

@+

mari64 · Answer

C:\WINDOWS\Fonts\' moved successfully.
DllUnregisterServer procedure not found in C:\WINDOWS\system32\jadldoke.dll
C:\WINDOWS\system32\jadldoke.dll NOT unregistered.
C:\WINDOWS\system32\jadldoke.dll moved successfully.
C:\FOUND.006 moved successfully.
 
OTMoveIt2 by OldTimer - Version 1.0.4.3 log created on 07022008_211054


voila le rapport

Merci beaucoup pour toute ton aide!!

g!rly · Answer

ok marie64,

y avait il autre chose dans le rapport de kaspersy ?

regardes si tu voies d´autres fichiers ou dossiers avec la mention infecté-ignoré

dis moi

@+

mari64 · Answer

il y avait en plus des fichier de type C:\System Volume Information\_restore{14DF0968-15F3-4742-ACCF-E6309D357036}\RP350\A0108193.dll 
C:\QooBox\Quarantine\C\WINDOWS\system32\acprqcev.dll.vir 

a+

g!rly · Answer

ok mari64,

c´est la restauration system qui est touché, et la quarantaine de combofix renfermant les infections qu´il a detruites...

pour la restauration system on nettoiera a la fin > il suffit d´une simple manip`

c´est embêtant j´aurais bien voulut voir le rapport de kaspersky en entier, mais si il est trop long, ca va pas etre possible...

arrives tu maintenant a lancer antivir en mode sans echec sans qu´il éteigne le pc ?

dis moi, ou dans le meilleure des cas post son rapport stp

courage`

@+

mari64 · Answer

Bonjour g!rly et désolé pour le retard. Voila j'ai réussi a faire le scan complet sans que l'ordi ne s'arrete !! 

Avira AntiVir Personal
Report file date: jeudi 3 juillet 2008  09:40

Scanning for 1374468 virus strains and unwanted programs.

Licensed to:      Avira AntiVir PersonalEdition Classic
Serial number:    0000149996-ADJIE-0001
Platform:         Windows XP
Windows version:  (Service Pack 2)  [5.1.2600]
Boot mode:        Save mode
Username:         Utilisateur
Computer name:    TIPIETCHE

Version information:
BUILD.DAT     : 8.1.0.308       16478 Bytes  28/05/2008 17:03:00
AVSCAN.EXE    : 8.1.2.12       311553 Bytes  18/03/2008 09:02:58
AVSCAN.DLL    : 8.1.1.0         53505 Bytes  07/02/2008 08:43:38
LUKE.DLL      : 8.1.2.9        151809 Bytes  28/02/2008 08:41:24
LUKERES.DLL   : 8.1.2.1         12033 Bytes  21/02/2008 08:28:42
ANTIVIR0.VDF  : 6.40.0.0     11030528 Bytes  18/07/2007 10:33:34
ANTIVIR1.VDF  : 7.0.5.1       8182784 Bytes  24/06/2008 13:31:28
ANTIVIR2.VDF  : 7.0.5.20       142336 Bytes  30/06/2008 13:28:08
ANTIVIR3.VDF  : 7.0.5.35        80384 Bytes  02/07/2008 13:27:24
Engineversion : 8.1.0.59  
AEVDF.DLL     : 8.1.0.5        102772 Bytes  25/02/2008 09:58:22
AESCRIPT.DLL  : 8.1.0.44       278907 Bytes  29/06/2008 13:32:16
AESCN.DLL     : 8.1.0.22       119157 Bytes  29/06/2008 13:32:14
AERDL.DLL     : 8.1.0.20       418165 Bytes  29/06/2008 13:32:12
AEPACK.DLL    : 8.1.1.6        364918 Bytes  29/06/2008 13:32:06
AEOFFICE.DLL  : 8.1.0.20       192891 Bytes  29/06/2008 13:32:00
AEHEUR.DLL    : 8.1.0.32      1274231 Bytes  29/06/2008 13:31:56
AEHELP.DLL    : 8.1.0.15       115063 Bytes  29/06/2008 13:31:44
AEGEN.DLL     : 8.1.0.29       307573 Bytes  29/06/2008 13:31:44
AEEMU.DLL     : 8.1.0.6        430451 Bytes  29/06/2008 13:31:38
AECORE.DLL    : 8.1.0.31       168310 Bytes  29/06/2008 13:31:34
AVWINLL.DLL   : 1.0.0.7         14593 Bytes  23/01/2008 17:07:54
AVPREF.DLL    : 8.0.0.1         25857 Bytes  18/02/2008 10:37:52
AVREP.DLL     : 7.0.0.1        155688 Bytes  16/04/2007 13:26:48
AVREG.DLL     : 8.0.0.0         30977 Bytes  23/01/2008 17:07:50
AVARKT.DLL    : 1.0.0.23       307457 Bytes  12/02/2008 08:29:24
AVEVTLOG.DLL  : 8.0.0.11       114945 Bytes  28/02/2008 08:31:32
SQLITE3.DLL   : 3.3.17.1       339968 Bytes  22/01/2008 17:28:04
SMTPLIB.DLL   : 1.2.0.19        28929 Bytes  23/01/2008 17:08:40
NETNT.DLL     : 8.0.0.1          7937 Bytes  25/01/2008 12:05:12
RCIMAGE.DLL   : 8.0.0.35      2371841 Bytes  10/03/2008 14:37:26
RCTEXT.DLL    : 8.0.32.0        86273 Bytes  06/03/2008 12:02:12

Configuration settings for the scan:
Jobname..........................: Complete system scan
Configuration file...............: c:\program files\avira\antivir personaledition classic\sysscan.avp
Logging..........................: low
Primary action...................: interactive
Secondary action.................: ignore
Scan master boot sector..........: on
Scan boot sector.................: on
Boot sectors.....................: C:, D:, 
Scan memory......................: on
Process scan.....................: on
Scan registry....................: on
Search for rootkits..............: on
Scan all files...................: All files
Scan archives....................: on
Recursion depth..................: 20
Smart extensions.................: on
Macro heuristic..................: on
File heuristic...................: high

Start of the scan: jeudi 3 juillet 2008  09:40

Starting search for hidden objects.
The driver could not be initialized.

The scan of running processes will be started
Scan process 'avscan.exe' - '1' Module(s) have been scanned
Scan process 'avcenter.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'Explorer.EXE' - '1' Module(s) have been scanned
Scan process 'MsMpEng.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'lsass.exe' - '1' Module(s) have been scanned
Scan process 'services.exe' - '1' Module(s) have been scanned
Scan process 'winlogon.exe' - '1' Module(s) have been scanned
Scan process 'csrss.exe' - '1' Module(s) have been scanned
Scan process 'smss.exe' - '1' Module(s) have been scanned
12 processes with 12 modules were scanned

Starting master boot sector scan:
Master boot sector HD0
      [INFO]      No virus was found!

Start scanning boot sectors:
Boot sector 'C:\'
      [INFO]      No virus was found!
Boot sector 'D:\'
      [INFO]      No virus was found!

Starting to scan the registry.
The registry was scanned ( '36' files ).


Starting the file scan:

