Brontok sur Ipod...

Question

Bonjour,voila , j ai un petit probleme : JE viens de formater et , quand je re installe tout je prends mon IPOD pour toutes les données enregistré dessus. Mais , des que je fais quelque chose BOOM virus , si je vais sur le net et que je telecharger ca re demarre... Donc je viens de re formater (super! :p) comment je peux enlever ce virus de mon IPOD ? 

Merci a vous :))

jlpjlp · Answer

slt
essaye ceci après avoir branché ton ipod sur l'ordi

1/ # Télécharge RavAntivirus d'Evosla :
http://ww25.evosla.com/compteur.php?soft=rav_antivirus

# Si tu as une clé USB, disque dur externe, etc, branche-les sans les ouvrir avant de lancer ce FIX
# Fais un clic droit sur le fichier .ZIP > Extraire sur > le Bureau
# Doucle-clique sur >> RAV.exe << afin de lancer l'outil.
# Une fois RAV ANTIVIRUS lancé, laisse-le réagir , il scanne automatiquement tout les lecteurs (disques fixes et amovibles)
# Si infection > un log s'établira, sinon le soft affichera (très rapide) ==>Votre Ordinateur est sain .
# Retire tes disques amovibles et redémarrez votre ordinateur.
# Poste le rapport, si infection!

2/ Télécharge sur le bureau Flash Disinfector (de SUBS) à cette adresse : http://www.techsupportforum.com/sectools/sUBs/Flash_Disinfector.exe

Double-clique sur l’icône.
Les icônes vont disparaître. C’est normal.
Si un rapport est généré en cas d'infection, sauvegarde-le sur le bureau, et poste le ensuite
Redémarre ensuite le PC.

Piopascontent · Answer

Ok merci , je fais ca dessuite :]

Piopascontent · Answer

Donc il ne trouve pour l instant rien , mais j avais scan avec "Avira AntiVir" qui m a trouvé 200+ infections et les a mis en quarantaine. Ca ne pose pas de probleme ?

jlpjlp · Answer

colle un rapport antivir
et

colle un rapport hijackthis


http://www.trendsecure.com/portal/en-US/tools/security_tools/hijackthis/download

manuel :
http://pagesperso-orange.fr/rginformatique/section%20virus/demohijack.htm
https://leblogdeclaude.blogspot.com/2006/10/informatique-section-hijackthis.html

Je conseille de renomer Hijackthis, pour contrer une éventuelle infection de Vundo.

ex:Renomme le fichier HijackThis.exe en eden.exe pour cela, fais un clic droit sur le fichier HijackThis.exe et choisis renommer dans la liste

Ensuite avec Explorer créer un dossier c:\hijackthis
Décompresser Hijackthis dans ce dossier.
C'est important pour les sauvegardes."

Piopascontent · Answer

Attention les rapports sont TRES grand :(

Celui Avira : 



Avira AntiVir Personal
Report file date: mercredi 11 juin 2008  16:11

Scanning for 1165085 virus strains and unwanted programs.

Licensed to:      Avira AntiVir PersonalEdition Classic
Serial number:    0000149996-ADJIE-0001
Platform:         Windows XP
Windows version:  (Service Pack 1)  [5.1.2600]
Boot mode:        Save mode
Username:         tg
Computer name:    PROPRI-9ZE5EA3N

Version information:
BUILD.DAT     : 8.1.00.295      16479 Bytes  09/04/2008 16:24:00
AVSCAN.EXE    : 8.1.2.12       311553 Bytes  18/03/2008 09:02:58
AVSCAN.DLL    : 8.1.1.0         53505 Bytes  07/02/2008 08:43:38
LUKE.DLL      : 8.1.2.9        151809 Bytes  28/02/2008 08:41:24
LUKERES.DLL   : 8.1.2.1         12033 Bytes  21/02/2008 08:28:42
ANTIVIR0.VDF  : 6.40.0.0     11030528 Bytes  18/07/2007 10:33:34
ANTIVIR1.VDF  : 7.0.3.2       5447168 Bytes  07/03/2008 13:08:58
ANTIVIR2.VDF  : 7.0.3.62       337408 Bytes  21/03/2008 19:12:34
ANTIVIR3.VDF  : 7.0.3.68        57856 Bytes  25/03/2008 08:27:50
Engineversion : 8.1.0.28  
AEVDF.DLL     : 8.1.0.5        102772 Bytes  25/02/2008 09:58:22
AESCRIPT.DLL  : 8.1.0.19       229754 Bytes  07/04/2008 15:34:46
AESCN.DLL     : 8.1.0.12       115060 Bytes  07/04/2008 15:34:46
AERDL.DLL     : 8.1.0.19       418164 Bytes  07/04/2008 15:34:46
AEPACK.DLL    : 8.1.1.0        364918 Bytes  18/03/2008 11:20:44
AEOFFICE.DLL  : 8.1.0.15       192889 Bytes  07/04/2008 15:34:46
AEHEUR.DLL    : 8.1.0.15      1147253 Bytes  07/04/2008 15:34:46
AEHELP.DLL    : 8.1.0.11       115061 Bytes  07/04/2008 15:34:44
AEGEN.DLL     : 8.1.0.15       299379 Bytes  07/04/2008 15:34:44
AEEMU.DLL     : 8.1.0.5        430450 Bytes  07/04/2008 15:34:44
AECORE.DLL    : 8.1.0.25       168309 Bytes  08/04/2008 09:58:34
AVWINLL.DLL   : 1.0.0.7         14593 Bytes  23/01/2008 17:07:54
AVPREF.DLL    : 8.0.0.1         25857 Bytes  18/02/2008 10:37:52
AVREP.DLL     : 7.0.0.1        155688 Bytes  16/04/2007 13:26:48
AVREG.DLL     : 8.0.0.0         30977 Bytes  23/01/2008 17:07:50
AVARKT.DLL    : 1.0.0.23       307457 Bytes  12/02/2008 08:29:24
AVEVTLOG.DLL  : 8.0.0.11       114945 Bytes  28/02/2008 08:31:32
SQLITE3.DLL   : 3.3.17.1       339968 Bytes  22/01/2008 17:28:04
SMTPLIB.DLL   : 1.2.0.19        28929 Bytes  23/01/2008 17:08:40
NETNT.DLL     : 8.0.0.1          7937 Bytes  25/01/2008 12:05:12
RCIMAGE.DLL   : 8.0.0.35      2371841 Bytes  10/03/2008 14:37:26
RCTEXT.DLL    : 8.0.32.0        86273 Bytes  06/03/2008 12:02:12

Configuration settings for the scan:
Jobname..........................: ShlExt
Configuration file...............: C:\DOCUME~1	g\LOCALS~1\Temp\db91cae0.avp
Logging..........................: low
Primary action...................: interactive
Secondary action.................: ignore
Scan master boot sector..........: on
Scan boot sector.................: on
Boot sectors.....................: K:, 
Scan memory......................: on
Process scan.....................: off
Scan registry....................: off
Search for rootkits..............: off
Scan all files...................: Intelligent file selection
Scan archives....................: on
Recursion depth..................: 20
Smart extensions.................: on
Macro heuristic..................: on
File heuristic...................: medium

Start of the scan: mercredi 11 juin 2008  16:11

Starting the file scan:

