Rontokbr-h2 - Page 4

as tu vider la quarantaine de antivir ?

ensuite pour verifier s'il reste tes traces tu relance antivir et tu poste le rapport stp

ben apparemment, c'est pas fini :(

Avira AntiVir Personal
Report file date: 2008-10-01 15:11

Scanning for 1369550 virus strains and unwanted programs.

Licensed to: Avira AntiVir PersonalEdition Classic
Serial number: 0000149996-ADJIE-0001
Platform: Windows XP
Windows version: (Service Pack 1) [5.1.2600]
Boot mode: Save mode
Username: Discri positive
Computer name: NOM-BK2XXEVD9Y5

Version information:
BUILD.DAT : 8.1.0.331 16934 Bytes 12/08/2008 11:46:00
AVSCAN.EXE : 8.1.4.7 315649 Bytes 26/06/2008 08:57:53
AVSCAN.DLL : 8.1.4.0 40705 Bytes 26/05/2008 07:56:40
LUKE.DLL : 8.1.4.5 164097 Bytes 12/06/2008 12:44:19
LUKERES.DLL : 8.1.4.0 12033 Bytes 26/05/2008 07:58:52
ANTIVIR0.VDF : 6.40.0.0 11030528 Bytes 18/07/2007 10:33:34
ANTIVIR1.VDF : 7.0.5.1 8182784 Bytes 24/06/2008 13:54:15
ANTIVIR2.VDF : 7.0.5.20 142336 Bytes 30/06/2008 05:20:53
ANTIVIR3.VDF : 7.0.5.23 17408 Bytes 30/06/2008 09:24:47
Engineversion : 8.1.1.19
AEVDF.DLL : 8.1.0.5 102772 Bytes 25/02/2008 09:58:21
AESCRIPT.DLL : 8.1.0.63 311673 Bytes 06/08/2008 13:13:47
AESCN.DLL : 8.1.0.23 119156 Bytes 10/07/2008 12:44:49
AERDL.DLL : 8.1.0.20 418165 Bytes 24/04/2008 12:37:48
AEPACK.DLL : 8.1.2.1 364917 Bytes 15/07/2008 12:58:35
AEOFFICE.DLL : 8.1.0.21 192891 Bytes 18/07/2008 06:35:21
AEHEUR.DLL : 8.1.0.47 1368437 Bytes 06/08/2008 13:13:47
AEHELP.DLL : 8.1.0.15 115063 Bytes 10/07/2008 12:44:48
AEGEN.DLL : 8.1.0.35 315764 Bytes 06/08/2008 14:38:47
AEEMU.DLL : 8.1.0.7 430452 Bytes 31/07/2008 08:33:21
AECORE.DLL : 8.1.1.8 172406 Bytes 31/07/2008 08:33:21
AEBB.DLL : 8.1.0.1 53617 Bytes 10/07/2008 12:44:48
AVWINLL.DLL : 1.0.0.12 15105 Bytes 09/07/2008 08:40:05
AVPREF.DLL : 8.0.2.0 38657 Bytes 16/05/2008 09:28:01
AVREP.DLL : 7.0.0.1 155688 Bytes 30/06/2008 14:35:20
AVREG.DLL : 8.0.0.1 33537 Bytes 09/05/2008 11:26:40
AVARKT.DLL : 1.0.0.23 307457 Bytes 12/02/2008 08:29:23
AVEVTLOG.DLL : 8.0.0.16 119041 Bytes 12/06/2008 12:27:49
SQLITE3.DLL : 3.3.17.1 339968 Bytes 22/01/2008 17:28:02
SMTPLIB.DLL : 1.2.0.23 28929 Bytes 12/06/2008 12:49:40
NETNT.DLL : 8.0.0.1 7937 Bytes 25/01/2008 12:05:10
RCIMAGE.DLL : 8.0.0.51 2371841 Bytes 12/06/2008 13:48:07
RCTEXT.DLL : 8.0.52.0 86273 Bytes 27/06/2008 13:34:37

Configuration settings for the scan:
Jobname..........................: Manual Selection
Configuration file...............: C:\Documents and Settings\All Users\Application Data\Avira\AntiVir PersonalEdition Classic\PROFILES\folder.avp
Logging..........................: low
Primary action...................: interactive
Secondary action.................: ignore
Scan master boot sector..........: on
Scan boot sector.................: on
Boot sectors.....................: C:,
Process scan.....................: on
Scan registry....................: on
Search for rootkits..............: off
Scan all files...................: All files
Scan archives....................: on
Recursion depth..................: 20
Smart extensions.................: on
Deviating archive types..........: +BSD Mailbox, +Netscape/Mozilla Mailbox, +Eudora Mailbox, +Squid cache, +Pegasus Mailbox, +MS Outlook Mailbox,
Macro heuristic..................: on
File heuristic...................: medium
Deviating risk categories........: +APPL,+GAME,+JOKE,+PCK,+SPR,