Begin scan in 'C:\'
C:\pagefile.sys
      [WARNING]   The file could not be opened!
C:\Documents and Settings\All Users\Application Data\Avira\AntiVir PersonalEdition Classic\INFECTED\48c8c39f.qua
  [0] Archive type: HIDDEN
  --> FIL\\?\C:\Documents and Settings\All Users\Application Data\Avira\AntiVir PersonalEdition Classic\INFECTED\48c8c39f.qua
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/VB.ehs Backdoor server programs
      [NOTE]      The file was moved to '48cf8a1f.qua'!
C:\Documents and Settings\Utilisateur.TIPIETCHE\Bureau\prog\clean\clean.cmd
      [DETECTION] Contains suspicious code HEUR/HTML.Malware
      [NOTE]      The fund was classified as suspicious.
      [NOTE]      The file was moved to '48d18c5a.qua'!
C:\System Volume Information\_restore{14DF0968-15F3-4742-ACCF-E6309D357036}\RP345\A0103102.exe
      [DETECTION] Contains suspicious code HEUR/Malware
      [NOTE]      The fund was classified as suspicious.
      [NOTE]      The file was moved to '489d8f79.qua'!
C:\System Volume Information\_restore{14DF0968-15F3-4742-ACCF-E6309D357036}\RP356\A0108605.exe
      [DETECTION] Contains suspicious code HEUR/Malware
      [NOTE]      The fund was classified as suspicious.
      [NOTE]      The file was moved to '489d908d.qua'!
C:\System Volume Information\_restore{14DF0968-15F3-4742-ACCF-E6309D357036}\RP363\A0108984.exe
      [DETECTION] Is the Trojan horse TR/Trash.Gen
      [NOTE]      The file was moved to '489d90ab.qua'!
C:\System Volume Information\_restore{14DF0968-15F3-4742-ACCF-E6309D357036}\RP366\A0122121.exe
      [DETECTION] Is the Trojan horse TR/Trash.Gen
      [NOTE]      The file was moved to '489d90bd.qua'!
C:\System Volume Information\_restore{14DF0968-15F3-4742-ACCF-E6309D357036}\RP371\A0128604.cmd
      [DETECTION] Contains suspicious code HEUR/HTML.Malware
      [NOTE]      The fund was classified as suspicious.
      [NOTE]      The file was moved to '489d90ec.qua'!
C:\QooBox\Quarantine\C\WINDOWS\system32\modtrux18\modtrux182328.exe.vir
      [DETECTION] Contains suspicious code HEUR/Malware
      [NOTE]      The fund was classified as suspicious.
      [NOTE]      The file was moved to '48d09141.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Alone In The Dark 2008 Multi iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48db9148.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Mass Effect ViTALiTY iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48df9143.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Fritz Chess 11 iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d59157.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Supreme Ruler 2020 iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48dc915c.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Sniper Art of Victory iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '49aa5dc0.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Gene Troopers iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48da9151.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Two Worlds2007 iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48db9165.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Anno 1701 Razor 1911 iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48da9161.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Turok 2008Razor 1911 iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48de9168.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Sudden Strike 3 Arms for Victory iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d09169.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Championship Manager 2008 iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48cd915c.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Vietcong iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d1915d.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\World In Conflict iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48de9164.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\GothiciSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48e09164.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Missing On Lost Island iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48df915f.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Grand Theft Auto Vice CityiSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48cd9168.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Company of Heroes DVDiSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d99165.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Sudden Strike Forever iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d0916c.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Civilization IV iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48e29160.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Line of Sight Vietnam iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '49a55dfa.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Batman Forever 1995 DVDRip XviD.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48e09159.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Enchanted 2007 DvD Rip XviD.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48cf9166.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Death Sentence 2007 Unrated DvDRip XviD.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48cd915e.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Sky Captain and the World of Tomorrow 2004 DVDRip XviD.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48e59164.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\The Day After Tomorrow 2004 HDrip XviD.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d19161.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Journey to the Center of the Earth2008 DVDRip XviD.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48e19169.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Star Wars Episode III - Revenge of the Sith 2005 DVDRip XviD.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48cd916e.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Scent of a Woman 1992 DVDRip XviD.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d1915e.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Regin of Fire 2002 DVDRip XviD.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d39160.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Sleepers 1996 DVDRip XviD.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d19167.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\SWAT 2003 DVDRip XviD.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48ad9153.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Way of the Gun 2000 DvdRip XviD.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48e5915d.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\The Planet 2006 DVDRip XviD.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d19165.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\War Of The Worlds 2 The Next Wave 2008 DVDRiP XviD.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48de915e.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Shaft 1971 DVDRip XviD.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48cd9165.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Mars Attacks 1996 DVDRip XviD.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48de915f.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\The Sixth Sense 1999 DVDRip XviD.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d19166.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\The Butterfly Effect 2004 DVDRip XviD.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '49ae5dff.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Cars 2006 DvDrip XviD.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48de9160.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Jetico Personal Firewall v2.0.2.3.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '499f5dfd.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Blumentals WeBuilder 2008 v9.0.0.97.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48e1916c.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Blumentals HTMLPad 2008 Pro v9.0.0.97.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '499e5df5.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Blumentals Rapid PHP 2008 v9.0.0.97.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48e1916d.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Blumentals Rapid CSS 2008 v9.0.0.97.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '499e5df6.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\WMV Movie Converter v1.1.54.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48c2914e.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\VB Decompiler Pro v5.0.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '488c9144.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Power Notes 3.32.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48e39171.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\LEDSET Software Cam Wizard v8.01.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48b09148.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Zards Cleanse Uninstaller Pro 2008 v4.59.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '49a15dfd.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Tracks Eraser Pro 7.2.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48cd9176.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\SIP Workbench v1.0.0.3970.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48bc914d.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\DeskShare Security Monitor Pro v2.41.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48df9169.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\EffeTech ICQ Sniffer v1.2.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d2916b.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Jetico BCWipe v3.11.4.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48e0916a.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Jetico BestCrypt v8.05.1.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '499f5df3.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\DeskShare WebCam Monitor v5.02.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48df916b.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\instantGet v2.05.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48df9174.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Altova XMLSpy Enterprise v2008.2.1.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48e09173.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Altova SchemaAgent 2008.2.1.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '499f5dec.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Anfibia Deskman v8.0.4.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d29175.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Se7en 1995 DVDRip XviD.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48a3916d.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\The Tuxedo 2002 DvdRip XviD.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d19170.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Step Up 2 - The Streets DvdRip XviD.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d1917d.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\The Man in the Moon 1991 DvdRip DivX.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d19171.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Icharus Broken 2007 DvdRip XviD.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d4916d.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Fear and Loathing in Las Vegas 1998 DvdRip Xvid.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48cd916f.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Doomsday 2008 DVDRip XViD.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48db9179.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Dazed and Confused 1993 DvdRip XviD.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48e6916c.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Lars And The Real Girl 2007 DvdRip XviD.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48de916c.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Trapped 2002 DvdRip XviD.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48cd917e.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\The Warlords 2007 DvdRip Xvid.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d19174.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Teeth 2007 DvdRip XviD.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d19172.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\I Spit On Your Grave 1978 DvdRip XviD.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48bf912d.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\The Weekend 2007 DVDRip XviD.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d19176.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Blue Streak 1999 DvdRip XviD.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48e1917a.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\National Treasure 2004 DvDrip Eng XviD.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48e0916f.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\The Last King of Scotland 2006 DVDRip XviD.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d19177.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Fast Track No Limits 2008 DvdRip Xvid.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48df9170.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\The Shawshank Redemption DvdRip XviD.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d19178.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Cougar Club 2007 DvdRip XviD.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48e1917f.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Hitler The Last Ten Days 973 DVDRip XviD.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48e0917a.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\I Robot 2004 DVDRip XviD.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48be9131.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\The Air I Breathe 2007 DvdRip XviD.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d1917a.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Grindstone Road 2008 DvDRip XviD.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d59184.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Chaos Theory 2007 DvDrip XviD.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48cd917b.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Over Her Dead Body 2008 DvDrip XviD.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d19189.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Another 48 Hrs. 1990 DVDRip XViD.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48db9181.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\The Animal 2001 DVDRip XViD.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d1917c.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\My Moms New Boyfriend DVDRip XviD.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '488c918d.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Mission Impossible III 2006 DVDRip XviD.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48df917e.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Sniper Art of Victory SKIDROW iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d59183.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Overspeed High Performance Street Racing SKIDROW iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d1918c.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Supreme Ruler 2020 SKIDROW iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48dc918b.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Imperium Romanum SKIDROW iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48dc9183.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Terrorist Takedown 2 US Navy Seals SKIDROW iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48de917c.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Limbo of The Lost SKIDROW iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d99180.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Toy Golf Extreme SKIDROW iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48e59186.