CPU 100% et Wintems persistant

Bonjour,

C'est fait!

Merci pour votre aide et support. Mon pc est sain grâce à Dieu et à vous.

sincèrement,

Alienismail

Salut,

Oui, j'ai le rapport, le voilà:

Avira AntiVir Personal
Report file date: jeudi 29 mai 2008 12:38

Scanning for 1296338 virus strains and unwanted programs.

Licensed to: Avira AntiVir PersonalEdition Classic
Serial number: 0000149996-ADJIE-0001
Platform: Windows XP
Windows version: (Service Pack 2) [5.1.2600]
Boot mode: Normally booted
Username: SYSTEM
Computer name: UNICORNI-299F79

Version information:
BUILD.DAT : 8.1.00.295 16479 Bytes 09/04/2008 16:24:00
AVSCAN.EXE : 8.1.2.12 311553 Bytes 18/03/2008 11:02:56
AVSCAN.DLL : 8.1.1.0 53505 Bytes 07/02/2008 10:43:37
LUKE.DLL : 8.1.2.9 151809 Bytes 28/02/2008 10:41:23
LUKERES.DLL : 8.1.2.1 12033 Bytes 21/02/2008 10:28:40
ANTIVIR0.VDF : 6.40.0.0 11030528 Bytes 18/07/2007 12:33:34
ANTIVIR1.VDF : 7.0.3.2 5447168 Bytes 07/03/2008 15:08:58
ANTIVIR2.VDF : 7.0.4.53 1848832 Bytes 17/05/2008 11:51:09
ANTIVIR3.VDF : 7.0.4.110 292352 Bytes 29/05/2008 11:51:19
Engineversion : 8.1.0.46
AEVDF.DLL : 8.1.0.5 102772 Bytes 25/02/2008 11:58:21
AESCRIPT.DLL : 8.1.0.33 266618 Bytes 29/05/2008 11:52:17
AESCN.DLL : 8.1.0.18 119156 Bytes 29/05/2008 11:52:13
AERDL.DLL : 8.1.0.20 418165 Bytes 29/05/2008 11:52:10
AEPACK.DLL : 8.1.1.5 364918 Bytes 29/05/2008 11:52:03
AEOFFICE.DLL : 8.1.0.18 192890 Bytes 29/05/2008 11:51:57
AEHEUR.DLL : 8.1.0.29 1253750 Bytes 29/05/2008 11:51:53
AEHELP.DLL : 8.1.0.14 115063 Bytes 29/05/2008 11:51:35
AEGEN.DLL : 8.1.0.21 303477 Bytes 29/05/2008 11:51:33
AEEMU.DLL : 8.1.0.6 430451 Bytes 29/05/2008 11:51:27
AECORE.DLL : 8.1.0.29 168311 Bytes 29/05/2008 11:51:23
AVWINLL.DLL : 1.0.0.7 14593 Bytes 23/01/2008 19:07:53
AVPREF.DLL : 8.0.0.1 25857 Bytes 18/02/2008 12:37:50
AVREP.DLL : 7.0.0.1 155688 Bytes 16/04/2007 15:26:47
AVREG.DLL : 8.0.0.0 30977 Bytes 23/01/2008 19:07:49
AVARKT.DLL : 1.0.0.23 307457 Bytes 12/02/2008 10:29:23
AVEVTLOG.DLL : 8.0.0.11 114945 Bytes 28/02/2008 10:31:31
SQLITE3.DLL : 3.3.17.1 339968 Bytes 22/01/2008 19:28:02
SMTPLIB.DLL : 1.2.0.19 28929 Bytes 23/01/2008 19:08:39
NETNT.DLL : 8.0.0.1 7937 Bytes 25/01/2008 14:05:10
RCIMAGE.DLL : 8.0.0.35 2371841 Bytes 10/03/2008 16:37:25
RCTEXT.DLL : 8.0.32.0 86273 Bytes 06/03/2008 14:02:11

Configuration settings for the scan:
Jobname..........................: Complete system scan
Configuration file...............: d:\program files\avira\antivir personaledition classic\sysscan.avp
Logging..........................: low
Primary action...................: interactive
Secondary action.................: ignore
Scan master boot sector..........: on
Scan boot sector.................: on
Boot sectors.....................: C:, D:,
Scan memory......................: on
Process scan.....................: on
Scan registry....................: on
Search for rootkits..............: off
Scan all files...................: Intelligent file selection
Scan archives....................: on
Recursion depth..................: 20
Smart extensions.................: on
Macro heuristic..................: on
File heuristic...................: medium

Start of the scan: jeudi 29 mai 2008 12:38

The scan of running processes will be started
Scan process 'avscan.exe' - '1' Module(s) have been scanned
Scan process 'avcenter.exe' - '1' Module(s) have been scanned
Scan process 'wuauclt.exe' - '1' Module(s) have been scanned
Scan process 'msiexec.exe' - '1' Module(s) have been scanned
Scan process 'wuauclt.exe' - '1' Module(s) have been scanned
Scan process 'dslmon.exe' - '1' Module(s) have been scanned
Scan process 'ctfmon.exe' - '1' Module(s) have been scanned
Scan process 'avgnt.exe' - '1' Module(s) have been scanned
Scan process 'explorer.exe' - '1' Module(s) have been scanned
Scan process 'alg.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'avguard.exe' - '1' Module(s) have been scanned
Scan process 'sched.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'lsass.exe' - '1' Module(s) have been scanned
Scan process 'services.exe' - '1' Module(s) have been scanned
Scan process 'winlogon.exe' - '1' Module(s) have been scanned
Scan process 'csrss.exe' - '1' Module(s) have been scanned
Scan process 'smss.exe' - '1' Module(s) have been scanned
23 processes with 23 modules were scanned

Starting master boot sector scan:
Master boot sector HD0
[INFO] No virus was found!

Start scanning boot sectors:
Boot sector 'C:\'
[INFO] No virus was found!
Boot sector 'D:\'
[INFO] No virus was found!

Starting to scan the registry.
The registry was scanned ( '18' files ).