Begin scan in 'K:\' <IPOD>
K:\iPod_Control\Music\F06\F06.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '4885dd3a.qua'!
K:\iPod_Control\Music\F07\F07.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '4886dd3d.qua'!
K:\iPod_Control\Music\F08\F08.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '4887dd3f.qua'!
K:\iPod_Control\Music\F09\F09.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '4888dd41.qua'!
K:\iPod_Control\Music\F10\F10.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '487fdd44.qua'!
K:\iPod_Control\Music\F11\F11.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '4880dd4a.qua'!
K:\iPod_Control\Music\F12\F12.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '4881dd4a.qua'!
K:\iPod_Control\Music\F13\F13.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '4882dd4b.qua'!
K:\iPod_Control\Music\F14\F14.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '4883dd4b.qua'!
K:\iPod_Control\Music\F15\F15.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '4884dd4c.qua'!
K:\iPod_Control\Music\F16\F16.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '4885dd4c.qua'!
K:\iPod_Control\Music\F17\F17.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '4886dd4c.qua'!
K:\iPod_Control\Music\F18\F18.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '4887dd4d.qua'!
K:\iPod_Control\Music\F19\F19.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '4888dd4d.qua'!
K:\iPod_Control\Music\F20\F20.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '487fdd4e.qua'!
K:\iPod_Control\Music\F21\F21.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '4880dd4f.qua'!
K:\iPod_Control\Music\F22\F22.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '4881dd4f.qua'!
K:\iPod_Control\Music\F23\F23.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '4882dd50.qua'!
K:\iPod_Control\Music\F24\F24.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '4883dd50.qua'!
K:\iPod_Control\Music\F25\F25.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '4884dd50.qua'!
K:\iPod_Control\Music\F26\F26.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '4885dd51.qua'!
K:\iPod_Control\Music\F27\F27.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '4886dd51.qua'!
K:\iPod_Control\Music\F28\F28.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '4887dd52.qua'!
K:\iPod_Control\Music\F29\F29.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '4888dd52.qua'!
K:\iPod_Control\Music\F30\F30.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '487fdd54.qua'!
K:\iPod_Control\Music\F31\F31.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '4880dd54.qua'!
K:\iPod_Control\Music\F32\F32.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '4881dd54.qua'!
K:\iPod_Control\Music\F33\F33.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '4882dd55.qua'!
K:\iPod_Control\Music\F34\F34.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '4883dd55.qua'!
K:\iPod_Control\Music\F35\F35.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '4884dd56.qua'!
K:\iPod_Control\Music\F36\F36.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '4885dd56.qua'!
K:\iPod_Control\Music\F37\F37.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '4886dd56.qua'!
K:\iPod_Control\Music\F38\F38.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '4887dd57.qua'!
K:\iPod_Control\Music\F39\F39.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '4888dd57.qua'!
K:\iPod_Control\Music\F41\F41.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '4880dd59.qua'!
K:\iPod_Control\Music\F42\F42.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '4881dd59.qua'!
K:\iPod_Control\Music\F43\F43.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '4882dd5a.qua'!
K:\iPod_Control\Music\F44\F44.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '4883dd5a.qua'!
K:\iPod_Control\Music\F45\F45.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '4884dd5b.qua'!
K:\iPod_Control\Music\F46\F46.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '4885dd5b.qua'!
K:\iPod_Control\Music\F47\F47.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '4886dd5c.qua'!
K:\iPod_Control\Music\F48\F48.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '4887dd5c.qua'!
K:\iPod_Control\Music\F49\F49.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '4888dd5d.qua'!
K:\iPod_Control\Artwork\Artwork.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48c3dd9b.qua'!
K:\Contacts\Contacts.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48bddd98.qua'!
K:\Notes\Notes.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48c3dd99.qua'!
K:\wow\Interface\AddOns\DBM_Karazhan\DBM_Karazhan.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '489cdd6c.qua'!
K:\wow\Interface\AddOns\DBM_Hyjal\DBM_Hyjal.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '49f06865.qua'!
K:\wow\Interface\AddOns\DBM_GUI\DBM_GUI.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '489cdd6d.qua'!
K:\wow\Interface\AddOns\DBM_BlackTemple\DBM_BlackTemple.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '49f06866.qua'!
K:\wow\Interface\AddOns\DBM_Battlegrounds\DBM_Battlegrounds.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '489cdd6e.qua'!
K:\wow\Interface\AddOns\DBM_API\DBM_API.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '49f06867.qua'!
K:\wow\Interface\AddOns\DBM_API\Textures\Textures.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48c7dd91.qua'!
K:\wow\Interface\AddOns\DBM_TheEye\DBM_TheEye.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '489cdd6f.qua'!
K:\wow\Interface\AddOns\DBM_Serpentshrine\DBM_Serpentshrine.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '49f06878.qua'!
K:\wow\Interface\AddOns\DBM_Other\DBM_Other.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '489cdd71.qua'!
K:\wow\Interface\AddOns\KLHThreatMeter\KLHThreatMeter.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '4897dd7a.qua'!
K:\wow\Interface\AddOns\KLHThreatMeter\Readme\Readme.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48b0dd93.qua'!
K:\wow\Interface\AddOns\KLHThreatMeter\Readme\Old Changelogs\Old Changelogs.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48b3dd9a.qua'!
K:\wow\Interface\AddOns\KLHThreatMeter\Code\Code.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48b3dd9e.qua'!
K:\wow\Interface\AddOns\KLHThreatMeter\Code\Services\Services.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48c1dd94.qua'!
K:\wow\Interface\AddOns\KLHThreatMeter\Code\NewGui\NewGui.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48c6dd95.qua'!
K:\wow\Interface\AddOns\KLHThreatMeter\Code\NewGui\MenuItems\MenuItems.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48bddd95.qua'!
K:\wow\Interface\AddOns\KLHThreatMeter\Code\Localisation\Localisation.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48b2dd9f.qua'!
K:\wow\Interface\AddOns\KLHThreatMeter\Code\Framework\Framework.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48b0dda3.qua'!
K:\wow\Interface\AddOns\KLHThreatMeter\Code\Bosses\Bosses.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48c2dda0.qua'!
K:\wow\Interface\AddOns\KLHThreatMeter\Code\Bosses\Wizard\Wizard.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48c9dd9a.qua'!
K:\wow\Interface\AddOns\KLHThreatMeter\Code\Abilities\Abilities.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48b8dd94.qua'!
K:\wow\Interface\AddOns\BonusScanner\BonusScanner.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48bddda1.qua'!
K:\wow\Interface\AddOns\TitanXP\TitanXP.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '49af6894.qua'!
K:\wow\Interface\AddOns\TitanRider\TitanRider.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48c3dd9c.qua'!
K:\wow\Interface\AddOns\TitanRepair\TitanRepair.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '49af6895.qua'!
K:\wow\Interface\AddOns\TitanRegen\TitanRegen.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48c3dd9e.qua'!
K:\wow\Interface\AddOns\TitanPerformance\TitanPerformance.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '49af6897.qua'!
K:\wow\Interface\AddOns\TitanMoney\TitanMoney.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48c3dd9d.qua'!
K:\wow\Interface\AddOns\TitanLootType\TitanLootType.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '49af6896.qua'!
K:\wow\Interface\AddOns\TitanItemBonuses\TitanItemBonuses.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48c3dd9f.qua'!
K:\wow\Interface\AddOns\TitanCoords\TitanCoords.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48c3dd90.qua'!
K:\wow\Interface\AddOns\TitanClock\TitanClock.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '49af6899.qua'!
K:\wow\Interface\AddOns\TitanBag\TitanBag.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48c3dd92.qua'!
K:\wow\Interface\AddOns\TitanAmmo\TitanAmmo.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '49af689b.qua'!
K:\wow\Interface\AddOns\Titan\Titan.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '49af68a8.qua'!
K:\wow\Interface\AddOns\Titan\TitanXP\TitanXP.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '49ae6098.qua'!
K:\wow\Interface\AddOns\Titan\TitanRider\TitanRider.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48c3dda0.qua'!
K:\wow\Interface\AddOns\Titan\TitanRepair\TitanRepair.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '49ae0931.qua'!
K:\wow\Interface\AddOns\Titan\TitanRegen\TitanRegen.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48c3dda2.qua'!
K:\wow\Interface\AddOns\Titan\TitanPerformance\TitanPerformance.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48c3dda1.qua'!
K:\wow\Interface\AddOns\Titan\TitanMoney\TitanMoney.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '49ae0932.qua'!
K:\wow\Interface\AddOns\Titan\TitanLootType\TitanLootType.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48c3dda3.qua'!
K:\wow\Interface\AddOns\Titan\TitanItemBonuses\TitanItemBonuses.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '49ae0933.qua'!
K:\wow\Interface\AddOns\Titan\TitanCoords\TitanCoords.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48c3dda4.qua'!
K:\wow\Interface\AddOns\Titan\TitanClock\TitanClock.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '49ae609b.qua'!
K:\wow\Interface\AddOns\Titan\TitanBag\TitanBag.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '49ae609d.qua'!
K:\wow\Interface\AddOns\Titan\TitanAmmo\TitanAmmo.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '49ae609c.qua'!
K:\wow\Interface\AddOns\Titan\Artwork\Artwork.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48c3ddac.qua'!
K:\wow\Interface\AddOns\MobInfo2\MobInfo2.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48b1ddaa.qua'!
K:\wow\Interface\AddOns\AtlasLoot\AtlasLoot.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48bbddaf.qua'!
K:\wow\Interface\AddOns\AtlasLoot\WorldBosses\WorldBosses.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48c1ddaa.qua'!
K:\wow\Interface\AddOns\AtlasLoot\TableRegister\TableRegister.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48b1dd9d.qua'!
K:\wow\Interface\AddOns\AtlasLoot\Sets\Sets.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '49ae609a.qua'!
K:\wow\Interface\AddOns\AtlasLoot\Reputation\Reputation.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48bfdda1.qua'!
K:\wow\Interface\AddOns\AtlasLoot\PvP\PvP.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '489fddb3.qua'!
K:\wow\Interface\AddOns\AtlasLoot\Libs\Tablet-2.0\Tablet-2.0`.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48b1dd9e.qua'!
K:\wow\Interface\AddOns\AtlasLoot\Libs\FuBarPlugin-2.0\FuBarPlugin-2.0`.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '4891ddb3.qua'!
K:\wow\Interface\AddOns\AtlasLoot\Libs\Dewdrop-2.0\Dewdrop-2.0`.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48c6dda3.qua'!
K:\wow\Interface\AddOns\AtlasLoot\Libs\Babble-Zone-2.2\Babble-Zone-2.2`.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48b1dd9f.qua'!
K:\wow\Interface\AddOns\AtlasLoot\Libs\Babble-Tradeskill-2.2\Babble-Tradeskill-2.2`.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '49df1948.qua'!
K:\wow\Interface\AddOns\AtlasLoot\Libs\Babble-Inventory-2.2\Babble-Inventory-2.2`.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48b1dda0.qua'!
K:\wow\Interface\AddOns\AtlasLoot\Libs\Babble-Faction-2.2\Babble-Faction-2.2`.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '49df01e1.qua'!