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Model Train 3D SKiDROW iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d09187.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\911 First Responders SKIDROW iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '489d9149.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Burn - SKiDROW iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48de918e.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\The School of Rock 2003 DVDRip Xvid.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d19181.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Finding Neverland 2004 m-HD x264 XViD.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48da9182.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Hellboy 2004 DVDRip XviD.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d8917f.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Thank You For Smoking 2005 LiMiTED DVDRip XviD.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48cd9182.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\The Chronicles of Narnia Prince Caspian 2008 TS DVDRipXViD.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d19183.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\The Forbidden Kingdom2008 DvdRip XViD.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '49ae5d1c.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Magicians 2007 DvDrip XViD.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d3917c.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Death At A Funeral LiMiTED DVDRip XviD.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48cd9181.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Zathura A Space Adventure 2005 DVDRip XViD.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48e0917d.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\10,000 BC.PROPER DVDRip XviD.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '4898914c.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Nims Island 2008 DVDRip XViD.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d99186.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Thirteenth Floor 1999 DVDRip XviD.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d59185.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Titanic 1997 m-HD x264 Xvid.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48e09186.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Andre The Butcher 2005 WS DVDRip XviD.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d0918c.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\When Love Begins 2008 DVDrip XviD.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d19186.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Police Academy 1984 WS Proper DVDRip XviD.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d8918e.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Planet of the Apes 2001 m-HD x264 XVid.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48cd918b.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Theres Something About Mary 1998 DVDRip XViD.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d19188.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Knight Rider 2008 DVDRip XViD.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d5918e.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Revolver 2005 REAL RETAIL DVDRip XviD AC3 SUBMERGE.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48e29185.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\You Dont Mess With The Zohan CAM King Ben.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48e19190.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Jarhead 2005 m-HD x264 uSk.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48de9182.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\The Mummy 1999 m-HD x264 uSk.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d1918a.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Master and Commander 2003 m-HD x264 uSk.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48df9183.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Walk Hard The Dewey Cox Story 2007 DVDRip XviD DiAMOND.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d89184.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\The Flock 2007 DvDrip aXXo.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d1918b.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\The Sitter 2007 STV DVDRip XviD DOMiNO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '49ae5d15.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Gone Baby Gone DVDRip XviD DiAMOND.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48da9193.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Rambo 2008 DVDrip XviD MP3 Eng aXXo.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d99185.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Red Eye 2005 DVDRip XviD.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d0918a.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\What Happens In Vegas PROPER R5 XviD iAPULA.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48cd918d.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\The Lookout 2007 DVDRip XviD DIAMOND.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d1918e.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Good Luck Chuck 2007 UNRATED DVDRip DiAMOND.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48db9195.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Ronin 1998 DVDRip XviD.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48da9195.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\The Bucket List 2007 x264 m-HD vaLk.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d1918f.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\The Eye DVDRip ENG.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '49ae5d08.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Die Hard 2 1990 m-HD x264 AsCo.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d19190.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Apocalypto 2006 x264 m-HD vaLk.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48db9198.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\The Machine Girl 2008 DvDrip Eng aXXo.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '49ae5d09.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Bullitt 1968 DVDRip DiVX.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d8919e.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Strange Wilderness 2008 DvDrip aXXo.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48de919d.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Teeth 2007 DvDrip Eng aXXo.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '49ae5d17.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\30 Days Of Night 2007 DvDrip Eng aXXo.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '488c915a.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Impulse 2008 DvDrip Eng aXXo.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48dc9197.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\The Orphanage 2007 DvDrip Eng Hard Subs aXXo.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d19193.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Resurrecting The Champ 2007 DvDrip Eng aXXo.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48df9190.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Afro Samurai 2007 Directors Cut DvDrip Eng aXXo.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48de9192.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Sharpshooter 2007 DvDrip AC3 Eng aXXo.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48cd9194.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\My Moms New Boyfriend DVDRip XviD BeStDivX.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '488c91a5.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Iron Man PROPER TS XViD nDn.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48db919f.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Halloween 2007 UNRATED DVDRip XviD KiLT.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '49a75d17.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Gone in Sixty Seconds 2000 DVDRip XViD.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48da919c.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Indiana Jones and the Last Crusade 1989 DVDRip.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d0919c.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Indiana Jones and the Temple of Doom 1984 DVDRip.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '49af5d05.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Indiana Jones and Raiders of the Lost Ark 1981 DVDRip.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d0919d.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\American History X 1998 DVDRip XviD UnSeeN.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d1919c.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\The Bank Job 2008 DVDRip.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d19198.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\The Lord of the Rings 1978 DVDRip DivX MP3.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '49ae5d01.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Apocalypse Now Redux 1979 DVDRip XviD ToRN.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48db91a0.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\An Empress and The Warriors 2008 CN DVDRip XviD PMCG.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '488c919f.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\EffeTech MSN Sniffer v2.1.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d29197.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Hexprobe Hex Editor 4.3.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48e49197.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Acon Digital Media Acoustica v4.1.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '49a45d0e.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\CommView v6.0.590.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d991a2.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Axure RP Pro v5.0.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48e191ab.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\NotesHolder v1.7.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48e091a3.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\AptEdit Pro 4.6.2.314.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48e091a4.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\BoXiKoN v1.66.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48c491a4.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\CoCsoft StreamDown v6.41.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48af91a4.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Comfort Keys v3.1.3.0.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d991a4.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Helium Music Manager 2008.0.0.6106.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d8919b.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Kristanix Software ImageBadger Deluxe v4.89.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d591a8.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Password Generator Professional 2007 v5.30.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48df9198.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Nofeel FTP Server Enterprise v3.6.3526.0.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d291a6.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\OrgScheduler 1plus1 5.9.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d391aa.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Privacy Shield v3.0.76.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d591aa.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\SlySoft CloneCD v5.3.1.3.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48e591a5.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\FileRescue Professional v2.9.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d891a2.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Nitro PDF Professional v5.3.3.6.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48e091a2.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\IncrediMail 5.70 Build 3647.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48cf91a8.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\The Sims Castaway Stories RELOADED iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d191a2.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Bioshock iSO w Pixelshader 2.0 patch.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48db91a4.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Evil Dead Regeneration RELOADED iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d591b1.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Crusaders Thy Kingdom Come RELOADED iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48e191ae.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Tom Clancys Splinter Cell Chaos Theory RELOADED iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d991ab.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\TimeShift 2007 Reloaded iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d991a6.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Tycoon City New York - RELOADED iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48cf91b6.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Vietcong 2 RELOADED iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d191a6.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Dungeon Siege II iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48da91b3.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Blade Runner iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48cd91aa.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Titan Quest Immortal Throne iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48e091a8.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Overlord Raising Hell HATRED iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d191b5.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Supreme Commander Forged Alliance Reloaded iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48dc91b4.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Brian Lara International Cricket 2007 RELOADED iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d591b2.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Crimes Of War - RELOADED iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '49aa5d2b.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Stronghold Crusader Extreme - RELOADED iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48de91b4.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\SBK 08 Superbike World Championship RELOADED iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48b79183.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Juiced 2 Hot Import Nights RELOADED iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d591b6.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\MagicCamera 3.3.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d391a3.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Portable LinkCollector 1.0.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48de91b1.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Recover Keys v2.0.0.21.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48cf91a7.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\KingConvert For WAVv3.0.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48da91ac.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\MiniServX 6.23.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '49a55d35.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\CoCsoft StreamDown v6.4.1.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48af91b3.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\AudioLava 1.0.0 b355.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d091b9.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Angel PSP Video Converter 1.7.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d391b3.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'

