Attaque internet ??

Bonjour, aujourd'hui j'ai eu une petite probleme je parlais tranquillement sur msn avec un ami pui je me suis déconnecté et tout d'un coup plusieur page internet se sont ouverte principalement sur le sujet que mon ordinateur été infecté et que seule l antivirus vista 2008 et 1 anti-spyware pouvvais me sauver lool et mon fond d écran c'est mis a disparaitre ainsi que mes disque dure C et D alor je me suis dit "merde" lol et je me suis précipiter sur la freebox pour déconnecter sur internet se qui a permi d'arreter l affichage de 100ene de page lool et mon ordinateur été en mode "alerte virus" et il ramé a mort du genre je faiser rien et ma conso ete de 900 mo de memoire vive sur 1024.J'ai ensuite lancer un scan avec mon antivrus (antivir ) et réussis a suprimer 100 et quelque virus alor que jai fait l analyse av hier je crois et je n en avait pas j'ai aussi lancer mes 2 anti spyware (spybot et avg) qui eux mon trouver les fameux spyware qui m envoyer sur les pages pour les antivirus donc mon probleme est résolue mais je voudrais savoir comment se truc a pu se produire et comment etre sur que mon ordi et completement débarrasser de se virus car j'ai remarqué qu'il se balader dans mes fichier windows.dsl pour le roman ^^
PS: je n est rien télécharger sur emule ni sur les site de téléchargement comme o1net réssament,ni ete sur de site a risque donc je ne comprend vraiment pas comment sa a pu m arrivé
Merci de votre aide
Configuration: Windows XP
Firefox 2.0

31 réponses

Résumé de la discussion

Une infection par malware s'est manifestée lorsque plusieurs pages se sont ouvertes après une déconnexion et un mode d'alerte virus, avec disparition du fond d'écran et ralentissement du PC. Des scans ont été effectués avec l'antivirus installé et des outils antispyware (Spybot et AVG) puis Malwarebytes, ce qui a permis de supprimer une partie des menaces et de repérer des composants suspects. Des conseils complémentaires proposaient d'exécuter HijackThis pour log, de préserver CCleaner comme outil de nettoyage, et d'effectuer un scan Bitdefender en ligne pour confirmer l'éradication. Enfin, des éléments de registre et des fichiers infectés ont été signalés comme à supprimer au reboot, soulignant la nécessité d'une remise à niveau des mises à jour Windows et d'une sauvegarde régulière.

Bobot (l’IA à votre service)
  1. Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 11:21:14, on 06/08/2008
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
    C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
    C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
    C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
    C:\WINDOWS\eHome\ehSched.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\nvsvc32.exe
    C:\Apps\Softex\OmniPass\Omniserv.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\PnkBstrA.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
    C:\Program Files\Sonic\DigitalMedia LE v7\MyDVD LE\USBDeviceService.exe
    C:\WINDOWS\system32\UAService7.exe
    C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe
    C:\WINDOWS\system32\dllhost.exe
    C:\Apps\Softex\OmniPass\OPXPApp.exe
    C:\WINDOWS\eHome\ehRecvr.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\ehome\ehtray.exe
    C:\WINDOWS\RTHDCPL.EXE
    C:\WINDOWS\eHome\ehmsas.exe
    C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
    C:\PROGRA~1\GOTOSO~1\VADERE~1\Vaderetro_oe.exe
    C:\Program Files\Sonic\DigitalMedia LE v7\MyDVD LE\DetectorApp.exe
    C:\WINDOWS\system32\RUNDLL32.EXE
    C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
    C:\WINDOWS\system32\wuauclt.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
    C:\Program Files\Windows Live\Messenger\msnmsgr.exe
    C:\Program Files\Windows Live\Messenger\usnsvc.exe
    C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
    C:\Program Files\Internet Explorer\iexplore.exe