Start of the scan: 2008-10-01 15:11

The scan of running processes will be started
Scan process 'avscan.exe' - '1' Module(s) have been scanned
Scan process 'lsass.exe' - '1' Module(s) have been scanned
Module is infected -> 'C:\Documents and Settings\Discri positive\Local Settings\Application Data\lsass.exe'
Scan process 'services.exe' - '1' Module(s) have been scanned
Module is infected -> 'C:\Documents and Settings\Discri positive\Local Settings\Application Data\services.exe'
Scan process 'avcenter.exe' - '1' Module(s) have been scanned
Scan process 'winlogon.exe' - '1' Module(s) have been scanned
Module is infected -> 'C:\Documents and Settings\Discri positive\Local Settings\Application Data\winlogon.exe'
Scan process 'explorer.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'lsass.exe' - '1' Module(s) have been scanned
Scan process 'services.exe' - '1' Module(s) have been scanned
Scan process 'winlogon.exe' - '1' Module(s) have been scanned
Scan process 'csrss.exe' - '1' Module(s) have been scanned
Scan process 'smss.exe' - '1' Module(s) have been scanned
Process 'lsass.exe' has been terminated
Process 'services.exe' has been terminated
Process 'winlogon.exe' has been terminated
C:\Documents and Settings\Discri positive\Local Settings\Application Data\lsass.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '4944777a.qua'!
C:\Documents and Settings\Discri positive\Local Settings\Application Data\services.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '4955776c.qua'!
C:\Documents and Settings\Discri positive\Local Settings\Application Data\winlogon.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '49517770.qua'!

16 processes with 13 modules were scanned

Starting master boot sector scan:
Master boot sector HD0
[INFO] No virus was found!

Start scanning boot sectors:
Boot sector 'C:\'
[INFO] No virus was found!

Starting to scan the registry.
C:\WINDOWS\ShellNew\bronstab.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '4952777f.qua'!
C:\WINDOWS\eksplorasi.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '4956777b.qua'!
C:\Documents and Settings\Discri positive\Menu Démarrer\Programmes\Démarrage\Empty.pif
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '4953777d.qua'!

The registry was scanned ( '69' files ).

Starting the file scan:

Begin scan in 'C:\'
C:\pagefile.sys
[WARNING] The file could not be opened!
C:\Documents and Settings\Discri positive\Bureau\ComboFix.exe
[0] Archive type: RAR SFX (self extracting)
--> 32788R22FWJFW\hidec.exe
[DETECTION] Contains recognition pattern of the SPR/Tool.Hide.A program
--> 32788R22FWJFW\NirCmd.cfexe
[DETECTION] Contains recognition pattern of the APPL/NirCmd.E.2.B application
--> 32788R22FWJFW\nircmd.com
[DETECTION] Contains recognition pattern of the APPL/NirCmd.E.2.B application
--> 32788R22FWJFW\NirCmdC.cfexe
[DETECTION] Contains recognition pattern of the APPL/NirCmd.E.1.B application
--> 32788R22FWJFW\psexec.cfexe
[DETECTION] Contains recognition pattern of the APPL/Rmadmin.131072 application
--> 32788R22FWJFW\pv.cfexe
[DETECTION] Contains recognition pattern of the SPR/Tool.PV program
[NOTE] The file was moved to '495077c2.qua'!
C:\Documents and Settings\Discri positive\Local Settings\Application Data\csrss.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '495577cc.qua'!
C:\Documents and Settings\Discri positive\Local Settings\Application Data\inetinfo.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '494877c8.qua'!
C:\Documents and Settings\Discri positive\Local Settings\Application Data\smss.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '495677c7.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '49567821.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Ma musique\Ma musique.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '4903781e.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\Discri 2004-2005\Administratif\Comptabilité\Comptabilité.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '4950782c.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\Discri 2004-2005\Administratif\Discipline\Discipline.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '49567826.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\Discri 2004-2005\Administratif\M. César\Inventaire\Inventaire.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '4959782c.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\Discri 2004-2005\Administratif\Ouvrier\Ouvrier.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '49597833.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\Discri 2004-2005\Administratif\projet05-06\projet05-06.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '49527831.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\Discri 2004-2005\Administratif\Remédiation\Remédiation.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '49507824.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\Discri 2004-2005\Bruges\Bruges.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '49587832.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\Discri 2004-2005\Conseil communal\Conseil communal.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '4951782f.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\Discri 2004-2005\Djembé\Djembé.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '4948782b.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\Discri 2004-2005\Espace Elmo\Espace Elmo.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '49537834.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\Discri 2004-2005\Espace Loisirs\Espace Loisirs.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '49537835.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\Discri 2004-2005\Expo\Expo.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '4953783c.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\Discri 2004-2005\Expo\portes ouvertes\powerpoint\powerpoint.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '495a7833.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\Discri 2004-2005\jeux\jeux.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '4958782a.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\Discri 2004-2005\Journal\Journal.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '49587836.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\Discri 2004-2005\liste d'élèves\liste d'élèves.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '49567832.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\Discri 2004-2005\Sourdimobile\Sourdimobile.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '49587839.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\Discri 2004-2005\Théâtre\Théâtre.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '49cc7833.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\Discri 2005 - 2006\05-06\Compte 05-06\Compte 05-06.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '4950783a.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\Discri 2005 - 2006\11 novembre\11 novembre.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '490377fd.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\Discri 2005 - 2006\Accueil\Accueil.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '4946782f.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\Discri 2005 - 2006\Accueil\Jeu du réglement\Jeu du réglement.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '4806c50b.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\Discri 2005 - 2006\Administratif\Administratif.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '49507832.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\Discri 2005 - 2006\Administratif\Budget\Budget.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '49477844.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\Discri 2005 - 2006\Bruges\Bruges.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '49587841.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\Discri 2005 - 2006\concours dessin\concours dessin.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '4951783f.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\Discri 2005 - 2006\Conseil communal\Conseil communal.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '480ccdd8.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\Discri 2005 - 2006\conseil communal des Ados 2005\conseil communal des Ados 2005.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '49517840.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\Discri 2005 - 2006\Espace Loisirs\Espace Loisirs.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '49537845.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\Discri 2005 - 2006\Le journal\Le journal.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '49037838.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\Discri 2005 - 2006\Petit déjeuner\Petit déjeuner.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '4957783a.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\Discri 2005 - 2006\Remédiations\Liste des élèves\Liste des élèves.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '4956783e.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\Discri 2005 - 2006\Sorties pédagogiques\Sorties pédagogiques.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '49557844.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\Discri 2005 - 2006\surdimobil\surdimobil.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '4955784b.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\Discri 2005 - 2006\théâtre\théâtre.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '49cc783f.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\discri 2006 - 2007\06-07\06-07.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '4910780d.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\discri 2006 - 2007\06-07\animation\le bon usage des médicaments\le bon usage des médicaments.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '4903783d.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\discri 2006 - 2007\06-07\animation\Le tri des déchets\Le tri des déchets.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '4903783e.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\discri 2006 - 2007\06-07\animation\petit déjeuner\petit déjeuner.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '4957783e.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\discri 2006 - 2007\06-07\collet 10B\collet 10B.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '494f7849.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\discri 2006 - 2007\06-07\COMPTE0607\COMPTE0607.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '4930782b.