Starting the file scan:

Begin scan in 'C:\' <System>
C:\6l6w8.com
[DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
[NOTE] The file was moved to '4874a43e.qua'!
C:\kxax.cmd
[DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
[NOTE] The file was moved to '489fa451.qua'!
C:\Documents and Settings\BENJABBOUR\Application Data\PROC GRAM\CurbAceBash.exe
[DETECTION] Is the Trojan horse TR/Obfusgen.A.5402
[NOTE] The file was moved to '48b0a4e8.qua'!
C:\Documents and Settings\BENJABBOUR\Local Settings\Application Data\Ares\My Shared Folder\Microsoft.Office.Ultimate.2007.(funcionante).Espanٍl.rar
[0] Archive type: CAB (Microsoft)
--> Installer-Crack-Keygen.exe
[DETECTION] Contains detection pattern of the worm WORM/P2P.Agent.N
[NOTE] The file was moved to '48a1a6c3.qua'!
C:\Documents and Settings\BENJABBOUR\Local Settings\Application Data\Ares\My Shared Folder\Nero 8 Ultra Edition 8.2.8.0+ serial mui bueno(funcionante).Espanٍl.rar
[0] Archive type: CAB (Microsoft)
--> Installer-Crack-Keygen.exe
[DETECTION] Contains detection pattern of the worm WORM/P2P.Agent.N
[NOTE] The file was moved to '48b0a6c0.qua'!
C:\Documents and Settings\BENJABBOUR\Local Settings\Application Data\Ares\My Shared Folder\Panda Internet Security 2008 (actualizado)(Espanٍl).rar
[0] Archive type: CAB (Microsoft)
--> Installer-Crack-Keygen.exe
[DETECTION] Contains detection pattern of the worm WORM/P2P.Agent.N
[NOTE] The file was moved to '48aca6bc.qua'!
C:\Documents and Settings\BENJABBOUR\Local Settings\Application Data\Ares\My Shared Folder\Paramore: Live In the Uk (2008).rar
[0] Archive type: CAB (Microsoft)
--> Installer-Crack-Keygen.exe
[DETECTION] Contains detection pattern of the worm WORM/P2P.Agent.N
[NOTE] The file was moved to '48b0a6be.qua'!
C:\Documents and Settings\BENJABBOUR\Local Settings\Temp\1x45xx2.sys
[DETECTION] Is the Trojan horse TR/PSW.OnlineGames.uam
[NOTE] The file was moved to '4872a7ab.qua'!
C:\Documents and Settings\BENJABBOUR\Local Settings\Temp\22umqpcg.dll
[DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
[NOTE] The file was moved to '48b3a765.qua'!
C:\Documents and Settings\BENJABBOUR\Local Settings\Temp\2bdxzjf.sys
[DETECTION] Is the Trojan horse TR/PSW.OnlineGames.uam
[NOTE] The file was moved to '48a2a796.qua'!
C:\Documents and Settings\BENJABBOUR\Local Settings\Temp\2xdwibt.dll
[DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
[NOTE] The file was moved to '48a2a7ac.qua'!
C:\Documents and Settings\BENJABBOUR\Local Settings\Temp\4.dll
[DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
[NOTE] The file was moved to '48a2a762.qua'!
C:\Documents and Settings\BENJABBOUR\Local Settings\Temp\6wtzv0.sys
[DETECTION] Is the Trojan horse TR/PSW.OnlineGames.uam
[NOTE] The file was moved to '48b2a7ac.qua'!
C:\Documents and Settings\BENJABBOUR\Local Settings\Temp\9sob2.dll
[DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
[NOTE] The file was moved to '48ada7a9.qua'!
C:\Documents and Settings\BENJABBOUR\Local Settings\Temp\aqb2.dll
[DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
[NOTE] The file was moved to '48a0a7a7.qua'!
C:\Documents and Settings\BENJABBOUR\Local Settings\Temp\bim77s0b.sys
[DETECTION] Is the Trojan horse TR/PSW.OnlineGames.uam
[NOTE] The file was moved to '48aba7a0.qua'!
C:\Documents and Settings\BENJABBOUR\Local Settings\Temp\bis6A.exe
[DETECTION] Is the Trojan horse TR/Obfusgen.A.5402
[NOTE] The file was moved to '48b1a7a0.qua'!
C:\Documents and Settings\BENJABBOUR\Local Settings\Temp\CDGD6834.exe
[DETECTION] Is the Trojan horse TR/Killav.PJ
[NOTE] The file was moved to '4885a77c.qua'!
C:\Documents and Settings\BENJABBOUR\Local Settings\Temp\cfmwfbi.dll
[DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
[NOTE] The file was moved to '48aba79e.qua'!
C:\Documents and Settings\BENJABBOUR\Local Settings\Temp\cw2htvqh.dll
[DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
[NOTE] The file was moved to '4870a7b0.qua'!
C:\Documents and Settings\BENJABBOUR\Local Settings\Temp\deg2bu.sys
[DETECTION] Is the Trojan horse TR/PSW.OnlineGames.uam
[NOTE] The file was moved to '48a5a79e.qua'!
C:\Documents and Settings\BENJABBOUR\Local Settings\Temp\dg5ci1e.sys
[DETECTION] Is the Trojan horse TR/PSW.OnlineGames.uam
[NOTE] The file was moved to '4873a7a0.qua'!
C:\Documents and Settings\BENJABBOUR\Local Settings\Temp\dulylpx.dll
[DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
[NOTE] The file was moved to '48aaa7ae.qua'!
C:\Documents and Settings\BENJABBOUR\Local Settings\Temp\fe.sys
[DETECTION] Is the Trojan horse TR/PSW.OnlineGames.uam
[NOTE] The file was moved to '486ca79f.qua'!
C:\Documents and Settings\BENJABBOUR\Local Settings\Temp\fi4.exe
[DETECTION] Is the Trojan horse TR/Killav.PJ.1
[NOTE] The file was moved to '4872a7a4.qua'!
C:\Documents and Settings\BENJABBOUR\Local Settings\Temp\fliuqm.dll
[DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
[NOTE] The file was moved to '48a7a7a7.qua'!
C:\Documents and Settings\BENJABBOUR\Local Settings\Temp\fqig.dll
[DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
[NOTE] The file was moved to '48a7a7ac.qua'!
C:\Documents and Settings\BENJABBOUR\Local Settings\Temp\fusdft5a.dll
[DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
[NOTE] The file was moved to '48b1a7b1.qua'!
C:\Documents and Settings\BENJABBOUR\Local Settings\Temp\gdss.sys
[DETECTION] Is the Trojan horse TR/PSW.OnlineGames.uam
[NOTE] The file was moved to '493b2d29.qua'!
C:\Documents and Settings\BENJABBOUR\Local Settings\Temp\gj4hn.dll
[DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
[NOTE] The file was moved to '4872a7a6.qua'!
C:\Documents and Settings\BENJABBOUR\Local Settings\Temp\HIBH2385.exe
[DETECTION] Is the Trojan horse TR/Killav.PJ.1
[NOTE] The file was moved to '4880a786.qua'!
C:\Documents and Settings\BENJABBOUR\Local Settings\Temp\i.dll
[DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
[NOTE] The file was moved to '48a2a76b.qua'!
C:\Documents and Settings\BENJABBOUR\Local Settings\Temp\j.sys
[DETECTION] Is the Trojan horse TR/PSW.OnlineGames.uam
[NOTE] The file was moved to '48b1a76c.qua'!
C:\Documents and Settings\BENJABBOUR\Local Settings\Temp\lsth5ges.sys
[DETECTION] Is the Trojan horse TR/PSW.OnlineGames.uam
[NOTE] The file was moved to '48b2a7b8.qua'!
C:\Documents and Settings\BENJABBOUR\Local Settings\Temp\mefs.sys
[DETECTION] Is the Trojan horse TR/PSW.OnlineGames.uam
[NOTE] The file was moved to '48a4a7aa.qua'!
C:\Documents and Settings\BENJABBOUR\Local Settings\Temp\megq.dll
[DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
[NOTE] The file was moved to '48a5a7ab.qua'!