K:\wow\Interface\AddOns\AtlasLoot\Libs\Babble-Class-2.2\Babble-Class-2.2`.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48b1dda2.qua'!
K:\wow\Interface\AddOns\AtlasLoot\Libs\Babble-Boss-2.2\Babble-Boss-2.2`.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48b1dda1.qua'!
K:\wow\Interface\AddOns\AtlasLoot\Libs\AceOO-2.0\AceOO-2.0`.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48b4dda3.qua'!
K:\wow\Interface\AddOns\AtlasLoot\Libs\AceLocale-2.2\AceLocale-2.2`.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '49da01e4.qua'!
K:\wow\Interface\AddOns\AtlasLoot\Libs\AceLibrary\AceLibrary.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48b4dda4.qua'!
K:\wow\Interface\AddOns\AtlasLoot\Libs\AceEvent-2.0\AceEvent-2.0`.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '49da01e5.qua'!
K:\wow\Interface\AddOns\AtlasLoot\Libs\AceDB-2.0\AceDB-2.0`.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48b4dda6.qua'!
K:\wow\Interface\AddOns\AtlasLoot\Libs\AceAddon-2.0\AceAddon-2.0`.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48b4dda5.qua'!
K:\wow\Interface\AddOns\AtlasLoot\Instances\Instances.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48c2ddb0.qua'!
K:\wow\Interface\AddOns\AtlasLoot\Images\Images.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48b0ddaf.qua'!
K:\wow\Interface\AddOns\AtlasLoot\Documentation\Documentation.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48b2ddb2.qua'!
K:\wow\Interface\AddOns\AtlasLoot\DefaultFrame\DefaultFrame.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48b5dda8.qua'!
K:\wow\Interface\AddOns\AtlasLoot\Core\Core.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48c1ddb3.qua'!
K:\wow\Interface\AddOns\AtlasLoot\Constants\Constants.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48bdddb3.qua'!
K:\wow\Interface\AddOns\AtlasLoot\Bossnames\Bossnames.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48c2ddb3.qua'!
K:\wow\Interface\AddOns\AtlasLoot\Add_Ons\Add_Ons.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48b3dda9.qua'!
K:\wow\Interface\AddOns\DamageMeters\DamageMeters.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48bcdda6.qua'!
K:\wow\Interface\AddOns\DamageMeters\TitanDamageMeters\TitanDamageMeters.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48c3ddae.qua'!
K:\wow\Interface\AddOns\DamageMeters\TitanDamageMeters\Skin\Skin.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48b8ddb1.qua'!
K:\wow\Interface\AddOns\DamageMeters\ChatThrottleLib\ChatThrottleLib.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48b0ddae.qua'!
K:\wow\Interface\AddOns\GuildEventManager2\GuildEventManager2.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48b8ddbc.qua'!
K:\wow\Interface\AddOns\GuildEventManager2\images\fr\fr.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '487dddb9.qua'!
K:\wow\Interface\AddOns\GuildEventManager2\images\en\en.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '487dddb5.qua'!
K:\wow\Interface\AddOns\Blizzard_TrainerUI\Blizzard_TrainerUI.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48b8ddb4.qua'!
K:\wow\Interface\AddOns\Blizzard_TradeSkillUI\Blizzard_TradeSkillUI.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '49d411d5.qua'!
K:\wow\Interface\AddOns\Blizzard_TalentUI\Blizzard_TalentUI.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48b8ddb6.qua'!
K:\wow\Interface\AddOns\Blizzard_RaidUI\Blizzard_RaidUI.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48b8ddb5.qua'!
K:\wow\Interface\AddOns\Blizzard_MacroUI\Blizzard_MacroUI.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '49d411d6.qua'!
K:\wow\Interface\AddOns\Blizzard_ItemSocketingUI\Blizzard_ItemSocketingUI.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48b8ddb7.qua'!
K:\wow\Interface\AddOns\Blizzard_InspectUI\Blizzard_InspectUI.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '49d411d8.qua'!
K:\wow\Interface\AddOns\Blizzard_GMSurveyUI\Blizzard_GMSurveyUI.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '49d411d7.qua'!
K:\wow\Interface\AddOns\Blizzard_CraftUI\Blizzard_CraftUI.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48b8ddb8.qua'!
K:\wow\Interface\AddOns\Blizzard_CombatText\Blizzard_CombatText.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48b8ddb9.qua'!
K:\wow\Interface\AddOns\Blizzard_BindingUI\Blizzard_BindingUI.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '49d411da.qua'!
K:\wow\Interface\AddOns\Blizzard_BattlefieldMinimap\Blizzard_BattlefieldMinimap.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48b8ddbb.qua'!
K:\wow\Interface\AddOns\Blizzard_AuctionUI\Blizzard_AuctionUI.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '49d411d9.qua'!
K:\wow\wow\frFR\frFR.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '4895ddbf.qua'!
K:\wow\wow\frFR\WTF\WTF.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '4895dda1.qua'!
K:\wow\wow\frFR\Documentation\Documentation.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48b2ddbc.qua'!
K:\wow\wow\frFR\Documentation\Troubleshooting\Troubleshooting.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48beddc0.qua'!
K:\wow\wow\frFR\Documentation\Support\Support.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48bfddc3.qua'!
K:\wow\wow\frFR\Documentation\ReadMe\ReadMe.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48b0ddb4.qua'!
K:\wow\wow\frFR\Documentation\Layout\Layout.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48c8ddb0.qua'!
K:\wow\wow\frFR\Documentation\Images\Images.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48b0ddbd.qua'!
K:\wow\wow\frFR\Documentation\Images	itles	itles.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48c3ddba.qua'!
K:\wow\wow\frFR\Documentation\Images\buttons\buttons.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48c3ddc6.qua'!
K:\wow\wow\frFR\Interface\Cinematics\Cinematics.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48bdddbb.qua'!
K:\wow\WoW-BurningCrusade-frFR-Slim-Installer\WoW-BurningCrusade-frFR-Slim-Installer.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48a6ddc2.qua'!
K:\wow\Screenshots\Screenshots.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48c1ddb8.qua'!
K:\wow\Patches\WoW-2.1.3-to-2.2.0-frFR-Win-patch\WoW-2.1.3-to-2.2.0-frFR-Win-patch`.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48a6ddc5.qua'!
K:\wow\Patches\WoW-2.0.12-to-2.1.0-frFR-Win-patch\WoW-2.0.12-to-2.1.0-frFR-Win-patch`.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '49cec90e.qua'!
K:\wow\Patches\WoW-2.0.0-to-2.0.3-frFR-Win-patch\WoW-2.0.0-to-2.0.3-frFR-Win-patch`.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48a6ddc6.qua'!
K:\Photos\Thumbs\Thumbs.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48c4ddbf.qua'!
K:
ana\Musiques\The Trinity_By_Paco\The Trinity_By_Paco.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48b4ddc7.qua'!
K:
ana\OpenOffice.org 2.1 Installation Files\java\java.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48c5df9c.qua'!
K:
ana\OpenOffice.org 2.1 Installation Fileseadmeseadmes.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48b0dfa1.qua'!
K:
ana\OpenOffice.org 2.1 Installation Files\licenses\licenses.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48b2dfa5.qua'!
K:
ana\WoW-2.0.0-frFR-Installer\WoW-2.0.0-frFR-Installer`.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48a6dfac.qua'!
K:
ana\autres\autres.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48c3dfb9.qua'!
K:
ana\photo\mouss\mouss.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48c4dfbf.qua'!
K:
ana\photo\ballade\ballade.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48bbdfbd.qua'!
K:
ana\photo\corse\corse.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48c1e00d.qua'!
K:
ana\photo\corse\corse a imprimer\corse a imprimer.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48c1e022.qua'!
K:
ana\photo\irlande\irlande.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48bbe02f.qua'!
K:
ana\photo\autres\autres.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48c3e034.qua'!
K:
ana\photo\autres\maman\maman.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48bce025.qua'!
K:
ana\photo\autres	oulouse	oulouse.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48c4e037.qua'!
K:
ana\photo\autres\ant\ant.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48c3e039.qua'!
K:
ana\instal word\WINDOWS\WINDOWS.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '489de0ad.qua'!
K:
ana\instal word\WINDOWS\SHELLNEW\SHELLNEW.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '4894e0ae.qua'!
K:
ana\instal word\WINDOWS\MSAGENT\MSAGENT.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '4890e0ba.qua'!
K:
ana\instal word\WINDOWS\MSAGENT\INTL\INTL.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48a3e0b5.qua'!
K:
ana\instal word\WINDOWS\MEDIA\OFFICE2K\OFFICE2K.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '4895e0af.qua'!
K:
ana\instal word\WINDOWS\INF\INF.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '4895e0b8.qua'!
K:
ana\instal word\WINDOWS\HELP\HELP.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '489be0b0.qua'!
K:
ana\instal word\WINDOWS\FONTS\FONTS.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '489de0bb.qua'!
K:
ana\instal word\SYSTEMNT\SYSTEMNT.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48a2e0c5.qua'!
K:
ana\instal word\SYSTEMNT\WINFAX\WINFAX.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '489de0b6.qua'!
K:
ana\instal word\SYSTEMNT\VIEWERS\VIEWERS.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '4894e0b8.qua'!
K:
ana\instal word\SYSTEM95\SYSTEM95.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48a2e0c9.qua'!
K:
ana\instal word\SYSTEM95\VIEWERS\VIEWERS.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '4894e0bb.qua'!
K:
ana\instal word\SYSTEM\SYSTEM.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48a2e0e2.qua'!
K:
ana\instal word\SQL\X86\SYSTEM\SYSTEM.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48a2e0e4.qua'!
K:
ana\instal word\SQL\X86\SYSTEM\WINNT\WINNT.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '489de0d5.qua'!
K:
ana\instal word\SQL\X86\SYSTEM\WIN9X\WIN9X.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '489de0d6.qua'!
K:
ana\instal word\SQL\X86\SETUP\SETUP.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48a3e0d5.qua'!
K:
ana\instal word\SQL\X86\OTHER\OTHER.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '4897e0e6.qua'!
K:
ana\instal word\SQL\X86\DATA\DATA.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48a3e0d4.qua'!
K:\WoW-1.12.x-to-2.0.1-frFR-patch\Updater.app\Contents\Contents.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48bde107.qua'!
K:\WoW-1.12.x-to-2.0.1-frFR-patch\Updater.app\Contents\Resources\Resources.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48c2e0fe.qua'!
K:\WoW-1.12.x-to-2.0.1-frFR-patch\Updater.app\Contents\Resources\zh_TW.lproj\zh_TW.lproj`.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48aee102.qua'!
K:\WoW-1.12.x-to-2.0.1-frFR-patch\Updater.app\Contents\Resources\zh_CN.lproj\zh_CN.lproj`.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48aee103.qua'!
K:\WoW-1.12.x-to-2.0.1-frFR-patch\Updater.app\Contents\Resources\Korean.lproj\Korean.lproj`.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48c1e10a.qua'!
K:\WoW-1.12.x-to-2.0.1-frFR-patch\Updater.app\Contents\Resources\German.lproj\German.lproj`.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48c1e101.qua'!
K:\WoW-1.12.x-to-2.0.1-frFR-patch\Updater.app\Contents\Resources\French.lproj\French.lproj`.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48b4e10e.qua'!
K:\WoW-1.12.x-to-2.0.1-frFR-patch\Updater.app\Contents\Resources\English.lproj\English.lproj`.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48b6e10b.qua'!
K:\WoW-1.12.x-to-2.0.1-frFR-patch\Updater.app\Contents\MacOSClassic\MacOSClassic.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48b2e0ff.qua'!
K:
ana pharma
ana pharma.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48bde0ff.qua'!
K:
ana pharma
ana pharma
ana pharma.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48bde100.qua'!
K:
ana pharma
ana pharma\glaucome\glaucome.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48b0e10c.qua'!