mari64 · Answer

\KingConvert For OGGv3.0.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48da91ae.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Axure RP Pro v5.0.0.1529.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48e191be.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\3Q DVD Ripper Platinum 2.1.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '488c9197.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Advanced Vista Optimizer 2008.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48e291ab.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\AAMS Auto Audio Mastering System v2.2 Rev 002.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48b99188.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\DVD Studio Pack v1.1.57.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48b0919e.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\BenVista PhotoZoom Pro v2.3.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48da91ad.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\3Q 3GP Video Converter 2.1.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '488c919a.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Acon Digital Media Acoustica Premium v4.1.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48db91ac.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\AVG Internet Security 8.0.125a1325.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48b3919f.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Advanced System Optimizer 2.2.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48e291ae.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Abexo Registry Cleaner 5.3.1.0.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d191ac.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Iron Maiden - Live After Death and Extras DVDRip Xvid.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48db91bc.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Resident Evil 2 Apocalypse DVDRip Xvid.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48df91b0.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\The Evil Dead 1981 DVDRip Xvid.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d191b3.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\The Spiderwick Chronicles 2008 DVDrip Xvid-aXXo.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d191b4.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Lejdis 2008 DVDScr Xvid.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d691b1.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Alvin And The Chipmunks 2007 DVDRip Xvid-aXXo.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48e291b8.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Casablanca 1942 REMASTERED DVDRip Xvid.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48df91ae.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\The Ruins SCREENER XviD-NEPTUNE.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '49ae5d2e.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Otis 2008 STV UNRATED DVDRip XviD-TheWretched.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d591c1.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Breach 2007 DVDRip Xvid-aXXo.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d191c0.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Fools Gold 2008 DVDRip Xvid.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48db91bd.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Transporter II 2005 HDrip x264.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48cd91c1.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Blood and Wine 1996 DVDRip Xvid.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48db91bb.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\How To Rob A Bank 2007 LiMiTED DVDRip XviD-ARiSCO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48e391be.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Vantage Point 2008 m-HD x264.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48da91b1.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\10,000 BC 2008 m-HD x264.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48989180.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Evil Dead 3 Army of Darkness 1992 DVDRip Xvid.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d591c7.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Shutter R5 LiNE XViD-PUKKA.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48e191b9.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Kung-fu Panda 2008 TS Xvid.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48da91c6.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Definitely, Maybe 2008 DvdRip.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d291b7.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Street Kings 2008 DVDRip.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48de91c6.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Kung Fu Dunk 2008 DVDRip.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48da91c8.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Welcome Home, Roscoe Jenkins 2008 DVRip.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d891b8.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Witless Protection 2008 DVDRip.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48e091bc.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\In Bruges 2008 DVDRip.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '488c91c2.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Things We Lost in the Fire 2007 DVDRip.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d591bc.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Fools Gold 2008 DVDRip.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48db91c3.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\The Oxford Murders 2008 DVDrip.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d191bd.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Date Movie 2006 DVDRip.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48e091b6.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\The Spiderwick Chronicles 2008 DvdRip.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d191be.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Balls of Fury 2007 DVDRip.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d891b7.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\The Forbidden Kingdom 2008 DvdRip.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '49ae5d27.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\The Assassination of Jesse James 2007 DvdRip.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d191bf.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Enemy at the Gates (2008) DVDRip.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d191c5.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\The Other Boleyn Girl (2008) DVDRip.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '49ae5d59.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Snow Buddies (2008) DVDRip.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48db91c6.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Hero Wanted (2008) DvdRip.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48de91bd.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Hulk (2003) DVDRip.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d891ce.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\The Reaping (2007) DVDRip.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d191c1.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Sound Normalizer 2.5.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48e191c9.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Synchredible v2.1.1.4.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48da91d3.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\VeryPDF.com VeryPDF PDF Stamp v2.3.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48de91c0.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Net Meter v3.6 Build 417.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48e091c0.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Spyware Process Detector 3.12.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48e591cc.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\FunPhotor v10.11.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48da91d1.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Global Network Inventory v2.3.0.4.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48db91c8.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\DefenseWall HIPS v2.43.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d291c2.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Advanced Visual FoxPro To PDF Table Converter v1.3.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48e291c1.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Advanced SQL To PDF Table Converter v1.3.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '499d5d5a.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Advanced Bulk PDF Watermark Creator v1.4.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48e291c2.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Advanced PDF Merger v1.4.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '499d5d5b.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Advanced Excel To PDF Table Converter v1.3.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48e291c3.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Advanced PDF Page Extractor v1.5.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '499d5d5c.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Advanced Bulk PDF Image Extractor v1.3.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48e291c4.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Advanced Image To PDF Converter v1.4.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '499d5d5d.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Advanced 2 Pages Per Sheet PDF Merger v1.5.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48e291c6.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Advanced PDF Concatenator v1.4.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48e291c5.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Advanced File Indexer v1.4.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '499d5d5e.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Beowulf - The Game iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48db91c7.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Greyhawk The Temple of Elemental Evil iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d191d4.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Hunting Unlimited 2008 iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48da91d8.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Little Britain The Video Game iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48e091cc.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Lost Via Domus iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48df91d2.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Painkiller iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d591c5.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Prey iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d191d6.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Prisoner of War iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d591d7.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Project Snowblind iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48db91d7.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Psychonauts iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48e591d9.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Scarface The World Is Yours iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48cd91c9.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Second Sight iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48cf91cc.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\S.T.A.L.K.E.R. Shadow of Chernobyl iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48c09195.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Tactical Ops Assault on Terror iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48cf91c8.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Tom Clancys Rainbow Six Lockdown iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d991d7.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Tom Clancys Rainbow Six Vegas 2 iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d991d8.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Tom Clancys Splinter Cell Pandora Tomorrow iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '49a65d41.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Tom Clancys Splinter Cell Chaos Theory iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d991d9.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Error Repair Professional v3.8.3.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48de91dc.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\RecentX v2.0.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48cf91d0.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\URSoft Startup Faster v3.0.6.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48bf91bd.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\ISaGRAF 5.13.309.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48cd91be.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Moon Phase Calculator v3.45.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48db91db.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\WebWatchBot Enterprise v5.1.4.18624.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48ce91d1.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Agnitum Outpost Security Suite Pro 2008 v6.0.2295.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '49a55d4c.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\GIF Construction Set Professional v3.0a25.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48b291b6.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Web Button Menu Maker 3.2.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48ce91d2.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\3D-Coatv2.092.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '489991b2.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\EssentialPIM Pro v2.52.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48df91e1.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\SoftwarePassport Armadillo Professional Edition v5.42.542.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d291de.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Multitranse v4.6.3.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d891e4.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Visual Importer Enterprise v7.5.14.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48df91d9.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Blaze Media Pro v8.01.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48cd91dc.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Nikon Capture NX v2.0.0.0.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d791d9.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\AnyReader v2.6 Build 212.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48e591df.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\NoteZilla v7.0.83.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48e091e0.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\MyUSBOnly v4.9.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48c191eb.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Eleven fourteen DVDRip Xvid.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d191de.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Planted Evidence 2008 STV DVDRip XviD-DOMiNO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48cd91df.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Stardust 2007 m-HD x264.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48cd91e7.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Be Kind Rewind 720p BluRay x264-METiS.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '488c91d9.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Silence Of The Lambs 1991 m-HD x264.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d891dd.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Rambo - First Blood 1982 DVDRip Xvid.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d991d5.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Kung-Fu Panda 2008 TS XViD-mVs.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48da91ea.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Sex and the City 2008 TS XviD.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48e491da.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Iron Man 2008 TS XVID-STG.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48db91e8.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Never Back Down FS SCREENER XviD-NBD.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48e291db.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\What Happens in Vegas 2008 R5-iAPULA.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48cd91de.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Cloverfield 2008 m-HD x264.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48db91e3.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\The Bucket List 2007 DVDSCR Xvid.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d191df.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Cleaner 2007 DVDRip Xvid-aXXo.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d191e3.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\The Elephant Man 1980 m-HD x264.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d191e0.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Saving Private Ryan HDRip x264.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48e291d9.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Shaun of the Dead 2004 DVDRip Xvid.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48cd91e1.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\August 2008 DVDSCR Xvid.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d391ee.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\The Happening CAM XViD-CAMERA.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d191e1.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\The Incredible Hulk2008 CAM XVID.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d191e2.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\The War of the Worlds iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '49ae5d7b.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\True Crime New York City iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48e191ec.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Hitman Blood Money iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48e091e4.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Team Fortress 2 [NO_STEAM] 2.0.2.9.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48cd91e0.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\NFS Most Wanted RiP.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48bf91c2.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Command and Conquer 3 Kanes Wrath iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d991eb.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Halo 2 Repack-Razor1911 iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '49a75d46.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Tony Hawks American Wasteland iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48da91ec.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\The Golden Horde 2008 iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d191e5.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Assassins Creed PROPER iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48df91f0.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Thief 3Deadly Shadows-Razor1911 iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d591e6.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Lost Planet Extreme Condition Colonies Edition-RELOADED iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48df91ed.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Asterix At The Olympic Games CLONEDVD-PROCYON iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48e091f2.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Cold Fear iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d891ee.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Midnight Club II Street Racing iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d091e9.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Turning Point Fall of Liberty - Multi5 Team JPN.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48de91f5.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Turok 2008 RIP.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48de91f6.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Heroes of Might and Magic III iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48de91e6.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Harry Potter and the Goblet of Fire iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48de91e2.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'	echsmith snagit v9.0.0.351.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48cf91e7.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\XYplorer v7.20.0000.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48dc91db.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Tunebite Platinum v5.1.169.6900.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48da91f8.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Nufsoft Nature Illusion Studio v2.73.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d291f8.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Steganos Safe Professionnal 2008 v10.1.4694 Multilanguage.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d191f7.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\RAID Reconstructor v3.35.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48b591c5.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Super Flexible File Synchronizer Pro v4.14b.82.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48dc91f9.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\NeoBook Professional v5.5.4.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48db91ea.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Nikon Capture NX 2.0.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d791ee.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Sequentum Visual Web Ripper v1.8.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48dd91eb.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Informatik AppendTIFF v2.1.3018.13518.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d291f5.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Steganos Password Manager 2009 v11.0.0.5309 Multilanguage.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d191fb.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\ScreenOCR 6.1.zip
  [0] Archive type: ZIP
  --> Setup.exe