C:\Documents and Settings\BENJABBOUR\Local Settings\Temp\oegen5k.dll
[DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
[NOTE] The file was moved to '48a5a7ac.qua'!
C:\Documents and Settings\BENJABBOUR\Local Settings\Temp\qt75a.dll
[DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
[NOTE] The file was moved to '4875a7bd.qua'!
C:\Documents and Settings\BENJABBOUR\Local Settings\Temp\r.dll
[DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
[NOTE] The file was moved to '48a2a777.qua'!
C:\Documents and Settings\BENJABBOUR\Local Settings\Temp\r4.exe
[DETECTION] Is the Trojan horse TR/Killav.PJ
[NOTE] The file was moved to '486ca77d.qua'!
C:\Documents and Settings\BENJABBOUR\Local Settings\Temp\r8dh.sys
[DETECTION] Is the Trojan horse TR/PSW.OnlineGames.uam
[NOTE] The file was moved to '48a2a782.qua'!
C:\Documents and Settings\BENJABBOUR\Local Settings\Temp\s4x5f4.sys
[DETECTION] Is the Trojan horse TR/PSW.OnlineGames.uam
[NOTE] The file was moved to '48b6a77e.qua'!
C:\Documents and Settings\BENJABBOUR\Local Settings\Temp\t.sys
[DETECTION] Is the Trojan horse TR/PSW.OnlineGames.uam
[NOTE] The file was moved to '48b1a779.qua'!
C:\Documents and Settings\BENJABBOUR\Local Settings\Temp\test001.exe
[0] Archive type: RSRC
--> Object
[DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
[NOTE] The file was moved to '493b2d3a.qua'!
C:\Documents and Settings\BENJABBOUR\Local Settings\Temp\u38.sys
[DETECTION] Is the Trojan horse TR/PSW.OnlineGames.uam
[NOTE] The file was moved to '4876a77f.qua'!
C:\Documents and Settings\BENJABBOUR\Local Settings\Temp\u3w7j.sys
[DETECTION] Is the Trojan horse TR/PSW.OnlineGames.uam
[NOTE] The file was moved to '48b5a780.qua'!
C:\Documents and Settings\BENJABBOUR\Local Settings\Temp\vj9.sys
[DETECTION] Is the Trojan horse TR/PSW.OnlineGames.uam
[NOTE] The file was moved to '4877a7b7.qua'!
C:\Documents and Settings\BENJABBOUR\Local Settings\Temp\wi.dll
[DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
[NOTE] The file was moved to '486ca7b6.qua'!
C:\Documents and Settings\BENJABBOUR\Local Settings\Temp\z326frf4.sys
[DETECTION] Is the Trojan horse TR/PSW.OnlineGames.uam
[NOTE] The file was moved to '4870a781.qua'!
C:\Documents and Settings\BENJABBOUR\Local Settings\Temp\z8.dll
[DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
[NOTE] The file was moved to '486ca786.qua'!
C:\Documents and Settings\BENJABBOUR\Local Settings\Temp\zgl.sys
[DETECTION] Is the Trojan horse TR/PSW.OnlineGames.uam
[NOTE] The file was moved to '48aaa7b5.qua'!
C:\Documents and Settings\BENJABBOUR\Local Settings\Temp\zt.dll
[DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
[NOTE] The file was moved to '486ca7c3.qua'!
C:\Documents and Settings\BENJABBOUR\Local Settings\Temporary Internet Files\Content.IE5\EE8TAGEP\help[2].exe
[DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
[NOTE] The file was moved to '48aaa7ee.qua'!
C:\Documents and Settings\BENJABBOUR\Mes documents\Mes fichiers reçus\image29.zip
[0] Archive type: ZIP
--> image29-www.photobucket.com
[DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
[NOTE] The file was moved to '489fa800.qua'!
C:\Program Files\Adobe\Acrobat 8.0\Setup Files\{AC76BA86-1033-F400-7760-000000000003}\Keygen7.exe
[DETECTION] Contains detection pattern of the worm WORM/Autorun.cxl
[NOTE] The file was moved to '48b7ae7d.qua'!
C:\RECYCLER\S-1-5-21-1957994488-1563985344-1343024091-1003\Dc20\IGB.maj
[0] Archive type: ZIP
--> InternetGameBox.exe
[DETECTION] Is the Trojan horse TR/Drop.NaviP.U.5.B
[NOTE] The file was moved to '4880b088.qua'!
C:\RECYCLER\S-1-5-21-1957994488-1563985344-1343024091-1003\Dc20\InternetGameBox.exe
[DETECTION] Is the Trojan horse TR/Drop.NaviP.U.5.B
[NOTE] The file was moved to '48b2b0b0.qua'!
C:\System Volume Information\_restore{1CEB9656-B085-487F-9CA8-FF4378F94B29}\RP57\A0049865.exe
[DETECTION] Is the Trojan horse TR/Drop.NaviP.U.5.B
[NOTE] The file was moved to '486eb39e.qua'!
C:\System Volume Information\_restore{1CEB9656-B085-487F-9CA8-FF4378F94B29}\RP78\A0055867.ini
[DETECTION] Is the Trojan horse TR/Agent.BCF
[NOTE] The file was moved to '486eb42a.qua'!
C:\System Volume Information\_restore{1CEB9656-B085-487F-9CA8-FF4378F94B29}\RP78\A0055868.ini
[DETECTION] Is the Trojan horse TR/Agent.BCF
[NOTE] The file was moved to '486eb42b.qua'!
C:\System Volume Information\_restore{1CEB9656-B085-487F-9CA8-FF4378F94B29}\RP78\A0055947.ini
[DETECTION] Is the Trojan horse TR/Agent.BCF
[NOTE] The file was moved to '486eb42c.qua'!
C:\System Volume Information\_restore{311779AD-1F00-4482-B8FD-2E8B3AFA7BA2}\RP6\A0000567.cmd
[DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
[NOTE] The file was moved to '486eb44e.qua'!
C:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP1\A0000002.com
[DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
[NOTE] The file was moved to '486eb454.qua'!
C:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP1\A0000034.com
[DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
[NOTE] The file was moved to '486eb455.qua'!
C:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP1\A0000189.bat
[DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
[NOTE] The file was moved to '49e736be.qua'!
C:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP1\A0000190.com
[DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
[NOTE] The file was moved to '486eb456.qua'!
C:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP1\A0000192.bat
[DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
[NOTE] The file was moved to '486eb457.qua'!
C:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP1\A0000260.com
[DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
[NOTE] The file was moved to '49e736b0.qua'!
C:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP1\A0000311.exe
[DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
[NOTE] The file was moved to '486eb459.qua'!
C:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP1\A0000312.dll
[DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
[NOTE] The file was moved to '486eb458.qua'!
C:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP1\A0000313.dll
[DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
[NOTE] The file was moved to '49e736b1.qua'!
C:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP1\A0000314.com
[DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
[NOTE] The file was moved to '49e736b2.qua'!
C:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP45\A0049081.exe
[DETECTION] Contains detection pattern of the worm WORM/P2P.Agent.N
[NOTE] The file was moved to '486eb46b.qua'!
C:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP45\A0049082.dll
[DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
[NOTE] The file was moved to '486eb46c.qua'!
C:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP45\A0049084.exe
[DETECTION] Is the Trojan horse TR/Agent.Delf.HN
[NOTE] The file was moved to '49e73685.qua'!
C:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP52\A0056177.dll
[DETECTION] Is the Trojan horse TR/Agent.11264.71
[NOTE] The file was moved to '486eb46e.qua'!
C:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP57\A0057136.com
[DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
[NOTE] The file was moved to '486eb46f.qua'!
C:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP57\A0057137.cmd
[DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
[NOTE] The file was moved to '49e73698.qua'!
C:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP57\A0057138.exe
[DETECTION] Is the Trojan horse TR/Obfusgen.A.5402
[NOTE] The file was moved to '486eb471.qua'!
C:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP58\A0057141.sys
[DETECTION] Is the Trojan horse TR/PSW.OnlineGames.uam
[NOTE] The file was moved to '486eb470.qua'!
C:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP58\A0057142.dll
[DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
[NOTE] The file was moved to '49e73699.qua'!
C:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP58\A0057143.sys
[DETECTION] Is the Trojan horse TR/PSW.OnlineGames.uam
[NOTE] The file was moved to '486eb472.qua'!
C:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP58\A0057144.dll
[DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
[NOTE] The file was moved to '49e7369a.qua'!
C:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP58\A0057145.dll
[DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
[NOTE] The file was moved to '486eb473.qua'!
C:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP58\A0057146.sys
[DETECTION] Is the Trojan horse TR/PSW.OnlineGames.uam
[NOTE] The file was moved to '49e7369c.qua'!
C:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP58\A0057147.dll
[DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
[NOTE] The file was moved to '49e7369b.qua'!
C:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP58\A0057148.dll
[DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
[NOTE] The file was moved to '486eb474.qua'!
C:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP58\A0057149.sys
[DETECTION] Is the Trojan horse TR/PSW.OnlineGames.uam
[NOTE] The file was moved to '49e7369d.qua'!
C:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP58\A0057150.exe
[DETECTION] Is the Trojan horse TR/Obfusgen.A.5402
[NOTE] The file was moved to '486eb475.qua'!
C:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP58\A0057151.exe
[DETECTION] Is the Trojan horse TR/Killav.PJ
[NOTE] The file was moved to '49e7369e.qua'!
C:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP58\A0057152.dll
[DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
[NOTE] The file was moved to '486eb477.qua'!
C:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP58\A0057153.dll
[DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
[NOTE] The file was moved to '486eb476.qua'!
C:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP58\A0057154.sys
[DETECTION] Is the Trojan horse TR/PSW.OnlineGames.uam
[NOTE] The file was moved to '49e7369f.qua'!
C:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP58\A0057155.sys
[DETECTION] Is the Trojan horse TR/PSW.OnlineGames.uam
[NOTE] The file was moved to '486eb448.qua'!
C:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP58\A0057156.dll
[DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
[NOTE] The file was moved to '49e73690.qua'!
C:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP58\A0057157.sys
[DETECTION] Is the Trojan horse TR/PSW.OnlineGames.uam
[NOTE] The file was moved to '486eb479.qua'!
C:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP58\A0057158.exe
[DETECTION] Is the Trojan horse TR/Killav.PJ.1
[NOTE] The file was moved to '49e73692.qua'!
C:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP58\A0057159.dll
[DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
[NOTE] The file was moved to '49e736a1.qua'!
C:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP58\A0057160.dll
[DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
[NOTE] The file was moved to '486eb44a.qua'!
C:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP58\A0057161.dll
[DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
[NOTE] The file was moved to '49e736a3.qua'!
C:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP58\A0057162.sys
[DETECTION] Is the Trojan horse TR/PSW.OnlineGames.uam
[NOTE] The file was moved to '486eb47b.qua'!
C:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP58\A0057163.dll
[DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
[NOTE] The file was moved to '49e73694.qua'!
C:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP58\A0057164.exe
[DETECTION] Is the Trojan horse TR/Killav.PJ.1
[NOTE] The file was moved to '486eb47d.qua'!
C:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP58\A0057165.dll
[DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
[NOTE] The file was moved to '486eb478.qua'!
C:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP58\A0057166.sys
[DETECTION] Is the Trojan horse TR/PSW.OnlineGames.uam
[NOTE] The file was moved to '49e73691.qua'!
C:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP58\A0057167.sys
[DETECTION] Is the Trojan horse TR/PSW.OnlineGames.uam
[NOTE] The file was moved to '486eb47a.qua'!
C:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP58\A0057168.sys
[DETECTION] Is the Trojan horse TR/PSW.OnlineGames.uam
[NOTE] The file was moved to '49e73696.qua'!
C:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP58\A0057169.dll
[DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
[NOTE] The file was moved to '486eb47f.qua'!
C:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP58\A0057170.dll
[DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
[NOTE] The file was moved to '49e73668.qua'!
C:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP58\A0057171.dll
[DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
[NOTE] The file was moved to '486eb481.qua'!
C:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP58\A0057172.dll
[DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
[NOTE] The file was moved to '49e73693.qua'!
C:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP58\A0057173.exe