End of the scan: mercredi 11 juin 2008  16:26
Used time: 15:50 min

The scan has been done completely.

    243 Scanning directories
  47377 Files were scanned
    209 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
      0 files were deleted
      0 files were repaired
    209 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
  47168 Files not concerned
    445 Archives were scanned
      0 Warnings
    209 Notes

Celui Hijackthis 

Logfile of HijackThis v1.99.1
Scan saved at 17:13:00, on 11/06/2008
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32
vsvc32.exe
C:\WINDOWS\System32\MsPMSPSv.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\System32\RUNDLL32.EXE
C:\Program Files\Roxio\Easy CD Creator 6\AudioCentral\RxMon.exe
C:\PROGRA~1\WANADOO\CnxMon.exe
C:\PROGRA~1\WANADOO\TaskbarIcon.exe
C:\WINDOWS\System32\ctfmon.exe
C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
C:\Program Files\Roxio\Easy CD Creator 6\AudioCentral\Playlist.exe
C:\WINDOWS\System32\wuauclt.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\WINDOWS\system32\ZONELABS\vsmon.exe
C:\Program Files\Teamspeak2_RC2\TeamSpeak.exe
C:\DOCUME~1	g\LOCALS~1\Temp\Blizzard Installer Bootstrap - 0008cffb\Installer.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\System32\wuauclt.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avcenter.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\System32\imapi.exe
C:\Documents and Settings	g\Local Settings\Temp\Répertoire temporaire 2 pour hijackthis_199.zip\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.update.microsoft.com/windowsupdate/v6/default.aspx
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\WANADOO\SEARCH~1.DLL
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [Windows Update] C:\WINDOWS\System32\lvdlsa.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [RoxioEngineUtility] "C:\Program Files\Fichiers communs\Roxio Shared\System\EngUtil.exe"
O4 - HKLM\..\Run: [RoxioAudioCentral] "C:\Program Files\Roxio\Easy CD Creator 6\AudioCentral\RxMon.exe"
O4 - HKLM\..\Run: [WooCnxMon] C:\PROGRA~1\WANADOO\CnxMon.exe
O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\WANADOO\Watch.exe
O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\WANADOO\TaskbarIcon.exe
O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [DXDllRegExe] C:\WINDOWS\System32\dxdllreg.exe 
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe
O4 - Global Startup: DSLMON.lnk = C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\webelated.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\webelated.htm
O9 - Extra button: Wanadoo - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - https://www.orange.fr/portail (file missing) (HKCU)
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v5consumer/V5Controls/en/x86/client/wuweb_site.cab?1100635444078
O17 - HKLM\System\CCS\Services\Tcpip\..\{BB7FB27A-9077-433F-A975-7EC2814AFAA8}: NameServer = 80.10.246.130 81.253.149.10
O23 - Service: Avira AntiVir Personal – Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal – Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32
vsvc32.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZONELABS\vsmon.exe

Piopascontent · Answer

Attention les rapports sont long ^^ !

Avira : 



Avira AntiVir Personal
Report file date: mercredi 11 juin 2008  16:11

Scanning for 1165085 virus strains and unwanted programs.

Licensed to:      Avira AntiVir PersonalEdition Classic
Serial number:    0000149996-ADJIE-0001
Platform:         Windows XP
Windows version:  (Service Pack 1)  [5.1.2600]
Boot mode:        Save mode
Username:         tg
Computer name:    PROPRI-9ZE5EA3N

Version information:
BUILD.DAT     : 8.1.00.295      16479 Bytes  09/04/2008 16:24:00
AVSCAN.EXE    : 8.1.2.12       311553 Bytes  18/03/2008 09:02:58
AVSCAN.DLL    : 8.1.1.0         53505 Bytes  07/02/2008 08:43:38
LUKE.DLL      : 8.1.2.9        151809 Bytes  28/02/2008 08:41:24
LUKERES.DLL   : 8.1.2.1         12033 Bytes  21/02/2008 08:28:42
ANTIVIR0.VDF  : 6.40.0.0     11030528 Bytes  18/07/2007 10:33:34
ANTIVIR1.VDF  : 7.0.3.2       5447168 Bytes  07/03/2008 13:08:58
ANTIVIR2.VDF  : 7.0.3.62       337408 Bytes  21/03/2008 19:12:34
ANTIVIR3.VDF  : 7.0.3.68        57856 Bytes  25/03/2008 08:27:50
Engineversion : 8.1.0.28  
AEVDF.DLL     : 8.1.0.5        102772 Bytes  25/02/2008 09:58:22
AESCRIPT.DLL  : 8.1.0.19       229754 Bytes  07/04/2008 15:34:46
AESCN.DLL     : 8.1.0.12       115060 Bytes  07/04/2008 15:34:46
AERDL.DLL     : 8.1.0.19       418164 Bytes  07/04/2008 15:34:46
AEPACK.DLL    : 8.1.1.0        364918 Bytes  18/03/2008 11:20:44
AEOFFICE.DLL  : 8.1.0.15       192889 Bytes  07/04/2008 15:34:46
AEHEUR.DLL    : 8.1.0.15      1147253 Bytes  07/04/2008 15:34:46
AEHELP.DLL    : 8.1.0.11       115061 Bytes  07/04/2008 15:34:44
AEGEN.DLL     : 8.1.0.15       299379 Bytes  07/04/2008 15:34:44
AEEMU.DLL     : 8.1.0.5        430450 Bytes  07/04/2008 15:34:44
AECORE.DLL    : 8.1.0.25       168309 Bytes  08/04/2008 09:58:34
AVWINLL.DLL   : 1.0.0.7         14593 Bytes  23/01/2008 17:07:54
AVPREF.DLL    : 8.0.0.1         25857 Bytes  18/02/2008 10:37:52
AVREP.DLL     : 7.0.0.1        155688 Bytes  16/04/2007 13:26:48
AVREG.DLL     : 8.0.0.0         30977 Bytes  23/01/2008 17:07:50
AVARKT.DLL    : 1.0.0.23       307457 Bytes  12/02/2008 08:29:24
AVEVTLOG.DLL  : 8.0.0.11       114945 Bytes  28/02/2008 08:31:32
SQLITE3.DLL   : 3.3.17.1       339968 Bytes  22/01/2008 17:28:04
SMTPLIB.DLL   : 1.2.0.19        28929 Bytes  23/01/2008 17:08:40
NETNT.DLL     : 8.0.0.1          7937 Bytes  25/01/2008 12:05:12
RCIMAGE.DLL   : 8.0.0.35      2371841 Bytes  10/03/2008 14:37:26
RCTEXT.DLL    : 8.0.32.0        86273 Bytes  06/03/2008 12:02:12

