rapport hijackthis Fermé

Question

Bonjour,

bonjour à tous,

j'ai un probleme; j ai installé antivir et voila qu'il me detecte beaucoup de virus et que bien sur ( sinon sa serait pas interessant bien sur ;-) ) je n'arrive pas à enlever.

Donc voila j'ai un fait un scan avec hijackthis que voici ;

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:08:01, on 02/08/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16674)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\svchost.exe
C:\WINDOWS\system32\slserv.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Documents and Settings\christian\Bureau\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?cc=fr&toHttps=1&redig=55729C844D6A45819CAD368B3E178C9F
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
O4 - HKLM\..\Run: [ASocksrv] SocksA.exe
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - https://www.touslesdrivers.com/index.php?v_page=29
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O23 - Service: Avira AntiVir Personal – Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal – Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: MSCSPTISRV - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\MSCSPTISRV.exe
O23 - Service: PACSPTISVR - Unknown owner - C:\Program Files\Fichiers communs\Sony Shared\AVLib\PACSPTISVR.exe
O23 - Service: SmartLinkService (SLService) - Smart Link - C:\WINDOWS\SYSTEM32\slserv.exe
O23 - Service: SonicStage Back-End Service - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\SsBeSvc.exe
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\SPTISRV.exe
O23 - Service: SonicStage SCSI Service (SSScsiSV) - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\SSScsiSV.exe

Utilisateur anonyme · Answer

Salut ,

&#8594; Imprime ou enregistre ces instructions car il faudra fermer toutes les fenêtres et applications lors de l'installation et de l'analyse.

&#8594; Télécharge Malwarebytes' Anti-Malware (MBAM) et enregistre le sur ton Bureau.

&#8594; A la fin du téléchargement, ferme toutes les fenêtres et programmes, y compris celui-ci.

&#8594; Double-clique sur l'icône Download_mbam-setup.exe sur ton bureau pour démarrer le programme d'installation.

&#8594; Pendant l'installation, suis les indications (en particulier le choix de la langue et l'autorisation d'accession à Internet). N'apporte aucune modification aux réglages par défaut et, en fin d'installation, vérifie que les options Update Malwarebytes' Anti-Malware et Launch Malwarebytes' Anti-Malware sont cochées.

&#8594; MBAM démarrera automatiquement et enverra un message demandant à mettre à jour le programme avant de lancer une analyse. Comme MBAM se met automatiquement à jour en fin d'installation, clique sur OK pour fermer la boîte de dialogue. La fenêtre principale de MBAM s'affiche :

&#8594; Dans l'onglet analyse, vérifie que "Exécuter un examen complet" est coché et clique sur le bouton Rechercher pour démarrer l'analyse.

&#8594; MBAM analyse ton ordinateur. L'analyse peut prendre un certain temps. Il suffit de vérifier de temps en temps son avancement.

&#8594; A la fin de l'analyse, un message s'affiche indiquant la fin de l'analyse. Clique sur OK pour poursuivre.

&#8594; Si des malwares ont été détectés, leur liste s'affiche.
En cliquant sur Suppression (?) , MBAM va détruire les fichiers et clés de registre et en mettre une copie dans la quarantaine. &#9658;&#9658; FAIT LE

&#8594; MBAM va ouvrir le Bloc-notes et y copier le rapport d'analyse. Ferme le Bloc-notes. (Le rapport peut être retrouvé sous l'onglet Rapports/logs)

&#8594; Ferme MBAM en cliquant sur Quitter.

&#8594; Poste le rapport dans ta réponse


Tutorial : https://forum.pcastuces.com/malwarebytes_antimalwares___tutoriel-f31s3.htm



++

cyrillelegrand · Answer

Malwarebytes' Anti-Malware 1.24
Version de la base de données: 1015
Windows 5.1.2600 Service Pack 2

12:26:35 02/08/2008
mbam-log-8-2-2008 (12-26-35).txt

Type de recherche: Examen complet (C:\|D:\|)
Eléments examinés: 64009
Temps écoulé: 58 minute(s), 10 second(s)

Processus mémoire infecté(s): 1
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 1
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 1

Processus mémoire infecté(s):
C:\WINDOWS\svchost.exe (Heuristics.Reserved.Word.Exploit) -> Unloaded process successfully.

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL\CheckedValue (Hijack.System.Hidden) -> Bad: (0) Good: (1) -> Quarantined and deleted successfully.

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
C:\WINDOWS\svchost.exe (Trojan.Agent) -> Delete on reboot.

Utilisateur anonyme · Answer

Re ,

Redémarre ,

&#9679; Vide la quarantaine de Malwarebyte's Anti-Malware: 

_ Clique sur le raccourci de "Malwarebytes' Anti-Malware" , puis sur "Quarantaine" .

 sélectionne les divers éléments en cliquant sur "Tout" puis clique sur "Supprime".

&#9642;&#9642;&#9642;&#9642;&#9642;&#9642;&#9642; &#9642;&#9642;&#9642;&#9642;&#9642;&#9642;&#9642; &#9642;&#9642;&#9642;&#9642;&#9642;&#9642;&#9642; &#9642;&#9642;&#9642;&#9642;&#9642;&#9642;&#9642; &#9642;&#9642;&#9642;&#9642;&#9642;&#9642;&#9642; &#9642;&#9642;&#9642;&#9642;&#9642;&#9642;&#9642; &#9642;&#9642;&#9642;&#9642;&#9642;&#9642;&#9642; &#9642;&#9642;&#9642;&#9642;&#9642;&#9642;&#9642; &#9642;&#9642;&#9642;&#9642;&#9642;&#9642;&#9642; &#9642;&#9642;&#9642;&#9642;&#9642;&#9642;&#9642; &#9642;&#9642;&#9642;&#9642;&#9642;&#9642;&#9642; &#9642;&#9642;&#9642;&#9642;&#9642;&#9642;&#9642; &#9642;&#9642;&#9642;&#9642;&#9642;&#9642;&#9642; &#9642;&#9642;&#9642;&#9642;&#9642;&#9642;&#9642; &#9642;&#9642;&#9642;&#9642;&#9642;&#9642;&#9642; &#9642;&#9642;&#9642;&#9642;&#9642;&#9642;&#9642; &#9642;&#9642;&#9642;&#9642;&#9642;&#9642;&#9642; &#9642;&#9642;&#9642;&#9642;&#9642;&#9642;&#9642; &#9642;&#9642;&#9642;&#9642;&#9642;&#9642;&#9642;  

Scanne avec ton anti-virus Antivir & poste moi le rapport.

Tutorial : https://www.malekal.com/avira-free-security-antivirus-gratuit/#mozTocId480658

+++

cyrillelegrand · Answer

j ai vidé la quarantaine mais je ne ppeux pas scanner avec antivir je viens de le supprimer. Car je ne pouvais plus scanner, il avait des éléments de supprimés. Donc si je scanne avec hijackthis sa te vas ?

Utilisateur anonyme · Answer

Re ,
tu te retrouve sans anti-virus alors ? 

Non Hijackthis ne suffit plus.





&#8594; Télécharge sur ton bureau DSS (ex Comboscan) de Deckard:

(choisis enregistrer, puis Bureau comme emplacement)

Ferme toutes les applications en cours.

&#8594; Double-clic sur DSS.exe pour lancer l'outil.

&#8594; Une fenêtre s'ouvre, invitant à fermer toutes les applications, clique sur OK.

&#8594; A la fin de l'analyse, une fenêtre s'ouvre, clique sur OK.

Le rapport main.txt va s'afficher, copie le dans ta prochaine réponse.
Si un rapport complémentaire a été créé ( extra.txt ), poste le aussi dans ta réponse.

Les rapports sont ici :
(!) C:\Deckard\System Scanner\main.txt
(!) C:\Deckard\System Scanner\extra.txt

(CTRL+A Pour tout selectionner  , CTRL+C pour copier et CTRL+V pour coller )


++

cyrillelegrand · Answer

double post dsl

cyrillelegrand · Answer

premiere rapport 

Deckard's System Scanner v20071014.68
Run by christian on 2008-08-02 14:50:26
Computer is in Normal Mode.
--------------------------------------------------------------------------------

-- System Restore --------------------------------------------------------------

Successfully created a Deckard's System Scanner Restore Point.


-- Last 5 Restore Point(s) --
15: 2008-08-02 12:50:54 UTC - RP333 - Deckard's System Scanner Restore Point
14: 2008-08-02 11:50:14 UTC - RP332 - Supprimé Microsoft Office 2000 Professional
13: 2008-08-02 07:56:47 UTC - RP331 - Avira AntiVir Personal - 02/08/2008 09:56
12: 2008-08-02 07:47:34 UTC - RP330 - Software Distribution Service 3.0
11: 2008-08-01 11:10:38 UTC - RP329 - Point de vérification système


-- First Restore Point -- 
1: 2008-07-20 17:04:43 UTC - RP319 - Point de vérification système


Backed up registry hives.
Performed disk cleanup.

[color=red]Total Physical Memory: 192 MiB (512 MiB recommended)./color


-- HijackThis (run as christian.exe) -------------------------------------------

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 14:51:57, on 02/08/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16674)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\slserv.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\christian\Bureau\dss.exe
C:\DOCUME~1\CHRIST~1\Bureau\christian.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?cc=fr&toHttps=1&redig=55729C844D6A45819CAD368B3E178C9F
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
O4 - HKLM\..\Run: [ASocksrv] SocksA.exe
O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - https://www.touslesdrivers.com/index.php?v_page=29
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O23 - Service: Avira AntiVir Personal – Free Antivirus Scheduler (AntiVirScheduler) - Unknown owner - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe (file missing)
O23 - Service: Avira AntiVir Personal – Free Antivirus Guard (AntiVirService) - Unknown owner - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe (file missing)
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: MSCSPTISRV - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\MSCSPTISRV.exe
O23 - Service: PACSPTISVR - Unknown owner - C:\Program Files\Fichiers communs\Sony Shared\AVLib\PACSPTISVR.exe
O23 - Service: SmartLinkService (SLService) - Smart Link - C:\WINDOWS\SYSTEM32\slserv.exe
O23 - Service: SonicStage Back-End Service - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\SsBeSvc.exe
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\SPTISRV.exe
O23 - Service: SonicStage SCSI Service (SSScsiSV) - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\SSScsiSV.exe

Utilisateur anonyme · Answer

Re ,
Merci bien.