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = file://C:\APPS\IE\offline\fr.htm
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
    O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
    O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll (file missing)
    O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - D:\logiciel\SPYBOT~1\SDHelper.dll
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
    O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
    O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
    O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.1119.1736\swg.dll
    O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
    O3 - Toolbar: (no name) - {905562EF-6F86-4FF3-9963-5AB66372D3A8} - (no file)
    O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
    O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
    O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [High Definition Audio Property Page Shortcut] HDAShCut.exe
    O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
    O4 - HKLM\..\Run: [Vade Retro Outlook Express] "C:\PROGRA~1\GOTOSO~1\VADERE~1\Vaderetro_oe.exe"
    O4 - HKLM\..\Run: [DetectorApp] C:\Program Files\Sonic\DigitalMedia LE v7\MyDVD LE\DetectorApp.exe
    O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE /Spoil /RemAdvDef /Migration32"
    O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
    O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
    O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
    O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
    O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\winampa.exe"
    O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
    O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
    O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
    O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
    O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\npjpi160_07.dll
    O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\npjpi160_07.dll
    O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
    O9 - Extra button: Run IMVU - {d9288080-1baa-4bc4-9cf8-a92d743db949} - D:\Documents and Settings\joan\Menu Démarrer\Programmes\IMVU\Run IMVU.lnk (file missing)
    O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - D:\logiciel\SPYBOT~1\SDHelper.dll
    O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - D:\logiciel\SPYBOT~1\SDHelper.dll
    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
    O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
    O14 - IERESET.INF: START_PAGE_URL=file://C:\APPS\IE\offline\fr.htm
    O16 - DPF: {1E54D648-B804-468d-BC78-4AFFED8E262E} (System Requirements Lab) - https://www.systemrequirementslab.com/cyri
    O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
    O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} - http://download.divx.com/player/DivXBrowserPlugin.cab
    O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/...
    O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
    O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
    O17 - HKLM\System\CCS\Services\Tcpip\..\{E95D36CE-A530-4310-8815-1D682DF41067}: NameServer = 212.27.54.252,212.27.53.252
    O23 - Service: Avira AntiVir Personal - Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
    O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
    O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
    O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
    O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
    O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
    O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
    O23 - Service: Softex OmniPass Service (omniserv) - Softex Inc. - C:\Apps\Softex\OmniPass\Omniserv.exe
    O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
    O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
    O23 - Service: USBDeviceService - Unknown owner - C:\Program Files\Sonic\DigitalMedia LE v7\MyDVD LE\USBDeviceService.exe
    O23 - Service: SecuROM User Access Service (V7) (UserAccess7) - Sony DADC Austria AG. - C:\WINDOWS\system32\UAService7.exe
    O23 - Service: X10 Device Network Service (x10nets) - X10 - C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe
    1. non mai de toute facon le virus avait suprimer toute mes resto systeme precedente alor jai suprimer tout ski pouvait rester et créer une nouvel par ce que le virus ete cacher deans c window restore un truc kom sa
      1. c'est comme a chaque fois je me suis débrouiller lool jai suivis les conseil de asseforlife kom suprimer les restoration systeme apr jai relancer antivir malwarebyte spybot avg et mm avast apr en complement o cas ou et jai tout mis en catantaine plus suprimer le quarantaine jai reinstaléé internet et il me met plus le message internet dangereu je c plus koi lol donc c bon je vai kan mm effectuer le scan que propose marie au cas ou lool
        1. On ne touche pas la resto système TANT que le PC est infecté.

      2. Salut

        asseforlife, comment veux tu faire une désinfection sans voir ce qu'il se passe sur le PC ???

        israelitedu71, envoie un log hijackthis -- stp
        1. merci kan mm en plsu je croi malwarbytes suprime mal les malware la pake je croi avoir retrouver exactement les mm la en tout cas merci pour ton aide jvai me debrouiller tkt le bidouillage je coné desfoi sa marche des foi nn mai bon lool
          1. oula mai jli pa les bon msg moi lol c deja fe ske tu me di jai redemarer mai la sa en retrouve e tje pe toujour pas alé sur internet explorer
            1. Redemarre ton pc et ca l supprimera les infection trouvées par malawres byte
              1. hehe je croi ke tu va devoir me transmettre a kelkin d otre parce ke je refer encor 1 scan et bien devine koi yen a encor la et jpe mm pa fere de restauration systeme av l ariver de ce virus car il a lui mm suprimer mes ancienne sovegarde et moi ki vouler en metre une diske ya pa lonten joré du le fere ... jte di si c tjour ossi grave dans kelke temps en tout cas si tu c pa koi fere merci kan mm pour ton aide ^^
                1. Et tu me dis si tes problemes persistent apres tes scan... Je laisserais la main a une autre personne plus competente ke moi.
                  1. alr voila le raport a la fin il en a retrouver des chose lool jai tt mis sous karantaine et redemarer

                    Malwarebytes' Anti-Malware 1.24
                    Database version: 1027
                    Windows 5.1.2600 Service Pack 2

                    22:49:02 05/08/2008
                    mbam-log-8-5-2008 (22-49-01).txt

                    Scan type: Quick Scan
                    Objects scanned: 42781
                    Time elapsed: 5 minute(s), 6 second(s)

                    Memory Processes Infected: 0
                    Memory Modules Infected: 1
                    Registry Keys Infected: 408
                    Registry Values Infected: 1
                    Registry Data Items Infected: 1
                    Folders Infected: 2
                    Files Infected: 21

                    Memory Processes Infected:
                    (No malicious items detected)

                    Memory Modules Infected:
                    C:\WINDOWS\tfnslopk.dll (Trojan.FakeAlert) -> Delete on reboot.