Configuration settings for the scan:
Jobname..........................: ShlExt
Configuration file...............: C:\DOCUME~1	g\LOCALS~1\Temp\db91cae0.avp
Logging..........................: low
Primary action...................: interactive
Secondary action.................: ignore
Scan master boot sector..........: on
Scan boot sector.................: on
Boot sectors.....................: K:, 
Scan memory......................: on
Process scan.....................: off
Scan registry....................: off
Search for rootkits..............: off
Scan all files...................: Intelligent file selection
Scan archives....................: on
Recursion depth..................: 20
Smart extensions.................: on
Macro heuristic..................: on
File heuristic...................: medium

Start of the scan: mercredi 11 juin 2008  16:11

Starting the file scan:

Begin scan in 'K:\' <IPOD>
K:\iPod_Control\Music\F06\F06.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '4885dd3a.qua'!
K:\iPod_Control\Music\F07\F07.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '4886dd3d.qua'!
K:\iPod_Control\Music\F08\F08.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '4887dd3f.qua'!
K:\iPod_Control\Music\F09\F09.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '4888dd41.qua'!
K:\iPod_Control\Music\F10\F10.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '487fdd44.qua'!
K:\iPod_Control\Music\F11\F11.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '4880dd4a.qua'!
K:\iPod_Control\Music\F12\F12.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '4881dd4a.qua'!
K:\iPod_Control\Music\F13\F13.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '4882dd4b.qua'!
K:\iPod_Control\Music\F14\F14.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '4883dd4b.qua'!
K:\iPod_Control\Music\F15\F15.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '4884dd4c.qua'!
K:\iPod_Control\Music\F16\F16.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '4885dd4c.qua'!
K:\iPod_Control\Music\F17\F17.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '4886dd4c.qua'!
K:\iPod_Control\Music\F18\F18.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '4887dd4d.qua'!
K:\iPod_Control\Music\F19\F19.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '4888dd4d.qua'!
K:\iPod_Control\Music\F20\F20.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '487fdd4e.qua'!
K:\iPod_Control\Music\F21\F21.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '4880dd4f.qua'!
K:\iPod_Control\Music\F22\F22.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '4881dd4f.qua'!
K:\iPod_Control\Music\F23\F23.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '4882dd50.qua'!
K:\iPod_Control\Music\F24\F24.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '4883dd50.qua'!
K:\iPod_Control\Music\F25\F25.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '4884dd50.qua'!
K:\iPod_Control\Music\F26\F26.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '4885dd51.qua'!
K:\iPod_Control\Music\F27\F27.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '4886dd51.qua'!
K:\iPod_Control\Music\F28\F28.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '4887dd52.qua'!
K:\iPod_Control\Music\F29\F29.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '4888dd52.qua'!
K:\iPod_Control\Music\F30\F30.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '487fdd54.qua'!
K:\iPod_Control\Music\F31\F31.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '4880dd54.qua'!
K:\iPod_Control\Music\F32\F32.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '4881dd54.qua'!
K:\iPod_Control\Music\F33\F33.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '4882dd55.qua'!
K:\iPod_Control\Music\F34\F34.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '4883dd55.qua'!
K:\iPod_Control\Music\F35\F35.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '4884dd56.qua'!
K:\iPod_Control\Music\F36\F36.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '4885dd56.qua'!
K:\iPod_Control\Music\F37\F37.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '4886dd56.qua'!
K:\iPod_Control\Music\F38\F38.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '4887dd57.qua'!
K:\iPod_Control\Music\F39\F39.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '4888dd57.qua'!
K:\iPod_Control\Music\F41\F41.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '4880dd59.qua'!
K:\iPod_Control\Music\F42\F42.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '4881dd59.qua'!
K:\iPod_Control\Music\F43\F43.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '4882dd5a.qua'!
K:\iPod_Control\Music\F44\F44.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '4883dd5a.qua'!
K:\iPod_Control\Music\F45\F45.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '4884dd5b.qua'!
K:\iPod_Control\Music\F46\F46.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '4885dd5b.qua'!
K:\iPod_Control\Music\F47\F47.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '4886dd5c.qua'!
K:\iPod_Control\Music\F48\F48.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '4887dd5c.qua'!
K:\iPod_Control\Music\F49\F49.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '4888dd5d.qua'!
K:\iPod_Control\Artwork\Artwork.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48c3dd9b.qua'!
K:\Contacts\Contacts.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48bddd98.qua'!
K:\Notes\Notes.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48c3dd99.qua'!
K:\wow\Interface\AddOns\DBM_Karazhan\DBM_Karazhan.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '489cdd6c.qua'!
K:\wow\Interface\AddOns\DBM_Hyjal\DBM_Hyjal.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '49f06865.qua'!
K:\wow\Interface\AddOns\DBM_GUI\DBM_GUI.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '489cdd6d.qua'!
K:\wow\Interface\AddOns\DBM_BlackTemple\DBM_BlackTemple.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '49f06866.qua'!
K:\wow\Interface\AddOns\DBM_Battlegrounds\DBM_Battlegrounds.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '489cdd6e.qua'!
K:\wow\Interface\AddOns\DBM_API\DBM_API.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '49f06867.qua'!
K:\wow\Interface\AddOns\DBM_API\Textures\Textures.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48c7dd91.qua'!
K:\wow\Interface\AddOns\DBM_TheEye\DBM_TheEye.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '489cdd6f.qua'!
K:\wow\Interface\AddOns\DBM_Serpentshrine\DBM_Serpentshrine.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '49f06878.qua'!
K:\wow\Interface\AddOns\DBM_Other\DBM_Other.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '489cdd71.qua'!
K:\wow\Interface\AddOns\KLHThreatMeter\KLHThreatMeter.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '4897dd7a.qua'!
K:\wow\Interface\AddOns\KLHThreatMeter\Readme\Readme.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48b0dd93.qua'!
K:\wow\Interface\AddOns\KLHThreatMeter\Readme\Old Changelogs\Old Changelogs.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48b3dd9a.qua'!
K:\wow\Interface\AddOns\KLHThreatMeter\Code\Code.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48b3dd9e.qua'!
K:\wow\Interface\AddOns\KLHThreatMeter\Code\Services\Services.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48c1dd94.qua'!
K:\wow\Interface\AddOns\KLHThreatMeter\Code\NewGui\NewGui.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48c6dd95.qua'!
K:\wow\Interface\AddOns\KLHThreatMeter\Code\NewGui\MenuItems\MenuItems.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48bddd95.qua'!
K:\wow\Interface\AddOns\KLHThreatMeter\Code\Localisation\Localisation.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48b2dd9f.qua'!
K:\wow\Interface\AddOns\KLHThreatMeter\Code\Framework\Framework.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48b0dda3.qua'!
K:\wow\Interface\AddOns\KLHThreatMeter\Code\Bosses\Bosses.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48c2dda0.qua'!
K:\wow\Interface\AddOns\KLHThreatMeter\Code\Bosses\Wizard\Wizard.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48c9dd9a.qua'!
K:\wow\Interface\AddOns\KLHThreatMeter\Code\Abilities\Abilities.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48b8dd94.qua'!
K:\wow\Interface\AddOns\BonusScanner\BonusScanner.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48bddda1.qua'!
K:\wow\Interface\AddOns\TitanXP\TitanXP.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '49af6894.qua'!
K:\wow\Interface\AddOns\TitanRider\TitanRider.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48c3dd9c.qua'!
K:\wow\Interface\AddOns\TitanRepair\TitanRepair.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '49af6895.qua'!
K:\wow\Interface\AddOns\TitanRegen\TitanRegen.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48c3dd9e.qua'!
K:\wow\Interface\AddOns\TitanPerformance\TitanPerformance.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '49af6897.qua'!
K:\wow\Interface\AddOns\TitanMoney\TitanMoney.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48c3dd9d.qua'!
K:\wow\Interface\AddOns\TitanLootType\TitanLootType.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '49af6896.qua'!
K:\wow\Interface\AddOns\TitanItemBonuses\TitanItemBonuses.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48c3dd9f.qua'!
K:\wow\Interface\AddOns\TitanCoords\TitanCoords.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48c3dd90.qua'!
K:\wow\Interface\AddOns\TitanClock\TitanClock.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '49af6899.qua'!
K:\wow\Interface\AddOns\TitanBag\TitanBag.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48c3dd92.qua'!
K:\wow\Interface\AddOns\TitanAmmo\TitanAmmo.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '49af689b.qua'!
K:\wow\Interface\AddOns\Titan\Titan.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '49af68a8.qua'!
K:\wow\Interface\AddOns\Titan\TitanXP\TitanXP.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '49ae6098.qua'!
K:\wow\Interface\AddOns\Titan\TitanRider\TitanRider.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48c3dda0.qua'!
K:\wow\Interface\AddOns\Titan\TitanRepair\TitanRepair.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '49ae0931.qua'!
K:\wow\Interface\AddOns\Titan\TitanRegen\TitanRegen.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48c3dda2.qua'!
K:\wow\Interface\AddOns\Titan\TitanPerformance\TitanPerformance.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48c3dda1.qua'!
K:\wow\Interface\AddOns\Titan\TitanMoney\TitanMoney.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '49ae0932.qua'!
K:\wow\Interface\AddOns\Titan\TitanLootType\TitanLootType.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48c3dda3.qua'!
K:\wow\Interface\AddOns\Titan\TitanItemBonuses\TitanItemBonuses.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '49ae0933.qua'!
K:\wow\Interface\AddOns\Titan\TitanCoords\TitanCoords.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48c3dda4.qua'!
K:\wow\Interface\AddOns\Titan\TitanClock\TitanClock.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '49ae609b.qua'!
K:\wow\Interface\AddOns\Titan\TitanBag\TitanBag.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '49ae609d.qua'!
K:\wow\Interface\AddOns\Titan\TitanAmmo\TitanAmmo.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '49ae609c.qua'!
K:\wow\Interface\AddOns\Titan\Artwork\Artwork.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48c3ddac.qua'!
K:\wow\Interface\AddOns\MobInfo2\MobInfo2.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48b1ddaa.qua'!
K:\wow\Interface\AddOns\AtlasLoot\AtlasLoot.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48bbddaf.qua'!
K:\wow\Interface\AddOns\AtlasLoot\WorldBosses\WorldBosses.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48c1ddaa.qua'!
K:\wow\Interface\AddOns\AtlasLoot\TableRegister\TableRegister.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48b1dd9d.qua'!
K:\wow\Interface\AddOns\AtlasLoot\Sets\Sets.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '49ae609a.qua'!
K:\wow\Interface\AddOns\AtlasLoot\Reputation\Reputation.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48bfdda1.qua'!
K:\wow\Interface\AddOns\AtlasLoot\PvP\PvP.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '489fddb3.qua'!
K:\wow\Interface\AddOns\AtlasLoot\Libs\Tablet-2.0\Tablet-2.0`.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48b1dd9e.qua'!
K:\wow\Interface\AddOns\AtlasLoot\Libs\FuBarPlugin-2.0\FuBarPlugin-2.0`.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '4891ddb3.qua'!
K:\wow\Interface\AddOns\AtlasLoot\Libs\Dewdrop-2.0\Dewdrop-2.0`.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48c6dda3.qua'!
K:\wow\Interface\AddOns\AtlasLoot\Libs\Babble-Zone-2.2\Babble-Zone-2.2`.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48b1dd9f.qua'!