&#9642;&#9642;&#9642;&#9642;&#9642;&#9642;&#9642; &#9642;&#9642;&#9642;&#9642;&#9642;&#9642;&#9642; &#9642;&#9642;&#9642;&#9642;&#9642;&#9642;&#9642; &#9642;&#9642;&#9642;&#9642;&#9642;&#9642;&#9642; &#9642;&#9642;&#9642;&#9642;&#9642;&#9642;&#9642; &#9642;&#9642;&#9642;&#9642;&#9642;&#9642;&#9642; &#9642;&#9642;&#9642;&#9642;&#9642;&#9642;&#9642; &#9642;&#9642;&#9642;&#9642;&#9642;&#9642;&#9642; &#9642;&#9642;&#9642;&#9642;&#9642;&#9642;&#9642; &#9642;&#9642;&#9642;&#9642;&#9642;&#9642;&#9642; &#9642;&#9642;&#9642;&#9642;&#9642;&#9642;&#9642; &#9642;&#9642;&#9642;&#9642;&#9642;&#9642;&#9642; &#9642;&#9642;&#9642;&#9642;&#9642;&#9642;&#9642; &#9642;&#9642;&#9642;&#9642;&#9642;&#9642;&#9642; &#9642;&#9642;&#9642;&#9642;&#9642;&#9642;&#9642; &#9642;&#9642;&#9642;&#9642;&#9642;&#9642;&#9642; &#9642;&#9642;&#9642;&#9642;&#9642;&#9642;&#9642; &#9642;&#9642;&#9642;&#9642;&#9642;&#9642;&#9642; &#9642;&#9642;&#9642;&#9642;&#9642;&#9642;&#9642;  

Branche ton lecteur G:\ .

&#9642;&#9642;&#9642;&#9642;&#9642;&#9642;&#9642; &#9642;&#9642;&#9642;&#9642;&#9642;&#9642;&#9642; &#9642;&#9642;&#9642;&#9642;&#9642;&#9642;&#9642; &#9642;&#9642;&#9642;&#9642;&#9642;&#9642;&#9642; &#9642;&#9642;&#9642;&#9642;&#9642;&#9642;&#9642; &#9642;&#9642;&#9642;&#9642;&#9642;&#9642;&#9642; &#9642;&#9642;&#9642;&#9642;&#9642;&#9642;&#9642; &#9642;&#9642;&#9642;&#9642;&#9642;&#9642;&#9642; &#9642;&#9642;&#9642;&#9642;&#9642;&#9642;&#9642; &#9642;&#9642;&#9642;&#9642;&#9642;&#9642;&#9642; &#9642;&#9642;&#9642;&#9642;&#9642;&#9642;&#9642; &#9642;&#9642;&#9642;&#9642;&#9642;&#9642;&#9642; &#9642;&#9642;&#9642;&#9642;&#9642;&#9642;&#9642; &#9642;&#9642;&#9642;&#9642;&#9642;&#9642;&#9642; &#9642;&#9642;&#9642;&#9642;&#9642;&#9642;&#9642; &#9642;&#9642;&#9642;&#9642;&#9642;&#9642;&#9642; &#9642;&#9642;&#9642;&#9642;&#9642;&#9642;&#9642; &#9642;&#9642;&#9642;&#9642;&#9642;&#9642;&#9642; &#9642;&#9642;&#9642;&#9642;&#9642;&#9642;&#9642; 

Va dans le panneau de configuration, Options régionales et linguistiques, onglet "Langues", bouton "Détails", l'onglet "Avancé", cocher la case "Arrêter les services de texte avancés". 

&#9642;&#9642;&#9642;&#9642;&#9642;&#9642;&#9642; &#9642;&#9642;&#9642;&#9642;&#9642;&#9642;&#9642; &#9642;&#9642;&#9642;&#9642;&#9642;&#9642;&#9642; &#9642;&#9642;&#9642;&#9642;&#9642;&#9642;&#9642; &#9642;&#9642;&#9642;&#9642;&#9642;&#9642;&#9642; &#9642;&#9642;&#9642;&#9642;&#9642;&#9642;&#9642; &#9642;&#9642;&#9642;&#9642;&#9642;&#9642;&#9642; &#9642;&#9642;&#9642;&#9642;&#9642;&#9642;&#9642; &#9642;&#9642;&#9642;&#9642;&#9642;&#9642;&#9642; &#9642;&#9642;&#9642;&#9642;&#9642;&#9642;&#9642; &#9642;&#9642;&#9642;&#9642;&#9642;&#9642;&#9642; &#9642;&#9642;&#9642;&#9642;&#9642;&#9642;&#9642; &#9642;&#9642;&#9642;&#9642;&#9642;&#9642;&#9642; &#9642;&#9642;&#9642;&#9642;&#9642;&#9642;&#9642; &#9642;&#9642;&#9642;&#9642;&#9642;&#9642;&#9642; &#9642;&#9642;&#9642;&#9642;&#9642;&#9642;&#9642; &#9642;&#9642;&#9642;&#9642;&#9642;&#9642;&#9642; &#9642;&#9642;&#9642;&#9642;&#9642;&#9642;&#9642; &#9642;&#9642;&#9642;&#9642;&#9642;&#9642;&#9642;

/!\ Manip crée spécialement pour cet utilisateur , ne pas reproduire chez soi ... /!\


1)Télécharge  OTMoveIt2 ( de Old Timer ) 

2)Une fois téléchargé  double-clique sur OTMoveIt2.exe pour le lancer.

Assure toi que la case Unregister Dll's and Ocx's soit bien cochée

3)puis copie les lignes en gras qui se trouvent en dessous :



[kill explorer]
C:\WINDOWS\system32\olemdb32.dll 
C:\WINDOWS\system32\olemdb32.VIR 
C:\WINDOWS\system32\SocksA.exe
C:\WINDOWS\system32\FileKan.exe
C:\WINDOWS\Session.VIR
C:\WINDOWS\Session.exe
G:	el.xls.exe 
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Adobe Reader Speed Launcher
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ASocksrv
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\CTFMON.EXE
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\MsnMsgr
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{0473f950-2833-11dd-8ba0-00105aaeaa05}
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{97e75fa0-5fbd-11dc-9be6-00105aaeaa05}
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{c194616f-611e-11dc-9be9-00105aaeaa05}
HKEY_USERS\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\CTFMON.EXE
HKEY_USERS\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\CTFMON.EXE
HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\CTFMON.EXE
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\CTFMON.EXE
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7E853D72-626A-48EC-A868-BA8D5E23E045}
Emptytemp
[start explorer]



et colle-les dans le cadre de gauche de OTMoveIt :   "Paste List Of Files/Folders to Move."
clique sur MoveIt! pour lancer la suppression.
le résultat apparaitra dans le cadre Results.
clique sur Exit pour fermer.
4) Poste le rapport situé dans C:\_OTMoveIt\MovedFiles.


(CTRL+A Pour tout selectionner  , CTRL+C pour copier et CTRL+V pour coller )

5) Il te sera peut-être demander de redémarrer le pc pour achever la suppression -> Accepte ( si il ne fait pas automatiquement , fait-le toi même )

/!\ Note : Au démarrage ton bureau RISQUE de ne plus apparaître , dans ce cas fait --> CTRL+ALT+SUPP pour ouvrir le Gestionnaire des tâches.
Puis rends toi à l'onglet "Processus". Clique en haut à gauche sur Fichiers et choisis "Exécuter"

Tape explorer.exe et valide. Cela fera re-apparaître le Bureau.

Tutorial : 
https://forum.malekal.com/viewtopic.php?f=36&t=3043
http://sasi.xooit.fr/t41-Utilisation-de-OtMoveIt-d-Old-Timer.htm

&#9642;&#9642;&#9642;&#9642;&#9642;&#9642;&#9642; &#9642;&#9642;&#9642;&#9642;&#9642;&#9642;&#9642; &#9642;&#9642;&#9642;&#9642;&#9642;&#9642;&#9642; &#9642;&#9642;&#9642;&#9642;&#9642;&#9642;&#9642; &#9642;&#9642;&#9642;&#9642;&#9642;&#9642;&#9642; &#9642;&#9642;&#9642;&#9642;&#9642;&#9642;&#9642; &#9642;&#9642;&#9642;&#9642;&#9642;&#9642;&#9642; &#9642;&#9642;&#9642;&#9642;&#9642;&#9642;&#9642; &#9642;&#9642;&#9642;&#9642;&#9642;&#9642;&#9642; &#9642;&#9642;&#9642;&#9642;&#9642;&#9642;&#9642; &#9642;&#9642;&#9642;&#9642;&#9642;&#9642;&#9642; &#9642;&#9642;&#9642;&#9642;&#9642;&#9642;&#9642; &#9642;&#9642;&#9642;&#9642;&#9642;&#9642;&#9642; &#9642;&#9642;&#9642;&#9642;&#9642;&#9642;&#9642; &#9642;&#9642;&#9642;&#9642;&#9642;&#9642;&#9642; &#9642;&#9642;&#9642;&#9642;&#9642;&#9642;&#9642; &#9642;&#9642;&#9642;&#9642;&#9642;&#9642;&#9642; &#9642;&#9642;&#9642;&#9642;&#9642;&#9642;&#9642; &#9642;&#9642;&#9642;&#9642;&#9642;&#9642;&#9642;

Va sur ce site -->  https://www.virustotal.com/gui/

Copie/colle cette ligne en gras dans le champs de saisie :


C:\Program Files\SopCast\adv\SopAdver.exe



Clique sur ' Envoyer le fichier ' 

Un rapport va s'élaborer ligne à ligne.

Attends la fin. Il doit comprendre la taille du fichier envoyé.

Sauvegarde le rapport avec le bloc-note.

-> Poste le moi stp.

(CTRL+A Pour tout selectionner  , CTRL+C pour copier et CTRL+V pour coller )

&#9642;&#9642;&#9642;&#9642;&#9642;&#9642;&#9642; &#9642;&#9642;&#9642;&#9642;&#9642;&#9642;&#9642; &#9642;&#9642;&#9642;&#9642;&#9642;&#9642;&#9642; &#9642;&#9642;&#9642;&#9642;&#9642;&#9642;&#9642; &#9642;&#9642;&#9642;&#9642;&#9642;&#9642;&#9642; &#9642;&#9642;&#9642;&#9642;&#9642;&#9642;&#9642; &#9642;&#9642;&#9642;&#9642;&#9642;&#9642;&#9642; &#9642;&#9642;&#9642;&#9642;&#9642;&#9642;&#9642; &#9642;&#9642;&#9642;&#9642;&#9642;&#9642;&#9642; &#9642;&#9642;&#9642;&#9642;&#9642;&#9642;&#9642; &#9642;&#9642;&#9642;&#9642;&#9642;&#9642;&#9642; &#9642;&#9642;&#9642;&#9642;&#9642;&#9642;&#9642; &#9642;&#9642;&#9642;&#9642;&#9642;&#9642;&#9642; &#9642;&#9642;&#9642;&#9642;&#9642;&#9642;&#9642; &#9642;&#9642;&#9642;&#9642;&#9642;&#9642;&#9642; &#9642;&#9642;&#9642;&#9642;&#9642;&#9642;&#9642; &#9642;&#9642;&#9642;&#9642;&#9642;&#9642;&#9642; &#9642;&#9642;&#9642;&#9642;&#9642;&#9642;&#9642; &#9642;&#9642;&#9642;&#9642;&#9642;&#9642;&#9642;

Concernant ton anti-virus ,,  je te conseillerais de remettre Antivir , ne serait-ce pour que je vois qu'il ne trouve plus rien.

Qu'en penses-tu ? 

De plus c'est urgent d'installer un anti-virus , décide-toi vite.

Si tu ne veux pas Antivir , prend AVG8. 
https://www.avg.com/fr-fr/free-antivirus-download?prd=afe


+++

cyrillelegrand · Answer

pour la premiere manip sa ete.
 Pour la deuxieme avec OTMoveIt2 je n'ai pas pu copier le rapport, il s"est bloqué, mon curseur devient un sablier. Mais on dirait que la manip a marché car le rapport s est affiché.