                    Registry Keys Infected:
                    HKEY_CLASSES_ROOT\CLSID\{d868fb7d-24ad-4d21-b98a-aef0892d8a3e} (Trojan.Zlob) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{f3d98b15-6905-41b0-9643-1007384114a1} (Trojan.Zlob) -> Delete on reboot.
                    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\adsonmedia (Trojan.Agent) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{005c45d5-5129-4c9c-a981-a684d871cd1a} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{007a014b-8ddc-468a-8024-75102bdcee15} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{0080c9f5-8c82-4cd6-b6a8-6403ca5c160c} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{00a14547-6dd6-4fa5-ba00-0d13a4632768} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{014c6a04-71bd-4e2f-b19a-e2871256c162} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{01ac7460-262e-4d82-9eab-cd8e41e89ca4} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{01e6aaa0-051f-4dce-983a-dcd45f1fa8aa} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{0297b5b5-6acc-4184-8f21-b39836e8088f} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{0303bdb1-7c42-47fb-a434-d8a70b8e068c} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{0420ab91-dced-43e0-87f4-2ea975f315ce} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{083937ef-985f-43f7-874d-dc387f915dae} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{089c88d6-f5b8-45c3-a1be-d83bd6bb9fb2} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{09397645-e25e-41fc-955b-4378da4bb872} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{0b9e772e-9c0e-4de0-bcd6-a7f5cfa9a8de} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{0c3f346a-7306-44d3-8820-8d2bc6ce7a08} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{0cbc2348-5223-4100-9be6-049a632890e1} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{0d4806e0-c2c7-47e8-8ef4-b5068cbfd013} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{0d9b989f-5efa-4703-b697-17655bb4439c} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{0f35edf4-a61d-4e9d-99b5-5ed2505cc381} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{0f886471-8924-4297-a3c8-7b5b3d71b18e} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{100fde38-4ccf-41bb-877a-a0acaea8f297} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{11253b29-4ff4-48d7-bd01-559ca1daff36} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{112ce3fd-08b3-4035-9329-6e0810f4b7a8} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{117311d2-c4fa-494b-b692-53e15f5901a5} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{152bbc21-52cb-46b2-b935-2cf66ccf7a66} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{16c78b8e-da88-430f-aea5-add4f767d480} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{17327a28-03d5-4754-a32f-14ec1b4f88c7} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{17598bcd-a5ca-4016-838f-f5fa136d2d18} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{17a0b11b-d3be-485a-93df-602a85d34a92} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{17a74b9c-ff71-48f2-94de-e5412dd284ec} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{17e6fc41-aea4-4972-8981-f08af392a25f} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{18b54742-82d3-47fa-b30c-766c81e6d333} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{1a01ea2f-2d6a-4e64-96b1-13ac22d4c099} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{1a7169aa-364b-4f51-83b1-8816f4ef40c7} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{1b3bfd95-37e0-4311-a209-24f237b22302} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{1bba22b4-afb7-45a7-b137-e6aaf1d266c7} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{1d200744-1dda-4b45-a583-77d7fff6d9d9} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{20d94676-360c-431d-8897-c62bb7ccde41} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{20f54ffb-abc8-47cb-8a25-46f735bf8135} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{211a4873-e2b8-4d19-9d3f-2f51432abc37} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{215eea2a-454b-4851-93ff-1f2588d9baac} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{22066a9f-e975-4a3a-af21-631f0c242ed0} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{220d7d61-37be-4f7a-b29a-de7a45ae6ff7} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{22256877-99f0-4811-9692-fa364cc6dddd} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{25a7b462-c8c4-4b0b-9f95-49b6fef5ad95} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{26ddf4b4-aceb-4ae2-bce5-5db9c5c0a9f6} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{2724e1d2-1af6-4094-b9d7-817d797b9cbf} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{2752d48f-d55b-43e1-9735-5f988adf74c3} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{27b0de3f-026b-4f6f-91ee-3ea25c39a2cd} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{27e36726-0a35-43d3-a753-02439f843ab1} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{28536ee7-8293-47d9-ae7b-bec60327c5f9} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{28daea4a-51be-4fff-a6d2-cbb0010fa9e2} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{29d2134d-f147-468c-9c7a-50f7839ccb2d} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{2c143f1c-bb85-42e0-9d9c-0fb3d73dddad} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{2c21aaee-dbb7-4f36-a7e7-4b57fe791b26} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{2cf8d0ad-58d8-4307-bd85-885e7b0c107f} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{2d8d2e47-0ed2-4279-9886-33ac0c5e9427} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{2daee7b6-9168-4110-9558-9dfe12210662} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{2e09260d-26c0-4ce3-9bce-dfd880ccb337} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{2e3a6455-498f-44f6-b642-c960af6ca73f} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{2fbc9473-c23e-431b-93e2-e05c65d71360} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{309610ac-975e-4ec2-9f63-d79a7376c9b4} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{318f6d38-2193-47c4-accc-e579579b6ec9} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{34f0a690-776d-4584-9937-8f9b6339b4e2} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{35315f2e-337c-4cc3-95ed-c9b3a2288e67} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{358c3bc0-c673-4e9d-8cbb-e7f738efce9f} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{365dcb6e-6163-4e24-bb06-e5abf59dd3e5} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{3766cd6b-fb92-4a7f-9a80-733df7ab5dbd} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{37a71777-398e-4c32-b05d-c07d20e706ae} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{38c59068-2321-461c-8ebd-3db8cfd39f26} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{396a40ea-e948-41ab-9772-5732353cca16} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{39de34e1-429a-4bf2-953d-3eb85817322d} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{3b860b2b-9d3f-4691-87c5-49a417e713e4} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{3bdcee89-9f66-496c-aa16-3d744f300f43} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{3e2fbe40-8ee6-44a3-bd60-a708143fc0cb} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{4139b1ea-7a4d-44f6-9221-3db260499dbf} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{41617ff1-1be9-48e7-ad86-f8b648648fc8} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{418db75c-188b-4d21-b3b3-686c3200c296} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{4232c528-f538-4078-a28a-491a436b58da} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{426b1aac-15e1-4d1a-bbf9-0dd6476a6a01} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{42e18e3c-85a9-4069-aa5c-b0c3830a69e0} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{437aad9b-849f-4a4a-b0b6-9931b214498e} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{43ea6201-b20f-4dd8-98b0-841c2bef7cd1} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{44036ac5-35d3-4dd5-9ead-7286049115af} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{4406aeb4-6010-4b18-b1c6-e982f3886a1e} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{44a0e562-2fa6-453a-ac57-51d233f5a723} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{460f475d-0f01-4845-9264-01f2d1a6f12f} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{464e69cc-87e5-47ef-8997-93e87cb9db54} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{46d53677-f242-4faf-bd6c-502888c007c7} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{47a55859-6a4c-4632-bede-5ad0fb9f8312} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{47e508af-7f36-4dce-9a63-ef0abc38b49b} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{48cce97d-712d-4540-9f62-40e1cd957071} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{494c602a-4a08-4e25-9038-de3277dc2d30} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{4a78d33e-ce02-4701-befc-fde86405ed8f} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{4a8c22ea-83da-417a-a813-d4ff271bfc5b} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{4b8fc31a-553c-40ed-bfe0-9448dc1d68f4} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{4d0e2663-513e-4125-b6c2-382c214432c1} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{4d6bd1d7-8c4b-4881-829c-bd2bd11381b2} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{4d7be4b3-d161-400d-9b9c-ca6cad7f5288} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{4d7da73a-bd48-4076-90e2-950ec17e85cd} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{4db6650d-f702-4de4-a192-3fb1d100c3d1} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{4e0964bd-81ac-44c4-92fc-e9f47fee5320} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{4e167c7f-ee78-43d2-b1b4-f99efb163803} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{4e3265b4-a788-4844-b0b2-2e3046c95973} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{50407ba7-ed0b-4cb1-9d87-06c60b310f4c} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{5046347c-28b1-4af5-b712-75b69471848a} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{50712b23-15cb-4bf3-8eb9-a8ae0f801063} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{50dfa42b-ba9a-4c2b-acc8-2c77b1d75b51} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{51925573-201b-4e6f-bc2c-d6f09a32be53} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{522f4092-619c-4e45-b624-a13b406721f6} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{5288ca9f-ea4d-4182-9fe7-9459fdfec180} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{536307ff-c47d-40a3-a3ce-6c7fa4421296} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{53795856-1724-42f8-a387-15b61a90d6fe} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{542735cd-6c40-4390-b676-36dd4d2aa2c6} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{5427981f-22cf-4ab4-8384-281aad3eb1ff} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{544a094a-422a-462b-a1d4-0d09535f0900} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{546d12a2-3036-4d0e-9caa-58da3cad9bd1} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{54ba5df0-c1fe-4023-99be-190e3a60dea4} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{550d9056-fb8b-42db-be94-5479740172da} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{55428743-1b82-4a36-b12a-96027122207a} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{55ba9de3-0efb-4a3c-b6cb-0206d9f38725} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{56374a90-d81d-49ec-b566-64cd8d4344d3} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{5666ba38-79fd-45e3-874e-4b081122b276} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{56f398f7-7da7-4ee9-8e3e-e1c6fffadd93} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{57031f60-168a-46d2-9db2-12f8973ea63c} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{577f6f53-d4c7-473a-825b-96949a5c1924} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{585eb545-fd6d-401d-814d-be4c81f5b6ec} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{5acef8dd-a1ad-4772-92cb-4f612e1193d2} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{5e335a8e-a136-47b9-8618-8e4b9ac40a16} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{5e445b90-74b1-4f0e-94dd-d0fa4321a0eb} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{5e86a78b-3aa2-4fe1-892c-eba69a8a9610} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{5e8eacf0-7a78-4abf-8ce7-cc276de1eeb3} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{5e96d76f-039a-4d07-92c9-60e17692efc6} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{5f26f317-aaa1-48ae-bac7-6f309707ed30} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{5f31dc90-0560-4458-b565-b1fc66749b7d} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{60b01ec9-def0-4c65-a952-4b0d519b3c74} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{610787bb-b752-4574-a25e-834b249d39de} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{62198cf7-b7dd-4f7c-a4b9-79922dc5da5c} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{622f5154-eb33-46c1-b10e-09b3caafb5c3} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{62a6b9df-24d1-4516-a89a-1a2664906471} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{62e978a9-05ca-43a2-b04f-8c8906fca52a} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{633bf105-df75-43b1-bab4-cfbe126be994} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{63e8c7be-7518-47e2-9526-0f024416096c} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{64ec948c-f071-41d4-8520-626131753f0f} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{6672f2b3-ea47-4d46-afd6-60986849bbb6} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{67486305-4c5a-4a96-be9b-b6c5aec4ed38} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{67673119-beb0-4832-adff-4e42b66f55a0} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{677a8fd3-b829-47a6-ba4d-4ec908239725} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{67b614ab-bf96-42ea-837f-5f34b50e0ad0} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{67ff9ad7-7c44-4a8d-b088-18c85830aef4} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{683df0a5-9349-49e5-947d-69ea9b326066} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{6993d5a1-2b2c-4e66-89fa-8f904eadab1c} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{69dee3c9-5145-4e67-9362-54e242166951} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{69f7fbe7-69ef-41bb-9484-0a9a8d901cd0} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{6a900719-eec3-4c3c-a4ed-6eafffaeb196} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{6ab22182-c094-4e73-b54d-f155b91f99db} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{6abbbb65-3a6f-4f91-a6c9-e94866b90fde} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{6adefc11-9d9f-4c39-94d2-345ed181d9e7} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{6cbd7798-1f51-4a89-b647-084bef56d871} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{6dc6428d-deb4-4d4e-ab77-efb05769073c} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{6e617c80-3eb6-4332-942b-6633c5b6f248} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{6f30469e-11ae-4bc9-8ab1-2310b88e1714} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{6f52ab71-e042-45d9-9f0b-4419eede325b} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{6fc81adc-fcca-46c7-88c5-60fb1d9e6643} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{700ac42d-eaff-4352-9e06-0ae1000c6c06} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{7038eafe-9932-441d-94e5-54eb369ee607} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{707f9b19-136d-44c2-8b2c-f7b0bb128f25} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{70cdc7a2-c7b9-46ec-b773-d82edaef7a14} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{712d38e0-a556-4527-9fca-0bbd13918e0b} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{71b4d154-2c0d-4243-a5dc-bf93cd82adf5} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{7447557e-fab9-4d1f-93f1-cef613367f3b} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{75f94cc5-2ce5-405a-8712-6fafb67dadf0} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{772c6abe-13a8-4a98-9cc3-07d0c5afb931} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{77389d13-a52d-4787-87ad-8aee9aaf8afa} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{77529b21-bac6-4735-b0b6-a11a55ae3bd8} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{77803719-a915-41cd-8538-e081184acd8e} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{78c71d64-0a4c-4c73-a80e-5fa5c75f0793} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{79d882e6-da28-4303-8ad7-5760bab3c6b7} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{7b2d3a07-a61d-483b-ac26-3fc62fc07c5b} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{7be8a445-b27c-4173-9adf-2d1109e1c387} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{7c3386a4-19a0-47df-956e-29c6907ded68} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{7c67a7ec-fe8e-4201-9ff3-93781307e4db} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{7d520b03-b6ca-41a6-a361-284c2f43f652} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{7daa9ecb-9f1e-4b9e-9ddd-817e6708fd70} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{7dc626ae-73de-4534-bb3e-4e3ce3c7c2f1} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{7e156076-efb7-48b4-826d-f174637c8ae4} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{7e4893f9-4b5a-46eb-9a84-72481f6338d9} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{7e5169ea-c589-438e-b51f-01fc173f498c} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{7f16e2b2-fd38-42cd-ad04-a13581df66ce} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{80b2dd91-bb03-4202-a57f-b66454123ac9} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{81bb45c8-ac1a-48d4-a583-78a6307a778d} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{81d1a804-f437-453c-89c6-89899d02b5a3} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{8261258e-1a23-4fe8-89c5-e1ccf050b165} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{828ac3bd-5a7e-4cd6-955e-5272491e6f50} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{82928eda-ccf4-4b87-8d5a-00c61d1b90d9} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{82cea4c6-378e-4662-8641-9ed857280306} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{8312e2b9-4d90-4270-815c-163d26540b1f} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{836b2498-7599-4128-837f-1ff9ecbd8e44} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{848af303-412a-4bc4-9793-b2f947139cd3} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{84baae54-da2a-41c4-bd77-d962a987f09f} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{863e913a-01d1-46dc-905a-348b6caf8e19} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{8650187c-4b65-449d-9389-b5e1d75f3485} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{867c746f-0c46-40a0-9bbc-8e77c708d49c} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{867f8a89-272e-49c2-b538-41a572b0550b} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{86ccde85-e5c7-4eb1-a16f-d0b30adf2c68} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{87418733-e624-4239-8ac3-11676607dbd0} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{8747ef73-76cf-4d0a-9795-0d964f0bfb6a} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{876ce3dd-3074-4d6a-9336-cab99451fa45} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{87a402d0-c8c2-4a65-b663-458219dec980} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{8806a46e-5227-4e1d-94f2-2492ce6acf01} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{882e3f79-1a04-4a41-b980-44ee7fb2929b} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{882f91d2-5967-4d97-ae79-9eaa950d2096} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{8867cb10-105a-40c7-9b29-60285bca9335} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{887b32bc-9a4e-4166-ab6f-8e531e9fbc6b} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{89cab7f6-d0d6-4a46-8009-78a2876fb736} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{8a100ff1-f451-416f-ba39-1a3fea7e8f85} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{8b7feddd-d0ac-4a99-a4ae-29f6d2afc139} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{8bf38f9a-460f-4a1b-a7e0-cd493cfab4a5} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{8d547d56-e90c-4678-bdd8-3c7925f7b368} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{8f3421df-72f9-42f7-9982-684e8dabcae6} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{8f7d01d5-22fc-4f6e-bbad-2b0e917b208b} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{8f8cf01c-6794-4bb3-9cec-eb8c1443d479} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{905940af-1989-426d-a0ee-2c573b9f2e85} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{905de31a-760a-4bd6-85b7-641016ae94c3} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{9237ef01-cda2-47fb-a55b-5c24dc1c3e47} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{92a0f063-4afc-47d4-97f4-bd83a34a3833} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{9368b09b-29f7-4564-9f47-e58100975f2b} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{938e5657-30cf-41f8-a0ad-fe32edfa0ce9} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{93936e47-dada-47b1-8a0e-c681587878f8} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{93bea4b2-6285-4a25-945b-b7b3aa966659} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{93d430c5-d969-4aad-92ad-abe7f7ea1414} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{94978871-de25-4144-8da6-efa2d2a7b29e} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{94a2b76e-6de9-4ddd-b790-b0c7d21a4849} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{95ca5c4e-998c-44d4-a1f7-830dde0c8439} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{9951c843-8761-4b69-bec8-a5644664ea4f} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{9a723c91-2dff-4b44-8a6d-688b673c19bf} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{9aa6ee41-b2c6-45aa-a485-30a0b677796e} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{9b9b327e-c555-4a41-b0c8-77878775baaa} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{9bb26c0b-0e45-461d-8907-b55eef3d2db5} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{9c5ec372-ff16-4d6a-8d71-9efe08816902} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{9cc7189f-1647-42fc-8a73-8b4aa1014c81} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{9d8ddb2f-2877-4e40-81a2-ce21db349bc7} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{9e353318-46c6-4504-ae24-ff82c605e7b1} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{9fabf177-2c34-4a41-bf88-b132a7366e78} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{a0d0873e-f12b-4a69-bf47-3078db4f4bcc} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{a12b65db-8dc0-4dc0-a569-01f7671c89e5} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{a1f6a144-c016-47d9-89ee-8db7cf96d1a7} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{a3538975-d684-4f64-81e9-bb1d2c66bfba} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{a38943ad-da45-42c5-88db-c133c2419eb0} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{a3b66f70-5d27-4d0b-8764-d9c10a30e6ff} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{a445afb8-7c1b-40fb-80a7-d995adc427bd} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{a48d536c-1535-4316-b482-85e2d1f9ccc0} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{a5446a49-94ea-4c13-84cc-f0e83822fab0} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{a649fac1-0fca-4f7d-a959-f289c95ab919} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{a650c650-4635-4fe5-a09d-4265315e0ffb} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{a68067ac-fa12-4b2d-bead-5e133ad43db9} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{a6bf562d-4091-4833-b41a-cf84a81a5262} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{a6d95c91-ab92-4233-be62-2b371077eed9} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{a6e95569-0cfd-4434-a85b-2bb7bc631c1b} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{a77e87af-c00e-4a48-8124-00ce32c218bb} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{a8519a65-2199-4092-a35d-255e11df77e2} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{a8555cd7-af4d-4fc1-9086-346a492331c8} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{a93a4711-b582-455b-b524-dbdd681f8b0c} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{a956faf8-cfba-4816-9e88-9108dc36b479} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{a9c51326-78dc-4a65-b91d-cf6d573a0f24} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{a9e390d0-f6dc-48f3-ad9f-bc35d89a3493} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{ab334155-6133-4bf0-919b-7e78880eb9ac} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{ab7036ce-e72d-404a-be09-5515b7cdaedb} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{ac6365a0-0515-4229-9570-4651634bee60} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{acbcf56a-45db-4831-b109-18283334b66c} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{ad6d6080-0316-4d2d-9661-de37ffd2b368} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{ae575450-d746-45b7-ab73-5b87c802c645} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{af4ae44a-9760-4059-959c-602a945e2cab} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{af878c4b-1874-4c77-aa43-850073ef57de} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{afed0482-46a8-4f37-9805-a37fb5768120} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{b1abbb95-e6dc-47a8-81b7-78c84713e01a} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{b26a65be-abf7-4361-9b00-d642b2a3a4e8} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{b2c73a3f-93aa-4347-ab73-625919d2474a} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{b3259eeb-003a-4a4c-9849-e0f2e20b1b15} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{b4f4914a-98af-45ed-a741-9da7c0a3ad5d} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{b4fd10a8-7095-42bf-9578-e95d65bdf394} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{b5441e76-bc9a-4672-9aa1-d3d124d080ea} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{b6245702-f7e4-4e7f-9a7d-c58994e2a0a6} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{b651ee9a-3fdc-4c80-906b-ec9b4e798770} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{b73ca711-8900-4a42-a867-7f80251ad1f7} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{b8492f06-3636-4b3e-a313-73331bf02ba2} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{b8e1d968-22bb-4349-9778-f44d45e36071} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{b95bc74b-2ed1-410e-9455-7595c6f743b9} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{b997a614-d750-4dbd-881b-1b3a894b0d25} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{b9e10ed5-d938-49b4-847b-150520a6b715} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{bb11863c-2c4b-4e1c-bacf-87506e7fd17a} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{bba375d0-f907-466d-a7dc-ab69888c3318} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{bc083acc-a89e-4cf5-b295-7fdea1ecb91e} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{bcb8f01b-6db7-438f-841c-b86526725dd0} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{be4e7503-da1c-42e2-8843-1bc267f2e81e} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{beab4b60-96eb-481e-bba1-e53fc2437489} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{beee7317-2ae5-4eca-9ee6-63ab0612d022} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{bef8f11c-d6c0-4e1b-9290-d913cef0233a} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{bf668951-e25b-43ee-a023-f90550f587a3} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{bf8b9bd8-2230-44cb-8d4e-8d649612955b} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{bfc43390-579c-4a61-9188-3522a5cf9f19} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{c0b00832-20e7-4154-879f-9284fbae65d9} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{c115930b-ed31-4067-93eb-048898bcaefb} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{c125d2e6-c842-413d-8130-ed768fdff50d} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{c2d4bbc0-365c-4148-bcf1-8f7f4988dfed} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{c387e35a-7eea-4508-a174-ee5da3822ae5} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{c4957692-5708-4b20-acd3-2f6c17e3a6d3} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{c5218af2-6891-44ef-b09f-1c480c8580e6} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{c72ad5f3-d6a7-4d3d-90f3-c5daa4438e14} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{c7c812bf-5ff5-4969-86da-4335dc8a91de} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{c890afcb-b460-4d23-b443-e389db1aea43} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{c9be3980-b3b3-48ed-8666-78e8d328dfe1} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{c9e520a1-bf6a-4f59-be02-3025692be040} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{ca0af5ca-bb00-4d1e-9655-139c01c60aa5} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{ca2b0f2d-6343-42b1-9193-2164957210f7} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{ca895aa9-0fb1-4687-b4c1-79f5b431ab44} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{cc2677ce-a535-4913-a048-3185c89e7c58} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{cc491796-83fe-438b-899b-73974f94b3e9} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{cc5185de-8e6a-418a-8563-b5dcf60a9e86} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{cc8f4b46-a8bf-4109-a3ba-8cebe5b848c2} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{ce4ebd1b-8b6c-4048-86bd-f7c78d31876e} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{ce8582f2-bd1a-4525-b418-630018efe218} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{cf952fe0-91b5-4cf2-bcfb-00c128f4ee3d} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{cfb0f992-464c-4c1c-87bc-93ed7df98eae} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{d155b1f0-bcd9-4503-8aa5-d0baf98aac5a} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{d191f42f-5d57-448c-8665-a4f59ad84925} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{d2cc5fb7-6ff4-481e-a569-137b5aae3b13} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{d317602c-b86a-4f5d-a52d-c8473c42c5f2} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{d40abb0f-86a6-4610-b90e-3988fdcf2459} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{d41cd3ba-f2e1-4dc9-85c5-494a442aef1f} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{d44daf01-de37-4a39-9a88-3b40487bb7af} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{d4e8d100-c79f-4869-a172-9eebc1eb5922} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{d51ee2ed-3f25-4e93-ad40-4ea11aab56aa} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{d63fab5d-61af-4802-80db-2d0e7a524e9c} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{d71c1443-51aa-46a0-9f9e-b3793f34dc21} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{d7c3e4f8-2b5a-48e0-8015-2c8649176212} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{d81a5bb5-842b-4096-a50b-b54671dae676} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{d8340524-4122-465a-88ad-e84bab918b43} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{d91f3a9c-5449-431c-9274-33476c39e513} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{dc061594-32b4-4e55-b726-f1a92e027cd2} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{dd5341fc-2d9a-4133-a8cd-f18fcf24a0e2} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{dda4cb92-8c4f-4279-91ee-02f1ee6ffc0f} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{ddd26971-f97e-4717-8575-c05b6a4fcaab} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{de56fd85-c3b2-4755-81fe-83ecc945cf9d} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{dff5950a-cb33-4790-a4ba-5b2241e8515a} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{e1307ede-6c69-4465-90c9-d76df827b067} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{e18d7714-9ed9-4d97-a1b5-6e5423bcd135} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{e2c8b1eb-fadb-4f2f-9033-38e0909bb8ce} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{e2d42376-890b-4a76-8240-21ca18014d47} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{e416ed4a-e31b-47f3-846f-75e2b754c36a} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{e448dee6-274a-4922-8e3d-390684fbeb0c} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{e5308ffc-cce0-44a9-b475-17d7ac495c81} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{e5ebc526-b1e5-4c27-a4ef-7f4e252c9125} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{e5f64614-1d1a-4e2f-a2db-963fce5025e4} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{e62e1f31-370a-4931-b69c-a40c883d4319} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{e665bd1b-f319-461c-9b46-e09f42927d8a} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{e7037449-0a86-4673-9c06-07ffc8b91cf6} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{e7577752-0633-4ddc-8179-8224229c356e} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{e8816433-808c-4235-9068-9b4082e87dd9} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{e8b4ebbe-590f-4924-a100-cb52dccc4278} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{ea704d54-ea3d-40b2-9433-6bb9e92fe791} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{eb36094a-9acb-4126-bde9-5b0302991037} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{ec6bc282-168c-4cb5-a9ba-e1552472700b} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{ecf7f043-c2e9-42ab-8a40-1a71f1d79ac8} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{ed5696b3-3ea6-43af-9ea4-45d65589a803} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{eed15360-b431-4809-896f-5175b1c20da6} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{ef103c5c-2ffd-4167-a0a7-a608105ffe2e} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{f0498835-4bb9-41cf-95b7-8e74af668301} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{f0980406-76d7-45f6-8c76-bd3dbd823e6f} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{f1b1085b-89a1-448c-9bd3-893e04ed6d53} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{f1c9e369-bb60-4d01-bf70-c7c401176327} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{f2eb9ab4-a8d4-4b51-a182-afc57855d1c5} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{f36d2ff1-0363-4d6c-a024-e155273fee2b} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{f3b3b042-f54b-4a03-918c-a352b10f4a9e} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{f3ef2f83-c3d5-493e-aea9-aca29e18835f} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{f5a4ed4e-d5d4-4a56-92ee-034da93a7369} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{f73366ab-a735-4e10-92de-b11bf5dc4410} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{f86a9f69-66d4-4001-9019-8a170d00f37f} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{f89c911b-dc71-45ca-af74-b42e497e214b} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{f9fd40f4-59f1-4602-8e30-c11bafe1fbc4} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{fa2320f4-c3dc-40aa-a9d1-72580b3b7681} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{fa5b02b0-447b-4db7-9d8d-e19c9c981eae} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{fb2aa630-bf70-4fcd-b2e7-af69e77a1e3e} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{fb4e15d3-1f60-4514-ae7c-1b9f78fbdef9} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{fb98e92d-3cd1-443d-b66c-4a3012b735cf} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{fbadff37-5190-408b-9ba7-26b002d58062} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{fbc78712-3b46-4566-93e0-17f7d8ceb9ba} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{fc4940e7-be8e-4879-b733-57c7e3e795c9} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{fc5cc104-ae00-437c-94d0-1ee807d8b3d6} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{fcacd6e6-44b6-4bcb-a16a-29d845916ed4} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{fcff2114-359e-49d1-82e1-04b13be641ef} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{fd677a98-e30d-464c-a5fe-274f2cc0f91c} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{fe5f9136-facf-4baf-8a7a-c6f895895095} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{feeab7ff-db95-4fae-9f04-bd4608923f1b} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{ff0804d7-312e-47e4-b656-6410cc5ee46d} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{ffa8d13b-c8f0-4911-9390-5a9de3af0986} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\webvideo (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\TypeLib\{e170464b-6850-4d51-912c-b3a508923658} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\Interface\{06338a1e-d2e0-4a1b-b5b4-8e82772edf42} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\Interface\{20c41a33-2dde-4e42-b055-039fcfa487b3} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{17c24e63-9a2c-4c50-bf01-86212b497bc7} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{17c24e63-9a2c-4c50-bf01-86212b497bc7} (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\VSPlugin (Trojan.FakeAlert) -> Delete on reboot.
                    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{db597dcb-7c4f-d98e-09e9-e0f2b71ae8fa} (Adware.BHO) -> Delete on reboot.
                    HKEY_CLASSES_ROOT\CLSID\{db597dcb-7c4f-d98e-09e9-e0f2b71ae8fa} (Adware.BHO) -> Delete on reboot.