mari64 · Answer

[DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48de91eb.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\ArGoSoft Mail Server .NET v1.0.5.1.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48b391fa.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Audio Record Edit Toolbox 9.9.5.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d091fd.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Hard Note JUMP v1.22.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48de91ea.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\AML Power Video Converter v5.9.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48b891d6.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\AMS Photo Effects v1.45.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48bf91d6.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\ConvertXtoDVD v3.1.0.24 Multilingual.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48da91f9.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\ACDSee Photo Editor 5.0.286.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48b091cd.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\DU Meter v4.01.R3076.0.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '488c91e0.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Aurora MPEG to DVD Burner v5.2.7.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48de9200.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Be a Man! Samurai School 2008 DVDRip Xvid.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '488c91f0.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Stardust 2007 DVDRip Xvid.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48cd9200.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\The Jackal 1997 m-HD x264.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d191f4.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Jumper DVDR-MPTDVD.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d99202.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\P2 DVDRip XviD AC3-CODE.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '488c91bf.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Anderson Tapes DVDRip Xvid-HYENA.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d091fb.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Vantage Point 2008 DvDrip Xvid-aXXo.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48da91ef.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Quiet City 2007 DVDRip XviD-FRAGMENT.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d59203.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\The Ladykillers DVDRip XViD-DEiTY.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '49ae5d60.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\True Lies 1994 m-HD x264-uSk.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48e19201.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Stanley Cuba 2007 FESTiVAL DVDRip Xvid.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48cd9204.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\National Lampoons Loaded Weapon 1 1993 DVDRip Xvid.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48e091f1.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\The Children of Huang Shi LIMITED DVDRip XviD-ESPiSE.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d191f9.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\The Battle For Arnhem VCDRip Xvid.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '49ae5d62.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Drillbit Taylor 2008 DVDSCR XviD-BaLD.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d59204.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\The strangers 2008 CAM Xvid.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d191fa.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Bravo Two Zero 1999 DVDRip Xvid.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '49b25e9d.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\The Machine Girl 2008 DVDRip x264.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '49ae5d64.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Street Racer 2008 DVDRip XviD-DOMiNO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48de9207.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Fritz Chess 11-SKIDROW iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d59206.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Hot Wheels Velocity X iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48e09203.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Rome Total War iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d99204.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Bioshock iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48db91fe.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Earth 2160 iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '49a15d6f.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Afterlife - LucasArts 1996 iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48e091fc.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\GTA Vice City iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48ad91ea.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Hunting Unlimited 4 iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48da920c.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Max Payne 2 The Fall of Max Payne iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48e491f8.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\GTA San Andreas - Berlin iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48ad91eb.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Splinter Cell - Pandora Tomorrow RiP.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d89208.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Lego Indiana Jones-RELOADED iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d391fd.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Reel Deal Slots 2nd Volume iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d191fe.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Metal Gear Solid 2 Substance iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48e091fe.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Unreal Tournament 3 iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48de9208.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Worldwide Boxing Manager 2007 iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48de9209.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Worms 4 Mayhem iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '49a15e92.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Race Driver GRID RiP Multi 5.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48cf91fc.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Commandos 2 Men of Courage iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d9920a.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Mass Effect PROPER-RELOADED iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48df91fd.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\IGOR Pro 6.0.3.1.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48bb91e3.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\EffeTech HTTP Sniffer v4.1.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d29202.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\SysNucleus USBTrace v2.1.0.44.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48df9216.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\EffeTech EtherDetect Packet Sniffer v1.4.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d29203.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\WebAllow 3.0b.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48ce9202.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\LinkLines v1.4.2.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48da9207.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\InstallShiled 2009 Professional v15.0.0.498.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48df920c.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\PhotoCool v2.0.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48db9207.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\ModelRight Professional 3.0.0.38.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d0920e.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\SQLite Expert Professional v1.6.70.1589.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48b891f1.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\NoteBurner v2.18.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48e0920f.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Core FTP Pro 2.1.1552.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48de9210.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\DotNET Reflector v2.01.04.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48e09210.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\EffeTech Ace Password Sniffer v1.4.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d29208.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Anfibia Deskman v8.0.3.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d29210.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Ashampoo AntiSpyWare v2.0.2.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d49215.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Advanced WMA Workshop v2.3.2.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48e29207.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\DFX for Yahoo Music Jukebox v8.405.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48c491e9.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\DFX for Windows Media Player v8.405.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48c491ea.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\DFX for Winamp v8.405.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '49bb5d73.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\American Gangster 2007 m-HD x264 DVDRip Xvid.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d19211.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Pans Labyrinth 2006 m-HD x264.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48da9206.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\10.000 B.C 2008 PROPER DVDRip XviD-DiAMOND.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '489a91d5.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Baby Boy 2001 DVDRip XViD-iNT.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48ce9207.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Hostel - Directors Cut 2005 x264 DVDRip Xvid.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48df9215.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Sunset Blvd. 1950 DVDRip Xvid.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48da921b.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Being John Malkovich 1999 HD x264.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d5920c.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\My Summer Of Love 2004 DVDRip XVID.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '488c9220.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Fast Track-No Limits 2008 DvDrip Xvid-aXXo.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48df9209.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Do the Right Thing 1989 DVDRip XviD AC3 2CH.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '488c9218.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Discovery Channel Really Reckless Drivers Wild Chases PDTV XviD.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48df9212.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\The Pirates Who Dont Do Anything A VeggieTales Movie TS XViD-20th.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d19212.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Harold and Kumar Escape From Guantanamo Bay 2008 TS Xvid.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48de920b.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Resident Evil Apocalypse HDRip x264.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48df920f.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\In Bruges DVDRip XviD-DiAMOND.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '488c9219.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Chicano Blood 2008 DVDRip Xvid.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d59213.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Pi 1998 iNTERNAL DVDRip XviD-LiNE.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '488c9215.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Dollgatory 2007 DVDRip XviD-DOMiNO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d8921b.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Afro Samurai 2007 Directors Cut DVDRip Xvid-aXXo.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48de9213.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\In Good Company 2004 DVDRip Xvid.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '488c921b.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Sex and the City CAM XViD-NYSLVR.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48e49212.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Leatherheads 2008 DVDSCR XviD-BaLD.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48cd9213.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Star Wars Knights of the Old Republic iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48cd9223.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Halo 2 for Windows XP and VISTA.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d89210.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Stalker Shadow of Chernobyl iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '49b25ebc.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Overlord Raising Hell-HATRED iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d19226.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\The Punisher iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d19218.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Diablo II and Lord of Destruction iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48cd921a.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\BlackSite Area 51 Ripped iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48cd921d.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Stronghold Crusader Extreme-RELOADED iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48de9225.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\CSI Dark Motives iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48b59205.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Call Of Duty 4 iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d89213.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Command And Conquer 3 Tiberium Wars Kane Edition iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d99222.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Tom Clancys Rainbow Six Vegas 2-RELOADED iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '49a65ebb.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Day of Defeat 2008-01-18 NON-STEAM iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48e59214.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Matt Hoffmans Pro BMX iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48e09215.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\UEFA Euro 2008 iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48b291f9.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\War Rock iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48de9215.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\World Of Warcraft Wrath of the Lich King iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48de9224.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Grim Fandango iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d59227.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Runaway A Road Adventure iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48da922b.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Kung Fu Panda RiP.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '49a55eb4.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Systweak AntiSpyware 2008 v1.1.776.48.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48df9230.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\mikroElektronika mikroC for PIC v8.2.0.0.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d79220.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Chemcraft 1.5 build 286.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d1921f.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\NCH Axon Virtual PBX Plus 2.0.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48b491fb.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Steady Recorder v2.4.4.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d1922c.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\SUPERAntiSpyware Professional v4.15.1000.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48bc920d.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\ProxyCap Service Edition 3.12.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48db922b.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\SatPC32 v12.8 for European Users.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48e0921b.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\SatPC32 v12.8 for North American Users.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '499f5e84.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\MakBit Virtual CD DVD v1.7.5.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d7921b.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Image Line Deckadance v1.30.9.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48cd9228.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Kaskade v1.0.8.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48df921c.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\EC Software Help And Manual v4.51.1380.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '488c91fe.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Farsight Calculator 1.4.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48de921d.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\E.M. Youtube Video Download Tool 2.45.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48b991ea.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\DbConstructor v2.0.1.253.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48af921f.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Divx Create Bundle v6.8.3.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48e29226.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Cheetah DVD Burner v2.31.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '49ae5ebf.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Antechinus JavaScript Editor v10.0.2.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48e0922c.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\AutoRun Typhoon 4.0.0.zip
  [0] Archive type: ZIP
  --> Setup.exe