K:\wow\Interface\AddOns\AtlasLoot\Libs\Babble-Tradeskill-2.2\Babble-Tradeskill-2.2`.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '49df1948.qua'!
K:\wow\Interface\AddOns\AtlasLoot\Libs\Babble-Inventory-2.2\Babble-Inventory-2.2`.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48b1dda0.qua'!
K:\wow\Interface\AddOns\AtlasLoot\Libs\Babble-Faction-2.2\Babble-Faction-2.2`.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '49df01e1.qua'!
K:\wow\Interface\AddOns\AtlasLoot\Libs\Babble-Class-2.2\Babble-Class-2.2`.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48b1dda2.qua'!
K:\wow\Interface\AddOns\AtlasLoot\Libs\Babble-Boss-2.2\Babble-Boss-2.2`.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48b1dda1.qua'!
K:\wow\Interface\AddOns\AtlasLoot\Libs\AceOO-2.0\AceOO-2.0`.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48b4dda3.qua'!
K:\wow\Interface\AddOns\AtlasLoot\Libs\AceLocale-2.2\AceLocale-2.2`.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '49da01e4.qua'!
K:\wow\Interface\AddOns\AtlasLoot\Libs\AceLibrary\AceLibrary.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48b4dda4.qua'!
K:\wow\Interface\AddOns\AtlasLoot\Libs\AceEvent-2.0\AceEvent-2.0`.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '49da01e5.qua'!
K:\wow\Interface\AddOns\AtlasLoot\Libs\AceDB-2.0\AceDB-2.0`.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48b4dda6.qua'!
K:\wow\Interface\AddOns\AtlasLoot\Libs\AceAddon-2.0\AceAddon-2.0`.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48b4dda5.qua'!
K:\wow\Interface\AddOns\AtlasLoot\Instances\Instances.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48c2ddb0.qua'!
K:\wow\Interface\AddOns\AtlasLoot\Images\Images.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48b0ddaf.qua'!
K:\wow\Interface\AddOns\AtlasLoot\Documentation\Documentation.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48b2ddb2.qua'!
K:\wow\Interface\AddOns\AtlasLoot\DefaultFrame\DefaultFrame.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48b5dda8.qua'!
K:\wow\Interface\AddOns\AtlasLoot\Core\Core.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48c1ddb3.qua'!
K:\wow\Interface\AddOns\AtlasLoot\Constants\Constants.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48bdddb3.qua'!
K:\wow\Interface\AddOns\AtlasLoot\Bossnames\Bossnames.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48c2ddb3.qua'!
K:\wow\Interface\AddOns\AtlasLoot\Add_Ons\Add_Ons.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48b3dda9.qua'!
K:\wow\Interface\AddOns\DamageMeters\DamageMeters.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48bcdda6.qua'!
K:\wow\Interface\AddOns\DamageMeters\TitanDamageMeters\TitanDamageMeters.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48c3ddae.qua'!
K:\wow\Interface\AddOns\DamageMeters\TitanDamageMeters\Skin\Skin.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48b8ddb1.qua'!
K:\wow\Interface\AddOns\DamageMeters\ChatThrottleLib\ChatThrottleLib.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48b0ddae.qua'!
K:\wow\Interface\AddOns\GuildEventManager2\GuildEventManager2.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48b8ddbc.qua'!
K:\wow\Interface\AddOns\GuildEventManager2\images\fr\fr.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '487dddb9.qua'!
K:\wow\Interface\AddOns\GuildEventManager2\images\en\en.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '487dddb5.qua'!
K:\wow\Interface\AddOns\Blizzard_TrainerUI\Blizzard_TrainerUI.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48b8ddb4.qua'!
K:\wow\Interface\AddOns\Blizzard_TradeSkillUI\Blizzard_TradeSkillUI.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '49d411d5.qua'!
K:\wow\Interface\AddOns\Blizzard_TalentUI\Blizzard_TalentUI.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48b8ddb6.qua'!
K:\wow\Interface\AddOns\Blizzard_RaidUI\Blizzard_RaidUI.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48b8ddb5.qua'!
K:\wow\Interface\AddOns\Blizzard_MacroUI\Blizzard_MacroUI.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '49d411d6.qua'!
K:\wow\Interface\AddOns\Blizzard_ItemSocketingUI\Blizzard_ItemSocketingUI.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48b8ddb7.qua'!
K:\wow\Interface\AddOns\Blizzard_InspectUI\Blizzard_InspectUI.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '49d411d8.qua'!
K:\wow\Interface\AddOns\Blizzard_GMSurveyUI\Blizzard_GMSurveyUI.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '49d411d7.qua'!
K:\wow\Interface\AddOns\Blizzard_CraftUI\Blizzard_CraftUI.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48b8ddb8.qua'!
K:\wow\Interface\AddOns\Blizzard_CombatText\Blizzard_CombatText.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48b8ddb9.qua'!
K:\wow\Interface\AddOns\Blizzard_BindingUI\Blizzard_BindingUI.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '49d411da.qua'!
K:\wow\Interface\AddOns\Blizzard_BattlefieldMinimap\Blizzard_BattlefieldMinimap.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48b8ddbb.qua'!
K:\wow\Interface\AddOns\Blizzard_AuctionUI\Blizzard_AuctionUI.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '49d411d9.qua'!
K:\wow\wow\frFR\frFR.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '4895ddbf.qua'!
K:\wow\wow\frFR\WTF\WTF.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '4895dda1.qua'!
K:\wow\wow\frFR\Documentation\Documentation.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48b2ddbc.qua'!
K:\wow\wow\frFR\Documentation\Troubleshooting\Troubleshooting.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48beddc0.qua'!
K:\wow\wow\frFR\Documentation\Support\Support.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48bfddc3.qua'!
K:\wow\wow\frFR\Documentation\ReadMe\ReadMe.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48b0ddb4.qua'!
K:\wow\wow\frFR\Documentation\Layout\Layout.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48c8ddb0.qua'!
K:\wow\wow\frFR\Documentation\Images\Images.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48b0ddbd.qua'!
K:\wow\wow\frFR\Documentation\Images	itles	itles.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48c3ddba.qua'!
K:\wow\wow\frFR\Documentation\Images\buttons\buttons.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48c3ddc6.qua'!
K:\wow\wow\frFR\Interface\Cinematics\Cinematics.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48bdddbb.qua'!
K:\wow\WoW-BurningCrusade-frFR-Slim-Installer\WoW-BurningCrusade-frFR-Slim-Installer.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48a6ddc2.qua'!
K:\wow\Screenshots\Screenshots.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48c1ddb8.qua'!
K:\wow\Patches\WoW-2.1.3-to-2.2.0-frFR-Win-patch\WoW-2.1.3-to-2.2.0-frFR-Win-patch`.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48a6ddc5.qua'!
K:\wow\Patches\WoW-2.0.12-to-2.1.0-frFR-Win-patch\WoW-2.0.12-to-2.1.0-frFR-Win-patch`.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '49cec90e.qua'!
K:\wow\Patches\WoW-2.0.0-to-2.0.3-frFR-Win-patch\WoW-2.0.0-to-2.0.3-frFR-Win-patch`.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48a6ddc6.qua'!
K:\Photos\Thumbs\Thumbs.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48c4ddbf.qua'!
K:
ana\Musiques\The Trinity_By_Paco\The Trinity_By_Paco.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48b4ddc7.qua'!
K:
ana\OpenOffice.org 2.1 Installation Files\java\java.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48c5df9c.qua'!
K:
ana\OpenOffice.org 2.1 Installation Fileseadmeseadmes.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48b0dfa1.qua'!
K:
ana\OpenOffice.org 2.1 Installation Files\licenses\licenses.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48b2dfa5.qua'!
K:
ana\WoW-2.0.0-frFR-Installer\WoW-2.0.0-frFR-Installer`.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48a6dfac.qua'!
K:
ana\autres\autres.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48c3dfb9.qua'!
K:
ana\photo\mouss\mouss.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48c4dfbf.qua'!
K:
ana\photo\ballade\ballade.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48bbdfbd.qua'!
K:
ana\photo\corse\corse.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48c1e00d.qua'!
K:
ana\photo\corse\corse a imprimer\corse a imprimer.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48c1e022.qua'!
K:
ana\photo\irlande\irlande.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48bbe02f.qua'!
K:
ana\photo\autres\autres.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48c3e034.qua'!
K:
ana\photo\autres\maman\maman.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48bce025.qua'!
K:
ana\photo\autres	oulouse	oulouse.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48c4e037.qua'!
K:
ana\photo\autres\ant\ant.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48c3e039.qua'!
K:
ana\instal word\WINDOWS\WINDOWS.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '489de0ad.qua'!
K:
ana\instal word\WINDOWS\SHELLNEW\SHELLNEW.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '4894e0ae.qua'!
K:
ana\instal word\WINDOWS\MSAGENT\MSAGENT.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '4890e0ba.qua'!
K:
ana\instal word\WINDOWS\MSAGENT\INTL\INTL.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48a3e0b5.qua'!
K:
ana\instal word\WINDOWS\MEDIA\OFFICE2K\OFFICE2K.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '4895e0af.qua'!
K:
ana\instal word\WINDOWS\INF\INF.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '4895e0b8.qua'!
K:
ana\instal word\WINDOWS\HELP\HELP.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '489be0b0.qua'!
K:
ana\instal word\WINDOWS\FONTS\FONTS.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '489de0bb.qua'!
K:
ana\instal word\SYSTEMNT\SYSTEMNT.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48a2e0c5.qua'!
K:
ana\instal word\SYSTEMNT\WINFAX\WINFAX.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '489de0b6.qua'!
K:
ana\instal word\SYSTEMNT\VIEWERS\VIEWERS.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '4894e0b8.qua'!
K:
ana\instal word\SYSTEM95\SYSTEM95.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48a2e0c9.qua'!
K:
ana\instal word\SYSTEM95\VIEWERS\VIEWERS.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '4894e0bb.qua'!
K:
ana\instal word\SYSTEM\SYSTEM.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48a2e0e2.qua'!
K:
ana\instal word\SQL\X86\SYSTEM\SYSTEM.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48a2e0e4.qua'!
K:
ana\instal word\SQL\X86\SYSTEM\WINNT\WINNT.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '489de0d5.qua'!
K:
ana\instal word\SQL\X86\SYSTEM\WIN9X\WIN9X.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '489de0d6.qua'!
K:
ana\instal word\SQL\X86\SETUP\SETUP.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48a3e0d5.qua'!
K:
ana\instal word\SQL\X86\OTHER\OTHER.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '4897e0e6.qua'!
K:
ana\instal word\SQL\X86\DATA\DATA.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48a3e0d4.qua'!
K:\WoW-1.12.x-to-2.0.1-frFR-patch\Updater.app\Contents\Contents.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48bde107.qua'!
K:\WoW-1.12.x-to-2.0.1-frFR-patch\Updater.app\Contents\Resources\Resources.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48c2e0fe.qua'!
K:\WoW-1.12.x-to-2.0.1-frFR-patch\Updater.app\Contents\Resources\zh_TW.lproj\zh_TW.lproj`.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48aee102.qua'!
K:\WoW-1.12.x-to-2.0.1-frFR-patch\Updater.app\Contents\Resources\zh_CN.lproj\zh_CN.lproj`.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48aee103.qua'!
K:\WoW-1.12.x-to-2.0.1-frFR-patch\Updater.app\Contents\Resources\Korean.lproj\Korean.lproj`.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48c1e10a.qua'!
K:\WoW-1.12.x-to-2.0.1-frFR-patch\Updater.app\Contents\Resources\German.lproj\German.lproj`.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48c1e101.qua'!
K:\WoW-1.12.x-to-2.0.1-frFR-patch\Updater.app\Contents\Resources\French.lproj\French.lproj`.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48b4e10e.qua'!
K:\WoW-1.12.x-to-2.0.1-frFR-patch\Updater.app\Contents\Resources\English.lproj\English.lproj`.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48b6e10b.qua'!
K:\WoW-1.12.x-to-2.0.1-frFR-patch\Updater.app\Contents\MacOSClassic\MacOSClassic.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48b2e0ff.qua'!
K:
ana pharma
ana pharma.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48bde0ff.qua'!
K:
ana pharma
ana pharma
ana pharma.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48bde100.qua'!
K:
ana pharma
ana pharma\glaucome\glaucome.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was moved to '48b0e10c.qua'!