[DETECTION] Is the Trojan horse TR/Killav.PJ
[NOTE] The file was moved to '486eb47c.qua'!
C:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP58\A0057174.sys
[DETECTION] Is the Trojan horse TR/PSW.OnlineGames.uam
[NOTE] The file was moved to '49e44763.qua'!
C:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP58\A0057175.sys
[DETECTION] Is the Trojan horse TR/PSW.OnlineGames.uam
[NOTE] The file was moved to '49e44764.qua'!
C:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP58\A0057176.sys
[DETECTION] Is the Trojan horse TR/PSW.OnlineGames.uam
[NOTE] The file was moved to '49e44766.qua'!
C:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP58\A0057177.exe
[0] Archive type: RSRC
--> Object
[DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
[NOTE] The file was moved to '49e44798.qua'!
C:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP58\A0057178.sys
[DETECTION] Is the Trojan horse TR/PSW.OnlineGames.uam
[NOTE] The file was moved to '49e44765.qua'!
C:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP58\A0057179.sys
[DETECTION] Is the Trojan horse TR/PSW.OnlineGames.uam
[NOTE] The file was moved to '486eb47e.qua'!
C:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP58\A0057180.sys
[DETECTION] Is the Trojan horse TR/PSW.OnlineGames.uam
[NOTE] The file was moved to '49e44767.qua'!
C:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP58\A0057181.dll
[DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
[NOTE] The file was moved to '49e4479a.qua'!
C:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP58\A0057182.sys
[DETECTION] Is the Trojan horse TR/PSW.OnlineGames.uam
[NOTE] The file was moved to '486eb483.qua'!
C:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP58\A0057183.dll
[DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
[NOTE] The file was moved to '49e4479c.qua'!
C:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP58\A0057184.sys
[DETECTION] Is the Trojan horse TR/PSW.OnlineGames.uam
[NOTE] The file was moved to '49e44769.qua'!
C:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP58\A0057185.dll
[DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
[NOTE] The file was moved to '49e4476b.qua'!
C:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP58\A0057186.exe
[DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
[NOTE] The file was moved to '49e4476d.qua'!
C:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP58\A0057190.exe
[DETECTION] Contains detection pattern of the worm WORM/Autorun.cxl
[NOTE] The file was moved to '486eb485.qua'!
C:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP58\A0057191.exe
[DETECTION] Is the Trojan horse TR/Drop.NaviP.U.5.B
[NOTE] The file was moved to '49e4479e.qua'!
C:\WINDOWS\bck1.dat
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[NOTE] The file was moved to '48a9b4d8.qua'!
C:\WINDOWS\system32\ctfmona.exe
[DETECTION] Is the Trojan horse TR/Peed.A.1
[NOTE] The file was moved to '48a4b672.qua'!
C:\WINDOWS\system32\NTSpool.exe
[DETECTION] Is the Trojan horse TR/Delf.own
[NOTE] The file was moved to '4891b68e.qua'!
C:\WINDOWS\system32\drivers\Ios04.sys
[DETECTION] Is the Trojan horse TR/Agent.11264.71
[NOTE] The file was moved to '48b1b735.qua'!
Begin scan in 'D:\' <Data center>
D:\6l6w8.com
[DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
[NOTE] The file was moved to '4874b750.qua'!
D:\kxax.cmd
[DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
[NOTE] The file was moved to '489fb75d.qua'!
D:\pagefile.sys
[WARNING] The file could not be opened!
D:\Documents and Settings\All Users.WINDOWS\Application Data\Avira\AntiVir PersonalEdition Classic\INFECTED\4874a43e.qua
[0] Archive type: HIDDEN
--> FIL\\\?\D:\Documents and Settings\All Users.WINDOWS\Application Data\Avira\AntiVir PersonalEdition Classic\INFECTED\4874a43e.qua
[DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
[NOTE] The file was moved to '4875b86f.qua'!
D:\Documents and Settings\All Users.WINDOWS\Application Data\Avira\AntiVir PersonalEdition Classic\INFECTED\4874b750.qua
[0] Archive type: HIDDEN
--> FIL\\\?\D:\Documents and Settings\All Users.WINDOWS\Application Data\Avira\AntiVir PersonalEdition Classic\INFECTED\4874b750.qua
[DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
[NOTE] The file was moved to '49fbb188.qua'!
D:\Documents and Settings\All Users.WINDOWS\Application Data\Avira\AntiVir PersonalEdition Classic\INFECTED\489fa451.qua
[0] Archive type: HIDDEN
--> FIL\\\?\D:\Documents and Settings\All Users.WINDOWS\Application Data\Avira\AntiVir PersonalEdition Classic\INFECTED\489fa451.qua
[DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
[NOTE] The file was moved to '4877b86f.qua'!
D:\Documents and Settings\All Users.WINDOWS\Application Data\Avira\AntiVir PersonalEdition Classic\INFECTED\489fb75d.qua
[0] Archive type: HIDDEN
--> FIL\\\?\D:\Documents and Settings\All Users.WINDOWS\Application Data\Avira\AntiVir PersonalEdition Classic\INFECTED\489fb75d.qua
[DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
[NOTE] The file was moved to '4877b870.qua'!
D:\foula\Logiciels\DocumentsRescue.Pro.v4.4.2.158.Multilingual.WinALL.Incl.Keygen.and.Patch-BRD.zip
[0] Archive type: ZIP
--> DocumentsRescue.Pro.v4.4.2.158.Multilingual.WinALL.Incl.Keygen.and.Patch-BRD/keygen/patch.exe
[DETECTION] Is the Trojan horse TR/Agent.VW.16
[NOTE] The file was moved to '48a1b964.qua'!
D:\Ismail data\Logiciels\Adobe\Adobe Acrobat Pro 8.1.2 Multilanguage +user guide +keygen(crack).rar
[0] Archive type: RAR
--> Keygen7.exe
[DETECTION] Contains detection pattern of the worm WORM/Autorun.cxl
[WARNING] An error has occurred and the file was not deleted. ErrorID: 26001
[WARNING]
D:\Ismail data\Logiciels\media\karafun_118.rar
[DETECTION] Is the Trojan horse TR/Drop.Agent
[NOTE] The file was moved to '48b0bd19.qua'!
D:\QooBox\Quarantine\D\WINDOWS\system32\drivers\downld\1357001.exe.vir
[DETECTION] Contains detection pattern of the worm WORM/Bagle.Gen
[NOTE] The file was moved to '4873c1c9.qua'!
D:\QooBox\Quarantine\D\WINDOWS\system32\drivers\downld\15420753.exe.vir
[DETECTION] Is the Trojan horse TR/Bagle.Gen.B
[NOTE] The file was moved to '4872c1cc.qua'!
D:\QooBox\Quarantine\D\WINDOWS\system32\drivers\downld\15425440.exe.vir
[DETECTION] Contains detection pattern of the worm WORM/Bagle.Gen
[NOTE] The file was moved to '49ff60a5.qua'!
D:\QooBox\Quarantine\D\WINDOWS\system32\drivers\downld\15428815.exe.infect.vir
[DETECTION] Is the Trojan horse TR/Bagle.Gen.B
[NOTE] The file was moved to '4872c1cd.qua'!
D:\QooBox\Quarantine\D\WINDOWS\system32\drivers\downld\15440672.exe.vir