Pour la derniere manip sur https://www.virustotal.com/gui/  je ne peux pas coller ,avec le raccourci non plus .

J'attends tes instructions.

merci encore

Utilisateur anonyme · Answer

Re ,

Mais on dirait que la manip a marché car le rapport s est affiché.
Poste le alors.


je ne peux pas coller
Tu n'as plus accès au copie/coller ? 

Recopie manuellement.
++

cyrillelegrand · Answer

voila ce que j'ai pu copier manuellement je n'ai qu une partie du rapport desolé: < HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\window.. je ne vois plus Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Micro.. je ne vois plus < HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\window.. je ne vois plus Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Micro... je ne vois plus < HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\window.. je ne vois plus Registry value HKEY_CURRENT_USER\SOFTWARE\Micro... je ne vois plus < HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\window.. je ne vois plus Registry value HKEY_CURRENT_USER\SOFTWARE\Micro... je ne vois plus < HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\window.. je ne vois plus Registry value HKEY_CURRENT_USER\software\Micro... je ne vois plus < HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\window.. je ne vois plus Registry value HKEY_CURRENT_USER\software\Micro... je ne vois plus < HKEY_CURRENT_USER\software\microsoft\windows...je ne vois plus Registry keys HKEYS_CURRENT_USER\software\Micro...je ne vois plus < HKEY_CURRENT_USER\software\microsoft\windows...je ne vois plus Registry keys HKEYS_CURRENT_USER\software\Micro...je ne vois plus < HKEY_USER\S-1-5-19\SOFTWARE\microsoft\windows...je ne vois plus Registry value HKEY_USERS\S-1-5-19\SOFTWARE\micr...je ne vois plus < HKEY_USER\S-1-5-20\SOFTWARE\microsoft\windows...je ne vois plus Registry value HKEY_USERS\S-1-5-20\SOFTWARE\micr...je ne vois plus < HKEY_USER\S-1-5-18\SOFTWARE\microsoft\windows...je ne vois plus Registry value HKEY_USERS\S-1-5-18\SOFTWARE\micr...je ne vois plus < HKEY_USER\DEFAULT\SOFTWARE\microsoft\windows...je ne vois plus Registry value HKEY_USERS\DEFAULT\SOFTWARE\micr...je ne vois plus < HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\window.. je ne vois plus Registry KEY HKEY_LOCAL_MACHINE\software\Micro... je ne vois plus < Emptytemp > File delete failed. C:\DOCUME~1\CHRIST~1\LOCALS~1\Tem...je ne vois plus Temp folders emptied. < [start explorer] >

Utilisateur anonyme · Answer

Re ,
Okay pour ceci , on y reviendra plus tard.

Concernant ,virustotal ...  ? 

tu y arrives  ?


++

cyrillelegrand · Answer

non je n'arrive pas. Impossible de copier coller dans le champs. Il m'amene directement dans le repertoire des fichiers. Donc j'ai cherché C:\Program Files\SopCast\adv\SopAdver.exe mais il n'existe pas.

voila donc qu est que je dois faire ?

Utilisateur anonyme · Answer

Re ,
Si tu ne le trouves pas , c'est tant mieux.


Clique sur démarrer &#9658; exécuter &#9658; copie/colle ceci  & valide :


    "%userprofile%\bureau\dss.exe" /config       


&#9658; Valide. et clique sur Scan.
&#9658; Cela va ouvrir le panneau de configuration de DSS
&#9658; Clique sur Check All puis Scan



++

cyrillelegrand · Answer

le premier le "main"

Deckard's System Scanner v20071014.68
Run by christian on 2008-08-02 16:36:53
Computer is in Normal Mode.
--------------------------------------------------------------------------------

-- System Restore --------------------------------------------------------------



-- Last 5 Restore Point(s) --
15: 2008-08-02 12:50:54 UTC - RP333 - Deckard's System Scanner Restore Point
14: 2008-08-02 11:50:14 UTC - RP332 - Supprimé Microsoft Office 2000 Professional
13: 2008-08-02 07:56:47 UTC - RP331 - Avira AntiVir Personal - 02/08/2008 09:56
12: 2008-08-02 07:47:34 UTC - RP330 - Software Distribution Service 3.0
11: 2008-08-01 11:10:38 UTC - RP329 - Point de vérification système


-- First Restore Point -- 
1: 2008-07-20 17:04:43 UTC - RP319 - Point de vérification système


Performed disk cleanup.

[color=red]Percentage of Memory in Use: 88% (more than 75%).[/color]
[color=red]Total Physical Memory: 192 MiB (512 MiB recommended).[/color]


-- HijackThis (run as christian.exe) -------------------------------------------

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 16:37:35, on 02/08/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16674)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\explorer.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Documents and Settings\christian\bureau\dss.exe
C:\DOCUME~1\CHRIST~1\Bureau\christian.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?cc=fr&toHttps=1&redig=55729C844D6A45819CAD368B3E178C9F
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto
O4 - HKLM\..\RunOnce: [OTScanIt] C:\Documents and Settings\christian\Bureau\OTMoveIt2.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - https://www.touslesdrivers.com/index.php?v_page=29
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O23 - Service: Avira AntiVir Personal – Free Antivirus Scheduler (AntiVirScheduler) - Unknown owner - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe (file missing)
O23 - Service: Avira AntiVir Personal – Free Antivirus Guard (AntiVirService) - Unknown owner - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe (file missing)
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: MSCSPTISRV - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\MSCSPTISRV.exe
O23 - Service: PACSPTISVR - Unknown owner - C:\Program Files\Fichiers communs\Sony Shared\AVLib\PACSPTISVR.exe
O23 - Service: SmartLinkService (SLService) - Smart Link - C:\WINDOWS\SYSTEM32\slserv.exe
O23 - Service: SonicStage Back-End Service - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\SsBeSvc.exe
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\SPTISRV.exe
O23 - Service: SonicStage SCSI Service (SSScsiSV) - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\SSScsiSV.exe

Utilisateur anonyme · Answer

Re ,
Parfait.

Clique sur démarrer &#9658; exécuter &#9658; copie/colle ceci ( DAFT ) & valide :


    "%Userprofile%\bureau\dss.exe" /daft          


&#9658; Accepte, et clique sur Scan.
&#9658; Coche tout ce qui apparait puis clique sur Fix. Ensuite, ferme la fenêtre.
&#9658; Rescanne avec DAFT, il devrait te dire All associations OK

++

cyrillelegrand · Answer

j arrive à coller "%Userprofile%\bureau\dss.exe" /daft  mais quand je clique Ok mais il me dise "windows ne trouve pas etc... "

il me dise en gros qu'il n existe pas.

Que dois je faire ?

Utilisateur anonyme · Answer

Re ,
Essaye avec :

"%Userprofile%\desktop\dss.exe" /daft 


++

cyrillelegrand · Answer

meme chose 
bizarre, bizarre

Utilisateur anonyme · Answer

Re ,
Rassure moi , tu n'as pas déplacé DSS de ton bureau ... ?

cyrillelegrand · Answer

Ok je m escuse j avais ce programme dans le bureau mais dans un dossier car comme c est un ordi familial...

Donc j ai fais la manip il me dise "All associations Okey"

J atends tes autres manip à faire?

Utilisateur anonyme · Answer

Re ,
Ok.

Télécharge un anti-virus s'il te plait ( Antivir  / AVG8 de préférence )

+ un pare-feu :

Kerio / ZoneAlarm



Une fois cela fait , scanne avec -> poste le rapport + un dernier DSS ( histoire de voir que ça a été installé )


et puis on finira.

++

cyrillelegrand · Answer

j'ai tout installé antivir + zone alarm
mais zone alarme me bloque tout donc pour l instant je vais le desactiver et faire le scan avec antivir.

Utilisateur anonyme · Answer

Re ,

Si tu as des problèmes avec ZA , li ceci : http://forum.telecharger.01net.com/forum/high-tech/PRODUITS/Questions-techniques/zonealarm-tutorial-sujet_169658_1.htm

J'attends le rapport.

++

cyrillelegrand · Answer

voila le rapport d'antivir... pas tres glorieux




Avira AntiVir Personal
Report file date: dimanche 3 août 2008  12:27

Scanning for 1528705 virus strains and unwanted programs.

Licensed to:      Avira AntiVir PersonalEdition Classic
Serial number:    ****
Platform:         Windows XP
Windows version:  (Service Pack 2)  [5.1.2600]
Boot mode:        Normally booted
Username:         SYSTEM
Computer name:    *****

Version information:
BUILD.DAT     : 8.1.00.295      16479 Bytes  09/04/2008 16:24:00
AVSCAN.EXE    : 8.1.2.12       311553 Bytes  18/03/2008 09:02:56
AVSCAN.DLL    : 8.1.1.0         53505 Bytes  07/02/2008 08:43:37
LUKE.DLL      : 8.1.2.9        151809 Bytes  28/02/2008 08:41:23
LUKERES.DLL   : 8.1.2.1         12033 Bytes  21/02/2008 08:28:40
ANTIVIR0.VDF  : 6.40.0.0     11030528 Bytes  18/07/2007 10:33:34
ANTIVIR1.VDF  : 7.0.5.1       8182784 Bytes  24/06/2008 09:28:05
ANTIVIR2.VDF  : 7.0.5.174     2027008 Bytes  25/07/2008 09:28:51
ANTIVIR3.VDF  : 7.0.5.205      285696 Bytes  01/08/2008 09:28:57
Engineversion : 8.1.1.15  
AEVDF.DLL     : 8.1.0.5        102772 Bytes  25/02/2008 09:58:21
AESCRIPT.DLL  : 8.1.0.61       311675 Bytes  03/08/2008 09:29:30
AESCN.DLL     : 8.1.0.23       119156 Bytes  03/08/2008 09:29:29
AERDL.DLL     : 8.1.0.20       418165 Bytes  03/08/2008 09:29:28
AEPACK.DLL    : 8.1.2.1        364917 Bytes  03/08/2008 09:29:26
AEOFFICE.DLL  : 8.1.0.21       192891 Bytes  03/08/2008 09:29:23
AEHEUR.DLL    : 8.1.0.44      1343863 Bytes  03/08/2008 09:29:21
AEHELP.DLL    : 8.1.0.15       115063 Bytes  03/08/2008 09:29:05
AEGEN.DLL     : 8.1.0.32       315765 Bytes  03/08/2008 09:29:04
AEEMU.DLL     : 8.1.0.7        430452 Bytes  03/08/2008 09:29:01
AECORE.DLL    : 8.1.1.8        172406 Bytes  03/08/2008 09:29:00
AEBB.DLL      : 8.1.0.1         53617 Bytes  03/08/2008 09:28:59
AVWINLL.DLL   : 1.0.0.7         14593 Bytes  23/01/2008 17:07:53
AVPREF.DLL    : 8.0.0.1         25857 Bytes  18/02/2008 10:37:50
AVREP.DLL     : 8.0.0.2         98344 Bytes  03/08/2008 09:28:58
AVREG.DLL     : 8.0.0.0         30977 Bytes  23/01/2008 17:07:49
AVARKT.DLL    : 1.0.0.23       307457 Bytes  12/02/2008 08:29:23
AVEVTLOG.DLL  : 8.0.0.11       114945 Bytes  28/02/2008 08:31:31
SQLITE3.DLL   : 3.3.17.1       339968 Bytes  22/01/2008 17:28:02
SMTPLIB.DLL   : 1.2.0.19        28929 Bytes  23/01/2008 17:08:39
NETNT.DLL     : 8.0.0.1          7937 Bytes  25/01/2008 12:05:10
RCIMAGE.DLL   : 8.0.0.35      2371841 Bytes  10/03/2008 14:37:25
RCTEXT.DLL    : 8.0.32.0        86273 Bytes  06/03/2008 12:02:11