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\discri 2006 - 2007\06-07\COMPTE0607\autres\autres.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '49577851.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\discri 2006 - 2007\06-07\COMPTE0607\facture\facture.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '4946783f.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\discri 2006 - 2007\06-07\conseil de classe 0607\conseil de classe 0607.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '4951784f.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\discri 2006 - 2007\06-07\conseil de classe 0607\classe\classe.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '4944784d.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\discri 2006 - 2007\06-07\labyrinthe\labyrinthe.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '49457844.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\discri 2006 - 2007\06-07\photo\photo.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '4952784d.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\discri 2006 - 2007\06-07\photo\aquarium\aquarium.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '49587856.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\discri 2006 - 2007\06-07\photo\po\po.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '49117858.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\discri 2006 - 2007\06-07\primaire\primaire.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '494c785b.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\discri 2006 - 2007\06-07\printemps des sciences\printemps des sciences.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '494c7860.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\discri 2006 - 2007\06-07\projet triennal 0609 bis\projet triennal 0609 bis.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '49527860.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\discri 2006 - 2007\06-07\Surdimobil\2A\2A.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '49117830.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\discri 2006 - 2007\06-07\Surdimobil\2B\2B.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '49117833.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\discri 2006 - 2007\06-07\Surdimobil\2S\2S.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '49117847.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\discri 2006 - 2007\Accueil\Accueil.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '49467858.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\discri 2006 - 2007\administratif\compte discri\compte discri.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '49507864.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\discri 2006 - 2007\CCA\CCA.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '49247839.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\discri 2006 - 2007\Espace Loisirs\Espace Loisirs.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '49537869.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\discri 2006 - 2007\HALLOWEEN\HALLOWEEN.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '492f7838.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\discri 2006 - 2007\jeu d'échec\jeu d'échec.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '4958785c.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\discri 2006 - 2007\journal\octobre\octobre.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '4957785b.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\discri 2006 - 2007\photo\photo.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '49527862.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\discri 2006 - 2007\photo\collet 10B\collet 10B.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '494f7869.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\discri 2006 - 2007\photo\labyrinthe\labyrinthe.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '4945785f.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\discri 2006 - 2007\photo\printemps des sciences\printemps des sciences.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '494c7875.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\discri 2006 - 2007\photo\Surdimobil\2A\2A.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '49117844.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\discri 2006 - 2007\photo\Surdimobil\2B\2B.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '49117848.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\discri 2006 - 2007\photo\Surdimobil\2S\2S.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '4911785b.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\discri 2006 - 2007\Préhistosite de Ramioul 2006\Préhistosite de Ramioul 2006.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '49cc7881.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\Discri 2007 - 2008\07 - 08\1er degré différencié\1er degré différencié.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '49557877.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\Discri 2007 - 2008\07 - 08\cca\cca.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '49447876.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\Discri 2007 - 2008\07 - 08\Compte\Compte.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '49507882.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\Discri 2007 - 2008\07 - 08\Compte\Comptabilité\Comptabilité.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '49507883.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\Discri 2007 - 2008\07 - 08\Compte\Courrier\Courrier.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '49587884.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\Discri 2007 - 2008\07 - 08\Compte\Facture\Facture.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '49467877.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\Discri 2007 - 2008\07 - 08\Conseil de classe\Conseil de classe.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '49517889.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\Discri 2007 - 2008\07 - 08\Listing\Listing.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '49567883.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\Discri 2007 - 2008\07 - 08\Listing\Photo\20A\20A.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '4924784b.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\Discri 2007 - 2008\07 - 08\Listing\Photo\20B\20B.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '4925784c.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\Discri 2007 - 2008\07 - 08\Listing\Photo\2A\2A.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '49117860.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\Discri 2007 - 2008\07 - 08\Listing\Photo\2S1\2S1.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '49147873.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\Discri 2007 - 2008\07 - 08\Listing\Photo\2S2\2S2.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '49157875.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\Discri 2007 - 2008\07 - 08\Photographie\CCA\CCA.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '49247866.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\Discri 2007 - 2008\07 - 08\Photographie\Manège\Manège.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '49517886.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\Discri 2007 - 2008\07 - 08\Photographie\rentrée\rentrée.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '4951788d.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\Discri 2007 - 2008\07 - 08\Rapport\Rapport.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '4953788b.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\Discri 2007 - 2008\07 - 08\Sorties pédagogiques\Sorties pédagogiques.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '4955789a.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\Discri 2007 - 2008\07 - 08\Texte jona\Texte jona.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '495b7890.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\Discri 2007 - 2008\Accueil\Accueil.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '4946788e.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\Discri 2007 - 2008\autres\autres.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm

et voila la suite:

[NOTE] The file was moved to '495778a1.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\Discri 2007 - 2008\Espace Loisirs\Espace Loisirs.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '495378a0.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\Discri 2007 - 2008\Projet triennal 2006-2009\Projet triennal 2006-2009.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '4952789f.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\Discri 2007 - 2008\rELEVE DE COMPTE\rELEVE DE COMPTE.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '492f7873.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\Discri 2007 - 2008\rELEVE DE COMPTE\2005\30 AVRIL\30 AVRIL.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '4903785e.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\Discri 2007 - 2008\rELEVE DE COMPTE\2005\31 AOUT\31 AOUT.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '49037860.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\Discri 2007 - 2008\rELEVE DE COMPTE\2005\31 DECEMBRE\31 DECEMBRE.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '485cbcb9.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\Discri 2007 - 2008\rELEVE DE COMPTE\2006\30 AVRIL\30 AVRIL.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '4903785f.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\Discri 2007 - 2008\rELEVE DE COMPTE\2006\31 AOUT\31 AOUT.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '49037861.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\Discri 2007 - 2008\rELEVE DE COMPTE\2006\31 DECEMBRE\31 DECEMBRE.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '485cbcba.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\Discri 2007 - 2008\rELEVE DE COMPTE\2007\30 AVRIL\30 AVRIL.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '49037863.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\Discri 2007 - 2008\rELEVE DE COMPTE\2007\31 AOUT\31 AOUT.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '49037862.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\Discri 2007 - 2008\rELEVE DE COMPTE\2007\31 DECEMBRE\31 DECEMBRE.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '485cbcbb.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\Discri 2007 - 2008\rELEVE DE COMPTE\2008\30 AVRIL\30 AVRIL.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '49037864.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\Discri 2008 - 2009\32ème Charlemagnerie\32ème Charlemagnerie.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '49cb7865.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\Discri 2008 - 2009\Administratif\Factures\Factures.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '494678a4.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\Discri 2008 - 2009\articles\articles.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '495778b5.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\Discri 2008 - 2009\divers\divers.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '495978ad.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\Discri 2008 - 2009\Espace chouette\Espace chouette.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '495378b7.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\Discri 2008 - 2009\Espace Loisirs\Espace Loisirs.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '495378b8.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\Discri 2008 - 2009\Excursions\Affiches\Affiches.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '494978ab.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\Discri 2008 - 2009\Horaire\Horaire.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '495578b5.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\Discri 2008 - 2009\Photos\2007-01-31 EP Seraing Photos école primaire\2007-01-31 EP Seraing Photos école primaire.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '49137876.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\Discri 2008 - 2009\Photos\2007-04-28 Journée portes ouvertes\2007-04-28 Journée portes ouvertes.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '49137879.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\Discri 2008 - 2009\Photos\2008-01-18 - Ecole primaire Seraing\2008-01-18 - Ecole primaire Seraing.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '4913787d.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\Discri 2008 - 2009\Photos\2008-09-01 Acceuil des élèves de première année\2008-09-01 Acceuil des élèves de première année.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '4913787e.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\Discri 2008 - 2009\Photos\2008-09-04\2008-09-04.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '4913788a.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\Discri 2008 - 2009\Photos\Espace D+\Espace D+.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '495378ce.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\Discri 2008 - 2009\Photos\Espace D+\100SSCAM\100SSCAM.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '4913788d.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\Discri 2008 - 2009\Photos\Petit déjeuner\100SSCAM\100SSCAM.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '4913788e.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\Discri 2008 - 2009\Photos\Petit déjeuner\100SSCAM\100SSCAM\100SSCAM.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '4913788f.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\Discri 2008 - 2009\Photos\sortie à Weigimont 1 diff\sortie à Weigimont 1 diff.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '495578da.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\Discri 2008 - 2009\Rentrée\Rentrée.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '495178d0.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\Discri 2008 - 2009\valves\valves.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '494f78cd.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\Jonathan\Jonathan.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '495178db.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\Jonathan\2006-2007\2006-2007.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '4913789d.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\Jonathan\2006-2007\français\français.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '494478df.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\Jonathan\2006-2007\Histoire\Histoire.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '495678d9.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\Jonathan\2006-2007\Histoire\2A\jeux\jeux.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '495878d5.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\Jonathan\2006-2007\Histoire\2A\présences\présences.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '49cc78e4.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\Jonathan\Clubnight\Clubnight.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '495878de.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\Jonathan\Cours\Cours.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '495878e4.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\Jonathan\Cours\Français\39 2005 - 2006\39 2005 - 2006.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '490378af.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\Jonathan\Cours\Français\39 2005 - 2006\présences 39 1ère période\présences 39 1ère période.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '49cc78e9.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\Jonathan\Cours\Histoire\Histoire.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '495678e1.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\Jonathan\Cours\Histoire\2006 - 2007\français\français.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '494478ec.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\Jonathan\Cours\Histoire\2006 - 2007\histoire\1\1.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '494878a9.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\Jonathan\Cours\Histoire\2006 - 2007\histoire\2A-2B\2A-2B.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '491078bc.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\Jonathan\Cours\Histoire\2006 - 2007\histoire\3c\3c.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '491178df.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\Jonathan\Cours\Histoire\2a\2a.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '491178de.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\Jonathan\Cours\Histoire\33-39\33-39.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '491078b0.