End of the scan: mercredi 11 juin 2008  16:26
Used time: 15:50 min

The scan has been done completely.

    243 Scanning directories
  47377 Files were scanned
    209 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
      0 files were deleted
      0 files were repaired
    209 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
  47168 Files not concerned
    445 Archives were scanned
      0 Warnings
    209 Notes

Piopascontent · Answer

Désolé la premiere fois ca avez pas marché... Désolé je ne sais pas comment effacer :x

jlpjlp · Answer

pourquoi ton windows n'est pas a jour?

________________
analyse ce fichier sur virus total et colle le rapport:  https://www.virustotal.com/gui/

C:\WINDOWS\System32\lvdlsa.exe 

___________________


scan avec
MalwareByte's Anti-Malware et vire ce qui est trouvé et colle le rapport

https://www.malekal.com/tutoriel-malwarebyte-anti-malware/

___________________

vire ce qui est en quarantaine dans antivir et recolle un rapport avec

Piopascontent · Answer

Re , alors : C:\WINDOWS\System32\lvdlsa.exe il n y est pas.

https://www.malekal.com/tutoriel-malwarebyte-anti-malware/  me fait planter Internet.

Je fini mon scan et je te link :)

jlpjlp · Answer

ok a la place de malwarebytes:

fais avg antispyware, vire tout ce qui est trouvé et colle le rapport

https://www.01net.com/telecharger/

Piopascontent · Answer

Voila le rapport Avira , me semble clean


Avira AntiVir Personal
Report file date: mercredi 11 juin 2008  17:27

Scanning for 1325593 virus strains and unwanted programs.