Configuration settings for the scan:
Jobname..........................: Complete system scan
Configuration file...............: c:\program files\avira\antivir personaledition classic\sysscan.avp
Logging..........................: low
Primary action...................: interactive
Secondary action.................: ignore
Scan master boot sector..........: on
Scan boot sector.................: on
Boot sectors.....................: C:, D:, 
Scan memory......................: on
Process scan.....................: on
Scan registry....................: on
Search for rootkits..............: off
Scan all files...................: Intelligent file selection
Scan archives....................: on
Recursion depth..................: 20
Smart extensions.................: on
Macro heuristic..................: on
File heuristic...................: medium

Start of the scan: dimanche 3 août 2008  12:27

The scan of running processes will be started
Scan process 'avscan.exe' - '1' Module(s) have been scanned
Scan process 'avcenter.exe' - '1' Module(s) have been scanned
Scan process 'avgnt.exe' - '1' Module(s) have been scanned
Scan process 'jusched.exe' - '1' Module(s) have been scanned
Scan process 'alg.exe' - '1' Module(s) have been scanned
Scan process 'wdfmgr.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'slserv.exe' - '1' Module(s) have been scanned
Scan process 'mDNSResponder.exe' - '1' Module(s) have been scanned
Scan process 'avguard.exe' - '1' Module(s) have been scanned
Scan process 'sched.exe' - '1' Module(s) have been scanned
Scan process 'spoolsv.exe' - '1' Module(s) have been scanned
Scan process 'explorer.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'lsass.exe' - '1' Module(s) have been scanned
Scan process 'services.exe' - '1' Module(s) have been scanned
Scan process 'winlogon.exe' - '1' Module(s) have been scanned
Scan process 'csrss.exe' - '1' Module(s) have been scanned
Scan process 'smss.exe' - '1' Module(s) have been scanned
23 processes with 23 modules were scanned

Starting master boot sector scan:
Master boot sector HD0
      [INFO]      No virus was found!
Master boot sector HD1
      [INFO]      No virus was found!

Start scanning boot sectors:
Boot sector 'C:\'
      [INFO]      No virus was found!
Boot sector 'D:\'
      [INFO]      No virus was found!

Starting to scan the registry.
The registry was scanned ( '14' files ).


Starting the file scan:

Begin scan in 'C:\'
C:\AUTORUN.INF
      [DETECTION] Contains detection pattern of the worm WORM/VB.QN.2
      [NOTE]      The file was moved to '48e98883.qua'!
C:\hiberfil.sys
      [WARNING]   The file could not be opened!
C:\pagefile.sys
      [WARNING]   The file could not be opened!
C:	el.xls.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '49018894.qua'!
C:\Deckard\System Scanner\20080802163635\backup\DOCUME~1\CHRIST~1\LOCALS~1\Temp
ircmd.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '4907889a.qua'!
C:\Documents and Settings\christian\Application Data\Desktopicon\eBayShortcuts.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48f6888e.qua'!
C:\Documents and Settings\christian\Bureau\iexplore.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '490d88ce.qua'!
C:\Documents and Settings\christian\Bureau\OTMoveIt2.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48e288be.qua'!
C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriver.VIR
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '49078ba8.qua'!
C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriver2.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '49078ba9.qua'!
C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '49078bab.qua'!
C:\Program Files\Fichiers communs\InstallShield\Driver\9\Intel 32\IDriver2.VIR
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '49078bb0.qua'!
C:\Program Files\Fichiers communs\Sony Shared\AVLib\MSCSPTISRV.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48d88bde.qua'!
C:\Program Files\Fichiers communs\Sony Shared\AVLib\PACSPTISVR.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48d88bd2.qua'!
C:\Program Files\Fichiers communs\Sony Shared\AVLib\SPTISRV.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48e98be2.qua'!
C:\Program Files\Fichiers communs\Sony Shared\AVLib\SsDbConnection.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48d98c08.qua'!
C:\Program Files\Fichiers communs\Sony Shared\OpenMG\omginit.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48fc8c0f.qua'!
C:\Program Files\Fichiers communs\Sony Shared\OpenMG\OmgStartup.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48fc8c12.qua'!
C:\Program Files\Fichiers communs\Sony Shared\OpenMGegsvr32.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '497a6478.qua'!
C:\Program Files\Fichiers communs\Sony Shared\OpenMG\HotFixes\HotFix4.7-07-14-05-01\HotFixSetup\setup.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '49098c18.qua'!
C:\Program Files\Fichiers communs\Sony Shared\OpenMG\HotFixes\HotFix4.7-07-14-05-01\HotFixSetup\OpenMG\InstallChecker\CheckComponentRegister.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48fa8c21.qua'!
C:\Program Files\Fichiers communs\Sony Shared\OpenMG\HotFixes\HotFix4.7-07-14-05-01\HotFixSetup\OpenMG\InstallChecker\GetOmgInfoForCS.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '49098c1f.qua'!
C:\Program Files\Fichiers communs\Sony Shared\OpenMG\HotFixes\HotFix4.7-07-14-05-01\HotFixSetup\OpenMG\InstallChecker\InstallCheckTool.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '49088c29.qua'!
C:\Program Files\Fichiers communs\Sony Shared\OpenMG\HotFixes\HotFix4.7-07-14-05-01\OpenMG\InstallChecker\CheckComponentRegister.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48fa8c26.qua'!
C:\Program Files\Fichiers communs\Sony Shared\OpenMG\HotFixes\HotFix4.7-07-14-05-01\OpenMG\InstallChecker\GetOmgInfoForCS.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '49098c24.qua'!
C:\Program Files\Fichiers communs\Sony Shared\OpenMG\HotFixes\HotFix4.7-07-14-05-01\OpenMG\InstallChecker\InstallCheckTool.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '49088c2d.qua'!
C:\Program Files\Fichiers communs\Sony Shared\OpenMG\HotFixes\OmgCore4.7.00.12140\4.7-07-13-22-01\OpenMG\InstallChecker\CheckComponentRegister.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48fa8c2e.qua'!
C:\Program Files\Fichiers communs\Sony Shared\OpenMG\HotFixes\OmgCore4.7.00.12140\4.7-07-13-22-01\OpenMG\InstallChecker\GetOmgInfoForCS.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '49098c2c.qua'!
C:\Program Files\Fichiers communs\Sony Shared\OpenMG\HotFixes\OmgCore4.7.00.12140\4.7-07-13-22-01\OpenMG\InstallChecker\InstallCheckTool.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '49088c36.qua'!
C:\Program Files\Fichiers communs\Sony Shared\OpenMG\InstallChecker\CheckComponentRegister.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48fa8c31.qua'!
C:\Program Files\Fichiers communs\Sony Shared\OpenMG\InstallChecker\GetOmgInfoForCS.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '49098c2f.qua'!
C:\Program Files\Fichiers communs\Sony Shared\OpenMG\InstallChecker\InstallCheckTool.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '49088c39.qua'!
C:\Program Files\Fichiers communs\Sony Shared\OpenMG\LPTemp\OMGLP-07-14-05-01\setup.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '49098c32.qua'!
C:\Program Files\Fichiers communs\Sony Shared\OpenMG\LPTemp\OMGLP-07-14-05-01\OpenMG\InstallChecker\CheckComponentRegister.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48fa8c3b.qua'!
C:\Program Files\Fichiers communs\Sony Shared\OpenMG\LPTemp\OMGLP-07-14-05-01\OpenMG\InstallChecker\GetOmgInfoForCS.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '49098c39.qua'!
C:\Program Files\Fichiers communs\Sony Shared\OpenMG\LPTemp\OMGLP-07-14-05-01\OpenMG\InstallChecker\InstallCheckTool.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '49088c43.qua'!
C:\Program Files\Fichiers communs\Sony Shared\OpenMG\updater\udapp.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48f68c45.qua'!
C:\Program Files\Fichiers communs\Sony Shared\OpenMG\updater\udconf.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48f88c4e.qua'!
C:\Program Files\Fichiers communs\Sony Shared\OpenMG\updater\udlaunch.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '49018c54.qua'!
C:\Program Files\InstallShield Installation Information\{CC93D1AA-B881-489A-8D7E-C2DBC1E6F350}\Setup.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '49098cc7.qua'!
C:\Program Files\InstallShield Installation Information\{CCD663AE-610D-4BDF-AAB0-E914B044527D}\shutdown.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '490a8cce.qua'!
C:\Program Files\QuickTime\PictureViewer.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48f89276.qua'!
C:\Program Files\QuickTime\QTInfo.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48de9263.qua'!
C:\Program Files\Sony\Personal Audio Driver\CopyInf.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '490592bc.qua'!
C:\Program Files\Sony\Personal Audio Driver\UnUsb.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48ea92bd.qua'!
C:\Program Files\Sony\SonicStage\SSAAD.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48d692a3.qua'!
C:\Program Files\VideoLAN\VLC\vlc.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48f892c1.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP322\A0139471.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c692f5.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP322\A0139472.INF
      [DETECTION] Contains detection pattern of the worm WORM/VB.QN.2
      [NOTE]      The file was moved to '494a54d6.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP322\A0139479.dll
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c692f6.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP322\A0139480.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494a54d7.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP322\A0139481.INF
      [DETECTION] Contains detection pattern of the worm WORM/VB.QN.2
      [NOTE]      The file was moved to '48c692f8.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP322\A0139485.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c692f7.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP322\A0139495.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c692fb.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP322\A0139496.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c692fd.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP322\A0139497.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c692fe.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP322\A0139498.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c692ff.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP322\A0139499.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69301.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP322\A0139508.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69308.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP322\A0139509.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494ead59.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP322\A0139510.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69309.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP322\A0139512.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c6930a.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP322\A0139514.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c6930b.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP322\A0139515.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c6930c.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP322\A0139516.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494a552d.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP322\A0139518.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c6930e.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP322\A0139519.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494a552f.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP322\A0139520.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c6930f.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP322\A0139521.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494a5530.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP322\A0139523.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69311.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP322\A0139524.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69312.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP322\A0139525.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69313.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP322\A0139527.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494a5534.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP322\A0139528.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69314.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP322\A0139529.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494a5535.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP322\A0139531.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69316.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP322\A0139532.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69317.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP322\A0139533.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494a5538.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP322\A0139535.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69318.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP322\A0139536.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69319.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP322\A0139537.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494a553a.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP322\A0139538.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c6931a.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP322\A0139539.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c6931b.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP322\A0139540.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494ead4c.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP322\A0139541.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c6931c.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP322\A0139545.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c6931f.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP322\A0139546.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69320.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP322\A0139568.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69327.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP322\A0139569.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494a5508.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP322\A0139570.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69328.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP322\A0139573.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69329.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP322\A0139751.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c6935c.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP322\A0139752.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c6935d.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP322\A0139753.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c6935e.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP322\A0139866.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69381.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP322\A0139867.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494a55a2.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP322\A0139868.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69382.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP322\A0139869.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494a55a3.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP322\A0139871.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69383.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP322\A0139883.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69389.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP323\A0139912.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69392.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP323\A0139913.INF
      [DETECTION] Contains detection pattern of the worm WORM/VB.QN.2
      [NOTE]      The file was moved to '48c69393.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP323\A0139920.dll
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69394.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP323\A0139921.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69395.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP323\A0139923.INF
      [DETECTION] Contains detection pattern of the worm WORM/VB.QN.2
      [NOTE]      The file was moved to '494eadc6.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP323\A0139926.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69397.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP324\A0139927.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c6939e.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP324\A0139928.INF
      [DETECTION] Contains detection pattern of the worm WORM/VB.QN.2
      [NOTE]      The file was moved to '494eadcf.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP324\A0139940.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c693a7.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP324\A0139941.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c693a8.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP324\A0139942.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c693a9.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP324\A0139943.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c693aa.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP324\A0139944.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c693ab.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP324\A0139953.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c693b1.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP324\A0139954.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494a5592.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP324\A0139955.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c693b2.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP324\A0139957.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c693b3.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP324\A0139959.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494eade4.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP324\A0139960.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c693b4.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP324\A0139961.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494eade5.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP324\A0139963.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c693b6.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP324\A0139964.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c693b7.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP324\A0139965.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494eade8.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP324\A0139966.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c693b8.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP324\A0139968.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c693b9.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP324\A0139969.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494eadea.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP324\A0139970.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c693ba.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP324\A0139972.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c693bb.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP324\A0139973.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c693bc.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP324\A0139974.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494eaded.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP324\A0139976.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c693bd.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP324\A0139977.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c693be.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP324\A0139978.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494a559f.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP324\A0139980.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c693bf.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP324\A0139981.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c693c0.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP324\A0139982.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494a55e1.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP324\A0139983.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c693c2.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP324\A0139984.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c693c1.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP324\A0139985.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494a55e3.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP324\A0139986.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494ead93.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP324\A0139990.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c693c3.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP324\A0139991.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c693c4.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP324\A0140011.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c693ca.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP324\A0140012.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c693cb.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP324\A0140013.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494ead9c.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP324\A0140016.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c693cd.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP324\A0140130.dll
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c693e4.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP324\A0140131.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494eadb5.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP324\A0140132.INF
      [DETECTION] Contains detection pattern of the worm WORM/VB.QN.2
      [NOTE]      The file was moved to '48c693e5.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP324\A0140136.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494eadb6.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP324\A0140146.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c693e9.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP324\A0140147.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c693ea.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP324\A0140148.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494eadbb.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP324\A0140149.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c693ec.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP324\A0140150.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c693ed.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP324\A0140159.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c693f2.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP324\A0140160.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c693f3.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP324\A0140161.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494a55d4.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP324\A0140163.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c693f4.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP324\A0140165.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c693f5.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP324\A0140166.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494a55d6.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP324\A0140167.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c693f6.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP324\A0140169.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c693f7.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP324\A0140170.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494a55d8.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP324\A0140171.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c693f8.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP324\A0140172.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c693f9.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP324\A0140174.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c693fa.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP324\A0140175.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494eadab.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP324\A0140176.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c693fb.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP324\A0140178.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c693fc.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP324\A0140179.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494a55dd.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP324\A0140180.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c693fd.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP324\A0140182.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c693fe.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP324\A0140183.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c693ff.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP324\A0140184.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494a5220.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP324\A0140186.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69400.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP324\A0140187.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69401.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP324\A0140188.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494a5222.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP324\A0140189.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69402.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP324\A0140190.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494a5223.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP324\A0140191.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69403.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP324\A0140192.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494a5224.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP324\A0140196.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69404.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP324\A0140197.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69405.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP324\A0140219.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c6940c.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP324\A0140220.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494a522d.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP324\A0140221.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c6940d.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP324\A0140224.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c6940e.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP324\A0140402.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69431.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP324\A0140403.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494a5212.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP324\A0140404.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69432.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP324\A0140517.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69489.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP324\A0140518.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494a52aa.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP324\A0140519.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c6948a.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP324\A0140520.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494a52ab.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP324\A0140522.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c6948d.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP324\A0140534.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c6948e.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP325\A0140563.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69492.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP325\A0140564.INF
      [DETECTION] Contains detection pattern of the worm WORM/VB.QN.2
      [NOTE]      The file was moved to '48c69493.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP325\A0140571.dll
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494a52b4.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP325\A0140572.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69495.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP325\A0140574.INF
      [DETECTION] Contains detection pattern of the worm WORM/VB.QN.2
      [NOTE]      The file was moved to '48c69494.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP325\A0140577.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494a52b5.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP325\A0140587.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69497.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP325\A0140588.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69499.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP325\A0140589.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c6949a.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP325\A0140590.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c6949b.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP325\A0140591.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c6949d.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP325\A0140600.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c694ab.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP325\A0140601.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494a528c.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP325\A0140602.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c694ac.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP325\A0140604.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c694ad.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP325\A0140606.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494a528e.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP325\A0140607.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c694ae.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP325\A0140608.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494eaaff.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP325\A0140610.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c694b2.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP325\A0140611.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494eaae3.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP325\A0140612.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c694b3.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP325\A0140613.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494eaae4.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP325\A0140615.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c694b5.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP325\A0140616.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494eaae6.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP325\A0140617.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c694b6.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP325\A0140619.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c694b7.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP325\A0140620.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c694b8.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP325\A0140621.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494a5299.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP325\A0140623.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c694ba.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP325\A0140624.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c694bb.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP325\A0140625.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c694bc.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP325\A0140627.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c694bd.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP325\A0140628.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c694be.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP325\A0140629.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494a529f.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP325\A0140630.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c694bf.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP325\A0140631.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494a52e0.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP325\A0140632.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c694c0.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP325\A0140633.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c694c1.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP325\A0140637.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c694c2.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP325\A0140638.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c694c3.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP325\A0140660.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c694c9.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP325\A0140661.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494a52ea.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP325\A0140662.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/S