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\Jonathan\Cours\Histoire\Christopher\Christopher.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '495578e6.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\Jonathan\Cours\Histoire\Prévisions matières\Prévisions matières.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '49cc78f0.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\Jonathan\egypte_fichiers\egypte_fichiers.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '495c78e6.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\Jonathan\egypte_fichiers\accueil_fichiers\accueil_fichiers.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '494678e3.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\Jonathan\egypte_fichiers\animaux_fichiers\animaux_fichiers.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '494c78ee.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\Jonathan\egypte_fichiers\arbrefb_fichiers\arbrefb_fichiers.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '494578f2.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\Jonathan\egypte_fichiers\caire_fichiers\caire_fichiers.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '494c78e2.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\Jonathan\egypte_fichiers\crocro_fichiers\crocro_fichiers.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '495278f3.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\Jonathan\egypte_fichiers\dieux_fichiers\dieux_fichiers.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '494878eb.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\Jonathan\egypte_fichiers\Dromadaire_fichiers\Dromadaire_fichiers.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '495278f5.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\Jonathan\egypte_fichiers\Dromadaire_fichiers\ciegypte1_fichiers\ciegypte1_fichiers.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '494878ec.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\Jonathan\egypte_fichiers\histoir_fichiers\histoir_fichiers.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '495678ed.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\Jonathan\egypte_fichiers\hiéroglyphes_fichiers\hiéroglyphes_fichiers.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '49cc78ed.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\Jonathan\egypte_fichiers\jmetd_fichiers\jmetd_fichiers.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '494878f2.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\Jonathan\egypte_fichiers\louxor_fichiers\louxor_fichiers.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '495878f5.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\Jonathan\egypte_fichiers\paysage_fichiers\paysage_fichiers.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '495c78e7.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\Jonathan\egypte_fichiers\petrole_fichiers\petrole_fichiers.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '495778ec.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\Jonathan\egypte_fichiers\pharaon_fichiers\pharaon_fichiers.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '494478ef.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\Jonathan\egypte_fichiers\pyramide_fichiers\pyramide_fichiers.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '49557901.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\Listing\Listing.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '495678f2.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\Listing\Listing DVD\Listing DVD.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '480bcd6b.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents\rudi\rudi.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '494778ff.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents PaperPort\Exemples\Exemples.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '49487902.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes documents PaperPort\Exemples\Photos\Photos.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '480fcd6c.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes images\Mes images.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '495678f1.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes images\2004-2005\2005-04 (avr.)\2005-04 (avr.)`.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '491378bd.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes images\2004-2005\22-03-Securité\22-03-Securité.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '491078c7.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes images\2004-2005\Brugges\Brugges.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '49587915.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes images\2004-2005\Ecole\Ecole.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '4952790d.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes images\2004-2005\Egypte\Egypte.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '495c7912.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes images\2004-2005\JPG\JPG.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '492a7900.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes images\2004-2005\Lundi-07-03\Lundi-07-03.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '49517928.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes images\2004-2005\Lundi-14-03-Bois\Lundi-14-03-Bois.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '4951792b.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes images\2004-2005\mai-juin\mai-juin.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '494c7918.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes images\2004-2005\Mardi-01-03Theatre\Mardi-01-03Theatre.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '49557919.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes images\2004-2005\Mardi-15-03-ActiviteLectureAccueil\Mardi-15-03-ActiviteLectureAccueil.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '4955791d.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes images\2004-2005\Mece EcoleDeDevoir-09-03\Mece EcoleDeDevoir-09-03.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '49467923.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes images\2004-2005\Menuiserie3P\Menuiserie3P.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '49517926.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes images\2004-2005\petit déjeuner04-05\petit déjeuner04-05.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '49577928.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes images\2004-2005\PetitDej\PetitDej.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '4957792e.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes images\2004-2005\Photo\Photo.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '49527938.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes images\2004-2005\PhotoSourdiMobile17-02\PhotoSourdiMobile17-02.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '4952793a.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes images\2004-2005\théatre 04-05\théatre 04-05.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '49cc793a.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes images\2004-2005\Théâtre\Théâtre.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '49cc793e.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes images\2005-2006\bruges\bruges.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '49587948.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes images\2005-2006\CCA 2005\CCA 2005.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '4924791c.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes images\2005-2006\Dinant\Dinant.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '49517945.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes images\2005-2006\Espace chouette\Espace chouette.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '49537955.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes images\2005-2006\journée pédgagogique chute\journée pédgagogique chute.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '4958795c.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes images\2005-2006\journées accueil\journées accueil.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '49587961.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes images\2005-2006\Manège\Manège20A\Manège20A.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '4951795b.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes images\2005-2006\Manège\Manège20B\Manège20B.