[DETECTION] Contains detection pattern of the worm WORM/Bagle.Gen
[NOTE] The file was moved to '4872c1ce.qua'!
D:\QooBox\Quarantine\D\WINDOWS\system32\drivers\downld\15694817.exe.vir
[DETECTION] Contains detection pattern of the worm WORM/Bagle.Gen
[NOTE] The file was moved to '4874c1cf.qua'!
D:\QooBox\Quarantine\D\WINDOWS\system32\drivers\downld\16561774.exe.vir
[DETECTION] Contains detection pattern of the worm WORM/Bagle.Gen
[NOTE] The file was moved to '4873c1d1.qua'!
D:\QooBox\Quarantine\D\WINDOWS\system32\drivers\downld\1723998.exe.vir
[DETECTION] Contains detection pattern of the worm WORM/Bagle.Gen
[NOTE] The file was moved to '4870c1d3.qua'!
D:\QooBox\Quarantine\D\WINDOWS\system32\drivers\downld\56621.exe.vir
[DETECTION] Contains detection pattern of the worm WORM/Bagle.Gen
[NOTE] The file was moved to '4874c1d5.qua'!
D:\QooBox\Quarantine\D\WINDOWS\system32\drivers\downld\594274.exe.vir
[DETECTION] Contains detection pattern of the worm WORM/Bagle.Gen
[NOTE] The file was moved to '4872c1d9.qua'!
D:\QooBox\Quarantine\D\WINDOWS\system32\drivers\downld\599862.exe.vir
[DETECTION] Contains detection pattern of the worm WORM/Bagle.Gen
[NOTE] The file was moved to '4877c1d9.qua'!
D:\QooBox\Quarantine\D\WINDOWS\system32\drivers\downld\626631.exe.vir
[DETECTION] Contains detection pattern of the worm WORM/Bagle.Gen
[NOTE] The file was moved to '4874c1d3.qua'!
D:\QooBox\Quarantine\D\WINDOWS\system32\drivers\downld\642654.exe.vir
[DETECTION] Contains detection pattern of the worm WORM/Bagle.Gen
[NOTE] The file was moved to '4870c1d6.qua'!
D:\QooBox\Quarantine\D\WINDOWS\system32\drivers\downld\646840.exe.infect.vir
[DETECTION] Is the Trojan horse TR/Bagle.Gen.B
[NOTE] The file was moved to '4874c1d7.qua'!
D:\QooBox\Quarantine\D\WINDOWS\system32\drivers\downld\653900.exe.vir
[DETECTION] Contains detection pattern of the worm WORM/Bagle.Gen
[NOTE] The file was moved to '4871c1d8.qua'!
D:\QooBox\Quarantine\D\WINDOWS\system32\drivers\downld\67036.exe.vir
[DETECTION] Contains detection pattern of the worm WORM/Bagle.Gen
[NOTE] The file was moved to '486ec1db.qua'!
D:\QooBox\Quarantine\D\WINDOWS\system32\drivers\downld\678966.exe.vir
[DETECTION] Contains detection pattern of the worm WORM/Bagle.Gen
[NOTE] The file was moved to '4876c1db.qua'!
D:\QooBox\Quarantine\D\WINDOWS\system32\drivers\downld\70681.exe.vir
[DETECTION] Is the Trojan horse TR/Bagle.Gen.B
[NOTE] The file was moved to '49f960be.qua'!
D:\QooBox\Quarantine\D\WINDOWS\system32\drivers\downld\796575.exe.vir
[DETECTION] Contains detection pattern of the worm WORM/Bagle.Gen
[NOTE] The file was moved to '4874c1e0.qua'!
D:\QooBox\Quarantine\D\WINDOWS\system32\drivers\downld\796585.exe.vir
[DETECTION] Contains detection pattern of the worm WORM/Bagle.Gen
[NOTE] The file was moved to '49f96089.qua'!
D:\QooBox\Quarantine\D\WINDOWS\system32\drivers\downld\808001.exe.vir
[DETECTION] Contains detection pattern of the worm WORM/Bagle.Gen
[NOTE] The file was moved to '4876c1d8.qua'!
D:\QooBox\Quarantine\D\WINDOWS\system32\drivers\downld\810755.exe.vir
[DETECTION] Contains detection pattern of the worm WORM/Bagle.Gen
[NOTE] The file was moved to '486ec1d9.qua'!
D:\System Volume Information\_restore{311779AD-1F00-4482-B8FD-2E8B3AFA7BA2}\RP6\A0000566.dll
[DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
[NOTE] The file was moved to '486ec2e7.qua'!
D:\System Volume Information\_restore{311779AD-1F00-4482-B8FD-2E8B3AFA7BA2}\RP6\A0000569.cmd
[DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
[NOTE] The file was moved to '49e74000.qua'!
D:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP1\A0000004.com
[DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
[NOTE] The file was moved to '486ec2e8.qua'!
D:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP1\A0000019.dll
[DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
[NOTE] The file was moved to '486ec2e9.qua'!
D:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP1\A0000036.com
[DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
[NOTE] The file was moved to '486ec2ea.qua'!
D:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP1\A0000204.bat
[DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
[NOTE] The file was moved to '486ec2ef.qua'!
D:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP1\A0000205.com
[DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
[NOTE] The file was moved to '49e74018.qua'!
D:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP1\A0000206.bat
[DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
[NOTE] The file was moved to '486ec2f0.qua'!
D:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP1\A0000258.exe
[DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
[NOTE] The file was moved to '486ec2f1.qua'!
D:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP1\A0000259.dll
[DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
[NOTE] The file was moved to '49e7401a.qua'!
D:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP1\A0000262.com
[DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
[NOTE] The file was moved to '486ec2f2.qua'!
D:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP1\A0000273.dll
[DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
[NOTE] The file was moved to '49e7401b.qua'!
D:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP1\A0000279.exe
[DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
[NOTE] The file was moved to '486ec2f3.qua'!
D:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP1\A0000280.dll
[DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
[NOTE] The file was moved to '49e7401c.qua'!
D:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP1\A0000281.dll
[DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
[NOTE] The file was moved to '486ec2f5.qua'!
D:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP1\A0000315.com
[DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
[NOTE] The file was moved to '486ec2f4.qua'!
D:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP18\A0028246.exe
[DETECTION] Is the Trojan horse TR/Hijack.Agent.soe
[NOTE] The file was moved to '486ec33c.qua'!
D:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP41\A0047693.exe
[DETECTION] Is the Trojan horse TR/Dldr.Bagle.PV
[NOTE] The file was moved to '486ec3a9.qua'!
D:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP41\A0047695.exe
[DETECTION] Is the Trojan horse TR/Dldr.Bagle.PV
[NOTE] The file was moved to '486ec3aa.qua'!
D:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP42\A0047945.sys
[DETECTION] Is the Trojan horse TR/Rootkit.Gen
[NOTE] The file was moved to '486ec3b0.qua'!
D:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP44\A0048015.sys
[DETECTION] Is the Trojan horse TR/Rootkit.Gen
[NOTE] The file was moved to '486ec3b5.qua'!
D:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP44\A0049014.sys
[DETECTION] Is the Trojan horse TR/Rootkit.Gen
[NOTE] The file was moved to '486ec3b6.qua'!
D:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP44\A0049030.sys
[DETECTION] Is the Trojan horse TR/Rootkit.Gen
[NOTE] The file was moved to '49e7415f.qua'!
D:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP45\A0049075.exe
[DETECTION] Is the Trojan horse TR/Bagle.Gen.B
[NOTE] The file was moved to '486ec3b8.qua'!
D:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP45\A0049076.exe
[DETECTION] Is the Trojan horse TR/Bagle.Gen.B
[NOTE] The file was moved to '486ec3b9.qua'!
D:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP45\A0049077.exe
[DETECTION] Is the Trojan horse TR/Bagle.Gen.B
[NOTE] The file was moved to '49e74152.qua'!
D:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP46\A0049096.exe
[DETECTION] Is the Trojan horse TR/Bagle.Gen.B
[NOTE] The file was moved to '486ec3ba.qua'!
D:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP46\A0050095.exe
[DETECTION] Is the Trojan horse TR/Dldr.Bagle.PV
[NOTE] The file was moved to '486ec3bb.qua'!
D:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP46\A0050105.exe
[DETECTION] Is the Trojan horse TR/Dldr.Bagle.PV
[NOTE] The file was moved to '49e74154.qua'!
D:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP46\A0050106.sys
[DETECTION] Is the Trojan horse TR/Rootkit.Gen
[NOTE] The file was moved to '486ec3bc.qua'!
D:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP46\A0050107.exe
[DETECTION] Is the Trojan horse TR/Dldr.Bagle.PV
[NOTE] The file was moved to '49e74155.qua'!
D:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP46\A0050112.exe
[DETECTION] Is the Trojan horse TR/Dldr.Bagle.PV
[NOTE] The file was moved to '486ec3be.qua'!
D:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP46\A0050113.sys
[DETECTION] Is the Trojan horse TR/Rootkit.Gen
[NOTE] The file was moved to '486ec3bd.qua'!
D:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP46\A0050114.exe
[DETECTION] Is the Trojan horse TR/Dldr.Bagle.PV
[NOTE] The file was moved to '49e74156.qua'!
D:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP46\A0050125.exe
[DETECTION] Is the Trojan horse TR/Bagle.Gen.B
[NOTE] The file was moved to '49e74157.qua'!
D:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP46\A0050126.exe
[DETECTION] Is the Trojan horse TR/Bagle.Gen.B
[NOTE] The file was moved to '49e74159.qua'!
D:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP46\A0050131.exe
[DETECTION] Is the Trojan horse TR/Dldr.Bagle.PV
[NOTE] The file was moved to '486ec3bf.qua'!
D:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP46\A0050132.sys
[DETECTION] Is the Trojan horse TR/Rootkit.Gen
[NOTE] The file was moved to '49e74128.qua'!
D:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP46\A0050133.exe
[DETECTION] Is the Trojan horse TR/Dldr.Bagle.PV
[NOTE] The file was moved to '486ec3c1.qua'!
D:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP46\A0050135.exe
[DETECTION] Is the Trojan horse TR/Dldr.Bagle.PV
[NOTE] The file was moved to '486ec3c0.qua'!
D:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP46\A0050154.sys
[DETECTION] Is the Trojan horse TR/Rootkit.Gen
[NOTE] The file was moved to '49e74129.qua'!
D:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP46\A0050159.sys
[DETECTION] Is the Trojan horse TR/Rootkit.Gen
[NOTE] The file was moved to '49e7412a.qua'!
D:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP46\A0050164.exe
[DETECTION] Is the Trojan horse TR/Bagle.Gen.B
[NOTE] The file was moved to '486ec3c3.qua'!
D:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP46\A0050165.exe
[DETECTION] Is the Trojan horse TR/Bagle.Gen.B
[NOTE] The file was moved to '486ec3c2.qua'!
D:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP46\A0050232.sys
[DETECTION] Is the Trojan horse TR/Rootkit.Gen
[NOTE] The file was moved to '486ec3c6.qua'!
D:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP46\A0050237.exe
[DETECTION] Is the Trojan horse TR/Dldr.Bagle.PV
[NOTE] The file was moved to '486ec3c7.qua'!
D:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP46\A0050263.sys
[DETECTION] Is the Trojan horse TR/Rootkit.Gen
[NOTE] The file was moved to '49e74120.qua'!
D:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP46\A0050272.sys
[DETECTION] Is the Trojan horse TR/Rootkit.Gen
[NOTE] The file was moved to '486ec3c8.qua'!
D:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP46\A0050274.exe
[DETECTION] Is the Trojan horse TR/Bagle.Gen.B
[NOTE] The file was moved to '49e74121.qua'!
D:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP46\A0050280.sys
[DETECTION] Is the Trojan horse TR/Rootkit.Gen
[NOTE] The file was moved to '486ec3c9.qua'!
D:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP46\A0050283.exe
[DETECTION] Is the Trojan horse TR/Bagle.Gen.B
[NOTE] The file was moved to '49e74122.qua'!
D:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP46\A0050284.exe
[DETECTION] Is the Trojan horse TR/Bagle.Gen.B
[NOTE] The file was moved to '486ec3ca.qua'!
D:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP46\A0050293.sys
[DETECTION] Is the Trojan horse TR/Rootkit.Gen
[NOTE] The file was moved to '49e74123.qua'!
D:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP46\A0050304.sys
[DETECTION] Is the Trojan horse TR/Rootkit.Gen
[NOTE] The file was moved to '486ec3cb.qua'!
D:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP47\A0050330.sys
[DETECTION] Is the Trojan horse TR/Rootkit.Gen
[NOTE] The file was moved to '486ec3ce.qua'!
D:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP49\A0050491.sys
[DETECTION] Is the Trojan horse TR/Rootkit.Gen
[NOTE] The file was moved to '486ec3d3.qua'!
D:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP49\A0050496.sys
[DETECTION] Is the Trojan horse TR/Rootkit.Gen
[NOTE] The file was moved to '486ec3d4.qua'!
D:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP49\A0050501.sys
[DETECTION] Is the Trojan horse TR/Rootkit.Gen
[NOTE] The file was moved to '49e7413d.qua'!
D:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP49\A0051501.sys
[DETECTION] Is the Trojan horse TR/Rootkit.Gen
[NOTE] The file was moved to '486ec3d5.qua'!
D:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP49\A0051503.exe
[DETECTION] Is the Trojan horse TR/Bagle.Gen.B
[NOTE] The file was moved to '49e7413e.qua'!
D:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP49\A0051512.exe
[DETECTION] Is the Trojan horse TR/Bagle.Gen.B
[NOTE] The file was moved to '486ec3d7.qua'!
D:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP49\A0052512.exe
[DETECTION] Is the Trojan horse TR/Dldr.Bagle.PV
[NOTE] The file was moved to '486ec3d6.qua'!
D:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP49\A0053512.exe
[DETECTION] Is the Trojan horse TR/Dldr.Bagle.PV
[NOTE] The file was moved to '49e7413f.qua'!
D:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP49\A0054512.exe
[DETECTION] Is the Trojan horse TR/Dldr.Bagle.PV
[NOTE] The file was moved to '49e74130.qua'!
D:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP51\A0054624.exe
[DETECTION] Is the Trojan horse TR/Dldr.Bagle.QI
[NOTE] The file was moved to '486ec3e4.qua'!
D:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP51\A0054625.sys
[DETECTION] Is the Trojan horse TR/Rootkit.Gen
[NOTE] The file was moved to '49e7410d.qua'!
D:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP51\A0054626.exe
[DETECTION] Is the Trojan horse TR/Dldr.Bagle.PV
[NOTE] The file was moved to '486ec3e5.qua'!
D:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP51\A0054627.exe
[DETECTION] Is the Trojan horse TR/Dldr.Bagle.PV
[NOTE] The file was moved to '49e7410e.qua'!
D:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP51\A0054636.sys
[DETECTION] Is the Trojan horse TR/Rootkit.Gen
[NOTE] The file was moved to '486ec3e6.qua'!
D:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP51\A0054639.exe
[DETECTION] Is the Trojan horse TR/Bagle.Gen.B
[NOTE] The file was moved to '49e7410f.qua'!
D:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP51\A0054644.sys
[DETECTION] Is the Trojan horse TR/Rootkit.Gen
[NOTE] The file was moved to '486ec3f8.qua'!
D:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP51\A0054646.exe
[DETECTION] Is the Trojan horse TR/Bagle.Gen.B
[NOTE] The file was moved to '486ec3e7.qua'!
D:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP51\A0054647.exe
[DETECTION] Is the Trojan horse TR/Bagle.Gen.B
[NOTE] The file was moved to '49e74100.qua'!
D:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP51\A0054652.sys
[DETECTION] Is the Trojan horse TR/Rootkit.Gen
[NOTE] The file was moved to '486ec3e8.qua'!
D:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP51\A0054664.sys
[DETECTION] Is the Trojan horse TR/Rootkit.Gen
[NOTE] The file was moved to '49e74101.qua'!
D:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP51\A0054665.exe
[DETECTION] Is the Trojan horse TR/Bagle.Gen.B
[NOTE] The file was moved to '486ec3e9.qua'!
D:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP51\A0054666.exe
[DETECTION] Is the Trojan horse TR/Bagle.Gen.B
[NOTE] The file was moved to '49e74102.qua'!
D:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP51\A0054703.sys
[DETECTION] Is the Trojan horse TR/Rootkit.Gen
[NOTE] The file was moved to '486ec3ec.qua'!
D:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP51\A0054709.exe
[DETECTION] Is the Trojan horse TR/Bagle.Gen.B
[NOTE] The file was moved to '486ec3ed.qua'!
D:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP51\A0054713.sys
[DETECTION] Is the Trojan horse TR/Rootkit.Gen
[NOTE] The file was moved to '49e74106.qua'!
D:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP51\A0054714.exe
[DETECTION] Is the Trojan horse TR/Dldr.Bagle.PV
[NOTE] The file was moved to '486ec3ef.qua'!
D:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP51\A0054715.exe
[DETECTION] Is the Trojan horse TR/Bagle.Gen.B
[NOTE] The file was moved to '486ec3ee.qua'!
D:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP52\A0055737.exe
[DETECTION] Is the Trojan horse TR/Bagle.Gen.B
[NOTE] The file was moved to '486ec3f1.qua'!
D:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP52\A0055749.exe
[DETECTION] Is the Trojan horse TR/Bagle.Gen.B
[NOTE] The file was moved to '49e7411a.qua'!
D:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP52\A0055776.exe
[DETECTION] Is the Trojan horse TR/Bagle.Gen.B
[NOTE] The file was moved to '486ec3f3.qua'!
D:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP52\A0055777.exe
[DETECTION] Contains detection pattern of the worm WORM/Bagle.Gen
[NOTE] The file was moved to '486ec3f4.qua'!
D:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP52\A0055780.exe
[DETECTION] Is the Trojan horse TR/Bagle.Gen.B
[NOTE] The file was moved to '49e7411d.qua'!
D:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP52\A0055785.exe
[DETECTION] Is the Trojan horse TR/Bagle.Gen.B
[NOTE] The file was moved to '486ec3f5.qua'!
D:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP52\A0055786.exe
[DETECTION] Is the Trojan horse TR/Bagle.Gen.B
[NOTE] The file was moved to '49e7411e.qua'!
D:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP52\A0055787.exe
[DETECTION] Contains detection pattern of the worm WORM/Bagle.Gen
[NOTE] The file was moved to '486ec3f6.qua'!
D:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP52\A0055789.exe
[DETECTION] Contains detection pattern of the worm WORM/Bagle.Gen
[NOTE] The file was moved to '49e7411f.qua'!
D:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP52\A0055790.exe
[DETECTION] Is the Trojan horse TR/Bagle.Gen.B
[NOTE] The file was moved to '486ec3f7.qua'!
D:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP52\A0055791.exe
[DETECTION] Is the Trojan horse TR/Bagle.Gen.B
[NOTE] The file was moved to '49e74110.qua'!
D:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP52\A0055797.exe
[DETECTION] Is the Trojan horse TR/Bagle.Gen.B
[NOTE] The file was moved to '49e74111.qua'!
D:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP52\A0055802.exe
[DETECTION] Contains detection pattern of the worm WORM/Bagle.Gen
[NOTE] The file was moved to '486ec3fa.qua'!
D:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP52\A0055803.exe
[DETECTION] Is the Trojan horse TR/Bagle.Gen.B
[NOTE] The file was moved to '486ec3f9.qua'!
D:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP52\A0055806.exe
[DETECTION] Is the Trojan horse TR/Bagle.Gen.B
[NOTE] The file was moved to '49e74112.qua'!
D:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP52\A0055821.exe
[DETECTION] Contains detection pattern of the worm WORM/Bagle.Gen
[NOTE] The file was moved to '486ec3fb.qua'!
D:\System Volume Information\_restore{5F3C7E24-AD0D-44B2-9A6E-8D3F3C18DC10}\RP52\A0055831.exe
[DETECTION] Contains detection pattern of the worm WORM/Bagle.Gen
[NOTE] The file was moved to '49e74114.qua'!
D:\System Volume Information\_restore{5F3C7E24-AD0D-44B2