cyrillelegrand · Answer

suite du rapport 



C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP325\A0140662.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c694ca.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP325\A0140665.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c694cb.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP325\A0140843.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c6950e.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP325\A0140844.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c6950f.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP325\A0140845.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494a5330.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP325\A0140958.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69526.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP325\A0140959.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494a5307.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP325\A0140960.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69528.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP325\A0140961.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69527.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP325\A0140963.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494a5309.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP325\A0140975.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c6952c.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP325\A0141007.dll
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c6952d.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP325\A0141008.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494eab7e.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP325\A0141010.INF
      [DETECTION] Contains detection pattern of the worm WORM/VB.QN.2
      [NOTE]      The file was moved to '48c6952e.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP325\A0141013.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494eab7f.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP326\A0141014.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69532.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP326\A0141015.INF
      [DETECTION] Contains detection pattern of the worm WORM/VB.QN.2
      [NOTE]      The file was moved to '48c69533.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP326\A0141027.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69535.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP326\A0141028.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69537.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP326\A0141029.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69538.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP326\A0141030.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69539.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP326\A0141031.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c6953a.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP326\A0141040.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c6953f.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP326\A0141041.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69540.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP326\A0141042.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494a5361.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP326\A0141044.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69542.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP326\A0141046.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494a5363.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP326\A0141047.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69543.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP326\A0141048.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494a5364.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP326\A0141050.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69545.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP326\A0141051.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69546.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP326\A0141052.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494a5367.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP326\A0141053.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69547.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP326\A0141055.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69548.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP326\A0141056.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69549.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP326\A0141057.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494a536a.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP326\A0141059.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c6954b.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP326\A0141060.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494a536c.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP326\A0141061.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c6954c.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP326\A0141063.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c6954d.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP326\A0141064.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494eab1e.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP326\A0141065.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c6954e.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP326\A0141067.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c6954f.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP326\A0141068.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69550.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP326\A0141069.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494eab01.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP326\A0141070.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69552.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP326\A0141071.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69551.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP326\A0141072.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494eab02.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP326\A0141073.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494eab03.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP326\A0141077.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69554.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP326\A0141078.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69555.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP326\A0141098.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c6955b.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP326\A0141099.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494eab0c.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP326\A0141100.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c6955c.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP326\A0141103.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c6955d.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP326\A0141281.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c695ab.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP326\A0141282.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c695ac.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP326\A0141283.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c695ad.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP326\A0141396.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c695d9.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP326\A0141397.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494eab8a.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP326\A0141398.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c695da.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP326\A0141399.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c695db.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP326\A0141401.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c695dd.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP326\A0141413.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c695e5.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP326\A0141418.dll
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c695e8.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP326\A0141419.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c695e9.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP326\A0141421.INF
      [DETECTION] Contains detection pattern of the worm WORM/VB.QN.2
      [NOTE]      The file was moved to '48c695ea.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP326\A0141425.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c695eb.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP326\A0141434.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c695fd.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP326\A0141435.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69600.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP326\A0141436.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69604.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP326\A0141437.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69607.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP326\A0141438.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c6960a.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP326\A0141447.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69619.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP326\A0141448.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c6961a.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP326\A0141449.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494a503b.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP326\A0141451.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c6961b.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP326\A0141453.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c6961c.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP326\A0141454.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c6961e.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP326\A0141455.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c6961f.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP326\A0141457.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69621.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP326\A0141458.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494ea872.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP326\A0141459.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494a5002.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP326\A0141460.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69622.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP326\A0141462.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69624.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP326\A0141463.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494a5005.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP326\A0141464.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69625.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP326\A0141466.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69626.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP326\A0141467.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494ea877.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP326\A0141468.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69627.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP326\A0141470.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69629.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP326\A0141471.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c6962a.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP326\A0141472.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494ea87b.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP326\A0141474.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c6962b.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP326\A0141475.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c6962c.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP326\A0141476.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494ea87d.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP326\A0141477.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c6962d.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP326\A0141478.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494ea87e.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP326\A0141479.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c6962e.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP326\A0141480.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494ea87f.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP326\A0141484.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c6962f.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP326\A0141485.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69630.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP326\A0141504.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69637.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP326\A0141505.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69638.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP326\A0141506.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494ea869.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP326\A0141509.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69639.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP326\A0141688.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c6965c.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP326\A0141689.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494ea80d.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP326\A0141690.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c6965d.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP327\A0141796.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69674.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP327\A0141797.INF
      [DETECTION] Contains detection pattern of the worm WORM/VB.QN.2
      [NOTE]      The file was moved to '48c69675.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP327\A0141807.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69677.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP327\A0141808.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69678.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP327\A0141809.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494ea829.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP327\A0141810.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69679.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP327\A0141812.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c6967a.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP327\A0141824.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c6967c.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP327\A0141855.dll
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c6967d.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP327\A0141856.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c6967e.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP327\A0141858.INF
      [DETECTION] Contains detection pattern of the worm WORM/VB.QN.2
      [NOTE]      The file was moved to '494ea82f.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP327\A0141870.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69680.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP327\A0141871.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69683.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP327\A0141872.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69684.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP327\A0141873.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494ea8d5.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP327\A0141874.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69687.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP327\A0141883.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c6968c.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP327\A0141884.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c6968d.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP327\A0141885.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494ea8de.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP327\A0141887.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c6968e.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP327\A0141889.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494ea8df.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP327\A0141890.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c6968f.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP327\A0141891.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494ea8c0.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP327\A0141893.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69691.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP327\A0141894.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69692.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP327\A0141895.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69693.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP327\A0141896.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494ea8c4.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP327\A0141898.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69694.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP327\A0141899.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494ea8c5.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP327\A0141900.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69695.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP327\A0141902.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69697.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP327\A0141903.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494ea8c8.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP327\A0141904.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69698.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP327\A0141906.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69699.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP327\A0141907.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494ea8ca.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP327\A0141908.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c6969a.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP327\A0141910.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c6969c.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP327\A0141911.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494ea8cd.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP327\A0141912.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c6969d.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP327\A0141913.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494ea8ce.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP327\A0141914.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c6969e.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP327\A0141915.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494ea8cf.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP327\A0141916.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494a50bf.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP327\A0141920.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c696a1.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP327\A0141921.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c696a2.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP327\A0141941.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c696a8.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP327\A0141942.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c696a9.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP327\A0141943.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494a508a.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP327\A0141946.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c696ab.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP327\A0142124.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c696ce.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP327\A0142125.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c696cf.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP327\A0142126.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494a50f0.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP327\A0142239.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c6975f.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP327\A0142240.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494a5140.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP327\A0142241.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69761.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP327\A0142242.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69760.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP327\A0142244.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494a5142.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP328\A0142256.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69767.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP328\A0142257.INF
      [DETECTION] Contains detection pattern of the worm WORM/VB.QN.2
      [NOTE]      The file was moved to '48c69768.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP328\A0142260.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494a5149.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP328\A0142292.dll
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69769.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP328\A0142293.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494a514a.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP328\A0142294.INF
      [DETECTION] Contains detection pattern of the worm WORM/VB.QN.2
      [NOTE]      The file was moved to '48c6976a.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP328\A0142298.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494a514b.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP328\A0142308.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c6976e.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP328\A0142309.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c6976f.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP328\A0142310.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69770.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP328\A0142311.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69771.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP328\A0142312.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69774.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP328\A0142321.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69779.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP328\A0142322.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494ea92a.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP328\A0142323.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c6977a.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP328\A0142325.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494ea92b.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP328\A0142327.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c6977b.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP328\A0142328.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494ea92c.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP328\A0142329.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c6977c.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP328\A0142331.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c6977f.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP328\A0142332.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494ea9d0.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP328\A0142333.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69781.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP328\A0142334.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69780.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP328\A0142336.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494a51a2.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP328\A0142337.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69782.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP328\A0142338.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69783.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP328\A0142340.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69784.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP328\A0142341.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69785.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP328\A0142342.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494a51a6.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP328\A0142344.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69786.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP328\A0142345.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69787.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP328\A0142346.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69788.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP328\A0142348.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69789.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP328\A0142349.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c6978a.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP328\A0142350.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494a51ab.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP328\A0142351.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c6978c.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP328\A0142352.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c6978b.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP328\A0142353.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494a51ad.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP328\A0142354.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c6978d.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP328\A0142358.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c6978e.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP328\A0142359.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c6978f.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP328\A0142379.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69796.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP328\A0142380.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494a51b7.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP328\A0142381.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69797.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP328\A0142384.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494a51b8.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP328\A0142562.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c697bb.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP328\A0142563.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494a519c.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP328\A0142564.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c697bc.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP328\A0142677.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c697d4.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP328\A0142678.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494a51f5.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP328\A0142679.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c697d5.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP328\A0142680.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494a51f6.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP328\A0142682.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c697d7.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP329\A0142694.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c697dc.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP329\A0142695.INF