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '4951798c.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes images\2005-2006\Manège\Manège2S\Manège2S.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '495179a0.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes images\2005-2006\Nod dus animation\Nod dus animation.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '494779b4.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes images\2005-2006\préhistosite\préhistosite.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '49cc79bf.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes images\2005-2006\préhistosite\Photo\Photo.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '495279b9.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes images\2006 - 2007\La Reid\La Reid.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '490379b5.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes images\2006 - 2007\Les journées d'accueil\Les journées d'accueil.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '495679bc.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes images\2006 - 2007\Les journées d'accueil 2\Les journées d'accueil 2.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '495679bf.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes images\2006 - 2007\Manège2a\Manège2a.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '495179c6.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes images\2006 - 2007\Paix dieu\Paix dieu.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '494c79ca.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes images\2006 - 2007\petit déjeuner image\petit déjeuner image.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '495779cf.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes images\bd\bd.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '491179ce.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Mes images\Mes albums\Mes albums.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '495679d4.qua'!
C:\Documents and Settings\Discri positive\Mes documents\My Albums\My Albums.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '490379e9.qua'!
C:\Documents and Settings\Discri positive\Mes documents\photo\photo.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '495279d8.qua'!
C:\Documents and Settings\Discri positive\Mes documents\photo\collet 10B\collet 10B.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '494f79e0.qua'!
C:\Documents and Settings\Discri positive\Mes documents\photo\labyrinthe\labyrinthe.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '494579d5.qua'!
C:\Documents and Settings\Discri positive\Mes documents\photo\printemps des sciences\printemps des sciences.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '494c79ea.qua'!
C:\Documents and Settings\Discri positive\Mes documents\photo\Surdimobil\2A\2A.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '491179ba.qua'!
C:\Documents and Settings\Discri positive\Mes documents\photo\Surdimobil\2B\2B.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '491179bd.qua'!
C:\Documents and Settings\Discri positive\Mes documents\photo\Surdimobil\2S\2S.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '491179d0.qua'!
C:\Documents and Settings\Discri positive\Mes documents\rudi\rudi.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '494779f4.qua'!
C:\Documents and Settings\Discri positive\Mes documents\rudi\Accrochage scolaire\Accrochage scolaire.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '494679e3.qua'!
C:\Documents and Settings\Discri positive\Mes documents\rudi\argent décompté\argent décompté.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '494a79f2.qua'!
C:\Documents and Settings\Discri positive\Mes documents\rudi\compte 05-06\compte 05-06.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '495079f0.qua'!
C:\Documents and Settings\Discri positive\Mes documents\rudi\Examen 2p\Examen 2p.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '494479fa.qua'!
C:\Documents and Settings\Discri positive\Mes documents\rudi\liste 2006-2007\liste 2006-2007.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '495679eb.qua'!
C:\Documents and Settings\Discri positive\Mes documents\rudi\photo\photo.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '495279f9.qua'!
C:\Documents and Settings\Discri positive\Mes documents\rudi\PR2SENCE\PR2SENCE.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '491579e5.qua'!
C:\Documents and Settings\Discri positive\Mes documents\rudi\Projet triennal 2006-2009\Projet triennal 2006-2009.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '49527a05.qua'!
C:\Documents and Settings\Discri positive\Mes documents\Simply Super Software\Trojan Remover Logfiles\Trojan Remover Logfiles.exe
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '480ed7fe.qua'!
C:\Documents and Settings\Discri positive\Modèles\WowTumpeh.com
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '495a7a03.qua'!
C:\WINDOWS\eksplorasi.exe.vir
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '49567c52.qua'!
C:\WINDOWS\Nircmd.exe
[DETECTION] Contains recognition pattern of the APPL/NirCmd.E.2.B application
[NOTE] The file was moved to '49557c53.qua'!
C:\WINDOWS\$NtUninstallKB824141$\user32.dll
[WARNING] The file could not be opened!
C:\WINDOWS\$NtUninstallKB824141$\win32k.sys
[WARNING] The file could not be opened!
C:\WINDOWS\$NtUninstallKB826939$\accwiz.exe
[WARNING] The file could not be opened!
C:\WINDOWS\$NtUninstallKB826939$\crypt32.dll
[WARNING] The file could not be opened!
C:\WINDOWS\$NtUninstallKB826939$\cryptsvc.dll
[WARNING] The file could not be opened!
C:\WINDOWS\$NtUninstallKB826939$\hh.exe
[WARNING] The file could not be opened!
C:\WINDOWS\$NtUninstallKB826939$\hhsetup.dll
[WARNING] The file could not be opened!
C:\WINDOWS\$NtUninstallKB826939$\itss.dll
[WARNING] The file could not be opened!
C:\WINDOWS\$NtUninstallKB826939$\locator.exe
[WARNING] The file could not be opened!
C:\WINDOWS\$NtUninstallKB826939$\magnify.exe
[WARNING] The file could not be opened!
C:\WINDOWS\$NtUninstallKB826939$\migwiz.exe
[WARNING] The file could not be opened!
C:\WINDOWS\$NtUninstallKB826939$\mrxsmb.sys
[WARNING] The file could not be opened!
C:\WINDOWS\$NtUninstallKB826939$\msconv97.dll
[WARNING] The file could not be opened!
C:\WINDOWS\$NtUninstallKB826939$\narrator.exe
[WARNING] The file could not be opened!
C:\WINDOWS\$NtUninstallKB826939$\newdev.dll
[WARNING] The file could not be opened!
C:\WINDOWS\$NtUninstallKB826939$\ntdll.dll
[WARNING] The file could not be opened!
C:\WINDOWS\$NtUninstallKB826939$\ntkrnlpa.exe
[WARNING] The file could not be opened!
C:\WINDOWS\$NtUninstallKB826939$\ntoskrnl.exe
[WARNING] The file could not be opened!
C:\WINDOWS\$NtUninstallKB826939$\ole32.dll
[WARNING] The file could not be opened!
C:\WINDOWS\$NtUninstallKB826939$\osk.exe
[WARNING] The file could not be opened!
C:\WINDOWS\$NtUninstallKB826939$\pchshell.dll
[WARNING] The file could not be opened!
C:\WINDOWS\$NtUninstallKB826939$\raspptp.sys
[WARNING] The file could not be opened!
C:\WINDOWS\$NtUninstallKB826939$\rpcrt4.dll
[WARNING] The file could not be opened!
C:\WINDOWS\$NtUninstallKB826939$\rpcss.dll
[WARNING] The file could not be opened!
C:\WINDOWS\$NtUninstallKB826939$\shell32.dll
[WARNING] The file could not be opened!
C:\WINDOWS\$NtUninstallKB826939$\shmedia.dll
[WARNING] The file could not be opened!
C:\WINDOWS\$NtUninstallKB826939$\srrstr.dll
[WARNING] The file could not be opened!
C:\WINDOWS\$NtUninstallKB826939$\srv.sys
[WARNING] The file could not be opened!
C:\WINDOWS\$NtUninstallKB826939$\user32.dll
[WARNING] The file could not be opened!
C:\WINDOWS\$NtUninstallKB826939$\win32k.sys
[WARNING] The file could not be opened!
C:\WINDOWS\$NtUninstallKB826939$\winsrv.dll
[WARNING] The file could not be opened!
C:\WINDOWS\$NtUninstallKB826939$\zipfldr.dll
[WARNING] The file could not be opened!
C:\WINDOWS\$NtUninstallKB828035$\msgsvc.dll
[WARNING] The file could not be opened!
C:\WINDOWS\$NtUninstallKB828035$\wkssvc.dll
[WARNING] The file could not be opened!
C:\WINDOWS\$NtUninstallQ828026$\wmpcore.dll
[WARNING] The file could not be opened!
C:\WINDOWS\system32\Administrateur's Setting.scr
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '49507f3e.qua'!
C:\WINDOWS\system32\Discri positive's Setting.scr
[DETECTION] Contains recognition pattern of the WORM/Rontok.D worm
[NOTE] The file was moved to '49567f58.qua'!
C:\WINDOWS\system32\Tools\Restart.exe
[DETECTION] Contains recognition pattern of the SPR/Destart.A program
[NOTE] The file was moved to '4956805a.qua'!