Licensed to:      Avira AntiVir PersonalEdition Classic
Serial number:    0000149996-ADJIE-0001
Platform:         Windows XP
Windows version:  (Service Pack 1)  [5.1.2600]
Boot mode:        Normally booted
Username:         tg
Computer name:    PROPRI-9ZE5EA3N

Version information:
BUILD.DAT     : 8.1.00.295      16479 Bytes  09/04/2008 16:24:00
AVSCAN.EXE    : 8.1.2.12       311553 Bytes  18/03/2008 09:02:58
AVSCAN.DLL    : 8.1.1.0         53505 Bytes  07/02/2008 08:43:38
LUKE.DLL      : 8.1.2.9        151809 Bytes  28/02/2008 08:41:24
LUKERES.DLL   : 8.1.2.1         12033 Bytes  21/02/2008 08:28:42
ANTIVIR0.VDF  : 6.40.0.0     11030528 Bytes  18/07/2007 10:33:34
ANTIVIR1.VDF  : 7.0.3.2       5447168 Bytes  07/03/2008 13:08:58
ANTIVIR2.VDF  : 7.0.4.120     2206720 Bytes  01/06/2008 14:32:32
ANTIVIR3.VDF  : 7.0.4.177      305152 Bytes  11/06/2008 14:32:38
Engineversion : 8.1.0.55  
AEVDF.DLL     : 8.1.0.5        102772 Bytes  25/02/2008 09:58:22
AESCRIPT.DLL  : 8.1.0.40       266618 Bytes  11/06/2008 14:33:06
AESCN.DLL     : 8.1.0.21       119156 Bytes  11/06/2008 14:33:04
AERDL.DLL     : 8.1.0.20       418165 Bytes  11/06/2008 14:33:04
AEPACK.DLL    : 8.1.1.5        364918 Bytes  11/06/2008 14:33:00
AEOFFICE.DLL  : 8.1.0.18       192890 Bytes  11/06/2008 14:32:56
AEHEUR.DLL    : 8.1.0.30      1253750 Bytes  11/06/2008 14:32:54
AEHELP.DLL    : 8.1.0.15       115063 Bytes  11/06/2008 14:32:46
AEGEN.DLL     : 8.1.0.28       307572 Bytes  11/06/2008 14:32:44
AEEMU.DLL     : 8.1.0.6        430451 Bytes  11/06/2008 14:32:42
AECORE.DLL    : 8.1.0.31       168310 Bytes  11/06/2008 14:32:38
AVWINLL.DLL   : 1.0.0.7         14593 Bytes  23/01/2008 17:07:54
AVPREF.DLL    : 8.0.0.1         25857 Bytes  18/02/2008 10:37:52
AVREP.DLL     : 7.0.0.1        155688 Bytes  16/04/2007 13:26:48
AVREG.DLL     : 8.0.0.0         30977 Bytes  23/01/2008 17:07:50
AVARKT.DLL    : 1.0.0.23       307457 Bytes  12/02/2008 08:29:24
AVEVTLOG.DLL  : 8.0.0.11       114945 Bytes  28/02/2008 08:31:32
SQLITE3.DLL   : 3.3.17.1       339968 Bytes  22/01/2008 17:28:04
SMTPLIB.DLL   : 1.2.0.19        28929 Bytes  23/01/2008 17:08:40
NETNT.DLL     : 8.0.0.1          7937 Bytes  25/01/2008 12:05:12
RCIMAGE.DLL   : 8.0.0.35      2371841 Bytes  10/03/2008 14:37:26
RCTEXT.DLL    : 8.0.32.0        86273 Bytes  06/03/2008 12:02:12

Configuration settings for the scan:
Jobname..........................: ShlExt
Configuration file...............: C:\DOCUME~1	g\LOCALS~1\Temp\5d7ad72e.avp
Logging..........................: low
Primary action...................: interactive
Secondary action.................: ignore
Scan master boot sector..........: on
Scan boot sector.................: on
Boot sectors.....................: K:, 
Scan memory......................: on
Process scan.....................: off
Scan registry....................: off
Search for rootkits..............: off
Scan all files...................: Intelligent file selection
Scan archives....................: on
Recursion depth..................: 20
Smart extensions.................: on
Macro heuristic..................: on
File heuristic...................: medium

Start of the scan: mercredi 11 juin 2008  17:27

Starting the file scan:

Begin scan in 'K:\' <IPOD>


End of the scan: mercredi 11 juin 2008  17:32
Used time: 04:23 min

The scan has been done completely.

    244 Scanning directories
  47169 Files were scanned
      0 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
      0 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
  47169 Files not concerned
    445 Archives were scanned
      0 Warnings
      0 Notes

Piopascontent · Answer

mummm et le lien de AVG est mort oO  Erreur 404 :O

jlpjlp · Answer

avg

ici:

https://www.01net.com/telecharger/

ou

http://www.commentcamarche.net/telecharger/telecharger 218 avg anti spyware

Piopascontent · Answer

Le scan est long ;) je te post des que c est fini ;)

Piopascontent · Answer

LE rapport AVG -->

---------------------------------------------------------
AVG Anti-Spyware - Rapport d'analyse
---------------------------------------------------------

 + Créé à:	18:18:23 11/06/2008

 + Résultat de l'analyse:	



HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{c95fe080-8f5d-11d2-a20b-00aa003c157a} -> Adware.Generic : Ignoré.
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Extensions\CmdMapping\{c95fe080-8f5d-11d2-a20b-00aa003c157a} -> Adware.Generic : Ignoré.
HKU\S-1-5-18\Software\Microsoft\Internet Explorer\Extensions\CmdMapping\{c95fe080-8f5d-11d2-a20b-00aa003c157a} -> Adware.Generic : Ignoré.
HKU\S-1-5-21-2248803489-410083452-674428321-1005\Software\Microsoft\Internet Explorer\Extensions\CmdMapping\{c95fe080-8f5d-11d2-a20b-00aa003c157a} -> Adware.Generic : Ignoré.
C:\Documents and Settings	g\Cookies	g@msnportal.112.2o7[1].txt -> TrackingCookie.2o7 : Ignoré.
C:\Documents and Settings	g\Cookies	g@adrevolver[2].txt -> TrackingCookie.Adrevolver : Ignoré.
C:\Documents and Settings	g\Cookies	g@media.adrevolver[2].txt -> TrackingCookie.Adrevolver : Ignoré.
C:\Documents and Settings	g\Cookies	g@advertising[1].txt -> TrackingCookie.Advertising : Ignoré.
C:\Documents and Settings	g\Cookies	g@atdmt[2].txt -> TrackingCookie.Atdmt : Ignoré.
C:\Documents and Settings	g\Cookies	g@bluestreak[1].txt -> TrackingCookie.Bluestreak : Ignoré.
C:\Documents and Settings	g\Cookies	g@mediaplex[1].txt -> TrackingCookie.Mediaplex : Ignoré.
C:\Documents and Settings	g\Cookies	g@ssl-hints.netflame[1].txt -> TrackingCookie.Netflame : Ignoré.
C:\Documents and Settings	g\Cookies	g@bs.serving-sys[1].txt -> TrackingCookie.Serving-sys : Ignoré.
C:\Documents and Settings	g\Cookies	g@serving-sys[1].txt -> TrackingCookie.Serving-sys : Ignoré.
C:\Documents and Settings	g\Cookies	g@smartadserver[2].txt -> TrackingCookie.Smartadserver : Ignoré.
C:\Documents and Settings	g\Cookies	g@tradedoubler[2].txt -> TrackingCookie.Tradedoubler : Ignoré.
C:\Documents and Settings	g\Cookies	g@boursoramabanque.solution.weborama[2].txt -> TrackingCookie.Weborama : Ignoré.
C:\Documents and Settings	g\Cookies	g@weborama[1].txt -> TrackingCookie.Weborama : Ignoré.


Fin du rapport

jlpjlp · Answer

il faut virer tout ce qui a été trouvé!!




encore des problemes?

Piopascontent · Answer

Mummm Merci beaucoup.
Je peux utiliser mon Ipod maintenant ? :d mais ca m a l'air clean x)

Gros merci a toi!

jlpjlp · Answer

oui






pour protéger gratos ton ordi

https://www.commentcamarche.net/telecharger/ 4 securite

mettre un antivirus

AVAST en français ou ANTIVIR (en anglais mais très efficace)
https://www.malekal.com/avira-free-security-antivirus-gratuit/ (merci Malekal)
-------------
des anti-espions :
avg antispyware gratuit + SPYBOT 

+
SPYWAREBLASTER pour immuniser le système contre vundo notamment mais en anglais (mais facile d'utilisation : il suffit de faire "update" pour mettre à jour tous les mois et ensuite" enable all protection" pour immuniser)...

Rq : spybot et ad-aware on sorti de nouvelles versions cette année vérifiez que vous avez la dernière version
--------
un pare feu :
celui de Windows ou mieux KERIO ou JETICO ou ZONE ALARM (mettre que le parefeu gratuit)

https://www.clubic.com/telecharger-fiche11071-sunbelt-personal-firewall-ex-kerio.html
https://manuelsdaide.com/contact/
http://www.open-files.com/forum/index.php?showtopic=29277
https://www.commentcamarche.net/telecharger/ 157 zonealarm

-----------

CCLEANER pour effacer les traces de surf

Brontok sur Ipod...

18 réponses

Discussions similaires

Newsletters