      [DETECTION] Contains detection pattern of the worm WORM/VB.QN.2
      [NOTE]      The file was moved to '48c697dd.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP329\A0142698.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c697de.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP329\A0142729.dll
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494a51ff.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP329\A0142730.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69420.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP329\A0142732.INF
      [DETECTION] Contains detection pattern of the worm WORM/VB.QN.2
      [NOTE]      The file was moved to '494a5201.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP329\A0142735.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c697df.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP330\A0142746.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c697e5.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP330\A0142747.INF
      [DETECTION] Contains detection pattern of the worm WORM/VB.QN.2
      [NOTE]      The file was moved to '494a51c6.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP331\A0142751.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c697ea.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP331\A0142752.INF
      [DETECTION] Contains detection pattern of the worm WORM/VB.QN.2
      [NOTE]      The file was moved to '494a51cb.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP331\A0142764.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c697ee.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP331\A0142773.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c697f4.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP331\A0142774.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494a51d5.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP331\A0142775.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c697f5.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP331\A0142777.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494a51d6.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP331\A0142779.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c697f6.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP331\A0142780.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494a51d7.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP331\A0142781.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c697f7.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP331\A0142783.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c697f9.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP331\A0142784.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c697fa.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP331\A0142785.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c697fb.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP331\A0142786.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494a51dc.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP331\A0142788.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c697fc.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP331\A0142789.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c697fd.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP331\A0142790.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c697fe.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP331\A0142792.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69800.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP331\A0142793.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494a5e21.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP331\A0142794.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69802.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP331\A0142796.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69801.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP331\A0142797.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494a5e23.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP331\A0142798.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69803.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP331\A0142800.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69805.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP331\A0142801.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494ea656.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP331\A0142802.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69807.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP331\A0142803.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69806.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP331\A0142804.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494ea657.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP331\A0142805.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494ea658.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP331\A0142806.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69809.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP331\A0142810.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c6980b.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP331\A0142811.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494a5e2c.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP331\A0142832.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69813.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F

cyrillelegrand · Answer

suite rapport


C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP331\A0142832.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69813.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP331\A0142833.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494a5e34.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP331\A0142834.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69814.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP331\A0142839.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494a5e35.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP331\A0143018.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c6983a.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP331\A0143019.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c6983b.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP331\A0143020.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494ea66c.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP331\A0143133.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69854.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP331\A0143134.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494ea605.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP331\A0143135.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69856.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP331\A0143136.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69855.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP331\A0143138.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494ea607.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP331\A0143177.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.L
      [NOTE]      The file was moved to '48c6985a.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP331\A0143181.dll
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c6985b.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP331\A0143182.INF
      [DETECTION] Contains detection pattern of the worm WORM/VB.QN.2
      [NOTE]      The file was moved to '494a5e7c.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP331\A0143188.INF
      [DETECTION] Contains detection pattern of the worm WORM/VB.QN.2
      [NOTE]      The file was moved to '48c69871.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP331\A0143197.dll
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69872.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP331\A0143198.INF
      [DETECTION] Contains detection pattern of the worm WORM/VB.QN.2
      [NOTE]      The file was moved to '494a5e53.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP331\A0143206.dll
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69873.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP331\A0143207.INF
      [DETECTION] Contains detection pattern of the worm WORM/VB.QN.2
      [NOTE]      The file was moved to '48c69874.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP331\A0143221.INF
      [DETECTION] Contains detection pattern of the worm WORM/VB.QN.2
      [NOTE]      The file was moved to '48c69875.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP331\A0143227.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69876.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP331\A0143232.dll
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69877.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP331\A0143233.INF
      [DETECTION] Contains detection pattern of the worm WORM/VB.QN.2
      [NOTE]      The file was moved to '494a5e58.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP331\A0143262.dll
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c6987d.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP331\A0143263.INF
      [DETECTION] Contains detection pattern of the worm WORM/VB.QN.2
      [NOTE]      The file was moved to '48c6987e.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP331\A0143268.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69880.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP332\A0143709.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c698a8.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP332\A0143721.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c698a9.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP332\A0143722.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c698aa.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP332\A0143723.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c698ac.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP332\A0143744.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c698b2.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP332\A0143747.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c698b4.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP332\A0143756.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c698b6.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP332\A0143808.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c698bf.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP332\A0143809.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c698c0.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP332\A0143810.INF
      [DETECTION] Contains detection pattern of the worm WORM/VB.QN.2
      [NOTE]      The file was moved to '494a5ee1.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP332\A0143817.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c698c2.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP332\A0143819.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c698c5.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP333\A0143830.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c698cb.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP333\A0143831.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c698cc.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP333\A0143840.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c698d3.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP333\A0143841.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c698d4.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP333\A0143842.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494ea685.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP333\A0143844.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c698d5.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP333\A0143846.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494ea686.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP333\A0143847.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c698d7.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP333\A0143848.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c698d8.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP333\A0143850.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c698d9.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP333\A0143851.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494ea68a.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP333\A0143852.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c698da.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP333\A0143853.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494ea68b.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP333\A0143855.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c698dc.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP333\A0143856.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c698dd.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP333\A0143857.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c698de.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP333\A0143859.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c698df.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP333\A0143860.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494ea6b0.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP333\A0143861.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c698e0.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP333\A0143863.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c698e1.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP333\A0143864.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494ea6b2.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP333\A0143865.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c698e2.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP333\A0143867.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c698e4.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP333\A0143868.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494ea6b5.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP333\A0143869.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c698e5.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP333\A0143870.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494ea6b6.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP333\A0143871.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c698e7.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP333\A0143872.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c698e6.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP333\A0143873.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494ea6b8.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP333\A0143877.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c698ea.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP333\A0143878.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494ea6bb.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP333\A0143902.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c698f2.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP333\A0143903.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c698f3.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP333\A0143904.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494ea6a4.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP333\A0143908.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c698f4.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP333\A0143909.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c698f5.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP333\A0144087.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69919.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP333\A0144088.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494a5f3a.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP333\A0144089.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c6991a.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP333\A0144202.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69932.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP333\A0144203.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494a5f13.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP333\A0144204.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69933.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP333\A0144205.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494a5f14.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP333\A0144207.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69935.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP333\A0144264.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69938.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP333\A0144265.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494ea769.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP334\A0144276.dll
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69943.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP334\A0144279.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69944.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP334\A0144284.dll
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494ea715.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP334\A0144289.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69945.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP334\A0144291.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494ea716.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP334\A0144292.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69946.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP334\A0144295.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c6994a.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP334\A0144331.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69952.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP334\A0144332.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69953.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP334\A0144342.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69959.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP334\A0144343.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494ea70a.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP334\A0144344.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c6995b.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP334\A0144346.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c6995a.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP334\A0144348.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494ea70b.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP334\A0144349.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494ea70c.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP334\A0144350.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c6995d.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP334\A0144352.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494ea70e.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP334\A0144353.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c6995e.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP334\A0144354.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c6995f.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP334\A0144355.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494ea730.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP334\A0144357.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69960.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP334\A0144358.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494ea731.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP334\A0144359.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69961.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP334\A0144361.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69963.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP334\A0144362.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69964.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP334\A0144363.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494ea735.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP334\A0144365.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69965.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP334\A0144366.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494ea736.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP334\A0144367.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69966.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP334\A0144369.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494ea737.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP334\A0144370.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69967.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP334\A0144371.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494a5f48.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP334\A0144372.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69968.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP334\A0144373.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c6996a.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP334\A0144374.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494a5f4b.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP334\A0144375.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c6996b.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP334\A0144379.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494a5f4c.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP334\A0144380.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c6996c.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP334\A0144405.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69975.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP334\A0144406.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69976.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP334\A0144407.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494a5f57.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP334\A0144414.dll
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69977.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP334\A0144417.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494ea728.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP334\A0144424.dll
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69978.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP334\A0144430.dll
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69979.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP337\A0144801.dll
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c699b1.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP338\A0144830.dll
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c699b7.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP338\A0144837.dll
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494ea7e8.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP339\A0144859.dll
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c699be.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP340\A0144865.dll
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c699bf.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP340\A0144874.dll
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c699e7.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP340\A0144886.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c699e8.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP340\A0144891.dll
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69a0d.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP340\A0144892.INF
      [DETECTION] Contains detection pattern of the worm WORM/VB.QN.2
      [NOTE]      The file was moved to '48c69a0e.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP340\A0144893.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494ea45f.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP340\A0144894.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69a30.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP340\A0144895.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69a0f.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP340\A0144896.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494ea440.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP340\A0144897.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69a10.qua'!