mari64 · Answer

[DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48e09233.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\CDRoller v7.60.0.0.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48be9203.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Adion djDecks v0.88.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d59223.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Atomix VirtualDJ Professional v5.1.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48db9233.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Mr Magoriums Wonder Emporium NTSC DVDR-SCREAM.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '488c9232.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Grave of the Fireflies (Hotaru no haka) 1988 DVDRip Xvid.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48cd9232.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\The Spiderwick Chronicles DVDRip XviD-DiAMOND.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d19229.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\88 Minutes 2007 WS DVDRiP XViD-RCDiVX.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '488c91f9.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Breathless 1983 DVDRip Xvid.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d19234.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\The Emerald Forest 1985 DVDRip Xvid.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d1922a.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Jack and Jill vs the World 2008 LIMITED DVDRip XviD-SAPHiRE.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48cf9223.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\9 Songs DVDRip Xvid.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48bf91e3.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Lara Croft Tomb Raider The Cradle of Life 2003 DVDRip Xvid.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '49a15ebd.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Shout 1978 DVDRip RMVB.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '49a45eb4.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Point Of Fear 2006 DVDRip XviD-DOMiNO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d59233.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Justice League - Starcrossed The Movie 2001 DVDRip Xvid.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48df923a.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Fools Gold 2008 DVDRip XviD-DiAMOND.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48db9234.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\The List LIMITED DVDRip XviD-NeDiVx.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d1922e.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Street Kings 2008 R5-BaLD.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48de923a.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\The Golden Compass 2007 DVDRip Xvid.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '49ae5eb7.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Rambo IV DVDRip Xvid.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d99228.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Sound of Music 1965 DVDRip Xvid.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48e19236.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Poseidon 2006 m-HD x264.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48df9237.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\The Juror 1996 DVDRip Xvid.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d19230.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Mr. Magoriums Wonder Emporium NTSC DVDR-SCREAM.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '489a923a.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\You Dont Mess With The Zohan 2008 CAM Xvid.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48e19238.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Vertical Limit 2000 m-HD x264.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48de922e.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Futurama The Beast with a Billion Backs DVDRip Xvid.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48e0923f.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Kung Fu Panda TS XViD-mVs.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48da923f.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Terrorist Takedown 2 US Navy Seals 2008-RELOADED iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48de9230.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Icewind Dale II iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d19220.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Race Driver GRID-RELOADED iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48cf922c.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\The Club Multi 4 RiP.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '49ae5ead.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Robot Arena iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48ce923b.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Medal of Honor Airborne-HATRED iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d09232.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Warcraft III Reign Of Chaos And Frozen Throne.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '49a15eb7.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Fahrenheit Indigo Prophecy iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d4922e.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Mercedes Benz World Racing iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48de9233.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\The Elder Scrolls III Morrowind RiP.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d19236.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\The Elder Scrolls III Morrowind GOTY iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d19237.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\FineRecovery 1.2.19.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48da9239.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\ViEmu for Visual Studio v2.1.25.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48b19239.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\SoundTaxi Pro VideoRip v3.4.4.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48e1923f.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\WebLog Expert v5.5.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48ce9236.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\XStart v2.4.1.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48e09224.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Minos Album 2.5.8.6338.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48da923b.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Sallys Spa v1.0.0.1.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d89233.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\RC-WinTrans v8.6.2.4 Global Developer Edition.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48999216.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Comfort Typing Pro v3.1.2.0.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d99242.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\GoodSync Pro v7.2.4.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48db9242.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Asset Manager 2008 Enterprise Edition v1.0.1038.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48df9247.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Comfort Keys v3.1.2.0.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d99243.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\NativeJ Professional Edition v4.8.5.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48e09236.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Ahead Nero v8.3.2.1b.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d1923d.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\RoomBooking v1.0.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48db9244.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Comfort Clipboard Pro v3.1.2.0.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d99245.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\3rd PlanIt v8.05.005.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d09248.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\AcceliCAD2CAM 2008 v6.4.23.2.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48cf9239.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Frantic 1988 DVDRip Xvid.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48cd9249.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\The Chumscrubber 2005 LiMiTED DVDRip XviD.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d19240.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\310 To Yuma 2007 BRRip XviD AC3-GR57.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '489c9209.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\The Evil Woods 2007 DVDRip Xvid.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '49ae5ed9.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Three kings 1999 DVDRip Xvid.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48de9241.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Kebab Connection 2005 DVDRiP XviD-UNSEEN.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48ce923e.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Any given sunday 1999 DVDRip Xvid.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48e59247.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\The Best Bits of Mr.Bean 1997 DVDRip Xvid.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d19242.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Lust, Caution (Se Jie) DVDRip Xvid.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48df924f.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Wedding Crashers 2005 HQ-DVDrip x264.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d09240.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\The Green Mile 1999 HQDVDrip x264.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d19243.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\The Legend of 1900 DVDRip Xvid.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d19244.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Chronicles of Riddick directors cut x264 DVDRip Xvid.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48de9244.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Crazy S.e.x.y. Cancer 2007 DVDRip Xvid.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48cd924f.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\The Eye 2008 DVDRip Xvid.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d19245.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Conan the Destroyer iNTERNAL DVDRiP XViD AC3-HLS.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48da924c.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Bonnie And Clyde 1967 m-HD x264.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48da924d.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Shutter 2004 Dvdrip Xvid-Promise.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48e19246.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Deuce Bigalow-European Gigolo 2005 DVDRip XviD-ALLiANCE.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48e19244.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\My Moms New Boyfriend DVDRip XviD-BeStDivX.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '488c9258.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\10000 BC 2008 DVDR-Replica.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '489c920f.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Unreal Tournament III RiP.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48de924e.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Gears Of War 2007-Razor1911 iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48cd9245.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\WorldShift RiP.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48de9250.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Freak Out Extreme Freeride iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d19253.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Close Combat Modern Tactics iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48db924e.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Grand Theft Auto Vice CityAlien vs Predator 2 iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48cd9255.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\The Elder Scrolls IV Oblivion The Shivering Isles iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d1924b.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Rayman 2 The great escape iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48e59245.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\F1 2008 iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '49f35e8e.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Turok-ViTALiTY iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48de9259.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\The Witcher iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d1924d.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Tomb Raider Anniversary iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d99254.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Th3 Plan-RELOADED iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '489f924e.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Gun iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48da925b.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Glow Worm.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48db9252.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\The Sims 2 Happy Holiday Stuff-RECHARGED.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d1924f.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\The Sims 2 Kitchen and Bath Interior Design Stuff iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '49ae5ec8.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Call of Duty 4 Modern Warfare iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d89248.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Race Driver GRID Multi-5 RiP.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48cf9249.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Timeshift iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d99252.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\NHL 08 iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48b89231.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Pixarra TwistedBrush Pro Studio v15.42.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48e49253.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\GMX PhotoPainter v1.0.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48c49237.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Whole Tomato VisualAssist 10.4.1640.0.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48db9253.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Registry Booster v2.0.1164.3801.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d39250.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\CrashFinder v2.0.3.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48cd925d.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\ChrisTV PVR Professional 5.20.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48de9254.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\FairStars Recorder v3.11.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d5924e.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\DVDFab Platinum v5.0.2.5.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48b09243.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\DFIncBackup Professional 2.70.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48b59233.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Cheetah DVD Burner 2.31.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d19256.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\AudioAlchemy MP3 Edition v3.0.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d09263.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\BONUSME Archa 8.03.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48ba923e.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\CA Desktop DNA Migrator.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '488c9230.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\CA Personal Firewall 2008.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '488c9231.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\CA Anti-Virus Plus 2008.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '49f35eaa.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\CA Internet Security Suite Plus 2008.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '49f35eab.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\CA Anti-Spyware 2008.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '488c9234.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Aglare Music Converter Platinum v6.0.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d89258.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Aurora Media Workshop v3.46.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48de9267.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Cheech and Chongs Things Are Tough All Over 1982 DVDRip Xvid.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d1925a.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\The Black Stallion 1979 DVDRip Xvid.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '49ae5ec3.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Knockaround Guys 2001 DVDRip x264-CHESHiRE.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48db9261.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\The Local Stigmatic 1990 DVDRip Xvid.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d1925c.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Just Add Water 2007 R5 XViD-RUSTLE.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48df9269.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Much Ado About Nothing 1993 HDRip XviD-TLF.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48cf926a.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Bar Brawls Uncensored 2006 DVDRip XviD.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48de9256.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Indiana Jones and the Kingdom of the Crystal Skull TS XViD-TBS.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d09264.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Cruising 1980 DVDRip Xvid.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48e19268.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Semi Pro 2008 DVDRip Xvid.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d9925b.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\The Dead Zone 1983 HQ x264 DVDRip Xvid.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d1925f.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Comic Book Villains 2002 DVDRip Xvid.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d99266.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Metroland 1997 DVDRip Xvid.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48e0925d.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Balls Of Fury x264 DVDRip Xvid.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d89259.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Im Through With White Girls 2007 DVDSCR Xvid.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '488c9266.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Dane Cook Rough Around The Edges 2007 STV DVDRiP XviD-iNTiMiD.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48da925a.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Jackass 2.5 UNRATED DVDRip x264.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48cf925b.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Whoops Apocalypse 1986 DVDRip Xvid.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48db9262.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Normal 2007 DVDRip XviD-CuCu.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48de9269.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Hitman 2007 DVDRip Xvid.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48e09264.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Jerry Springer Wildest Uncensored Moments DVDRip Xvid.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48de9260.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Muerte de un ciclista 1955 SPANiSH DVDRip XviD AC3-GFs.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d19271.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Death At a Funeral 2007 m-HD x264.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48cd9261.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\IronMan 2008 TS Xvid.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48db926f.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Love Songs 2007 LiMiTED DVDRiP XViD-HLS.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48e2926c.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Hopscotch 1980 DVDRip Xvid.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48dc926c.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Be Kind Rewind DVDR-DREAMLiGHT.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '488c9263.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Smokin Aces 2007 DVDRip x264 AC3-DEViSE.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48db926b.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Fatal Move DVDRip Xvid.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48e09260.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Star Wars - Jedi Knight Jedi Academy iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48cd9273.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Ship Simulator 2008 iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d59268.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Vietcong 2-RELOADED iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d19269.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Battlefield Vietnam iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe

mari64 · Answer

[DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48e09262.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\The Hell In Vietnam iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '49ae5ef2.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Battlestrike Force of Resistance 2007 iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '499f5efb.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Redneck Rampage iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d09267.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Ground Control 2-RAZOR1911 iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48db9274.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\UEFA EURO 2008-ViTALiTY iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48b29247.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Portal iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48de9272.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Juiced RiP.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d59278.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Prince of Persia Warrior Within RiP.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d59276.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Crysis iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48e59276.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Kung Fu Panda-RELOADED iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48da927a.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\ArmA Armed Assault iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d99277.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Assassins Creed iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48df9278.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Terrorist Takedown 2 US Navy Seals iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48de926b.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Espion Pro v6.1.5.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48dc9279.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'
EO iMAGING 1.01.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48bb924c.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\KingConvert for Divx Movie v3.0.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48da9270.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Book Restorer 4.2.1.0.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48db9277.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\RightMark CPU Clock Utility PRO v2.35.0.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d39271.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Virtual Voice v1.5.1.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48de9271.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Sharp World Clock v2.15.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48cd9271.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\WinHex.v15.0.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48da9272.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Sync Now Professional v4.1.2.125.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48da9283.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\MiniCapture.v5.0.0.1001.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48da9273.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\OrgBusiness OrgScheduler LAN v6.0.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d3927c.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Reaper v2.3.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48cd9270.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Magic Camera v3.3.0.0.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d3926c.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Multi Clipboard v9.98.01.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d89281.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Incredimail Version 5.70 build 3613.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48cf927a.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\chm2pdf pilot v2.15.73.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d99275.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Gangs of New York 2002 720p BluRay x264-SiNNERS.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48da926e.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Thru the Moebius Strip DVDRip Xvid.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48de9275.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\All My Friends Are Leaving Brisbane 2007 DVDRip XviD-aAF.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d8927a.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Resident Evil Extinction 2007 x264 DVDRip Xvid.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48df9274.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Un Chien Andalou 1929 DVDRip Divx.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '488c927e.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\A Knights Tale 2001 m-HD x264.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48b79230.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Far Out Man 1990 DVDRip Xvid.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '49a15eea.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Lejdis DVDRip Xvid Polish.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d69276.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Sleuth 2007 LIMITED DVDSCR Xvid-BaLD.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d1927d.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\War Inc. DVDRip Xvid.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '49a15eeb.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Pit and the Pendulum 1961 Vincent Price DVDRip Xvid.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48e0927b.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Forgetting Sarah Marshall 2008 R5 XviD.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48de9281.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Battle For Haditha 2007 SE NO DK PAL DVDR-WPP.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48e09274.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\P.S. I Love You 2007 DVDRip Xvid-aXXo.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48bf9241.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\The Pursuit Of Happyness 2006 DVDRip Xvid-aXXo.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d1927c.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Gabriel 2007 DVDRip Xvid.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48ce9275.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Cloverfield PROPER 720p BluRay x264-SiNNERS.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48db9280.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Indiana Jones And The Kingdom Of The Crystal Skull TS XviD.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d09283.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Fools Gold 720p Bluray x264-Chakra.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48db9284.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\The Strangers 2008 SUBBED CAM XVID-STG.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '49ae5ee6.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Need For Speed ProStreet-RELOADED iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d1927b.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\NFS Most Wanted Black Edition iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48bf925c.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\GTA San Andreas Tokyo Drift 2 iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48ad926b.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Hells Kitchen.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d8927c.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Army Ranger Mogadishu iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d9928a.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Dracula Origin 2008-RELOADED iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48cd928a.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Serious Sam II iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48de927d.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Emergency 4 - Global Fighters for Life iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d19286.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Resident Evil 4 iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48df927e.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Lego Star Wars iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d3927e.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Harry Potter and the Order of the Phoenix iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48de927b.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Iron Man 2008 iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48db928d.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\The Settlers VI Rise Of An Empire-RELOADED iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d19283.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Civilizations IV iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48e29285.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Lord of the Rings Battle for Middle Earth 2 iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48de928b.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Final Fantasy VII Ultima iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48da9286.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\You Dont Know Jack Volume 4 The Ride iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48e1928c.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Cricket 07 IPL Edition iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d5928f.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Grand Theft Auto San Andreas iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48cd9290.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Capoeira Fighter 3 Ultimate World Tournament.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48dc927f.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Frontlines Fuel of War PROPER-ViTALiTY.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48db9291.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Lingobit Localizer Enterprise 5.5.4161.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48da9288.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\HyperSnap-DX 6.31.01.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48dc9298.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Humanoidsounds Scanned Synth VSTi v2.0.2.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d99295.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Music Label 2008 14.0.4.1831.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48df9295.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\IEHistoryX v2.0.1.29.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48b49266.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Your Uninstaller! 2008 v6.1.1250.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48e19290.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Stardock IconPackager v4.0.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48cd9295.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Zeta Debugger v1.4.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48e09287.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Tiger Technology MetaSAN v3.0.0.6759.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d3928c.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\CornerChaos.v1.2.4.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48de9293.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Diamond Cut Live Forensics v7.11.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48cd928d.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\EBgo Sniper v1.7.0.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d39266.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\DaisyWords.v1.2.3.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d59286.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Atrise ToHTML v2.1.0.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48de9299.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Advanced File Lock v6.0.3006.24085.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48e29289.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Music Collector Pro v8.2.2.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48df929b.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Movie Collector Pro v5.5.3.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48e29295.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Backup Synchronize 2008 v8.1.333.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48cf9288.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Street Kings 2008 DvDrip Xvid-FXG.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48de929b.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Jumper DVDRip XviD-NeDiVx.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d9929d.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Dark Prince The True Story of Dracula 2000 DVDRip Xvid.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48de9289.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\The Kite Runner 2007 DVDRip Xvid H.264.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d19290.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\The Savages 2007 LIMITED DVDRip XviD-SAPHiRE.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d19291.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\The Onion Movie 2008 STV Unrated DVDRiP XviD-iNTiM.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '49ae5e0a.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Awake 2007 DVDRip x264.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48cd92a1.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Forgetting Sarah Marshall 2008 R5 DVDRip Xvid.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '495e8552.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Fat Albert 2004 DVDRip Xvid.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48e0928c.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Jackie Chan - Spiritual Kung Fu DVDRip Xvid.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48cf928c.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Open Your Eyes(Abre Los Ojos) 1997 DVDRip Xvid.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d1929c.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Mallrats 1995 DVDRip Xvid.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d8928d.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Jackass Volume 3 DVDRip XviD-MARiNES.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48cf928d.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Witless Protection 2008 DVDRip XviD-DiAMOND.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48e09296.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Bee Movie 2007 m-HD x264.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d19292.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\What Happens In Vegas R5 DVDRip Xvid-iAPULA.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48cd9296.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Big Trouble 2002 DVDRip Xvid.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d39297.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Vantage Point 2008 DVDRip Xvid-NeDiVx.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48da9290.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\The Chronicles Of Narnia Prince Caspian-RELOADED iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d19297.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Call Of Duty 4 - Modern Warfare iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d89291.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Dark Messiah of Might and Magic iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48de9291.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Stronghold Crusader Extreme 2008 iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48de92a4.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Lost Planet Colonies 2008 iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48df92a0.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Madden NFL 2008 iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d09292.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Deus Ex Invisible War iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48e19297.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Colin Mcrae DiRT-RELOADED iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d892a1.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Battlefield 2142 Deluxe iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48e09294.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Bioshock DVD9 iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48db929c.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Mass Effect 2008 iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '495f855e.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Spellforce 2 Shadow Wars iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d192a4.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Tony Hawks American Wasteland RiP.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48da92a4.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Dracula Origin-RELOADED iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48cd92a7.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\OE-Mail Recovery v1.7.19.43.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '4899927a.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Total Recorder Editor v10.9.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48e092a5.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\MDB2SQL Professional v2.2.85.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48ae927a.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\VideoReDo TVSuite v3.1.4.551.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d0929f.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\OneKeySoft FlashMemoryMagic v1.3.15.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d192a5.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\OneKeySoft DHealth Ultimate.v1.6.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '4951856e.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Purple Ghost Software TuneJack v3.3.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48de92ad.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\OrgBusiness OrgPassword v2.7.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d392aa.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Link Auditor 4.12.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48da92a1.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Purple Ghost Software iGadget v4.6.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48de92ae.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Create Ringtone 4.97.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d192ab.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\FTP Password Recovery Master v1.1.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48bc928e.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\PowerDirector Ultra v7.00.1628.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48e392a9.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Handy Backup Server 6.0.10.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48da929c.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\All My Movies v4.9.1255.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d892a7.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\AWicons Pro v10.0.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d59293.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\DiskTrix UltimateDefrag 2008 v2.0.0.51.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48df92a5.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\AD Stream Recorder v2.5.3.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '488c9281.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Elecard Streameye Tools v2.9.2.70710.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d192a9.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\ImageMan.Net Twain v2.54.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48cd92aa.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Confetti 2006 DVDRip Xvid.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48da92ad.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\The Usual Suspects DVDRip Xvid.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d192a6.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Street Kings R5 XviD-BalD RMVB.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48de92b3.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Grace Is Gone 2007 DVDRip Xvid.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48cd92b1.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\The Illusionist 2006 DVDRip Xvid.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d192a8.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Superhero Movie TS XViD-PUKKA.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48dc92b5.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Fast Track No Limits DVDRip Xvid-aXXo.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48df92a1.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Noise 2007 PROPER DVDRip XviD-VoMiT.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d592b0.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\21 2008 DVDRip Xvid.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '488c9272.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Charlie Wilsons War 2007 DVDRip x264.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '494d8563.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\88 Minutes 2007 m-HD x264.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '488c927a.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\The Romantic Fool 2007 DvdRip XVID.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '49518564.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\The Signal LIMITED DVDRip XviD-DMT.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d192ac.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Dancer in the Dark 2000 DVDRip DivX.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48da92a5.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Once 2006 DVDRip Xvid.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48cf92b2.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\The Mangler 1995 WS DVDRip XviD-AXIAL.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d192ad.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Showdown At Area 51 - Alien Vs Alien Xvid.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48db92ad.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Meet The Spartans 2008 DVDRip Xvid.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d192aa.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\In the Shadow of the Moon 2007 DVDRip XviD.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '488c92b4.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Dungeon Siege II Broken World.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48da92bb.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Silverfall iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d892b0.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Soldier of Fortune 3 Payback iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d892b6.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\GTA San Andreas iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48ad929c.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Army Men RTS.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d992ba.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Redlynx Trials 2 Second Edition 2008.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d092ad.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Counter Strike Conditon Zero iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48e192b8.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Bee Movie The Game iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d192ae.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Luxor 2 Multi6-ALiAS.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48e492bf.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\FEAR Perseus Mandate-HATRED iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48ad928f.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Mass Effect iSO.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48df92ac.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Lego Star Wars II The Original Trilogy.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d392b0.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\The Last Castle DVDRip DiVX-DEiTY.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d192b4.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Mrs Doubtfire 1993 DVDRiP XViD-MBC.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48df92be.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Semi-Pro 2008 DVDRip XviD-DiAMOND.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d992b2.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Mrs Ratcliffes Revolution 2007 LiMiTED DVDRip XviD-NODLABS.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48df92bf.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Fast Track No Limits 2008 DVD Rip XviD-aXXo.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48df92ae.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\The Machine Girl aka Kataude mashin garu 2008 DVDRip Xvid.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d192b6.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Walk All Over Me 2007 DVDRip Xvid.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d892af.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Rec READNFO DVDRiP XViD-iKA.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48cf92b4.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Gutterballs 2008 DVDRip Xvid.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48e092c5.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Frontiers 2007 UNRATED LiMiTED DVDRiP XViD-HLS.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48db92c2.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Suspension 2008 DVDRip Xvid-TFE.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48df92c6.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Fantastic Four Rise of The Silver Surfer 2007 DVDRip Xvid.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48da92b2.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Frailty 2001 DVDRip Xvid.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48cd92c3.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Fools Gold DVDRip XviD-DiAMOND.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48db92c1.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Liar Liar 1997 m-HD x264.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48cd92bb.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\The Frisco Kid 1979 DVDRip Xvid.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d192bb.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Almost Famous 2000 Directors Cut DVDRip Xvid.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d992bf.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Stir of Echoes 1999 DVDRip Xvid.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d592c7.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Midnight Run 1988 DVDRip Xvid.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d092bd.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Metallica Some Kind Of Monster 2004 DVDRip XviD.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48e092b9.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\The Rules of Attraction 2002 DVDRip Xvid.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d192bd.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Iron Man PROPER TS XviD-iLG.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48db92c7.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Cool Runnings 1993 DVDRip Xvid.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48db92c4.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Mp3 Audio Editor 6.95.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '489f92c6.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\SQL Auditor 10.37.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48b892a8.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\MessengerLog Pro v6.70.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48df92bd.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Smart Data Recovery 4.1.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48cd92c5.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\PhotoDream v1.39.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '495b850a.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Video Snapshots Genius v2.13.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d092c2.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Code Auditor v12.77.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d092c8.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\URLGather v1.4.0.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48b892ac.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\WinWatermark 2.5.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48da92c3.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\BayGenie eBay Auction Sniper Pro Edition v3.1.6.0.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48e592bc.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Falco Image Studio 1.2.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d892bc.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Dupe Checker PRO v6.3d.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48dc92d1.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Key Metric Software FolderSizes v4.6.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48e592c1.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Adolix eCover Engineer v5.5.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48db92c3.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\BatchRename Pro v3.32.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48e092be.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Easy GIF Animator v4.7.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '495f8577.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\4U WMA MP3 Converter v6.2.6.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '488c92b3.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Effective File Search v5.4.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d292c5.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\DzSoft Quick Web Photo Resizer v2.5.1.2.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48bf92d9.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\PaceStar WizFlow Flowcharter Pro v6.02.2014.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48cf92c0.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Sketsa SVG Graphics Editor v5.1.2.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d192cb.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Teleport Pro v1.55.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d892c5.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Super Finsim v9.3.45.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48dc92d5.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\TheGreenBow VPN Client 4.1.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d192c9.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\VSO ConvertXtoDVD 3 v3.1.0.18.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48bb92b4.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\VideoCharge Full v3.14.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d092cb.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Wise Disk Cleaner Pro 3.21.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48df92cb.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Micro-Sys A1 Website Analyzer v1.3.2 Multilanguage.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48cf92cc.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\PaceStar LanFlow v6.02.2014.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48cf92c4.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Micro-Sys A1 Website Download v1.3.4 Multilanguage.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48cf92cd.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\NITBits WaveMax Sound Editor v3.9.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48c092ad.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\NITBits RecordMax Burning Studio v3.7.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48c092ae.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\PaceStar EDGE Diagrammer v6.02.2014.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48cf92c6.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\CD Menu Studio v2.0.1.28.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '488c92a9.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Micro-Sys A1 Keyword Research v1.1.4.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48cf92cf.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Micro-Sys A1 Sitemap Generator v1.6.9 Multilanguage.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '494f8518.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Arial CD Ripper v1.8.7.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '48d592d9.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Arial Sound Recorder v1.67.zip
  [0] Archive type: ZIP
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dck
      [NOTE]      The file was moved to '49558512.qua'!
C:\_OTMoveIt\MovedFiles\07022008_211054\WINDOWS\Fonts\'\Easy CD-DA Extractor v11.53.1.zip
  [0] Archive type: ZIP
  --> Setup.exe

g!rly · Answer

salut marie64,

c´est cool ;)

peux tu me coller le reste du rapport, ne colle que ce qu´il y a apres les lignes marqué comme suit :

C:\_OTMoveIt\MovedFiles\ect...

@+

mari64 · Answer

il n'y a que C:\QooBox\Quarantine\C\WINDOWS\system32\modtrux18\modtrux182328.exe.vir

C:\System Volume Information\_restore ........
et
C:\_OTMoveIt\MovedFiles\.....
et la fin du rapport est celle la 

End of the scan: jeudi 3 juillet 2008  11:02
Used time:  1:21:31 min

The scan has been done completely.