End of the scan: 2008-10-01 15:50
Used time: 38:54 Minute(s)

The scan has been done completely.

2544 Scanning directories
133680 Files were scanned
249 viruses and/or unwanted programs were found
0 Files were classified as suspicious:
0 files were deleted
0 files were repaired
241 files were moved to quarantine
0 files were renamed
36 Files cannot be scanned
133395 Files not concerned
5968 Archives were scanned
36 Warnings
241 Notes

bonjour

tu n'a pas le choix il faut que tu vide la quarantaine de antivir

voila, c'est fait

et bonjour ;)

bon sur les autres poste tu a quoi comme antivirus

car il va falloir faire ceci

Scanne le PC avec un BitDefender en ligne (uniquement sous Internet Explorer) :

https://www.bitdefender.com/toolbox/

Utilisation :

* Clique sur "J'accepte" puis accepter également l'ActiveX bloqué par la barre anti-popup du SP2 qui clignotera en haut et l'installer.
* Ensuite, clique sur "Cliquez ici pour scanner".
* Patiente jusqu'à la fin du scan qui peut durer assez longtemps...

Copie/colle le rapport entier sur le forum.

bon je pense que tu est débarrassé maintenant

oui teste et dit moi mais logiquement tu en ai débarrassé par contre vérifie aussi tout les autres pcs

bon courage

a+ tard