cyrillelegrand · Answer

suite du rapport 

C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP340\A0144898.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69a13.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP340\A0144899.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69a14.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP340\A0144900.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69a15.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP340\A0144901.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494ea446.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP340\A0144902.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69a16.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP340\A0144903.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494ea447.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP340\A0144904.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69a18.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP340\A0144905.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69a17.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP340\A0144906.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494ea449.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP340\A0144907.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69a19.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP340\A0144908.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69a1a.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP340\A0144909.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69a1b.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP340\A0144910.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494ea44c.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP340\A0144911.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69a1d.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP340\A0144912.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69a1c.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP340\A0144913.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494ea44d.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP340\A0144914.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69a1e.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP340\A0144915.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494ea44e.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP340\A0144916.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494ea44f.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP340\A0144917.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69a1f.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP340\A0144918.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69a20.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP340\A0144919.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69a21.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP340\A0144920.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494ea472.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP340\A0144921.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69a22.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP340\A0144922.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494ea473.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP340\A0144923.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69a24.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP340\A0144924.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69a23.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP340\A0144925.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494ea475.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP340\A0144926.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69a25.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP340\A0144927.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69a26.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP340\A0144928.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69a27.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP340\A0144929.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494ea478.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP340\A0144930.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69a28.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP340\A0144931.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69a29.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP340\A0144932.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69a2b.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP340\A0144933.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69a2c.qua'!
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP340\A0144934.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c69a2d.qua'!
C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\ie4uinit.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c99ad7.qua'!
C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\ieudinit.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '490a9ad9.qua'!
C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\iexplore.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '490d9adb.qua'!
C:\WINDOWS\ie7\iedw.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48f99c92.qua'!
C:\WINDOWS\ie7\msfeedssync.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48fb9ca4.qua'!
C:\WINDOWS\ie7\mshta.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48fd9ca5.qua'!
C:\WINDOWS\ie7\winfxdocobj.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '49039cc1.qua'!
C:\WINDOWS\ie7\spuninst\ieResetIcons.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48e79cbd.qua'!
C:\_OTMoveIt\MovedFiles\08022008_154606	el.xls.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '49019ef8.qua'!
C:\_OTMoveIt\MovedFiles\08022008_154606\WINDOWS\Session.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '49089ef8.qua'!
C:\_OTMoveIt\MovedFiles\08022008_154606\WINDOWS\Session.VIR
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '49089ef9.qua'!
C:\_OTMoveIt\MovedFiles\08022008_154606\WINDOWS\system32\FileKan.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '49019efd.qua'!
C:\_OTMoveIt\MovedFiles\08022008_154606\WINDOWS\system32\olemdb32.dll
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48fa9f01.qua'!
C:\_OTMoveIt\MovedFiles\08022008_154606\WINDOWS\system32\olemdb32.VIR
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '4970d292.qua'!
C:\_OTMoveIt\MovedFiles\08022008_154606\WINDOWS\system32\SocksA.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48f89f05.qua'!
Begin scan in 'D:\' <data>
D:\AUTORUN.INF
      [DETECTION] Contains detection pattern of the worm WORM/VB.QN.2
      [NOTE]      The file was moved to '48e99eed.qua'!
D:	el.xls.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '49019f10.qua'!
D:\Musique emule\sim's 2 license (multilanguage).rar
  [0] Archive type: RAR
    --> Setup-cracked.exe
      [1] Archive type: RAR SFX (self extracting)
      --> peerbox_p2p_affiliate_rar.exe
          [DETECTION] Is the Trojan horse TR/Clicker.HB
      --> peerbox_p2p_affiliate_exe.exe
          [DETECTION] Is the Trojan horse TR/Clicker.HB
      --> peerbox_p2p_affiliate_zip.exe
          [DETECTION] Is the Trojan horse TR/Clicker.HB
      [NOTE]      The file was moved to '4902a0f4.qua'!
D:\programmes files2\JETCOMP.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48e9a8a1.qua'!
D:\programmes files2\eMule\emule.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '490aa8f5.qua'!
D:\programmes files2\eMule\LinkCreator.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '4903a8f2.qua'!
D:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP322\A0139473.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c6a8d7.qua'!
D:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP322\A0139474.INF
      [DETECTION] Contains detection pattern of the worm WORM/VB.QN.2
      [NOTE]      The file was moved to '494e9688.qua'!
D:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP322\A0139483.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c6a8d8.qua'!
D:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP322\A0139484.INF
      [DETECTION] Contains detection pattern of the worm WORM/VB.QN.2
      [NOTE]      The file was moved to '494e9689.qua'!
D:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP322\A0139900.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c6a934.qua'!
D:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP322\A0139901.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c6a936.qua'!
D:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP322\A0139903.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c6a937.qua'!
D:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP323\A0139914.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c6a93a.qua'!
D:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP323\A0139915.INF
      [DETECTION] Contains detection pattern of the worm WORM/VB.QN.2
      [NOTE]      The file was moved to '48c6a93c.qua'!
D:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP323\A0139924.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494e976d.qua'!
D:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP323\A0139925.INF
      [DETECTION] Contains detection pattern of the worm WORM/VB.QN.2
      [NOTE]      The file was moved to '48c6a93e.qua'!
D:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP324\A0139929.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c6a93f.qua'!
D:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP324\A0139930.INF
      [DETECTION] Contains detection pattern of the worm WORM/VB.QN.2
      [NOTE]      The file was moved to '494a6f60.qua'!
D:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP324\A0140134.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c6a941.qua'!
D:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP324\A0140135.INF
      [DETECTION] Contains detection pattern of the worm WORM/VB.QN.2
      [NOTE]      The file was moved to '48c6a940.qua'!
D:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP324\A0140551.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c6a97d.qua'!
D:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP324\A0140552.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c6a97e.qua'!
D:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP324\A0140554.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c6a97f.qua'!
D:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP325\A0140565.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c6a981.qua'!
D:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP325\A0140566.INF
      [DETECTION] Contains detection pattern of the worm WORM/VB.QN.2
      [NOTE]      The file was moved to '494a6fa2.qua'!
D:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP325\A0140575.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c6a982.qua'!
D:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP325\A0140576.INF
      [DETECTION] Contains detection pattern of the worm WORM/VB.QN.2
      [NOTE]      The file was moved to '494a6fa3.qua'!
D:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP325\A0140992.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c6a9c6.qua'!
D:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP325\A0140993.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c6a9c7.qua'!
D:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP325\A0140995.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494a6fe8.qua'!
D:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP325\A0141011.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c6a9c9.qua'!
D:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP325\A0141012.INF
      [DETECTION] Contains detection pattern of the worm WORM/VB.QN.2
      [NOTE]      The file was moved to '494a6fea.qua'!
D:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP326\A0141016.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c6a9ca.qua'!
D:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP326\A0141017.INF
      [DETECTION] Contains detection pattern of the worm WORM/VB.QN.2
      [NOTE]      The file was moved to '494e979b.qua'!
D:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP326\A0141422.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c6a9cb.qua'!
D:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP326\A0141423.INF
      [DETECTION] Contains detection pattern of the worm WORM/VB.QN.2
      [NOTE]      The file was moved to '48c6a9cc.qua'!
D:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP327\A0141798.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494e979d.qua'!
D:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP327\A0141799.INF
      [DETECTION] Contains detection pattern of the worm WORM/VB.QN.2
      [NOTE]      The file was moved to '48c6a9cf.qua'!
D:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP327\A0141841.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c6aa1d.qua'!
D:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP327\A0141842.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c6aa20.qua'!
D:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP327\A0141844.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c6aa22.qua'!
D:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP327\A0141859.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c6aa25.qua'!
D:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP327\A0141860.INF
      [DETECTION] Contains detection pattern of the worm WORM/VB.QN.2
      [NOTE]      The file was moved to '48c6aa26.qua'!
D:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP328\A0142258.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494a6c07.qua'!
D:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP328\A0142259.INF
      [DETECTION] Contains detection pattern of the worm WORM/VB.QN.2
      [NOTE]      The file was moved to '48c6aa28.qua'!
D:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP328\A0142277.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c6aa70.qua'!
D:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP328\A0142278.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c6aa72.qua'!
D:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP328\A0142280.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494a6c53.qua'!
D:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP328\A0142296.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c6aa74.qua'!
D:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP328\A0142297.INF
      [DETECTION] Contains detection pattern of the worm WORM/VB.QN.2
      [NOTE]      The file was moved to '48c6aa75.qua'!
D:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP329\A0142696.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '494a6c56.qua'!
D:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP329\A0142697.INF
      [DETECTION] Contains detection pattern of the worm WORM/VB.QN.2
      [NOTE]      The file was moved to '48c6aa76.qua'!
D:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP329\A0142715.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c6ab2d.qua'!
D:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP329\A0142716.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c6ab37.qua'!
D:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP329\A0142718.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c6ab39.qua'!
D:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP329\A0142733.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c6ab42.qua'!
D:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP329\A0142734.INF
      [DETECTION] Contains detection pattern of the worm WORM/VB.QN.2
      [NOTE]      The file was moved to '48c6ab44.qua'!
D:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP330\A0142748.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c6ab47.qua'!
D:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP330\A0142749.INF
      [DETECTION] Contains detection pattern of the worm WORM/VB.QN.2
      [NOTE]      The file was moved to '48c6ab49.qua'!
D:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP331\A0142753.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c6ab4c.qua'!
D:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP331\A0142754.INF
      [DETECTION] Contains detection pattern of the worm WORM/VB.QN.2
      [NOTE]      The file was moved to '48c6ab4e.qua'!
D:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP331\A0143166.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c6ac31.qua'!
D:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP331\A0143167.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c6ac38.qua'!
D:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP331\A0143169.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c6ac3a.qua'!
D:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP331\A0143184.INF
      [DETECTION] Contains detection pattern of the worm WORM/VB.QN.2
      [NOTE]      The file was moved to '48c6ac43.qua'!
D:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP331\A0143200.INF
      [DETECTION] Contains detection pattern of the worm WORM/VB.QN.2
      [NOTE]      The file was moved to '48c6ac44.qua'!
D:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP331\A0143209.INF
      [DETECTION] Contains detection pattern of the worm WORM/VB.QN.2
      [NOTE]      The file was moved to '48c6ac46.qua'!
D:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP331\A0143222.INF
      [DETECTION] Contains detection pattern of the worm WORM/VB.QN.2
      [NOTE]      The file was moved to '48c6ac48.qua'!
D:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP331\A0143234.INF
      [DETECTION] Contains detection pattern of the worm WORM/VB.QN.2
      [NOTE]      The file was moved to '48c6ac49.qua'!
D:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP331\A0143264.INF
      [DETECTION] Contains detection pattern of the worm WORM/VB.QN.2
      [NOTE]      The file was moved to '48c6ac4a.qua'!
D:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP332\A0143811.INF
      [DETECTION] Contains detection pattern of the worm WORM/VB.QN.2
      [NOTE]      The file was moved to '48c6ac4c.qua'!
D:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP332\A0143812.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c6ac4d.qua'!
D:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP333\A0144235.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c6acfe.qua'!
D:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP333\A0144236.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c6ad00.qua'!
D:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP333\A0144238.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c6ad02.qua'!
D:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP333\A0144245.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c6ad0b.qua'!
D:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP340\A0144948.INF
      [DETECTION] Contains detection pattern of the worm WORM/VB.QN.2
      [NOTE]      The file was moved to '48c6ad0f.qua'!
D:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP340\A0144949.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c6ad12.qua'!
D:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP340\A0144950.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c6ad13.qua'!
D:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP340\A0144951.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c6ad16.qua'!
D:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP340\A0144952.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Sality.K
      [NOTE]      The file was moved to '48c6ad23.qua'!