   5407 Scanning directories
 177557 Files were scanned
   2323 viruses and/or unwanted programs were found
      5 Files were classified as suspicious:
      0 files were deleted
      0 files were repaired
   2328 files were moved to quarantine
      0 files were renamed
      1 Files cannot be scanned
 175234 Files not concerned
   9245 Archives were scanned
      1 Warnings
   2328 Notes

g!rly · Answer

ok marie64,

comme tu as pu le voir, on reviens de loin...

j´aimerais maintenant que tu passe cet antyspyware :

*Spybot:
Téléchargement :
http://www.commentcamarche.net/telecharger/telecharger 122 spybot
voir demo d utilisation (merci Balltrap)
http://perso.orange.fr/rginformatique/section%20virus/demo%20spybot.htm

regarde la demo d´utilisation et lance le, tu me diras a la fin ce qu´il a trouvé, si toute fois il trouve quelque chose...

@+

mari64 · Answer

c'est vrai que l'on revient de loin mais lorsque j'execute spybot mon ordi s'eteint encore. Je vais reessayer quand meme
a+

mari64 · Answer

voila ce qu'il a trouvé

--- Search result list ---
DoubleClick: Cookie traceur (Internet Explorer: Utilisateur) (Cookie, fixed)
  

MediaPlex: Cookie traceur (Internet Explorer: Utilisateur) (Cookie, fixed)
  

MediaPlex: Cookie traceur (Internet Explorer: Utilisateur) (Cookie, fixed)
  

Tradedoubler: Cookie traceur (Internet Explorer: Utilisateur) (Cookie, fixed)
  

BlueStreak: Cookie traceur (Internet Explorer: Utilisateur) (Cookie, fixed)

g!rly · Answer

salut marie64,

et bien c´est cool

post un nouveau rapport hijack this stp

@+

mari64 · Answer

voila g!rly le rapport hijack

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 20:00:48, on 03/07/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0013)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\ATK0100\HControl.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Wireless Console 2\wcourier.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\WinZip\WZQKPICK.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\acs.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\WINDOWS\system32
vsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\ATK0100\ATKOSD.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Utilisateur.TIPIETCHE\Bureau\HiJackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.asus.com/fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://www.asus.com/fr/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O3 - Toolbar: Veoh Browser Plug-in - {D0943516-5076-4020-A3B5-AEFAF26AB263} - C:\Program Files\Veoh Networks\Veoh\Pluginseg\VeohToolbar.dll (file missing)
O4 - HKLM\..\Run: [HControl] C:\WINDOWS\ATK0100\HControl.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [AS00_Gear511] C:\Program Files\NETGEAR\WG511SCU\Utility\Gear511.exe -hide
O4 - HKLM\..\Run: [ACU] "C:\Program Files\OLITEC\ACU.exe" -nogui
O4 - HKLM\..\Run: [Wireless Console 2] C:\Program Files\Wireless Console 2\wcourier.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [NBKeyScan] "C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O14 - IERESET.INF: START_PAGE_URL=https://www.asus.com/fr/
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - https://www.kaspersky.fr/?domain=webscanner.kaspersky.fr
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w2/pr02/resources/MSNPUpld.cab
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cab
O16 - DPF: {CF40ACC5-E1BB-4AFF-AC72-04C2F616BCA7} (get_atlcom Class) - http://www.adobe.com/products/acrobat/nos/gp.cab
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: Service de configuration OLITEC (ACS) - Unknown owner - C:\WINDOWS\system32\acs.exe
O23 - Service: Avira AntiVir Personal – Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal – Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exe

g!rly · Answer

ok marie64,

a l´aide de hijack this coche et fix :

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O3 - Toolbar: Veoh Browser Plug-in - {D0943516-5076-4020-A3B5-AEFAF26AB263} - C:\Program Files\Veoh Networks\Veoh\Plugins\reg\VeohToolbar.dll (file missing)
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime 
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)

comment fixer :

Tutoriel d´utilisation (video) : (Merci a Balltrap34 pour cette réalisation)

-> http://perso.orange.fr/rginformatique/section%20virus/demohijack.htm

regarde ce tutorial pour mettre ta console java a jour :
 
https://www.malekal.com/maintenir-java-adobe-reader-et-le-player-flash-a-jour/

puis

utilise ces deux logiciels :

Ccleaner:

-> Télécharge Ccleaner (n'installe pas la barre d'outil Yahoo):

   http://www.commentcamarche.net/telecharger/telechargement 168 ccleaner

-> L´installer.

-> Une fois installé et lancé :

   Dans la colonne de gauche, click sur :

   ->"registre" :

      Coches toutes les cases sous"l´integrité du registre", puis click en bas sur "chercher des erreurs" une fois terminé, clic sur "reparer les erreurs", tu auras un message pour sauvegarder ta base de registre, tu click "oui" puis tu recommence jusqu'à ce qu'il ne trouve plus rien.
      
      ps : les sauvegardes que tu auras faites, pourront etre supprimées ulterieurement si tout va bien.

   ->"nettoyeur"
   
      quitte ton navigateur avant de le lancer, dans les propriétés du nettoyeur de l´onglet "windows" et "applications"décoche la derniere case (Avancé si elle est cochée) puis click sur "lancer le nettoyage" qunand il aura terminé le scan click en bas a droite sur "lancer le nettoyage" et accepte par oui.

-> Tutoriel en image :

   https://www.vulgarisation-informatique.com/nettoyer-windows-ccleaner.php

-> Pour ceux qui voudraient aller plus loin en compagnie de jesses (fonctions avancés) :

   http://perso.orange.fr/jesses/Docs/Logiciels/CCleaner.htm 

et

telecharge et instal regcleaner:

http://www.01net.com/windows/Utilitaire/nettoyeurs_et_installeurs/fiches/4894.html

tutorial :

https://forums.cnetfrance.fr

http://www.softastuces.com/tuto/maint/regcleaner/

puis

installe un des par feu ci dessous :

Comodo 3 pro :

http://www.commentcamarche.net/telecharger/telecharger 34055041 comodo firewall pro

tuto : https://www.malekal.com/tutorial-comodo-firewall/

Online armor :

http://www.commentcamarche.net/telecharger/telecharger 34055356 online armor personal firewall

tuto : https://www.malekal.com/tutorial-online-armor-free/

ou zone alarm plus facil a configurer mais moins performant

https://www.malekal.com/tutoriel-zonealarm-firewall/

puis cet anti spyware resident :

anti spyware :

spywareblaster :

http://www.brightfort.com/spywareblaster.html

c´est un resident, il suffit de le mettre a jour de temps en temps car la version gratuite ne le fait pas toute seul , une fois installé et mis a jour tu mets toutes les protections sur "enable"

tuto : https://www.malekal.com/tutorial-spywareblaster/

j´ai envie maintenant de te demander comment va ton pc ?

@+

mari64 · Answer

J'ai envie de te dire que mon ordi revit !!!!!! un enorme merciii il y a juste regcleaner qui ne marche pas le programme se coupe.

g!rly · Answer

;-)
essaie celui ci pour nettoyer ton registre : jv 16
https://www.zebulon.fr/telechargements/utilitaires/nettoyeurs/jv16.html
tutoriel
https://www.zebulon.fr/dossiers/windows/57-base-de-registre.html/5
@+

mari64 · Answer

c'est fait!! mon ordi est comme neuf ^^ je te remerci énorrrmément et je pense donc que je peut classer ce probleme comme resolu.

Merci encore 
@+

g!rly · Answer

ok marie64.

pour supprimer les outils utilisés :

Télécharge ToolsCleaner sur ton bureau.
--> http://www.commentcamarche.net/telecharger/telechargement 34055291 toolsclean(...)
# Clique sur Recherche et laisse le scan agir ...
# Clique sur Suppression pour finaliser.
# Tu peux, si tu le souhaites, te servir des Options facultatives.
# Clique sur Quitter pour obtenir le rapport.
# Poste le rapport (TCleaner.txt) qui se trouve à la racine de ton disque dur (C:\). 

fais attention maintenant ;)

mari64 · Answer

-->- Recherche: 
Bonjour g!rly voila le dernier rapport!


C:\Qoobox: trouvé !
C:\_OtMoveIt: trouvé !
C:\Documents and Settings\Utilisateur\Bureau\pb\SdFix.exe: trouvé !
C:\Documents and Settings\Utilisateur\Bureau\pb\ComboFix.exe: trouvé !
C:\Documents and Settings\Utilisateur\Bureau\pb\HijackThis.exe: trouvé !
C:\Documents and Settings\Utilisateur\Bureau\pb\SmitFraudfix: trouvé !
C:\Documents and Settings\Utilisateur.TIPIETCHE\Bureau
ew\prog\HijackThis.exe: trouvé !
C:\Documents and Settings\Utilisateur.TIPIETCHE\Bureau
ew\prog\Clean: trouvé !

---------------------------------
-->- Suppression: 

C:\Documents and Settings\Utilisateur\Bureau\pb\SdFix.exe: supprimé !
C:\Documents and Settings\Utilisateur\Bureau\pb\ComboFix.exe: supprimé !
C:\Documents and Settings\Utilisateur\Bureau\pb\HijackThis.exe: supprimé !
C:\Documents and Settings\Utilisateur.TIPIETCHE\Bureau
ew\prog\HijackThis.exe: supprimé !
C:\Qoobox: supprimé !
C:\_OtMoveIt: supprimé !
C:\Documents and Settings\Utilisateur\Bureau\pb\SmitFraudfix: supprimé !
C:\Documents and Settings\Utilisateur.TIPIETCHE\Bureau
ew\prog\Clean: supprimé !

ne tinquiette pas maintenant je le surveille mon ordi^^ Merci pour tout 
@+

g!rly · Answer

Bon tres bien marie64 ;)
Bonne continuation a toi`
bye`
g!rly`

mari64 · Answer

Merci pour tout g!rly
Bye

g!rly · Answer

;-)

Probleme écran bleu avec message en blanc

52 réponses

Discussions similaires

Newsletters