                    Registry Values Infected:
                    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\tfnslopk (Trojan.FakeAlert) -> Delete on reboot.

                    Registry Data Items Infected:
                    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProductId (Trojan.FakeAlert) -> Bad: (VIRUS ALERT!) Good: (76413-OEM-0011903-00824) -> Quarantined and deleted successfully.

                    Folders Infected:
                    C:\Program Files\PCHealthCenter (Trojan.Fakealert) -> Delete on reboot.
                    C:\Program Files\VAV (Rogue.VistaAntivirus2008) -> Delete on reboot.

                    Files Infected:
                    C:\WINDOWS\eovn.exe (Trojan.FakeAlert) -> Delete on reboot.
                    C:\WINDOWS\xokvrpwg.dll (Trojan.Zlob) -> Delete on reboot.
                    C:\WINDOWS\system32\vav.cpl (Trojan.FakeAlert) -> Delete on reboot.
                    C:\Program Files\PCHealthCenter\0.gif (Trojan.Fakealert) -> Delete on reboot.
                    C:\Program Files\PCHealthCenter\1.gif (Trojan.Fakealert) -> Delete on reboot.
                    et mon internet explorer marche tjour pa je le reinstalle la pour voir
                    1. A la fin du scan >>> clique sur Afficher les résultats puis sur Enregistrer le rapport
                      Suppression des éléments détectés >>>>
                      supprime ce qu'il a trouvé vide également les éléments de la quarantaineS'il t'es demandé de redémarrer >>> clique sur "Yes"' .

                      et pour ta question, je ne peux te renseigner desolé.
                      1. ah ok et ba jsui entrin de fere ske tu me di la lol jspr sava marché je refet 1 scan ac l antispyware et je post le raport pour voir
                        ps sa comence bien le nouvo scan detecte des nouvo troyen aparamen je te tien au courant ofet c possible alor ke le virus soi rentré par la mise a jour de activx ?
                        1. Mais ton virus se trouve dans c:/SystemeVolume.Restore? Normalement ca devrais le supprimer si il se trouve dedans...
                          1. et sava suprimer se ki reste du virus sa ??? de créer 1 point de restoration ?moi je croi pas lol
                            mai bon jvai creer une restoration kan mm
                            1. Mais est ce que tu avais tout mis en quarantaine ? par contre pour ton virus, je laisse la main a quelqu'un parce que ayant peur de faire une gaffe...
                              • 1
                              • 2