End of the scan: dimanche 3 août 2008  15:05
Used time:  2:37:47 min

The scan has been done completely.

   3320 Scanning directories
 129514 Files were scanned
    777 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
      0 files were deleted
      0 files were repaired
    775 files were moved to quarantine
      0 files were renamed
      2 Files cannot be scanned
 128737 Files not concerned
   1035 Archives were scanned
      2 Warnings
    775 Notes


voila fin du rapport

Utilisateur anonyme · Answer

Re ,

La plupart ce trouvent dans la restauration systeme ... >  pas de soucis .

Une dernière vérif ,,

Va sur ce site , /!\ Internet Explorer obligatoire /!\ , Clique sur ' J'accepte '  , Installe les ActiveX si necessaire ,et vérifie si ils sont bien configurés Clique sur ' installer ' puis ' click here to scan '( ou : cliquez ici pour scanner ).
Et poste moi le rapport. ( qui se trouve ici -> C:\windows\bdoscan8\scanres.txt )

(CTRL+A Pour tout selectionner  , CTRL+C pour copier et CTRL+V pour coller )

Tutorial :  

http://pageperso.aol.fr/loraline60/bitdefender_scan.htm
https://forum.pcastuces.com/sujet.asp?f=25&s=31584&page=1

a+

cyrillelegrand · Answer

je lancerais l'analyse cette nuit car elle prend pas mal de temps là je l ai mise 2h00 elle etait pas au quart. mais elle avait deja detecté 1 virus et 2 fichiers infectés.
je te poste le rapport demain matin.

Merci encore de ton aide !

cyrillelegrand · Answer

voila le rapport

BitDefender Online Scanner
  
  
 
Rapport d'analyse généré à: Mon, Aug 04, 2008 - 08:37:39
 
 
  
  
 
Voie d'analyse: A:\;C:\;D:\;E:\;F:\;
  
  
 
 
  
  
 
Statistiques
 
Temps
 11:08:49
 
Fichiers
 50069
 
Directoires
 3333
 
Secteurs de boot
 4
 
Archives
 1176
 
Paquets programmes
 4077
 
  
  
 
Résultats
 
Virus identifiés
 3
 
Fichiers infectés
 13
 
Fichiers suspects
 0
 
Avertissements
 0
 
Désinfectés
 8
 
Fichiers effacés
 5
 
  
  
 
Info sur les moteurs
 
Définition virus
 1413972
 
Version des moteurs
 AVCORE v1.0 (build 2422) (i386) (Sep 25 2007 08:26:36)
 
Analyse des plugins
 16
 
Archive des plugins
 43
 
Unpack des plugins
 7
 
E-mail plugins
 6
 
Système plugins
 5
 
  
  
 
Paramètres d'analyse
 
Première action
 Désinfecté
 
Seconde Action
 Supprimé
 
Heuristique
 Oui
 
Acceptez les avertissements
 Oui
 
Extensions analysées
 exe;com;dll;ocx;scr;bin;dat;386;vxd;sys;wdm;cla;class;ovl;ole;hlp;doc;dot;xls;ppt;wbk;wiz;pot;ppa;xla;xlt;vbs;vbe;mdb;rtf;htm;hta;html;xml;xtp;php;asp;js;shs;chm;lnk;pif;prc;url;smm;pfd;msi;ini;csc;cmd;bas;
 
Excludez les extensions
  
 
Analyse d'emails
 Oui
 
Analyse des Archives
 Oui
 
Analyser paquets programmes
 Oui
 
Analyse des fichiers
 Oui
 
Analyse de boot
 Oui
 
  
  
 
  Fichier analysé
  Statut
 
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP340\A0144938.exe
 Infecté par: Win32.Sality.K
 
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP340\A0144938.exe
 Désinfecté
 
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP340\A0144939.exe
 Infecté par: Win32.Sality.K
 
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP340\A0144939.exe
 Désinfecté
 
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP340\A0144941.exe
 Infecté par: Win32.Sality.K
 
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP340\A0144941.exe
 Désinfecté
 
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP340\A0144942.exe
 Infecté par: Win32.Sality.K
 
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP340\A0144942.exe
 Désinfecté
 
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP340\A0144943.exe
 Infecté par: Win32.Sality.K
 
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP340\A0144943.exe
 Désinfecté
 
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP340\A0144943.exe
 Infecté par: Trojan.Vb.ATG
 
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP340\A0144943.exe
 Supprimé
 
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP340\A0144944.exe
 Infecté par: Win32.Sality.K
 
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP340\A0144944.exe
 Désinfecté
 
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP340\A0144944.exe
 Infecté par: Trojan.Vb.ATG
 
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP340\A0144944.exe
 Supprimé
 
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP340\A0144945.exe
 Infecté par: Win32.Sality.K
 
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP340\A0144945.exe
 Désinfecté
 
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP340\A0144945.exe
 Infecté par: Trojan.Vb.ATG
 
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP340\A0144945.exe
 Supprimé
 
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP340\A0144946.dll
 Infecté par: Backdoor.Sality.A
 
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP340\A0144946.dll
 Supprimé
 
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP340\A0144947.exe
 Infecté par: Win32.Sality.K
 
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP340\A0144947.exe
 Désinfecté
 
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP340\A0144947.exe
 Infecté par: Trojan.Vb.ATG
 
C:\System Volume Information\_restore{BE912030-8917-44DD-937E-345CD6B9821F}\RP340\A0144947.exe
 Supprimé
 
  
 
 
  
  
 
 voila

Utilisateur anonyme · Answer

Re ,
Merci.

Un dernier rapport DSS s'il te plait.

++

cyrillelegrand · Answer

je tape sa dans executer ????

"%Userprofile%\bureau\dss.exe" /daft

Utilisateur anonyme · Answer

Re ,
non.

Juste double cliquer sur DSS.exe.

++

cyrillelegrand · Answer

Deckard's System Scanner v20071014.68
Run by christian on 2008-08-04 20:25:06
Computer is in Normal Mode.
--------------------------------------------------------------------------------

[color=red]Total Physical Memory: 192 MiB (512 MiB recommended).[/color]


-- HijackThis Clone ------------------------------------------------------------


Emulating logfile of Trend Micro HijackThis v2.0.2
Scan saved at 2008-08-04 20:25:38
Platform: Windows XP Service Pack 2 (5.01.2600)
MSIE: Internet Explorer (7.00.6000.16674)
Boot mode: Normal

Running processes:
C:\WINDOWS\system32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\slserv.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\MSN Messenger\livecall.exe
C:\Documents and Settings\christian\Bureau\dss.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?cc=fr&toHttps=1&redig=55729C844D6A45819CAD368B3E178C9F
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.msn.com/fr-fr/?redirfallthru=http%3a%2f%2fhome.microsoft.com%2fintl%2fbr%2faccess%2fallinone.asp%3f
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = iexplore
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} () - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - https://www.touslesdrivers.com/index.php?v_page=29
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} () - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\MSN Messenger\msgrapp.8.1.0178.00.dll
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\MSN Messenger\msgrapp.8.1.0178.00.dll
O23 - Service: Avira AntiVir Personal – Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal – Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Unknown owner - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: MSCSPTISRV - Unknown owner - C:\Program Files\Fichiers communs\Sony Shared\AVLib\MSCSPTISRV.exe
O23 - Service: PACSPTISVR - Unknown owner - C:\Program Files\Fichiers communs\Sony Shared\AVLib\PACSPTISVR.exe
O23 - Service: SmartLinkService (SLService) - Smart Link - C:\WINDOWS\system32\slserv.exe
O23 - Service: SonicStage Back-End Service - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\SsBeSvc.exe
O23 - Service: Sony SPTI Service (SPTISRV) - Unknown owner - C:\Program Files\Fichiers communs\Sony Shared\AVLib\SPTISRV.exe
O23 - Service: SonicStage SCSI Service (SSScsiSV) - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\SSScsiSV.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

Utilisateur anonyme · Answer

Re ,
 Télécharger OAD (Outil d'Aide au Diagnostic) < http://sosvirus.changelog.fr/OAD.exe >
&#8594; Enregistre-le sur ton bureau
&#8594; Lancer 'OAD.exe' en faisant un double clique sur le fichier
&#8594; Saisir la valeur recherchée -> '  tel.xls.exe  ' ( fait un copier/coller )
&#8594; Type de recherche : sélectionner l'option 6 puis valide [entrée] 
&#8594; OAD va maintenant rechercher le fichier.
&#8594; Laisse-le travailler jusqu'à ce qu'il en ait terminé.
&#8594; Suivant la taille des disques durs, cette recherche peut prendre plusieurs minutes.

------------- Patienter. --------------

&#8594;  Le rapport de recherche s'affichera automatiquement dès qu'il en aura terminé.
&#8594; Faire un copier/coller de ce rapport dans ton prochain post.


(CTRL+A Pour tout selectionner  , CTRL+C pour copier et CTRL+V pour coller )
 
Note: Certains Antivirus peuvent émettre une alerte lors du téléchargement / utilisation  > ignore




++

Rapport hijackthis

36 réponses

Discussions similaires